Privacy

How Lanullva ApS processes personal data

It is important to feel safe when you shop online.

Lanullva aims to treat all personal data with respect and care. This page explains what personal data we collect, why we collect it, who we share it with and what rights you have. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Danish Data Protection Act (databeskyttelsesloven).

Data controller

Lanullva ApS, Frilandsvej 111, 9800 Hjørring, Denmark
CVR no. 44496453
Email: kundeservice@lanullva.no
Phone: +47 71 29 58 00

What personal data we process

• Contact details such as name, address, phone number and email address (for business customers also company name and job title).
• Order and transaction details such as the items you buy, return or exchange, payment method and payment confirmation. Card details are handled by our payment providers.
• Customer account details, if you create an account.
• Communication with us, for example when you contact customer service.
• Information about how you use our website, such as which products you view and what you show interest in, collected through cookies and similar technologies.

Purposes and legal basis

• To identify you as a customer, process and deliver your order, handle returns, exchanges and complaints, and contact you about your order – necessary to fulfil our agreement with you (GDPR Art. 6(1)(b)).
• To meet our legal obligations, for example under accounting and tax rules (GDPR Art. 6(1)(c)).
• To improve our website and services, provide customer service, and prevent fraud and misuse – based on our legitimate interests (GDPR Art. 6(1)(f)).
• To send newsletters and SMS, and to use statistics and marketing cookies – based on your consent (GDPR Art. 6(1)(a)).

If we ever need to process sensitive personal data to fulfil an agreement with you, we will ask for your explicit consent in advance. You can withdraw your consent at any time. This does not affect the lawfulness of processing carried out before the withdrawal.

Please do not send sensitive personal data or national identification numbers to us by email unless the content is encrypted.

Customer account
If you choose to create a customer account, we store the personal data you provide. When logged in, you can view and correct your details and see your order history. An account makes shopping easier, as your contact details are filled in automatically in the checkout.

Newsletter and SMS
If you sign up for our newsletter, you consent to us storing your email address (and phone number for SMS) to send you information about Lanullva, such as news, offers and competitions. We use Klaviyo to send emails and SMS. Your data is stored until you unsubscribe. You can withdraw your consent at any time via the link in each email or SMS.

Cookies
Cookies are small text files stored in your browser. We use necessary cookies to make the website work. Cookies for statistics and marketing, including cookies from Google that are used to tailor digital ads and offers, are only set if you consent to them. You can change or withdraw your consent at any time in our cookie settings, and you can also block cookies in your browser settings. Please note that some parts of the website may not work optimally without cookies.

Who we share personal data with
We never sell your personal data. We use carefully selected service providers (data processors) that process personal data on our behalf under a data processing agreement, including:

• Shopify – e-commerce platform and hosting of the online store
• Payment providers such as Klarna and card payment providers – payment processing
• Klaviyo – newsletters and SMS
• Google – website statistics and advertising (with your consent)
• Returnflows – our returns portal
• Carriers and our logistics partner – delivery of orders and receipt of returns

Personal data may also be disclosed to public authorities where we are required to do so by law.

Transfers outside the EU/EEA
Some of our service providers may process personal data outside the EU/EEA. In that case, we ensure a valid transfer basis, such as an adequacy decision by the European Commission or the Commission's standard contractual clauses.

How long we keep your data
We keep personal data only for as long as necessary for the purposes described above. Accounting records are kept for 5 years in accordance with the Danish Bookkeeping Act. Newsletter data is kept until you unsubscribe, and customer account data until you delete your account or ask us to delete it, unless we are required to keep it for longer.

Security and confidentiality
Our website uses SSL encryption (https), which you can check by the padlock icon in your browser. All employees at Lanullva are bound by a duty of confidentiality, which continues after their employment has ended.

Your rights
You have the right to request access to the personal data we hold about you, and to have incorrect data corrected. You can also ask us to delete your data, restrict the processing, receive your data in a portable format, and object to processing – including at any time to processing for direct marketing. We cannot delete data that we are required by law to keep, for example under bookkeeping rules. To exercise your rights, email kundeservice@lanullva.no. If you have a customer account, you can also correct your details yourself when logged in.

Complaints
If you are dissatisfied with how we process your personal data, please contact us first. You also have the right to lodge a complaint with the Danish Data Protection Agency: Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, Denmark, www.datatilsynet.dk. You can also complain to the data protection authority in the country where you live.