privacy policy
1. Purpose of the policy
The purpose of this Privacy Policy is to make you aware of how Elka Rainwear A/S ("we", "us") processes personal data. With this policy we want to inform about what information is collected and processed and how long it is kept. The Privacy Policy addresses the processing of personal data by Elka Rainwear A/S when you enter into agreements, interact, or otherwise exchange personal data with us.
2. Description of the processes
Elka Rainwear A/S processes your data for one or more specific purposes and in accordance with data protection rules. We process your data, for example, if you are a customer of ours, a customer via our web shop, a business partner, a supplier, visit our website or our social media, or apply for a job with us.
The information will predominantly come directly from you, and we will only process your information for as long as is necessary for the purpose for which it was collected
2.1.1. Customer relations
Business customers
When selling our products to business clients, we process their contact information to conclude and perform a contract (GDPR Art. 6(1)(b)). This information includes contact details such as name, company name, email, address, and telephone number as well as purchase history and payment details.
We delete the data on an ongoing basis, but no later than five years after the end of the customer relationship.
Private customers
Elka Rainwear A/S processes personal data of private customers when you are a customer with us or a customer via our web shop www.elkawebshop.dk. We process your data in connection with the sale of our products to conclude and perform a contract (GDPR Art. 6(1)(b)). This information includes contact details such as name, email, address, and phone number as well as purchase history and payment details.
We delete the data on an ongoing basis, but no later than 5 years after the end of the customer relationship.
2.1.2. Website and cookies
As part of the general operation of our website, we collect personal data about you via cookies to improve the look and feel of the website and to compile statistics. We will only collect your personal data if you have given your consent. You can withdraw your consent at any time. Read more about this in our cookie policy.
On our website we also have integrated social media plugins, which have the possibility to collect data about you if you have given your consent. In this context, we have a joint data responsibility with each medium. We use integrated plugins from LinkedIn and Instagram.
You have the option via our web shops to contact us via our contact form. In this context, we also process your personal data. The data that we process is name, company name, address, e-mail, and telephone number. It is also possible to write in a free text field, but we advise against writing personal data in this field unless it is relevant to the inquiry.
The data we process via our contact form is deleted continuously and no later than 5 years after the last contact.
2.1.3. Social media
We use the social media LinkedIn, Facebook, and Instagram to get in touch with our customers and potential customers, as well as to promote our marketing efforts. If you have "liked" our fan page on the social media or have been in contact with us through this, we avoidably process your personal data. For this purpose, we only process information about your name and email, and possibly information about your purchase, if this is apparent from the context.
If you contact us through social media, we process your personal data based on our interest in being able to contact you and respond to your enquiries, as set out in GDPR Article 6(1)(f). The data will originate from you and the social media through which you contact us.
We have a joint data responsibility with the social media we use, as we both process your personal data for our own purposes. You can read more about the social media's processing of your personal data below:
You can read more about LinkedIn’s processing of your personal data here and about the joint data responsibility here.
Facebook and Instagram’s processing of your personal data here, ad about the joint data responsibility here.
Data processed in the context of social media that relates to direct communication via social media is deleted immediately. Posts on, for example, Facebook pages or in public groups are not deleted, as a post or comment on Facebook pages or in public groups is considered to be in the public domain. You can read more about public areas here.
2.1.4. Marketing
We only process your personal data for marketing purposes if you have given your consent in accordance with GDPR Art. 6(1)(a), for example to receive newsletters regarding information about Elka, our products, promotions and offers. The scope of our processing is set out in the specific consent.
If you have given your consent to receive marketing from us, we will process contact person, email and company data.
We will keep your information for as long as you are subscribed to the newsletter and for 3 years after unsubscribing.
You have the right to withdraw your consent at any time by using the withdrawal link in the newsletters you receive.
2.1.5. Job applicants
If you apply for a job at Elka Rainwear A/S, we process your personal data for the purpose of assessing whether you are qualified for an existing or future position with us. We process the information you provide to us, including name, contact details, date of birth, work and educational background, level of education, language skills, CV, application, references, and availability date and, if applicable, video presentation.
We also process information about you based on our legitimate interest as set out in GDPR Art. 6(1)(f). This includes, for example, information collected from social media published by you. In this case, we consider that our interests in processing your personal data outweigh your interests in not having the data processed.
In a possible recruitment process, logic and personality analysis may be used in this context, ordinary personal data will be processed, where the basis for processing is following a legitimate interest pursuant to GDPR Art. 6(1)(f). If the need for processing sensitive personal data arises, you will be asked to give your consent pursuant to GDPR art. 9(2)(a). When you apply for a job with us, HR, management, and any trusted employees will have access to your data.
If we wish to keep your data beyond the recruitment period, we will obtain your consent.
Unsolicited applications are kept for 6 months after the recruitment process is completed, and data that we process if you choose to subscribe to the job agent is kept until you stop subscribing to the job agent.
2.1.6. Suppliers and business partners
When we enter into agreements with suppliers and business partners, we process their contact information. This includes information on name, job title, telephone number, e-mail and, if necessary, payment or bank details.
The data is processed either because it is necessary for the performance of the contract with the supplier or business partner concerned (GDPR Art. 6(1)(b)) or because we have a legitimate interest in processing the contact details of the person concerned as part of the contract (GDPR Art. 6(1)(f)).
We keep relevant contact information throughout our cooperation. Written correspondence is deleted on an ongoing basis, and information necessary to fulfil our obligations under the Accounting Act is kept for 5 years plus the current financial year.
3. Recipients of personal data
We process your personal data with confidentiality and as a rule we do not disclose the information to third parties. However, we may disclose your personal data if you have given your consent, or we have a legitimate interest in disclosure.
We may transfer personal data to our system providers who process personal data on our behalf and under our specific instructions pursuant to the data processing agreement.
Some of our data processors, and the social media platforms we share data responsibility with, are located outside the EU, resulting in a transfer to a third country. In this case, we have ensured a lawful basis for the transfer, including by applying the EU Commission's standard rules.
4. Your rights
You have several basic rights under the data protection rules that you can exercise when we collect information about you. Your rights include the right to request access to and rectification or erasure of your personal data, restriction of and objection to our processing, and the right to receive your data in a structured, commonly used, and machine-readable format (data portability)
The above rights may be subject to conditions and limitations. Whether you as a data subject can request, for example, the erasure of your personal data, will in all cases depend on a specific assessment.
If you have given your consent to our processing of your data, you have the right to withdraw this consent at any time.
If you are dissatisfied with our processing of your personal data, you can lodge a complaint with the Danish Data Protection Authority via their website www.datatilsynet.dk or by calling 33 19 32 00.
5. Our contact detalis
The company responsible for processing your personal data is:
Elka Rainwear A/S
CVR.nr: 10 13 86 98
Navervej 22-24, 7451 Sunds
E-mail: elka@elkarainwear.dk
Tlf.: +45 97 14 24 22
If you have any questions regarding our processing of your personal data, please contact us at elka@elkarainwear.dk or by phone +45 97 14 24 22
6. Modifications
We reserve the right to update and amend these guidelines for the processing of personal data. In the event of material changes, we will notify you by e-mail or by a visible notice on our website.
This privacy policy was last modified at: 07.02.2023