DATA POLICY FOR H2OFAGERHOLT

1. GENERAL INFO
1.1 This Data Policy ("Personal Data Policy") describes how h2ofagerholt.com("H2OFagerholt", "Us", "Our", "We") collects and processes information about you.
1.2 The Personal Data Policy applies to personal data that you provide to us or as we collect via the H2OFagerholt website, h2ofagerholt.com("Website").
1.3 H2OFagerholt is the data controller for your personal information. All inquiries to this can be made through the contact details listed under Item. 7

2. WHAT PERSONAL DATA ARE WE COLLECTING, AND WHAT ARE THE OBJECTIVES AND LEGAL BASIS FOR THE TREATMENT OF DATA
2.1 When you visit the website, we automatically collect information about you and your use of the website, such as what type of browser you use, which search terms you use on the home page, your IP address, including your network location, and information about your computer.
2.1.1 The purpose is to optimize the user experience and website function, as well as targeted marketing, including retargeting via Facebook and Google. This processing of information is necessary to enable us to take care of our interests in improving the website and showing you relevant offers.
2.1.2 The legal basis for the processing is Article 6 (1) of the EU Personal Data Regulation. 1, point f.
2.2 When you buy a product or communicate with us on our web site, we collect the information you provide us, eg. name, address, e-mail, phonenumber, method of payment, information about which products you buy, return, choices for delivery, IP-address and from where your order were placed. 
2.2.1 The purpose is to deliver and full fill your order, hereunder administrate your right to complain and/or return a product. Any information submitted is also used to comply to legal requirements, including book keeping and accounting. When you buy a product we collect your IP-address with the purpose to prevent fraud.
2.2.2 The legal basis for the processing is Article 6 (1) of the EU Personal Data Regulation. 1, point b, c and f. 
2.3 When you sign up for our newsletter, we collect information about your name and e-mail address.
2.3.1 The purpose is to send you newsletters.
2.3.2 The legal basis for the processing is Article 6 (1) of the EU Personal Data Regulation. 1, point f.

3. WHO IS HANDLING THE PERSONAL INFORMATION
3.1 Information may be left to external partners who process the information on our behalf. We use external partners to include technical operations and website improvements, targeted marketing including retargeting, as well as your review of our company and products. These companies are computer operators and under our instructions and process data for which we are data controllers. Data Processors may not use the information for any purpose other than fulfillment of the agreement with us and are subject to confidentiality about these. We have entered into written data processing agreements with all data processing companies handling personal information on our behalf.
3.2 Four of these data providers, Google Analytics v / Google LLC., Facebook Inc., Snapchat Inc. and Mailchimp are established in the United States. The necessary guarantees for the transfer of information to the United States are ensured through computer-based certification under the EU-US. Privacy Shield, cf. EU Type of Data Regulation Article. 45th
3.2.1 copy of Google LLC's certification can be found here: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI
3.2.2 copy of Facebook Inc.'s certification can be found here: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.
3.2.3 copy of Snapchat Inc.'s certification can be found here:
https://www.privacyshield.gov/participant?id=a2zt0000000TNPxAAO&status=Active
3.2.4 copy of The Rocket Science Group (Mailchimp) certification can be found here:
https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG

4. YOUR RIGHTS 
4.1 In order to provide transparency regarding the processing of your information, we as a data controller must inform you about your rights.
4.2 The right to receive information about what personal data that is collected
4.2.1 You are entitled at any time to request information about, inter alia, what information we have recorded about you, the purpose of the registration, which categories of personal information and recipients of information, if any. may be as well as information on the origin of the information.
4.2.2 You are entitled to receive a copy of the personal information we process about you. If you want a copy of your personal information, please send a written request to contact@h2ofagerholt.com. You may be asked to verify your identity.

4.3 Right to rectification
4.3.1 You are entitled to demand incorrect personal information about yourself corrected by us. If you become aware that there are errors in the information we have registered about you, you are encouraged to contact us in writing so that the information can be corrected.

4.4 The right to be forgotten
4.4.1 In some cases you have the right to have all or some of your personal information deleted by us, for example, if you revoke your consent and we do not have another legal basis to continue the treatment. To the extent that continued processing of your information is necessary, for example, to comply with our legal obligations or for legal requirements to be established, enforced or defended, we are not required to delete your personal information.

4.5 The right to restrict processing of data
4.5.1 You may, in certain cases, have the right to restrict the processing of your personal information to consist of storage, for example, if you believe that the information we treat about you is incorrect.

4.6 The right to data portability
4.6.1 You may, in certain cases, have the right to obtain personal information provided by you in a structured, commonly used and machine-readable format and has the right to transfer this information to another data controller.

4.7 Right of objection
4.7.1 You are entitled at any time to object to our processing of your personal information for direct marketing including any profiling made to target our direct marketing.
4.7.2 You also have the right, for any reason relating to your personal situation, to object to the processing of your personal information, which we make on the basis of our legitimate interests, cf. section. 2.1 and 2.3.

4.8 The right to revoke consent
4.8.1 You have the right at any time to revoke a consent you have given us to a given processing of personal data. If you wish to revoke your consent, please contact us at contact@h2ofagerholt.com

4.9 The right to complaint
4.9.1 You are entitled at any time to file a complaint with Datatilsynet, Borgergade 28, 5, 1300 Copenhagen K about our processing of your personal information. Complaints may, among other things, be submitted to mail dt@datatilsynet.dk or telephone +45 33 19 32 00.

5. DELETING PERSONAL DATA
5.1 Any information collected about your use of the Website cf. section. 2.1. will be deleted at the latest when you have not used the Website for 2 years.

6. SECURITY
6.1 We have implemented appropriate technical and organizational safeguards against the personal or illegal destruction of personal data, forfeiture, alteration or deterioration as well as the disclosure or misuse of personal data.
6.2 Only employees who have a real need to access your personal information to perform their work have access to them.

7. CONTACT INFORMATION
H2OFagerholt is the data controller for the personal data collected via the website.
7.1 If you have any questions or comments about this Data Policy or you wish to make use of one or more of your rights described in Section 4, please contact:

H2OFagerholt
Lille Strandstræde 20,
DK-1254 Copenhagen
T: (+45)  5353 0005
E: contact@h2ofagerholt.com

8. CHANGES IN PERSONAL POLICY
8.1 If we make changes to the Personal Data Policy, you will be informed about this at your next visit to the website

9. VERSIONS
9.1 This is version 2 of H2OFagerholt personal data policy dated 7/5-2019