Source: https://www.grandervand.dk/privacy-policy
Timestamp: 2019-04-23 17:06:35+00:00

Document:
We collect and use our users’ personal data only to the extent that is required to provide a functional website and our content and services. Our users’ personal data are lawfully collected and processed only after obtaining the consent of the respective user. Exceptions apply to cases where obtaining prior consent is not possible due to factual reasons and data processing is permitted by legal stipulations.
In cases where we obtain the data subjects’ consent to process personal data, Art. 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
For processing personal data that are required for performing a contract into which the data subject has entered, Art. 6(1)(b) of the GDPR serves as the legal basis. This also includes processing operations required to implement pre-contractual measures.
In cases where processing personal data is necessary to fulfill our company’s legal obligations, Art. 6(1)(c) of the GDPR serves as the legal basis.
If vital interests of the data subject or another natural person require personal data processing, Art. 6(1)(d) of the GDPR serves as the legal basis.
In cases where data processing is necessary to protect legitimate interests of our company or a third party and where the interests as well as the fundamental rights and freedoms of the data subject do not outweigh the mentioned interests, Art. 6(1)(f) of the GDPR serves as the legal basis.
The data subjects’ personal data will be erased or made unavailable as soon as the purpose of the storage expires. Personal data may be retained if required by European or national legislation in the form of EU regulations, laws, or other provisions the controller is subject to. Data will also be erased or made unavailable if the storage period stated in the above-mentioned rules expires unless continuing the retention of the data is required for the conclusion or fulfillment of a contract.
Whenever a user visits our website, our system automatically collects data and information on the system of the calling computer.
The data are also stored in our system’s log files. This does not apply to the user’s IP addresses and other data that would make it possible to connect the stored data with a user. This kind of data and other personal data of the user are not stored.
Art. 6(1)(f) of the GDPR is the legal basis for the temporary retention of data.
The temporary retention of a user’s IP address by the system is required to deliver the website to the user’s computer. For this purpose, it is necessary to retain the user’s IP address throughout the entire session.
This purpose constitutes our legitimate interest in data processing pursuant to Art. 6(1)(f) of the GDPR.
The data will be erased as soon as they are no longer required to fulfill the purpose for which they were collected. This means that data collected for providing the website will be erased when the respective session expires.
Collecting data for providing the website and retaining them in log files is obligatory for operating the website. Therefore, the user does not have the option to object to this procedure.
Art. 6(1)(f) of the GDPR serves as the legal basis for personal data processing using technically necessary cookies.
Art. 6(1)(a) of the GDPR serves as the legal basis for personal data processing using cookies for analysis purposes if the respective user’s consent has been obtained.
We use analytical cookies to improve the quality of our website and its content. Analytical cookies tell us how the website is used, allowing us to continuously improve our services.
These purposes constitute our legitimate interest in personal data processing pursuant to Art. 6(1)(f) of the GDPR.
To be able to process the data, we obtain your consent during the subscription process and refer to the present privacy statement.
Data collected for the purpose of providing the newsletter will not be disclosed to third parties. The data will be used exclusively for providing the newsletter.
Art. 6(1)(a) of the GDPR serves as the legal basis for data processing following the subscription to the newsletter if the respective user’s consent has been obtained.
We collect the user’s email address to deliver the newsletter.
Other personal data collected in the course of the subscription process are used to avoid the misuse of our services or the respective email address.
The data will be erased as soon as they are no longer required to fulfill the purpose for which they were collected. This means the user’s email address will be retained for the duration of an active subscription to the newsletter.
The user may cancel his or her subscription to the newsletter at any time. Every newsletter contains a link for this purpose.
The link also offers the possibility to withdraw the consent to the retention of the personal data collected during the subscription process.
The data collected in this context will not be shared with third parties. They will be used exclusively for handling communication with you.
Art. 6(1)(a) of the GDPR serves as the legal basis for data processing with the user’s consent.
Art. 6(1)(f) of the GDPR serves as the legal basis for processing data transmitted by a sent email. If it is the intent of the communication via email to enter into a contract, Art.6 (1)(b) of the GDPR will additionally apply.
The reception of an email constitutes a legitimate interest in processing data for us.
The data will be erased as soon as they are no longer required to fulfill the purpose for which they were collected. This means that personal data transmitted via email will be deleted after the conversation with the user has ended. The conversation will be considered ended when the circumstances suggest that the respective matter has been fully resolved.
The user may at any point withdraw his or her consent to the processing of the personal data. A user may at any time object to the retention of his or her personal data by sending us an email. In such a case, the conversation cannot be continued.
All personal data collected when the conversation was initiated will be erased in such a case.
The data are disclosed to above-mentioned parties to fulfill a contract into which the user has entered or to implement pre-contractual measures. Therefore, Art. 6(1)(b) of the GDPR serves as the legal basis for data processing.
The collected data are necessary to fulfill a contract. The data collected are also required to identify the user and ensure an orderly delivery of the requested goods.
The data will be erased as soon as they are no longer required to fulfill the purpose for which they were collected.
This means that data collected in the registration process required for fulfilling a contract or implementing pre-contractual measures will be erased as soon as the data are no longer needed for performing the contract. It may be necessary to retain personal data even after the conclusion of a contract in order to fulfill contractual and legal obligations.
As a user you have the right to terminate your registration at any time. You may at any time request rectification of your personal data.
Data necessary to fulfill a contract or implement pre-contractual measures may only be erased if the erasure does not violate contractual or legal obligations.
Our website uses social plug-ins. The social plug-ins on our website are deactivated by default. Data will only be transmitted to the respective social network by clicking and thus activating the social plug-in. The activation of the social plug-in ends when your cookies are deactivated or deleted.
Following activation, a direct connection to the server of the respective social network is established. The content of a button will then be transmitted directly from the respective social network to your browser, which in return incorporates the content into the website.
After activating a button, the respective social network will be able to collect data, regardless of whether or not you interact with the button. If you are logged in to a social network, it is able to link your visit of our website to your account. If you are registered to a social network and do not want the data collected when visiting our website to be added to your account data, you have to log out of the respective network before activating the buttons.
The scope of data collected by social networks through their buttons is beyond our sphere of influence. For information on the purpose and scope of the data collected, processed, and used by social networks as well as on your respective rights and options regarding your privacy settings, please refer to the privacy statements of the respective social networks.
Our website features plug-ins of the social network Facebook, Inc., 1601 South California Avenue, Palo Alto, CA 94304, USA. Facebook plug-ins on our website are marked with the Facebook logo or the Like button. An overview of all Facebook plug-ins can be found here: http://developers.facebook.com/docs/plugins/.
When activating the plug-in, a direct connection between your browser and the Facebook server will be established. As a result, Facebook will receive the information that you have visited our website using your IP address. By clicking Facebook’s Like button while logged in to your Facebook account, you will be able to link content of our website to your Facebook profile. This enables Facebook to link the visit of our website to your account. We draw your attention to the fact that we as the operator of the website have no knowledge of which data are transmitted to Facebook and how they are used. For further information regarding this topic, please refer to Facebook’s data policy: https://www.facebook.com/policy.
If you do not want Facebook to link the visit of our website to your account, please log out of your Facebook account before visiting our website.
You can share information worldwide with the Google +1 button. Via the Google +1 button, you and other users receive personalized content from Google and its partners. Google saves the information that you marked content with +1 as well as information about the website you were viewing when you clicked the +1 button. Content marked by you with +1 may appear to others as a notice together with your account name and photo used for Google services, such as in search results or your Google profile, or elsewhere on websites and in advertisements on the internet.
Google records information about your +1 activities to improve Google services for you and other users. To be able to use the Google +1 button, you require a public Google profile visible worldwide which at least includes your account name. This name will be used across all Google services. In some cases, this name may replace another name you used when sharing content via your Google account. The identity of your Google profile may be displayed to others who know your email address or other identifying information about you.
Our website features plug-ins of Twitter, Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA. When you use Twitter and the Retweet function, websites visited by you will be added to your Twitter account and disclosed to other users. Data will also be transmitted to Twitter.
You can change your privacy settings within your account settings: http://twitter.com/account/settings.
The user may withdraw his or her consent at any time. The user has the option of deactivating the social plug-ins and deleting his or her cookies.
We use said functions to analyze website usage and for remarketing purposes. These purposes constitute our legitimate interest pursuant to Art. 6(1)(f) of the GDPR.
You can prevent your browser from installing and saving cookies by changing the respective browser settings. However, we would like to point out that you might not be able to fully use all functions of this website in such a case.
You can, moreover, prevent the collection of data generated by cookies and related to your usage of this website (incl. your IP address) and the processing of said data by Google by downloading and installing the browser plug-in available on the following website: https://tools.google.com/dlpage/gaoptout?hl=en.
As an alternative to the browser plug-in, you can click this link to prevent future detection by Google Analytics on this website. When you click this link, an opt-out cookie will be placed on your terminal device. If you delete your cookies, you will have to click the link again.
With your consent, our website uses the conversion tracking pixel service of Facebook, Inc., 1601 South California Avenue, Palo Alto, CA 94304, USA. It allows us to track actions of our users after they have been redirected to our website by clicking a Facebook ad. This way, we are able to record the effectiveness of Facebook ads for statistic and market research purposes. The data collected remain anonymous. This means that we do not have access to the individual users’ personal data. Instead, collected data are retained and processed by Facebook. We are advising you on this matter according to the information currently at our disposal. Facebook can connect these data with data of your Facebook account. Facebook uses the data for its own advertising purposes pursuant to its data policy: https://www.facebook.com/about/privacy/.
Facebook conversion tracking also allows Facebook and its partners to show you ads on and outside of Facebook. For these purposes, cookies will be saved to your computer.
Please click here to withdraw your consent: https://www.facebook.com/ads/website_custom_audiences/.
This website uses the ‘Custom Audiences’ retargeting function of Facebook, Inc., 1601 South California Avenue, Palo Alto, CA 94304, USA. When you visit our website, a direct connection between your browser and the Facebook server is established via the retargeting tags. As a result, Facebook will receive the information that you have visited our website with your IP address. This enables Facebook to link the visit of our website to your account. We can use the information collected in this way for displaying Facebook ads. We draw your attention to the fact that we as the operator of the website have no knowledge of which data are transmitted to Facebook and how they are used. For further information regarding this topic, please refer to Facebook’s data policy: https://www.facebook.com/policy.
We use these tools to analyze website usage patterns and for promotional activities, which are, among other things, necessary to finance our website. These purposes constitute our legitimate interest in data processing pursuant to Art. 6(1)(f) of the GDPR.
You have the right to be informed whether or not your personal data are transferred to a third country or to an international organization. In this context, you can demand to be informed of the appropriate safeguards pursuant to Art. 46 of the GDPR relating to the transfer.
You have the right to obtain from the controller rectification and/or completion if the processed personal data concerning you are incorrect or incomplete. The controller is obligated to carry out the rectification without undue delay.
You contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data.
The controller no longer needs the personal data for the purposes of the processing, but you require them for the establishment, exercise, or defense of legal claims.
You have objected to processing pursuant to Art. 21(1) of the GDPR, and the verification whether the legitimate grounds of the controller override your grounds is still pending.
Where processing of personal data concerning you has been restricted, such data may, with the exception of storage, only be processed with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the EU or a member state.
If the processing has been restricted on above-mentioned grounds, you will be informed by the controller before the restriction of processing is lifted.
You withdraw your consent on which the processing is based according to Art. 6(1)(a) or Art. 9(2)(a) of the GDPR and there is no other legal ground for the processing.
You object to the processing pursuant to Art. 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21(2) of the GDPR.
The personal data concerning you have to be erased for compliance with a legal obligation in EU or member-state law to which the controller is subject.
The personal data concerning you have been collected in relation to the offer of information society services referred to in Art. 8(1) of the GDPR.
Where the controller has made personal data concerning you public and is obligated pursuant to Art. 17(1) of the GDPR to erase the data, the controller, taking account of available technology and implementation costs, will take reasonable steps, including technical measures, to inform controllers processing the personal data that you as a data subject have requested the controller to erase any links to or copy or replication of those personal data.
If you have asserted your right to rectification, erasure, or restriction of processing against the controller, the controller is obligated to communicate any rectification or erasure of personal data or restriction of processing to every recipient to whom the personal data concerning you have been disclosed, unless this proves impossible or involves disproportionate effort.
In exercising this right to data portability, you also have the right to have the respective personal data transmitted directly from one controller to another where technically feasible. This right must not adversely affect the rights and freedoms of others.
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you based on Art. 6(1)(e) or (f) of the GDPR, including profiling based on those provisions.
The controller will no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights, and freedoms or unless processing is carried out for the establishment, exercise, or defense of legal claims.
If personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
You have the right to withdraw your declaration of consent under data protection law at any time. A withdrawal of consent does not prejudice the lawfulness of the processing that had been carried out based on the consent before it was withdrawn.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or significantly affects you in a similar way.
However, those decisions must not be based on special categories of personal data referred to in Art. 9(1) of the GDPR, unless Art. 9(2)(a) or (g) of the GDPR applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.
In the cases referred to in (1) and (3), the data controller will implement suitable measures to safeguard your rights and freedoms and legitimate interests, including at least the right to obtain human intervention on the part of the controller, to express your point of view, and to contest the decision.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work, or place of the alleged infringement if you consider that the processing of personal data concerning you infringes the stipulations of the GDPR.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6

Art. 6
 Art. 6

Art. 6

Art. 6
 Art. 6

Art. 6

Art. 6

Art. 6
 Art.6
 Art. 6
 Art. 6
 Art. 6
 Art. 46
 Art. 21
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 8
 Art. 17
 Art. 6
 Art. 9
 Art. 9