Privacy Policy

1. GENERAL

1.1 Our policy on the processing of personal data describes how we at Lirum Larum Leg ApS collect and process information about you. The purpose is to inform you about how we take the best possible care of the data you have entrusted to us – regardless of where it is collected, disclosed or processed.

1.2 This privacy policy applies to all personal data that you provide directly to us, or that we collect via Lirum Larum Leg’s website at www.lirumlarumleg.dk.

1.3 Lirum Larum Leg is the data controller for your personal data. If you wish to contact us regarding your data, you can do so using the contact details listed under section 7.

1.4 If, for one reason or another, an item is delivered directly from one of our suppliers, we disclose the information necessary to complete the delivery, including your name, delivery address, telephone number and, if applicable, email address. The disclosure is made solely for the purpose of fulfilling your order and is carried out in accordance with Article 6(1)(b) of the General Data Protection Regulation (GDPR), concerning processing that is necessary for the performance of a contract. We only disclose the information necessary for the delivery and require our business partners to process personal data in a secure and lawful manner.

2. WHICH PERSONAL DATA DO WE COLLECT ABOUT YOU, FOR WHAT PURPOSES AND WHAT IS THE LEGAL BASIS FOR THE PROCESSING?

2.1 When you visit our website, we automatically collect information about you and your use of www.lirumlarumleg.dk, such as which browser you use, what you search for on the website, your IP address, including your network location, and information about your PC.

2.1.1 The purpose is to enable us to optimise your user experience on the website and the functionality of the site, as well as to carry out targeted marketing, including retargeting via Facebook and Google. This is necessary for us to pursue our interests in improving the site.

2.1.2 The legal basis for the processing is Article 6(1)(f) of the EU General Data Protection Regulation.

2.2 When you purchase a product on our website or communicate with us via the site, we collect the information that you provide yourself, such as your name, address, email address, telephone number, payment method, information about which products you purchase and may have returned, product complaints, delivery preferences, who you have sent a gift to, and information about the IP address from which you sent us your order.

2.2.1 The purpose is to enable us to deliver the products you have ordered and otherwise fulfil our legally binding agreement with you, including administering your rights to return items and, if necessary, handling complaints if there is something wrong with a product. We may also process information about your purchases in order to comply with legal requirements, including bookkeeping and accounting. When you make a purchase, your IP address is collected for this purpose and in order to pursue our interest in preventing fraud.

2.2.2 The legal basis for the processing is Article 6(1)(b), (c) and (f) of the EU General Data Protection Regulation.

2.3 When you subscribe to our newsletter (at the end of a purchase or independently of this), we collect information about your name and email address.

2.3.1 The purpose is to pursue our interest in providing you with newsletters containing relevant content.

2.3.2 The legal basis for the processing is Article 6(1)(f) of the EU General Data Protection Regulation.

 

3. WHO ARE THE RECIPIENTS OF YOUR PERSONAL DATA?

3.1 Information about your name (or the gift recipient’s name), address, email address, telephone number, order number and specific delivery preferences is disclosed to GLS and DAO (parcels) or a carrier (larger freight shipments), which is responsible for delivering the purchased goods to you. In Denmark, we work with Danske Fragtmænd. When shipping from our warehouse in Denmark to customers in Norway, your order is first transported by BHS Logistics and then transferred for private delivery by Nortrans and Ramberg Logistics. When purchasing items that are not held in stock (dropshipping), the aforementioned information may be disclosed to the manufacturer/distributor of the item in question, which will then handle delivery directly to you. When processing a complaint about a purchased item, we may in a few cases provide data to the supplier. This is done in order to reimburse the value of the item or if a replacement item is to be sent directly to your home.

3.2 We also disclose your information to external business partners who process the information on our behalf. We use external business partners for, among other things, development, technical support and improvements to our site, sending newsletters and targeted marketing, including retargeting. We also use them to obtain your reviews of our company and products. Among other things, information about your name and email address is disclosed to TrustPilot so that we can send you an invitation to review us on TrustPilot’s website. If you choose to write a review on their site, TrustPilot will thereafter become the data controller for the information provided. In addition, your information may be disclosed to business partners who assist with our business activities, including lenders. All these companies are data processors for us and process the data for which we are the data controller and which you have entrusted to us. It is therefore important to us to take good care of this data, which is why the data processors may not use the information for any purpose other than fulfilling the agreement with us, and they are subject to full confidentiality regarding this information. We have entered into written data processing agreements with all data processors that process personal data on our behalf. This is to ensure that your data is protected as well as possible by us and our business partners.

3.3 Three of these data processors, Google Analytics, Facebook and Klaviyo, are established in the USA. The necessary safeguards for transferring information to the USA are ensured through the data processors’ certification under the EU-U.S. Privacy Shield, cf. Article 45 of the EU General Data Protection Regulation.

3.3.1 A copy of Google LLC’s certification can be found here: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI

3.3.2 A copy of Facebook Inc.’s certification can be found here: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

3.3.3 A copy of Klaviyo Inc.’s certification can be found here: https://www.privacyshield.gov/participant?id=a2zt00000008RNFAA2&status=Active

4. WHAT ARE YOUR RIGHTS?

4.1 In order to create transparency around the processing of your information, we, as the data controller, must clearly inform you of your rights. If you have the slightest doubt, you are always welcome to contact us.

4.2 Your right of access.

4.2.1 You have the right at any time to contact us and request information about which data we have registered about you, the purpose for which it is registered, which categories of personal data and recipients of the information may be involved, and information about where the information originates. In other words, whether it was obtained on our site, whether you entrusted us with your data when placing an order, etc.

4.2.2 You have an unequivocal right to receive a copy from us of the personal data we process about you. If you wish to receive information about your personal data, you must send a written request to kundeservice@lirumlarumleg.dk. We will then contact you as soon as possible, and you can find out which information you have entrusted to us. You may be asked to document your identity.

4.3 Your right to rectification

4.3.1 You also have the right to have incorrect personal data about yourself rectified by us. In other words, if you become aware that there are errors in the information we have registered, please feel free to contact us. We will then ensure that the information is corrected.

4.4 Your right to erasure.

4.4.1 In certain cases, you have the right to have all or some of your personal data erased by us, for example if you withdraw your consent and we have no reason (legal basis) to continue processing it. However, we are not obliged to erase your personal data if it is still necessary for us to comply with our legal obligations towards you. For example, to enable us to send you an order, handle returns/refunds or process a complaint. Naturally, we only retain the information for as long as necessary.

4.5 Your right to restrict processing to storage

4.5.1 In certain cases, you have the right to have the processing of your personal data restricted to storage only, for example if you believe that the information we process about you is not correct.

4.6 Your right to data portability (disclosure and transfer of data).

4.6.1 In some cases, you have the right to receive personal data that you have provided to us in a structured, commonly used and machine-readable format, and you have the right to transmit this information to another data controller.

4.7 Your right to object.

4.7.1 You have the right at any time to object to our processing of your personal data. This applies both to our direct marketing to you and to any profiling carried out in order to target our direct marketing.

4.7.2 You also have the right at any time, on grounds relating to your particular situation, to object to the processing of your personal data that we carry out on the basis of our legitimate interests, cf. sections 2.1 and 2.3.

4.8 Your right to withdraw consent.

4.8.1 You may withdraw consent that you have given for a specific processing of personal data at any time. If you wish to withdraw your consent, please contact us by email at kundeservice@lirumlarumleg.dk. You will then receive confirmation that your consent has been withdrawn.

4.9 Your right to lodge a complaint

4.9.1 If you believe there is reason to complain about our processing of your personal data, you have the right to do so.
The complaint may be submitted to the Danish Data Protection Agency, Borgergade 28, 5, 1300 Copenhagen K, email: dt@datatilsynet.dk or by telephone +45 33 19 32 00.

 

5. WHEN DO WE DELETE YOUR PERSONAL DATA?

5.1 Personal data that we have collected through your use of www.lirumlarumleg.dk, cf. section 2.1, is deleted no later than when you have not used the site for 1 year.

5.2 Your information collected in connection with your consent to subscribe to our newsletter is deleted when you withdraw your consent to the newsletter, unless we have another basis for storing and processing the information.

5.3 Information collected in connection with a purchase you have completed on www.lirumlarumleg.dk, cf. section 2.2, will generally be deleted 5 years after the end of the calendar year in which you made your purchase. However, we may choose to retain the information for a longer period if we have a legitimate reason to do so, for example if this is necessary in connection with legal claims and documentation, or if retention is necessary for us to comply with legal requirements. To comply with the requirements of the Danish Bookkeeping Act, we retain accounting records for 5 years from the end of the calendar year.

 

6. YOUR SECURITY

6.1 We comply with applicable security regulations and have implemented specific technical and system-related security measures, as well as established internal procedures to ensure that your personal data is not accidentally or unlawfully lost, altered, disclosed to unauthorised persons or misused.

6.2 Only our employees who have a legitimate need to access your personal data in order to perform their work have access to it. All employees are also subject to a duty of confidentiality.

 

7. CONTACT DETAILS

7.1 Lirumlarumleg.dk ApS is the data controller for the personal data that you share with us or that is collected via www.lirumlarumleg.dk.

7.2 If you have any questions about our privacy policy or wish to exercise one or more of the rights described in section 4, you are very welcome to contact us here:

Lirum Larum Leg ApS
Engholmvej 16
3100 Hornbæk

Telephone: 70 26 98 90

Email: kundeservice@lirumlarumleg.dk

 

8. CHANGES TO THE PRIVACY POLICY

8.1 If we make changes to the privacy policy, you will of course be informed the next time you visit our site.

 

9. VERSIONS

9.1 This is version 2 of Lirum Larum Leg’s privacy policy, dated 2/9 2021.

Kind regards,

Anja Lytzen
Owner