Information about the processing of personal data (privacy policy)

In Thomas Winding's World (” Thomas Windings Verden ”, “we”, “us” or “our”), data protection and confidentiality are of high priority. This privacy notice applies to our processing of personal data, including on our website www.Thomaswindingsverden.dk and describes Thomas Windings Verden processes your personal data and provides you with the information that you are entitled to receive in accordance with applicable data protection legislation.

1. Data controller and contact information

Phantom Film ApS

Address: Esromgade 15, 2001, 2200 Copenhagen V

CVR number: 37288438

Email: info@ ThomasWindingsWorld .dk

2. Processing activities

2.1 Purchase of products

When you purchase products from us, we process personal data about you for the following purposes:

• Delivery and invoicing of products to you, managing any complaints and handling exchanges or returns of products, etc.
• Compliance with the legal obligations incumbent on us, in particular under the Accounting Act
• Preparation of statistics and other basis for managing our business, improving our products and ensuring effective customer service
• Communicating with you in connection with your orders, including the ability to send you service messages

In order to fulfill these purposes, we process the following categories of personal data about you if you purchase the goods as a consumer:

(a) Name;

(b) Address;

(c) Email;

(d) Telephone number, and

(e) Information about your purchase and purchase history

If you purchase the goods as a business for the purpose of resale, we process the following categories of personal data about you as a contact person:

(a) Name

(b) Contact information in the form of your work address, telephone number and email address

In addition, we process the following information about the company you represent:

(a) Registration number / VAT number

(b) The terms of trade we have agreed with the company

(c) Your contact person at Thomas Windings Verden

(d) Trading history

(e) Current status, including current balance of your account with us

(f) Other remarks or terms regarding our business relationship

The legal basis for the processing is

• Regulation (EU) 2016/679 (hereinafter “GDPR”) Article 6(1)(b), as the processing is necessary to enter into and perform a contract with you

• GDPR, Article 6(1)(c), as the processing is necessary for us to comply with the legal obligations to which we are subject, in particular under the Danish Accounting Act.

• GDPR, Article 6(1)(f), as the processing is necessary for us to pursue our legitimate interest in the ongoing management and development of our business, our products and our relationship with our customers.

We retain information about individual orders for five years from the end of the year to which the individual order relates. Other information is retained for five years from the end of the year in which we last processed an order from you or the company you represent.

2.2 Processing of inquiries

If you contact us, we process the following personal data about you for the purpose of responding to your inquiry:

(g) Name;

(h) Email;

(i) Telephone number; and

(j) Information you provide in connection with your correspondence with us.

The legal basis for the processing is GDPR Article 6(1)(f), as the processing is necessary for us to pursue our legitimate interest in processing your inquiry.

The information will be stored for two years from the end of the year your inquiry was completed, unless the inquiry has led to financial transactions. In that case, the information will be stored for five years from the end of the year your inquiry was completed.

2.3 Newsletters and marketing

Once you have consented to receive marketing material from us, we process the following categories of personal data for the purpose of sending newsletters and other marketing material to you:

(a) Name

(b) Email

The legal basis for the processing is GDPR Article 6(1)(f), as the processing is necessary for us to pursue our legitimate interest in sending newsletters and other forms of marketing material to recipients who have consented to receive such material.

To the extent that communication with you takes place via Facebook, we are joint data controllers with Facebook – you can read more about Facebook's processing of personal data here and about joint data responsibility here .

Your personal data and the associated consent will be deleted two years from the end of the year in which you have withdrawn your consent or where we have not actively used your consent to send you marketing material for a period of 12 months.

2.4 Competitions and events

If you choose to participate in a competition or event, we process the following categories of personal data about you for the purpose of administering/implementing the individual competition or event:

(a) Name

(b) Email;

(c) Address

(d) Telephone number

(e) Other information included in the specific competition or event

The legal basis for the processing is GDPR Article 6(1)(f), as the processing is necessary for us to pursue our legitimate interest in being able to register your participation in a competition or event and, in certain cases, to be able to publish and notify you directly that you have won a prize.

To the extent that communication with you takes place via Facebook, we are joint data controllers with Facebook – you can read more about Facebook's processing of personal data here and about joint data responsibility here.

We delete the information one year from the end of the year the event or competition has ended.

2.5 Website operation

We use cookies and similar tracking techniques on our website, and in this connection we collect information about your use of the website. The purpose of the processing is to provide a well-functioning and relevant website.

For this purpose, we collect information about your IP address, the equipment – ​​both hardware and software – you use to access the website, as well as information about how you use the website, including which links you click on.

You can read more about each cookie, including the purpose of each cookie and how long each cookie is stored, in the cookie overview, which can be found by clicking on , which you will find in the lower left corner of the screen. Here you can also find links to the privacy policies of third parties that we use for certain services by placing their cookies on our website, and who, together with us, are joint data controllers for the use of information collected via these cookies.

2.6 Other administration, including suppliers and partners

If you are a supplier or business partner for Thomas Windings Verden, or if you are otherwise in contact with us for reasons other than those stated in sections 2.1 – 2.5 above, we process information about you for the purpose of managing the relationship we have with you or the company you represent.

Depending on the context, this may involve the following categories of personal data:

(a) Name

(b) Contact information (for suppliers and partners typically work address, telephone number and email address)

(c) Information about the nature of the relationship you or the company you represent have with Thomas Windings Verden (d) Correspondence and business history

(e) Other information that may be relevant to the specific relationship

The legal basis for the processing will, depending on the nature of the relationship we have with you or the company you represent, be GDPR Article 6(1)(b) (in cases where the processing is necessary for entering into or performing a contract), or GDPR Article 6(1)(f) where the processing is necessary for us to pursue our legitimate interest in managing our relationships and communicating effectively with stakeholders.

In cases where the information includes financial transactions, the transaction information is stored for five years from the end of the year to which the individual transaction relates, while other information is stored for five years from the end of the year in which we last had a transaction in which you or the company you represent is involved.

3. Retention of information

The retention periods stated in the description of the individual processing activities will apply as a starting point. However, in specific cases we may retain information for a longer period if it is necessary to comply with a legal obligation imposed on us or if it is necessary for us to establish, defend or assert a legal claim.

4. Disclosure and transfer of personal data

We may disclose personal data about you to logistics companies and other actors where this is necessary to fulfill the agreement with you, to lawyers, accountants and other advisors who assist our company, as well as law enforcement authorities or other public authorities if required by law or we are ordered to disclose the information by court order or similar measures.

In addition, we may transfer personal data to suppliers who - as data processors - support our business, for example suppliers of IT systems, IT operating services or other forms of business services.

5. Transfer of personal data to third countries

When you use our webshop, send an inquiry or receive newsletters and other forms of marketing from us, your personal data is processed by data processors located in countries outside the EU/EEA or using sub-data processors outside the EU/EEA; primarily the USA.

In such situations, we take measures to ensure that a transfer basis is established - typically the EU Commission's standard contracts, and we also take additional measures to protect your rights and freedoms if we assess that this is necessary in relation to the individual recipient countries.

You can obtain a copy of the agreements we have entered into based on the EU Commission's standard contracts by contacting us using the contact information provided in section 1.

6. Your rights

• You have the right to access the personal data we process about you.
• You have the right to object to our collection and further processing of your personal data.
• You have the right to have your personal information corrected and deleted, subject to certain statutory exceptions.
• You have the right to request restriction of processing.
• You have an unconditional right to object to your personal data being used for direct marketing.
• You have the right to request a copy of your personal data in a structured, commonly used and machine-readable format and to request the transfer of your personal data sent to us to another data controller (data portability).
• To the extent that the processing is based on your consent, you may withdraw this consent at any time. Withdrawal of consent only affects processing after the time you withdraw consent and thus does not affect the lawfulness of processing that took place before you withdrew consent. Our newsletters can be unsubscribed by clicking on the link at the bottom of the newsletter.
• You always have the right to file a complaint with a supervisory authority, such as the Danish Data Protection Authority.

Please note that some of these rights are subject to certain conditions and limitations, so we may not be obliged to comply with your request.

7. Changes to the Privacy Policy

We reserve the right to make changes to this Privacy Notice from time to time. In the event of changes, the date at the top of the Privacy Notice will be updated. The current Privacy Notice will be available on the website “www.kongessloejd.dk”. In the event of significant changes, you will receive a notification via email.

This version was last updated in September 2024.