Collection and use of personal information

  1. General

This Privacy Policy ("Personal Data Policy") describes how Guéri ApS ("Guéri", "us", "our", "we") collects and processes information about you.

The personal data policy applies to personal information that you provide to us or that we collect via the website gueri.dk (the "Website").

Gupé is the data controller for your personal information. All inquiries to Guéri can be made via the contact information listed under pkt. 7.

  1. What personal information do we collect, for what purposes and the legal basis for the processing

    1. Website Visits

When you visit the Website, we automatically collect information about you and your use of the Website, such as the type of browser you use, the search terms you use on the Website, your IP address, including your network location, and information about your computer.

The purpose is to optimize the user experience and the function of the Website. This processing of information is necessary in order for us to safeguard our interests in improving the Website.

The legal basis for the processing is Article 6 (1) of the EU Personal Data Regulation. 1, letter f.

    1. Purchase of product or communications

When you buy a product or communicate with us on the Website, we collect the information you provide yourself, e.g. name, address, e-mail address, telephone number, method of payment, information about which products you buy and possibly have returned, delivery requests, as well as information about the IP address from which the order was made.

The purpose is that we can deliver the products you have ordered and otherwise fulfill our agreement with you, including to be able to manage your rights to return and advertise. We can also process information about your purchases to comply with legal requirements, including for bookkeeping and accounting. Upon purchase, the IP address is collected for that purpose and to serve our interest in being able to prevent fraud.

The legal basis for the processing is Article 6 (1) of the EU Personal Data Regulation. 1, letters b, c and f.

    1. Newsletter Subscription

When you sign up for our newsletter, we collect information about your name and email address. Upon registration, you will be asked to give separate consent to electronic marketing.

The purpose is to serve our interest in delivering newsletters to you.

The legal basis for the processing is Article 6 (1) of the EU Personal Data Regulation. 1, letter f.

    1. Account creation

When you create an account with us, you will be asked to provide eg name, address, e-mail address, telephone number. In addition to the name, address and e-mail address, you choose what information you want to give us.

The legal basis for the processing is Article 6 (1) of the EU Personal Data Regulation. 1, letters b and f.

  1. Recipients of Personal Information

Information about your name, address, e-mail, telephone number and order number and specific delivery requests are passed on to PostNord, GLS or a carrier who delivers the purchased goods to you.

Information may be left to external partners who process the information on our behalf. We use external partners for, among other things, technical operation and improvements of the Website, distribution of newsletters and targeted marketing, including retargeting. These companies are data processors and under our instruction and process data for which we are data responsible. The data processors may not use the information for any purpose other than fulfilling the agreement with us, and are subject to this confidentiality.

We have entered into written data processor agreements with all data processors that process personal data on our behalf.

One of these data processors (sub-data processor), Google Analytics v / Google LLC., is established in the United States. The necessary guarantees for the transfer of information to the USA are secured through the data processor's use of the EU standard transfer agreements.

  1. Your Rights

In order to create transparency regarding the processing of your information, we, as the data controller, must inform you of your rights.

The right of access
You are at any time entitled to request information from us, among other things, what information we have registered about you, what purpose the registration serves, what categories of personal information and recipients of information that may may be, as well as information on where the information comes from.

You have the right to receive a copy of the personal information we process about you. If you want a copy of your personal information, you must send a written request to info@gueri.dk. You may be asked to prove that you are who you claim to be.

Right of Correction

You have the right to have incorrect personal information about yourself corrected by us. If you become aware that there is an error in the information that we have registered about you, you are encouraged to contact us in writing so that the information can be corrected.

Right to delete

In certain cases, you have the right to have all or some of your personal data deleted by us, eg if you revoke your consent and we do not have another legal basis to continue processing. To the extent that further processing of your information is necessary, eg for us to comply with our legal obligations, or for legal claims to be established, asserted or defended, we are not obliged to delete your personal information.

The right to restrict processing to storage

In certain cases, you have the right to have the processing of your personal data restricted to storage only, eg if you believe that the information we process about you is incorrect.

The right to data portability

In certain cases, you have the right to have personal information that you have provided to us provided in a structured, commonly used and machine-readable format and have the right to transfer this information to another data controller.

Right to object

You have the right at any time to object to our processing of your personal data, for the purpose of direct marketing, including the profiling carried out in order to target our direct marketing.

You also have the right at any time, for reasons relating to your personal situation, to object to the processing of your personal data, which we carry out on the basis of our legitimate interests, cf. 2.1-2.3.

The right to revoke consent

You have the right to revoke any consent you have given us for a given processing of personal data at any time. If you wish to revoke your consent, please contact us at info@gueri.dk.

If you choose to withdraw your consent, it does not affect the legality of Guéris' processing of your personal data on the basis of previously given consent up to the time of withdrawal or processing of your personal data on the basis of other legal basis, including balancing interests under EU Personal Data Regulation 6 pieces. 1, letter f.

The right to complain

You have at all times the right to lodge a complaint with the Danish Data Protection Agency, Borgergade 28, 5, 1300 København K about our processing of your personal data. Complaints can, among other things, be submitted by email dt@datatilsynet.dk or telephone +45 33 19 32 00.

  1. Deleting Personal Data

Information collected about your use of the Website, cf. 2.1, will be deleted at the latest when you have not used the Website for 1 year.

Information collected in connection with your subscription to our newsletter will be deleted when your consent to store this information is withdrawn, unless we have another basis for processing the information.

Information collected in connection with purchases you have made on the Website, cf. 2.2, will in principle be deleted 5 years after the end of the calendar year in which you made your purchase. However, information can be stored for a longer period of time if we have a legitimate need for longer storage, eg if it is necessary for legal claims to be established, asserted or defended, or if storage is necessary for us to meet legal requirements.

Accounting material is stored for 5 years until the end of a financial year to meet the requirements of the Accounting Act.

If you send emails to Guéri, they will be deleted after one month. Guéri deletes sent emails to you after 5 years.

Information that we have collected in connection with your account creation, cf. 2.4, we will automatically delete: a) if you have not logged in to your user profile for 3 years, ie. inactive use or b) if you close your account. In case of inactive use, you will be notified of the deletion by e-mail after 2 years and 9 months as well as 2 years and 11 months.

  1. Security

We have implemented appropriate technical and organizational security measures against the accidental or unlawful destruction, loss, alteration or deterioration of personal data and against the disclosure or misuse of unauthorized persons.

Only employees who have a real need to access your personal information in order to carry out their work have access to it.

  1. Contact Information

Guéri is the data controller for the personal data collected via the Website.

If you have any questions or comments about this Privacy Policy, or would like to make use of one or more of your rights described in section 4, you can contact:

Guéri ApS

Kollegievej 6

DK-2920 Charlottenlund

CVR No .: 41078677

Email: info@gueri.dk

  1. Changes to Personal Data Policy

If we make changes to the Personal Data Policy, you will be informed of this on your next visit to the Website.

If you have signed up with customer login, you will be notified of the policy changes when sending information to your registered email address.

  1. Version

This Privacy Policy was updated on [23. October 2020].