Privacy policy
1. Introduction
1.1 This personal data policy (hereinafter referred to as the “Policy”) describes how Haloderma ApS (“Haloderma”, “us”, “our”, “we”) collects and processes personal data in connection with the purchase of services, membership, products or general use of our website.
1.2 The personal data policy applies to personal data that you submit to us or that we collect via the Haloderma website, www.haloderma.dk (“Website”).
1.3 Haloderma is the data controller for your personal data. All inquiries to Haloderma can be made via the contact information listed under section 10.
The policy has been formulated and made available to comply with the data protection regulation (2016/679 of 27 April 2016) (hereinafter referred to as “GDPR”) and the rules therein on the obligation to provide information.
2. Collection of information through the use of cookies
2.1 When visiting and using our website(s), cookies are collected and used on the basis of consent. Information in these cookies includes browser type, search terms on our website(s), IP address, location at login (hereinafter “Cookie data”).
2.2 Cookie data is used to improve our website and the user experience, to carry out targeted marketing, prevention of fraud and cheating.
2.3 The use of cookies for the collection of information and data also takes place in accordance with the cookie executive order (No. 1148 of 9 December 2011), § 3.
2.4 If you wish to reject or limit the cookies that are placed on your computer when you visit our website, you can always do this by changing the settings in your browser. However, you should be aware that rejecting or limiting cookies has an impact on the functionality of the website, and this will mean that there may be functions on the website that you cannot see.
All browsers allow cookies to be deleted collectively or individually. How this is done depends on the browser used. If you use several different browsers, you must remember to delete cookies in all browsers.
2.5 We pass on cookie data to Google LLC (Google Analytics)
3. Types of personal data processed
3.1 We process personal data about you when this is relevant and in accordance with applicable legislation. Depending on the specific circumstances, the processed personal data may include the following types of personal data:
Name, address, telephone number, e-mail, invoicing and bookkeeping documents, information for tracking the shipment (for example, tracking number), bank information (card information or account information), customer number, user name, purchase history, account status (balance, customer points, etc.) .
3.2 If we need to collect and process additional personal data than stated above, we will inform you of this at the time of collection. Such information can also be provided when this Policy is updated.
4. Purpose of the processing of personal data
4.1 We only process your personal data for legitimate purposes in accordance with the GDPR. Depending on the circumstances, the personal data may be processed for the following purposes:
a) To be able to deliver or offer the services or products and/or sales offers that we offer.
b) To answer inquiries and/or complaints from users, customers or members.
c) To store personal data to the extent that this is a requirement according to applicable legislation, including, among other things, the storage of accounting and bookkeeping documents in accordance with applicable legislation.
d) To send direct marketing to users, customers or members (such as e-mails, MMS, direct messages on social media, etc.)
e) To send newsletters via e-mail.
f) To prevent fraud and fraud or improper use of our products, services and website, including the processing of personal data for use in connection with lawsuits.
g) To improve our products, services or website.
h) To provide service announcements and information to users, customers or members.
i) To be able to administer customer club or membership with us.
j) To be able to provide support and service messages, including answering questions or complaints and sending updates about our products and services.
5. Legal basis for the processing of personal data
5.1 We only process your personal data when we have a legal basis for processing in accordance with the GDPR. The processing of personal data takes place according to the specific circumstances on the basis of the following processing authorisation:
a) If we have asked for your consent to process some specific personal data, the processing basis for the specific personal data is your consent, cf. GDPR, Article 6, paragraph 1, letter a.
Consent can always be withdrawn by contacting us via the contact details provided at the bottom of this Policy, and if consent is withdrawn, the personal data processed on the basis of the consent will be deleted, unless they can or must be processed, for example, to comply with a legal obligation.
b) The processing is necessary for the fulfillment of a contract with the registered person, cf. GDPR, Article 6, subsection 1, letter b, first indent.
c) The processing is necessary to comply with applicable legislation, cf. GDPR, Article 6, subsection 1, letter c.
5.2 We carry out the following processing: If we send direct marketing to you, including via e-mail, we will ask for your prior consent in accordance with the applicable rules in the Marketing Act.
6. Disclosure and transfer of personal data
6.1 We only pass on personal data to others when the law permits or requires it, including when it is relevant and at your and/or the data controller’s possible specific request.
6.2 We pass on personal data to the following recipients from the EU/EEA:
a) Banks (in connection with payments, receipt of payments, etc.)
b) Data processors
6.3 We generally use various external and professional companies as suppliers and business partners to deliver or assist us in delivering our services and products. The external companies will not receive or process personal data, unless the legislation permits the transfer and processing thereof.
If the external companies or business partners are data processors for us, their processing of personal data always takes place in accordance with a data processor agreement that meets the legal requirements for this
If the external companies or business partners are independent data controllers, their processing of personal data takes place in accordance with their own privacy, data protection or personal data policy, which the external companies will draw attention to, unless the legislation prescribes otherwise.
6.4 We transfer personal data to countries or international organizations outside the EU/EEA.
6.5 We can be contacted for more information, including questions about our use of data processors, cooperation with other data controllers, including subsidiaries, or the passing on of personal data to third countries, as well as to receive a copy of documentation for the transfer basis.
7. Deletion and storage of personal data
7.1 We ensure that personal data is deleted when it is no longer relevant for our processing purposes as described above. We always store personal data for the period of time that applicable legislation obliges us to do, including for the purpose of documenting compliance with, among other things, the provisions of the Accounting Act.
For questions regarding the storage and processing of personal data, you are welcome to contact us at the email address you will find under section 10 of this Policy.
8. Rights of registered persons
For questions regarding the storage and processing of personal data, you are welcome to contact us at the email address you will find under section 10 of this Policy.
8.1.1 Right to see information (right of access): Registered persons have the right to gain insight into the information processed about them, as well as a number of additional information.
8.1.2 Right to rectification (correction): Registered persons have the right to have incorrect information about themselves corrected.
8.1.3 Right to deletion: In special cases, registered persons have the right to have information about themselves deleted before the time of our general general deletion occurs.
8.1.4 Right to restriction of processing: Registered persons in certain cases have the right to have the processing of their personal data restricted. If a registered person has the right to have the processing restricted, we may in future only process the information – apart from storage – with consent, or for the purpose of establishing, asserting or defending legal claims, or to protect a person or important public interests.
8.1.5 Right to object: Registered persons in certain cases have the right to object to our otherwise lawful processing of their personal data. You can also object to the processing of information for direct marketing.
8.1.6 Right to transmit information (data portability): In certain cases, registered persons have the right to receive their personal data in a structured, commonly used and machine-readable format and to have this personal data transferred from one data controller to another without hindrance.
8.2 You can read more about your rights in the Norwegian Data Protection Authority’s guidance on the rights of data subjects, which you can find at www.datatilsynet.dk. If you wish to make use of your rights as described above, please use the contact information provided at the bottom of this Policy.
We endeavor to do everything possible to meet your wishes regarding our processing of personal data and your rights as a registered person. If, despite our efforts, you wish to lodge a complaint, you can do so by contacting the Danish Data Protection Authority (www.datatilsynet.dk).
9. Changes to this Policy
9.1 We reserve the right to update and change this Policy. If we change the Policy, we will change the date and version at the bottom of the document. In the event of significant changes, we will notify you in the form of a visible notice on our website, e-mail or using other means of communication
10. Contact information
10.1 For questions or comments about this policy, or when invoking one or more rights, we can be contacted at contact@haloderma.dk
Haloderma ApS
CVR-number.: 43109367
Niels Bohrs Vej 6
6700 Esbjerg
E-mail: contakt@haloderma.dk
11. Versions
This is version 1, which was last updated on 12.04.2024 10:32.
