Privacy policy
Kvadrat A/S ("Kvadrat") is committed to handling personal data responsibly and in accordance with applicable data protection legislation.
Kvadrat A/S
Business registration no. 45998517
Lundbergsvej 10
8400 Ebeltoft
Denmark
E-mail: hello@shopkvadrat.com, Phone number: +45 8953 1478
This privacy policy is intended to provide information on Kvadrat’s processing of personal data collected from customers and users of our websites. It explains how we collect, use, disclose, and protect your personal data when you interact with us, such as when you place an order, contact customer service, or browse our website.
We encourage you to read this policy to learn more about how we handle your personal data and our commitment to protecting your privacy.
1. Users of websites
Data controller
Unless otherwise informed, Kvadrat A/S is the data controller in relation to the personal data collected about you as a customer and when you visit and make use of the functions on our websites. You can read more about cookies on our website in the cookie policy.
Purpose of the processing
Kvadrat collects, processes, and stores personal data when you visit and browse our websites. The data is used to personalize your experience, optimize the website, and ensure you receive the best possible user experience.
When you visit our website, you can provide consent to the use of cookies as outlined in the cookie banner. Kvadrat uses both first-party and third-party cookies to store preferences, gather statistical data, and support marketing activities, depending on the consent you provide.
Types of personal data processed
• Interests and language preferences
• IP address
• Information about your usage of our website (e.g., pages visited, time spent on site)
Legal basis
• Legitimate interests: The processing of your personal data will be based on our legitimate interest in improving our website (Article 6(1)(f) of the GDPR).
• Consent: Kvadrat will only process your personal data in line with our cookie policy which you can find on Kvadrat.dk (Article 6(1)(a) of the GDPR).
Disclosure to other data controllers and transfer to data processors
Kvadrat uses data processors for cookie administration depending on your consent or strictly necessary ex: Google, Cloudflare, Shopify, Google Analytics, and Facebook. For specific information about the Cookies that we use related to powering our store with Shopify, see https://www.shopify.com/legal/cookies.
Retention period
Your personal data will be retained in accordance with our cookie policy and the consent you provide or until you request that we close your user account. We store cookie consent records for up to 2 years after withdrawal or account closure to demonstrate compliance with GDPR.
2. When you sign up to receive Kvadrat’s newsletter
Data controller
Unless otherwise informed, Kvadrat A/S, along with the relevant subsidiary that collected your personal data, will act as data controllers when you sign up for our newsletter. This applies based on your consent provided during the sign-up process.
Purpose of the processing
Kvadrat may collect, process, and store personal data to send you newsletters, event invitations, and other promotional communications related to our products and services. We may use profiling to tailor the updates you receive, ensuring they align with your interests. If you prefer not to be profiled, you have the right to opt out by contacting us at privacy@kvadrat.org.
Types of personal data
Kvadrat may collect, process, and store the following personal data about you:
• Name
• Email address and mobile phone number
• Country of residence
Legal basis
Kvadrat will process your personal data based on the following legal basis:
• Consent: Kvadrat will only use your personal data to send you product information, newsletters, and other marketing material via e-mail if you have provided your prior and explicit consent hereto, unless applicable legislation allows us to contact you without such consent (Article 6(1)(a) of the GDPR).
Disclosure to other data controllers and transfer to data processors
Kvadrat uses data processors such as Agillic A/S for marketing execution, documentation and for communication purposes.
Retention period
Your personal data will be retained until two years after you withdraw your consent.
3. When you place an order with Kvadrat
Data controller
Kvadrat A/S will be the data controller in relation to the personal data collected about you as a customer when you place an order.
Purpose of the processing
Kvadrat collects, processes, and stores personal data when you place an order or make inquiries through our website, via email, or phone. The personal data is processed to manage your order, deliver products to you, provide customer support, and develop our products and services. The data may also be handled in the event of returns, complaints or defective products. We also use your personal data for analytical purposes, which helps us improve our offerings. Additionally, Kvadrat may collect certain data, such as IP addresses and usage data, to enhance website security, prevent fraud, and optimize user experience.
Types of personal data
Kvadrat may collect, process, and store the following personal data about you:
• Name
• Home address, zip code, city and country
• Delivery address, zip code, city and country (if different from home address)
• E-mail address and phone number
• Credit card information
• Order history and delivery details
• IP address and other IT-related data: such as cookies, device information, and user activity logs for security, fraud prevention, and analytics purposes.
Legal basis
Kvadrat will process your personal data based on one or more of the following legal bases:
• Contractual obligation: The processing is necessary to fulfill the contract between Kvadrat and you, such as processing your order and arranging delivery (Article 6(1)(b) of the GDPR).
• Legitimate interests: In certain cases, we rely on our legitimate interests in managing our business operations, such as analyzing data to improve products, customer support, and marketing activities where consent is not required (Article 6(1)(f) of the GDPR).
• Legal claims: The processing may also be necessary to prevent fraud or establish, exercise, or defend legal claims (Article 6(1)(f) of the GDPR).
• Legal obligation: The processing of your personal data will in some cases be necessary to comply with legal obligations, such as retention periods or our obligations to prevent illegal activity (Article 6(1)(c) of the GDPR).
Disclosure to other data controllers and transfer to data processors
Kvadrat may share some personal data to handle the sales order within our CRM system with data processors such as Shopify, Microsoft and external consultants. Information of delivery will be shared with different freight companies. Kvadrat will also share information of delivery addresses to our supplier/suppliers’ forwarding companies when necessary. We ensure that all such transfers are conducted securely and in compliance with applicable data protection regulations.
Retention period
Your personal data will be retained for the period necessary to fulfill all our obligations in relation to the order or including warranties and retention periods based on accounting law.
4. General information applicable for all individuals covered by this privacy policy
Transfers to third countries
If your personal data is transferred to data processors or data controllers established in countries outside the EU/EEA which do not have an adequate level of protection, such transfers will as a main rule be based on the EU Commission’s Standard Contractual Clauses or similar legal transfer grounds and on Kvadrat´s instructions.
Cookies
We use cookies on our websites. Please read more about the use of cookies in our cookie polices, which are available on the relevant Kvadrat group websites.
Security
We have implemented numerous security measures to prevent, for example, the loss and misuse of personal data under our control. Accordingly, we use our best endeavours to protect the quality and integrity of your personal data.
Your rights
• You have the right to access the personal data we process about you
• You have a right of objection towards our collection and further processing of your personal data
• You have the right to have your personal data rectified and deleted, with certain national statutory exceptions
• You have the right to request us to restrict the processing of your personal data
• Under certain circumstances you may also request to receive a copy of your personal data as well as the transmission of your personal data which you have provided us with to another data controller (data portability)
• You may at any point withdraw the consents that you have given. You can unsubscribe from our newsletter by clicking the link at the bottom of the newsletter
5. Questions or complaints
If you have any questions in relation to this privacy policy or if you wish to make a complaint in connection to our processing of your personal data, please contact us on privacy@kvadrat.org. You can also write to us at the following address:
Kvadrat A/S
Lundbergsvej 10
8400 Ebeltoft
Denmark
If your complaint is not resolved by us and you wish to proceed with the case, you can send your compliant to the supervisory authority in your country. A list of European supervisory authorities is available here.
Latest update 8th of October 2024