INFORMATION ABOUT OUR TREATMENT
OF YOUR PERSONAL INFORMATION
1. WE ARE THE DATA CONTROLLER – HOW DO YOU CONTACT US?
Redgreen Wholesale ApS ( we, our ) is the data controller for the processing of the personal data that we have received about you. You will find our contact information below.
Redgreen Wholesale ApS
DK-8260 Viby J, Denmark
CVR no.: 41 34 40 59
2. THE PURPOSES AND LEGAL BASIS FOR THE PROCESSING OF YOUR PERSONAL DATA
We process your personal data for the following purposes:
To fulfill the agreement entered into between us, including delivery, help with the delivery of services, execution of orders and purchases and related inquiries
Processing other customer inquiries or complaints
Marketing in connection with sending out the newsletter
The legal basis for our processing of your personal data follows from:
Article 6 of the Data Protection Regulation, subsection 1, letter a concerning consent
Article 6 of the Data Protection Regulation, subsection 1, letter b concerning compliance with the contract/agreement in connection with the delivery of services and goods
Article 6 of the Data Protection Regulation, subsection 1, letter f concerning our legitimate interest in processing the rest as customer inquiries or complaints. We store necessary cookies with the same legal basis.
1.1.1. Legitimate interests pursued with the processing As mentioned above, our processing of your personal data takes place (partially) on the basis of the balancing of interests rule in the data protection regulation, Article 6, subsection 1, letter f. The legitimate interests that justify the processing are our interest in being able to answer a customer's inquiries or complaints. In addition, we use to store necessary cookies so that our website can function for the website user.
3. Categories of personal data
We process the following categories of personal data about you:
Name, address, telephone number and email address
Customer number and payment information
Order number, order history and order lines
Other personal data you may have handed over to us on your own initiative.
4. Recipients or categories of recipients
We take the data protection legal regulations seriously, which is why we process received personal data with care and confidentiality.
However, we entrust personal data to data processors who process information according to our instructions. We ensure that data processing agreements have been entered into with the data processors before we start the processing with them, so that your information is processed legally, confidentially and with the necessary security.
If there is a legal dispute, we may also be obliged to pass on your personal data in this connection.
We may also pass on personal data to public authorities, including the public sector, e.g. to TAX.
Furthermore, it may be passed on to another adviser, given under conditions of confidentiality, if there is a legitimate interest and/or a legal basis for the passing on.
5. Transfer to recipients in third countries, including international organisations
We will transfer your personal data to recipients outside the EU and EEA. These are Google and Microsoft, which are located in the United States.
We can state that Google and Microsoft are certified under the Data Privacy Framework, which is why we do not transfer personal data to countries that cannot provide the same level of protection as Denmark or European countries/EEA countries. See more here: Participant Search (dataprivacyframework.gov)
6. Storage of your personal data
We store your personal data for as long as we have a legitimate and objective purpose for this, subject to the rules on limitation.
We have adopted internal procedures and policies that protect personal data from being destroyed, lost or altered, from unauthorized disclosure, and from unauthorized access or knowledge of it.
We have thus also adopted internal deletion procedures which ensure that personal data is stored in accordance with the data protection legal rules and rules for the storage of accounting information etc.
7. The right to withdraw consent
You have the right to withdraw your consent at any time. You can do this by contacting us on the contact details that appear above in point 1.
If you choose to withdraw your consent, it does not affect the legality of our processing of your personal data based on your previously communicated consent and up to the time of withdrawal. If you withdraw your consent, it therefore only takes effect from this point.
8. Your rights
According to the data protection regulation, you have a number of rights in relation to our processing of information about you.
If you want to exercise your rights, please contact us.
1.1.2. Right to see information (right of access)
You have the right to gain insight into the information that we process about you, as well as a range of additional information.
1.1.3. Right to rectification (rectification)
You have the right to have incorrect information about yourself corrected.
1.1.4. Right to erasure
In special cases, you have the right to have information about you deleted before the time of our normal general deletion occurs.
1.1.5. Right to restriction of processing
In certain cases, you have the right to have the processing of your personal data restricted. If you have the right to have the processing restricted, we may in future only process the information - apart from storage - with your consent, or for the purpose of establishing, asserting or defending legal claims, or to protect a person or important public interests.
1.1.6. Right to object
In certain cases, you have the right to object to our or lawful processing of your personal data. You can also object to the processing of your information for direct marketing.
1.1.7. Right to transmit information (data portability)
In certain cases, you have the right to receive your personal data in a structured, commonly used and machine-readable format and to have this personal data transferred from one data controller to another without hindrance.
You can read more about your rights in the Data Protection Authority's guidance on the rights of data subjects, which you can find www.datatilsynet.dk .
9. Complaint to the Data Protection Authority
You have the right to lodge a complaint with the Danish Data Protection Authority if you are dissatisfied with the way we process your personal data. You can find the Data Protection Authority's contact information at www.datatilsynet.dk .
Updated September 2023