Privacy Policy

1. GENERAL

1.1 Our policy for processing personal data describes how Lirum Larum Leg ApS collects and processes information about you. The intention is to inform you about how we best protect the data you have entrusted to us, regardless of where it is collected, shared, or processed.

1.2 The privacy policy applies to all personal data that you provide directly to us, or that we collect via the Lirum Larum Leg website at www.lirumlarumleg.dk.

1.3 Lirum Larum Leg is the data controller for your personal information. If you want to contact us regarding your data, you can do so using the contact information provided under section 7.

2. WHAT PERSONAL DATA DO WE COLLECT ABOUT YOU, FOR WHAT PURPOSES, AND WHAT IS THE LEGAL BASIS FOR PROCESSING?

2.1 When you visit our website, we automatically collect information about you and your use of www.lirumlarumleg.dk, such as the browser you use, what you search for on the website, your IP address, including your network location, and information about your PC.

2.1.1 The purpose is to optimize your user experience on the site and the site's functions, as well as to carry out targeted marketing, including re-targeting via Facebook and Google. This is necessary for us to pursue our interest in improving the site.

2.1.2 The legal basis for processing is Article 6(1)(f) of the EU General Data Protection Regulation.

2.2 When you purchase a product on our site or communicate with us on the site, we collect the information you provide to us, such as your name, address, email address, phone number, payment method, information about the products you purchase and may have returned, complaints about items, delivery requests, who you have sent a gift to, and information about the IP address from which you sent us your order.

2.2.1 The purpose is to deliver the products you have ordered and fulfill our legally binding agreement with you, including managing your rights to return items and potentially handling complaints if something is wrong with a product. We may also process information about your purchases to comply with legal requirements, such as bookkeeping and accounting. The IP address is collected during your purchase to secure our interest in preventing fraud.

2.2.2 The legal basis for processing is Article 6(1)(b), (c), and (f) of the EU General Data Protection Regulation.

2.3 When you subscribe to our newsletter (at checkout or independently), we collect information about your name and email address.

2.3.1 The purpose is to pursue our interest in delivering newsletters with relevant content to you.

2.3.2 The legal basis for processing is Article 6(1)(f) of the EU General Data Protection Regulation.

3. WHO ARE THE RECIPIENTS OF YOUR PERSONAL DATA?

3.1 Information about your (or the gift recipient's) name, address, email, phone number, order number, and specific delivery requests are shared with GLS and DAO (for parcels) or a freight carrier (for larger shipments) responsible for delivering the purchased goods to you. In Denmark, we partner with Danske Fragtmænd. For shipments from our Denmark warehouse to customers in Norway, your order is first transported with BHS Logistics and then forwarded for private delivery with Nortrans and Ramberg Logistics. When purchasing non-stock items (dropshipping), the mentioned information may be shared with the producer/distributor of the respective item, who will then handle the delivery directly to you. In the event of handling a complaint about a purchased item, we may, in a few cases, provide data to the supplier. This is to reimburse the item's value or if a replacement product needs to be sent directly to you.

3.2 We also share your information with external partners who process the data on our behalf. We use external partners for development, technical support, improvements to our site, newsletter distribution, and targeted marketing, including re-targeting. Additionally, for your evaluation of our company and products. For instance, information about your name and email is shared with TrustPilot, allowing us to send you an invitation to review us on TrustPilot's website. If you choose to write a review on their site, TrustPilot becomes the data controller for the information provided. Moreover, your information may be shared with partners assisting with our business activities, including lenders. All these companies are data processors for us and handle the data we are responsible for and that you have entrusted to us. Therefore, it is vital for us to protect them well, which is why data processors cannot use the data for purposes other than fulfilling the agreement with us, and they are under full confidentiality. We have entered into written data processing agreements with all processors handling personal data on our behalf. This ensures that your data is best protected with us and our partners.

3.3 Three of these data processors, Google Analytics, Facebook, and Klaviyo are based in the USA. The necessary guarantees for transferring data to the USA are ensured through the data processor's certification under the EU-U.S. Privacy Shield, according to the EU General Data Protection Regulation Article 45.

3.3.1 A copy of Google LLC's certification can be found here: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI

3.3.2 A copy of Facebook Inc.'s certification can be found here: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

3.3.3 A copy of Klaviyo Inc.'s certification can be found here: https://www.privacyshield.gov/participant?id=a2zt00000008RNFAA2&status=Active

4. WHAT ARE YOUR RIGHTS?

4.1 To create transparency about the processing of your information, we, as the data controller, must inform you clearly about your rights. If you are ever in doubt, you are always welcome to contact us.

4.2 Your right to access.

4.2.1 You have the right at any time to contact us and request information about what data we have registered about you, the purpose of the registration, any categories of personal data and recipients of data, if any, and information about where the data originates. In other words, whether they were collected on our site or if you entrusted us with your data when placing an order, etc.

4.2.2 It is your clear right to receive a copy from us with the personal data we process about you. If you wish to receive information about your personal data, please send a written request to kundeservice@lirumlarumleg.dk. We will contact you as soon as possible, and you can be informed about the data you have entrusted to us. You may be asked to document who you are.

4.3 Your right to rectification

4.3.1 You also have the right to have incorrect personal data about yourself corrected by us. For example, if you become aware of errors in the information we have registered, feel free to contact us. We will then ensure that the information can be corrected.

4.4 Your right to erasure.

4.4.1 In certain cases, you have the right to have all or some of your personal data deleted by us, for example, if you withdraw your consent and we have no other grounds (legal basis) to continue the processing. However, we are not obliged to delete your personal data if they are still necessary for us to fulfill our legal obligations to you. For example, so that we can send an order to you, handle returns/refunds, or deal with complaints. But we certainly only retain the data as long as necessary.

4.5 Your right to restrict processing to storage

4.5.1 In certain cases, you have the right to restrict the processing of your personal data to only consist of storage, for example, if you believe that the data we process about you is incorrect.

4.6 Your right to data portability (data delivery and transfer).

4.6.1 In some cases, you have the right to receive personal data that you have provided to us in a structured, commonly used, and machine-readable format and have the right to transfer this data to another data controller.

4.7 Your right to object.

4.7.1 You have the right at any time to object to our processing of your personal data. This applies to our direct marketing to you, including any profiling conducted to target our direct marketing.

4.7.2 Furthermore, you have the right at any time to object, based on grounds relating to your personal situation, to the processing of your personal data that we carry out due to our legitimate interests as specified in section 2.1 and 2.3.

4.8 Your right to withdraw consent.

4.8.1 You can withdraw consent you have provided for a specific processing of personal data at any time. If you wish to withdraw your consent, we ask you to contact us via email at kundeservice@lirumlarumleg.dk. You will then receive confirmation that your consent has been withdrawn.

4.9 Your right to complain

4.9.1 If you have grounds to complain about our processing of your personal data, you have the right to do so.
And this can be submitted to the Danish Data Protection Agency, Borgergade 28, 5, 1300 Copenhagen K, email: dt@datatilsynet.dk or by phone +45 33 19 32 00.

5. WHEN DO WE DELETE YOUR PERSONAL DATA?

5.1 Personal data collected through your use of www.lirumlarumleg.dk as specified in section 2.1 will be deleted no later than one year after you last used the site.

5.2 Your data collected in connection with your subscription to our newsletter is deleted when your consent for the newsletter is withdrawn unless we have another basis for retaining and processing the information.

5.3 Data collected in connection with a purchase you have made on www.lirumlarumleg.dk as specified in section 2.2 will generally be deleted five years after the end of the calendar year in which you made your purchase. However, we may choose to retain the information longer if we have a legitimate reason, such as if it is necessary for legal claims and documentation or if retention is necessary for compliance with legal requirements. To meet the requirements of the Accounting Act, we retain accounting material for five years until the end of the calendar year.

6. SECURITY FOR YOU

6.1 We comply with applicable security rules and have implemented specific technical and system security measures and developed internal procedures to prevent your personal data from being accidentally or unlawfully lost, altered, accessed by unauthorized persons, or misused.

6.2 Only our employees who have a legitimate need to access your personal data to perform their jobs will have access to them. All employees are also bound by confidentiality agreements.

7. CONTACT INFORMATION

7.1 Lirumlarumleg.dk ApS is the data controller for the personal data you share with us or that is collected via www.lirumlarumleg.dk.

7.2 If you have questions about our privacy policy or wish to exercise one or more of your rights described in section 4, please feel free to contact us here:

Lirum Larum Leg ApS
Engholmvej 16
3100 Hornbæk

Phone number: 70 26 98 90

Email: kundeservice@lirumlarumleg.dk

8. CHANGES TO THE PRIVACY POLICY

8.1 If we make changes to the privacy policy, you will of course be informed about this the next time you visit our site.

9. VERSIONS

9.1 This is version 2 of Lirum Larum Leg's privacy policy dated 2/9/2021.

Best regards,

Anja Lytzen
Owner