The data controller for the processing of personal data is:
Koningsplein 1 2, 1017BB Amsterdam
What data is processed
- Your IP address
- Browser information
- Your behaviour on Provitura.com including searches on the site and purchases of goods
- Your address
- Customer ID
- Telephone number
- E-mail address
In addition, consent may also be given to receive marketing material by e-mail or text message.
Purpose and legal basis for processing personal data
The purpose of collecting and processing personal data with us is to optimise and ensure the use of Provitura and to be able to carry out targeted and relevant marketing. Collection and use therefore ensures that we can fulfil a legitimate interest in accordance with Article 6(f) of the General Data Protection Regulation.
The purpose of data collection is to be able to process the information in connection with purchases and future memberships with us and to fulfil our agreement in connection with the conclusion of the agreement with the customer and in accordance with Article 6(b) of the General Data Protection Regulation.
For this purpose, we are subject to an obligation to store your personal data in accordance with the Danish Bookkeeping Act.
If you have consented to receive our marketing material by e-mail or text message, the basis for processing is Article 6(a).
Your consent can be withdrawn at any time by using the link at the bottom of any newsletter or text message.
Who receives your personal data
In some cases, your personal data may be disclosed to third parties, which can be categorised as follows:
- Affiliated companies
- Data processors who process your data on behalf of us and who are authorised to do so
- Shipping companies or parcel shops that deliver your parcel
- Public authorities, including the tax authorities or other authorities that have a right of access
- As a general rule, your data is not disclosed to business partners or external suppliers outside the EU/EEA. If a business partner or external supplier is located outside the EU/EEA, it is ensured that any processing is subject to uniform protection as within the EU/EEA.
Storage of personal data
At Provitura, it is important for us to protect your personal data and thus ensure that your data is not misused or lost. Data collected and processed during visits is only stored for up to 30 days.
Personal data is generally only stored for a period of up to 5 years after your cancellation of membership/last purchase. This is done in accordance with the Bookkeeping Act.
Personal data processed on the basis of your consent will be deleted when you withdraw your consent. This is unless there is another basis for processing personal data.
Under the General Data Protection Regulation, you have a number of rights in relation to the processing of data about you.
The rights are:
- Right of access – You have the right to access the data/information we process, as well as a number of additional information.
- Right to rectification – You have the right to have incorrect information corrected.
- Right to erasure – In special cases, you have the right to have data removed before the time of our regular erasure occurs.
- Right to restriction of processing – In some cases, you have the right to restrict the processing of your data. If you have this right, we may in future only process data – except for storage – with your consent, or for the establishment, exercise or defence of legal claims, or for the protection of a person or important public interests.
- Right to object – In some cases, you have the right to object to our or lawful processing of your personal data. You can object to the processing of your data for direct marketing purposes.
- Right to transmit data (data portability) – In some cases, you have the right to receive your personal data in a clear, commonly used and machine-readable format and also to have this personal data transmitted from one controller to another without hindrance.
You can read more about your rights in the “Data Protection Authority’s guide on the rights of data subjects”, which you can find at www.datatilsynet.dk.
To exercise your rights, you can contact our customer service.
All enquiries will be answered as soon as possible and at the latest within 30 days from the enquiry.
In the context of a request, we will ask you to verify your identity or provide additional information. We require this to ensure that only you have access to your personal data and that it is therefore not disclosed to someone pretending to be you.
Complaints to the Data Protection Authority
You have the possibility to complain about the processing of your data, if you so wish. Complaints must be submitted to:
The Danish Data Protection Agency
Borgergade 28, 5
1300 Copenhagen K