PRIVACY POLICY

1. Purpose of the Policy

1.1. The purpose of this Privacy Policy is to inform you of how hummel Cenozoic ApS (“we”, “us”) process personal data. With this policy, we want to make you aware of what information is collected and processed, and – as far as possible – how long it is stored for. This Privacy Policy relates to the processing of personal data by hummel Cenozoic ApS when you enter into agreements, interact with, or otherwise exchange personal data with us.

 

2. Description of the Processing

2.1. hummel Cenozoic ApS process your data for one or more specific purposes and in accordance with data protection regulations. We process your data if you are a customer, partner, or supplier to us, or if your visit our website or social media accounts, if you sign up to our newsletter or apply for a job with us, and more. The information generally comes directly from you, and we will only process your information for as long as it is necessary for the purpose it was collected for. However, the data may also be processed and stored for longer in an anonymised form.

You can read more about the types of processing we carry out below.

 

2.1.1. Cookies and website

As part of the normal operation of our website, we collect personal data about you via cookies in order to improve the appearance and experience of using the website and to compile statistics. The information we collect via cookies includes your IP address, browser, operating system, interaction with adverts and the pages you visit.

We have integrated social media plugins on our website that have the ability to collect data about you if you have granted your consent. We have a shared data responsibility with each medium. We use integrated plugs from Facebook, Instagram, YouTube and Twitter.

You have the option to contact us via our contact form on our website. We also process your personal data when using this. The personal data we process is your name, email address, and information about what your query is about (order, product and stock, nearest retailer, B2B enquiries, sponsorships, press and media). There is also the option to write in a free text field, but we advise against giving personal data in this field unless it is relevant to the query.

The data we process from the contact form is deleted on an ongoing basis stored no more than five years after the last contact

 

2.1.1. Social media

We use certain social media – including Facebook, Instagram, YouTube and Twitter – to engage with our customers and potential customers, and to promote marketing campaigns. If you have “liked” our fan page on social media or have been in contact with us using it, we process your personal data. For this purpose, we only process your name and email address, and any possible purchases, if relevant in the context.

If you contact us via social media, we process your personal data based on our interest in being able to contact you and answer your queries, as set out in GDPR Article 6(1)(f). The data is provided by your and the social media you contact us through.

We have a joint data responsibility with the social media we use, as we both process your personal data for our own purposes. You can read more about the processing of your personal data by various social media channels below:

  • The processing of your personal data by Facebook and Instagram here, and the shared data responsibility here.
  • The processing of your personal data by YouTube (Google) here.
  • The processing of your personal data by Twitter here.

The data processed in the context of social media use – relating to direct communication via the social media – is deleted immediately. Posts on, for example, Facebook pages or in public groups, are not deleted, as a post or comment on a Facebook page or in a public group is considered to be in the public domain. You can read more about the public domain here.

 

2.1.1. Marketing

We only process your personal data for marketing purposes if you have granted your consent in accordance with GDPR Article 6 6(1)(a) to, for example, receive newsletters about clothing, shoes, bags, accessories, sporting goods, information about hummel Cenozoic ApS and news about new collections, offers, sales, competitions and other marketing activities. The scope of our processing is set out in the specific consent.

We send marketing material to you using your email address and via social media (Instagram, Facebook, Twitter, TikTok and Pinterest). You can read more about the processing of your personal data in the above and below:

  • The processing of your personal data by Pinterest here and the shared data responsibility here.
  • The processing of your personal data by TikTok here and the shared data responsibility here.

If you have consented to receive marketing from us, we will generally only process data about your email address.

You have the right to withdraw your consent at any time by using the relevant link in our newsletters, by emailing onlinesupportDK@hummel.dk, or by phoning +45 88 70 49 50.

We retain record of your consent for as long as you receive our marketing material or participate in our marketing, and for two years after you have withdrawn your consent, as our potential criminal liability expires after this time period.

 

2.1.1. Customer relationship

Business customers

Related to the sale of products to business customers, we process information about relevant contact people in order to enter into and fulfil an agreement with you (GDPR Article 6(1)(b)). This information includes contact details such as name, company name, email address, address and telephone number, together with purchase history and payment details.

We delete the data on an ongoing basis, no later than five years after the end of the customer relationship.

 

Private customers

hummel Cenozoic ApS processes personal data about private customers when they make purchases via our online shop. We process information about the sale of our products in order to enter into and fulfil an agreement with you (GDPR Article (6)(1)(b)). This information includes contact details such as name, email address, address, telephone number, together with purchase history and payment details.

We delete the data on an ongoing basis, no later than five years after the end of the customer relationship.

In some cases, we may supplement our information about you with data you provide, such as information about previous purchases and demographic data such as your gender, date of birth and address, so that we can tailor our marketing material to be relevant to you. This is based on our legitimate interest under GDPR Article 6(1)(f), as we consider our interest to offer you the best service to outweigh your interest in such general information that you provide to us to not be processed. Of course, you always have the option to access such data and request it is deleted. Read more about your rights in Section 4 below.

 

2.1.2. Suppliers and partners

When we enter into agreements with suppliers and partners, we process data about their contact details. This includes information about names, job titles, telephone numbers, email addresses, and if necessary, payment details.

The data is processed either because it is necessary to fulfil the agreement with the relevant supplier or partner (GDPR Article 6(1)(b)), or because we have a legitimate interest in processing the contact details of the person concerned as part of the agreement (GDPR Article 6(1)(f)).

We retain relevant contact information throughout our collaboration. Written correspondence is deleted on an ongoing basis, and information necessary to fulfil our obligations under the Danish Bookkeeping Act is kept for five years plus the current financial year.

 

3. Recipients of personal data

3.1. We process your personal data with confidentiality, and as a general rule, we do not disclose data to third parties. However, we may pass on personal data if you have granted consent or if we have a legitimate interest in the disclosure.

 

3.2. We may transfer personal data to our system providers, who process personal data on our behalf and under our specific instruction in accordance with the current data processing agreement.

 

3.3. Some of our data processors, and the social media companies we share a data responsibility with, are located outside the EU, involving in a transfer to a third country. In such cases, we have ensured a lawful basis for the transfer, including by applying the EU Commission’s standard regulations governing the transfer of personal data to outside the EU/EEA.

 

4. Your rights

4.1. When we collect data about you, you have a number of basic rights under the personal data regulations that you can exercise. Your rights include the right to request access to and rectification or deletion of your personal data, restriction of and objection to our processing, and the right to receive your data in a structured, common and machine-readable format (data portablility).

 

4.2. The above rights may be subject to conditions and limitations. Whether you as a data subject can request, for example, the deletion of your personal data, will be dependent on a specific assessment.

 

4.3. If you have given your consent to our processing of your data, you have the right to withdraw your consent at any time.

 

4.4. If you are unsatisfied with our processing of your personal data, you can lodge a complain with the Danish Data Protection Agency via their website datatilsynet.dk or by phoning +45 33 19 32 00.

 

5. Data responsibility and contact details

The company responsible for the processing of your personal data is:

hummel Cenozoic ApS

CBR no. 43317032

Balticagade 20, 8000 Aarhus C

Denmark

+45 88 70 49 50

onlinesupportDK@hummel.dk

 

If you have any questions regarding our processing of your personal data, you are welcome to contact us by emailing onlinesupportDK@hummel.dk or by phoning +45 88 70 49 50.

 

6. Amendments

6.1. We reserve the right to update and amend current guidelines for the processing of personal data. In the event of material changes, we will notify you via email or a notice on our website.

 

6.2. This Privacy Policy was last amended on 25/10/2022.