1.1 This privacy policy concerns our collection and processing of the personal data we collect about our customers.
1.2 The privacy policy applies to current, former and potential purchasing and non-purchasing customers of PC-lager ApS.
1.3 The privacy policy applies to business customers in connection with our processing of personal data.
1.4 The privacy policy covers all personal data that current, former and potential purchasing and non-purchasing customers provide to us, or that we collect via www.pc-lager.dk.
1.5 PC-lager ApS is the data controller for the personal data we collect about customers and the data processor for data relating to customers' customers. This includes data in connection with end-customer delivery.
1.6 By accepting the privacy policy, customers undertake not to disclose personal data collected through dialogue between PC-lager ApS and the customers, either directly or indirectly in relation to the purchase contract.
2.1 What personal data do we collect?
2.1.1 When you visit the website, we automatically collect data about you. This includes data such as which browser you use, which pages you visit, which search terms you use, as well as information about your computer and your IP address.
2.1.2 When you complete an order on the website, we register your name, address, e-mail address, telephone number, as well as information about which products you purchase and may return.
2.2 What purposes do the personal data serve?
2.2.1 We collect the personal data under section 2.1.1 for the purpose of improving the shopping experience at PC-lager ApS via the website, optimising conversion and targeting marketing.
2.2.2 We use the personal data under section 2.1.2 to deliver purchased products to customers or directly to customers' customers, to fulfil our complaint obligations and to fulfil our accounting obligations.
2.3 What is the basis for the processing?
2.3.1 The collection of personal data as mentioned in section 2.1.1 is necessary for us to pursue our interests in improving the website and the shopping experience, as well as to present customers with relevant products and offers.
2.3.2 The collection of personal data as mentioned in section 2.1.2 is necessary for us to fulfil the purchase contract with customers.
2.4 Where is your personal data stored?
2.4.1 Personal data is stored on our secure servers. Some personal data is disclosed to third parties. Some of these third parties are data processors that store and process personal data on behalf of PC-lager ApS in accordance with this data policy and the data processing agreements entered into with the respective data processors. All personal data is stored and processed in accordance with applicable data protection legislation.
2.5 How is your personal data collected?
2.5.1 Personal data is primarily collected when customer accounts are created and purchases are completed.
2.5.2 In addition, personal data is collected on the website, including by means of cookies.
3.1 PC-lager ApS uses external companies to assist with, among other things, technical operation, ongoing development of the website and targeted marketing. Some of these external companies are independent data controllers for the data disclosed to them. The basis for this disclosure is a balancing of interests between PC-lager ApS' interests and the customers' interests, which means that personal data is not used for improper or inappropriate purposes. In addition, PC-lager ApS has entered into agreements on the disclosure of data to external companies for the purpose of fulfilling the purchase contract with customers. This could, for example, be PostNord or GLS.
3.2 Other external companies are data processors subject to our instructions. They process data on our behalf, and PC-lager ApS is therefore responsible for ensuring that the data processors do not use data received from us for anything other than fulfilment of the agreement entered into with us. All our data processors have entered into written data processing agreements with us, setting out guidelines for what they may and may not use the transferred data for.
3.3 One of these data processors, Google Analytics by Google Inc., is established in the USA, and the necessary safeguards for transfer of data to the USA are secured through the data processor’s certification under the EU-U.S. Privacy Shield. A copy of the certification can be found here:
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI
3.4 Pursuant to section 1.5, PC-lager ApS is a data processor in connection with end-customer delivery, and it is therefore the customers' responsibility to enter into a data processing agreement. A standard template for such an agreement can be found at the bottom of this document.
3.5 For the purpose of completing the purchase contract, the customer’s stated e-mail address is used to send order confirmation, final order confirmation, invoice and delivery information.
4.1 In order to create transparency about the processing of your data, we, as data controller, must inform you of your rights.
4.2 Documentation
4.2.1 As part of our efforts to raise the general level of data security, we require documentation before processing enquiries regarding the use of the rights listed below in sections 4.3-4.9.
4.2.2 When contacting PC-lager ApS regarding deletion of personal data, you must go through an identification process before the personal data is deleted. This means that you will be sent a PDF, which you are asked to sign personally and then return either physically or as a scanned document.
The scanned document must be sent to [email protected].
Alternatively, a physically signed document can be sent to the address below:
PC-lager ApS
Høgemosevænget 1
8380 Trige
Denmark
4.3 Right of access
4.3.1 You are at any time entitled to request information from us about, among other things, which data we have registered about you, what purpose the processing serves and which sub-processors we use.
4.3.2 This right can be exercised by sending a request to [email protected].
4.4 Right to rectification
4.4.1 You have the right to have incorrect personal data about yourself corrected by us. If you become aware that there are errors in the data we have registered about you, you are encouraged to contact us in writing so that the data can be corrected.
4.4.2 Data collected in connection with the creation of your customer account can be corrected by you via login to your customer account under the sections “Master data” and “e-mails”.
4.4.3 Regarding documentation, see section 4.2.
4.5 Right to erasure
4.5.1 In certain cases, you have the right to have personal data deleted. To the extent that continued processing of your data is necessary, including in order for us to comply with our legal and accounting obligations, or for legal claims to be established, asserted or defended, we are not obliged to delete your personal data.
4.5.2 Regarding documentation, see section 4.2.
4.6 Right to restrict processing to storage
4.6.1 In certain cases, you have the right to restrict the processing of your personal data to storage only, for example if you believe that the data we process about you is incorrect.
4.7 Right to data portability
4.7.1 You have the right to receive your personal data in a structured, commonly used and machine-readable format and have the right to transfer this data to another data controller.
4.7.2 Regarding documentation, see section 4.2.
4.8 Right to object
4.8.1 You may at any time object to our processing of your personal data, which we collect for the purpose of improving functions on the website and its structure, if you have particular reasons for doing so.
4.8.2 If we cannot demonstrate legitimate grounds for continuing the processing, we are no longer entitled to process your personal data.
4.8.3 Regarding documentation, see section 4.2.
4.9 Right to withdraw consent
4.9.1 You have the right at any time to withdraw your consent in connection with your subscription to our newsletter.
4.9.2 Regarding documentation, see section 4.2.
4.10 Right to complain
4.10.1 You have the right at any time to lodge a complaint with the Danish Data Protection Agency, Borgergade 28, 5, 1300 Copenhagen K, regarding our processing of your personal data.
5.1 Personal data that we register about you through our website is generally stored for 5 years, provided that there is no activity on the account. Activity means that a purchase has been made, information has been changed or a login has occurred. A customer account is therefore only deleted if the account has been inactive for 5 years.
5.2 All invoices are stored for 5 years from the end of the financial year in accordance with the Danish Bookkeeping Act. After 5 years, all invoices are anonymised.
5.3 All purchase information is automatically deleted after 5 years.
5.4 Data that we have collected in connection with your consent to receive newsletters from us is deleted if you withdraw your consent, cf. section 4.9.
6.1 We have implemented appropriate technical and organisational security measures against personal data being accidentally or unlawfully destroyed, lost, altered or impaired, as well as against it coming to the knowledge of unauthorised persons or being misused.
6.2 Through the implementation of sufficient organisational security measures, we have established guidelines for which employees have access to your data, so that only employees who have a genuine need to access your personal data in order to perform their work have access to it.
7.1 PC-lager ApS uses cookies on the website to improve the user experience and personalise content. This information is shared with third parties, such as Google. By using our site, you accept the use of cookies.
7.2 A cookie is a small data file that allows information to be stored or already stored information to be accessed on your computer from the website you visit. Cookies are used by most websites today. Cookies help ensure that the website’s functions work as they should, and they are used to recognise your computer on return visits. No personal information is stored in our cookies, and they cannot spread viruses or other harmful programs.
7.3 PC-lager ApS uses cookies in connection with analysis of the use of the website and automation of the purchasing process, such as automatic completion of delivery and payment method.
Below is a list of the cookies that PC-lager ApS uses to improve the user experience:
7.4 If you do not wish to allow cookies, there is a guide on the Danish Business Authority’s website explaining how this can be done.
8.1 PC-lager ApS is the data controller for the personal data collected via the website.
8.2 If you have any questions or comments regarding this privacy policy, you can contact:
PC-lager ApS
Høgemosevænget 1
8380 Trige
Denmark
Tel.: (+45) 70222505
E-mail: [email protected]
9.1 PC-lager ApS is entitled at any time to make changes to this privacy policy. It will always appear at the bottom of the document when the privacy policy was last updated.
9.2 If you cannot accept the amended policy, you will not be able to continue using the website.
10.1 This is version 2 of PC-lager ApS' privacy policy dated 1 December 2018.