Company no.: 38235311
Phone: + 45 97216466 (weekdays from 9am – 3 pm CET)
Your personal data is collected in one or several of below cases, and even though you use your email address in more than one of the above cases, your personal data will only be collected and registered in one place. In this way your information is already stored when you shop at us, and you will not receive the same marketing material from KABOOKI more than once.
The purpose of this is to: make and keep statistics and analytics of the traffic on the website, to optimize the function and the user experience of the website, to make direct marketing and retargeting through for instance Facebook and Google. To improve the website and to show you relevant offers this is necessary.
The legal basis of this processing is the General Data Protection Regulation (hereinafter GDPR) Art. 6.1.f.
We collect the information you actively provide us when making your purchase or when communicating with us regarding our products. This information may include: your name, address, mail, phone number, payment method, the products you purchase or possible return, your requests, complaints, delivery requests and finally the IP address you used when making your purchase on the website.
The purposes of this are: to delivery your order and by that fulfil our agreement with you, to administer your return right and possible warranty and to contact you if we have relevant information about the product you purchased. Other purposes are to comply with relevant laws regarding bookkeeping, accounting and possible recall of products. The IP address is collected to handle our interest in preventing credit card fraud.
The legal basis of this processing is the GDPR Art. 6.1.b, 6.1.c and 6.1.f.
We collect the information you actively provide us when signing up for our newsletter, and this may include your name, mail and possibly your phone number.
The purpose hereof is to fulfil our legitimate interest in sending our newsletter to you.
The legal basis of this processing is your consent and the GDPR Art. 6.1.a.
When you visit one of the Facebook or Instagram profile of KABOOKI, your personal data are being processed after their privacy and cookie policies.
In contrary if you contact us through our Facebook or Instagram page, or if you participate in one of our competitions on Facebook or Instagram, then KABOOKI will process information about your post or name.
The purposes hereof are: to respond to your message, to let you participate in the competition and to contact you if you are the winner.
The legal basis of this processing is to fulfil our legitimate interest in the purposes and the GDPR Art. 6.1.f.
When you are making your purchase online on this web shop and complete payment transactions, this is done through the KABOOKI PCI (Payment Card Industry – Data Security Standard) certified business partner QuickPay. Therefore, your information is stored in a secure PCI certified environment that meets international security standards. It is only KABOOKI’s PCI certified business partner QuickPay – and not KABOOKI – that has access to your payment card information.
Information needed for delivery of your purchase at kabooki.com is transferred to the shipping company used by KABOOKI. Typically, this is PostNord in Denmark or DPD in other countries. This information may include your name, address, phone number, mail, order number and possible delivery request.
Under specific circumstances and with reference to legislation, it might be necessary to transfer information to public authorities or the police. For example, information may be disclosed to the police in case of suspicion of credit card fraud.
Your personal data may be disclosed to external business partners of KABOOKI who deliver services on behalf of KABOOKI. These business partners are data processors, and they only process information on behalf of KABOOKI and in accordance with KABOOKI’s instructions, and they are not allowed to use the information for other purposes than fulfilling the agreement with KABOOKI and they are subject to confidentiality in regards of the information. By that KABOOKI is still the data controller of your personal data, and KABOOKI has entered into written data processor agreements with all data processors that process personal data on behalf of us.
Among other things we use our external business partners to: technical operation of systems, improvements of the website, dispatch of our newsletters, direct marketing and retargeting.
Some of our external business partners, who process data on our behalf, are located in the US. This includes Google Analytics (Google LLC) and ActiveCampaign. Therefore, in some cases your personal data will be transferred to the US. The Commission has decided that the level of protection is sufficient in USA, when companies have acceded to the EU-U.S. Privacy Shield Framework according to GDPR Art. 45. As both business partners have acceded to the EU-U.S. Privacy Shield Framework, the necessary guarantees regarding transferring information to the US are ensured.
For more information about the Privacy Shield Framework, see the official website here.
See a copy of ActiveCampaign’s certification here.
See a copy of Google LLC’s certification here.
If we use other data processors who are located outside the EU, your data will only be transferred under compliance of the necessary transferring guarantees.
In case of reorganization or full or partial sale of the company, any disclosure in such connection will be in accordance with current legislation for the processing of personal data.
As the data controller we here below inform you about your rights, as we wish to ensure fairness and openness about our processing of your personal data.
At any time, you can request us to get access to, among other things: which of your personal data we have registered, for which purposes, which categories of receivers who will receive your personal data and information about from where we got your personal data. Furthermore, you have the right to get a copy of the personal data we process about you. If you wish to get a copy, please contact us at email@example.com. In such a case we will ask you to prove that you are the person you state to be. The right to access applies apart from specific statutory exceptions.
If the personal data we have collected about you have proved inadequate, you have the right to make us rectify them. If you find our information about you inadequate, please contact us so we can make rectification. In such a case we will ask you to prove that you are the person you state to be.
In some cases, you have the right to make us delete, either all or specific, personal data about you. For example, we will delete your personal data if you withdraw your consent, and we afterwards cannot continue the processing on a legal basis. If it according to the law is necessary to keep processing your personal data, it will not be deleted. If you wish to withdraw your consent, please contact us. In such a case we will ask you to prove that you are the person you state to be. At any time, you can unsubscribe from our newsletter by using the link below in the newsletter.
In some cases, you have the right to restrict our processing to storage only. For example if you do not think our information about you is correct.
In some cases, you have the right to get the personal data you have provided us transferred to another data controller than us. In such a case you may get a copy in a structured, commonly used, and machine-readable format.
At any time, you may withdraw the consent you actively have provided us. For example, it could be your consent to receive our newsletters. If you wish to withdraw your consent, please contact us. In such a case we will ask you to prove that you are the person you state to be. You can unsubscribe from our newsletter by using the link below in the newsletter at any time.
You always have the right to complain against our processing of your personal data. To lodge a complaint please contact us by email, telephone or letter as indicated in section 2 above. You may also contact the Data Protection Agency directly via email firstname.lastname@example.org or via phone +4533193200.
In general, we will delete your personal data when we no longer need to process it in relation to one or more of the purposes set out above in section 3.
Information collected about your use of the web shop according to section 3.1 will be deleted at the latest 1 year after you last time visited the KABOOKI.com.
Information collected about you in connection with your purchase at the website according to section 3.2 will normally be deleted at the latest 3 years after the end of the calendar year you made your purchase in. In information can though be stored for longer if our legitimate needs entitle storage for longer. For example, if storage for longer time would be necessary for us to fulfil legal requirements or to decide on, to apply or to defend a legal claim.
Information about you as regarding your returns will be deleted after 5 years according to legislation regarding finance and bookkeeping.
Information you actively have provided us when signing up for our newsletter according to section 3.3 will be deleted when you withdraw your consent according to section 5.3 and 5.7, if we cannot justify saving the information for longer.
Information stored in the history of the KABOOKI Facebook page you can delete by yourself whenever you want.
Information KABOOKI processes about you after your participation in a competition on the SoMe profiles of KABOOKI will be copied into KABOOKI’s own system, and this information will be deleted when the winner is drawn.
We have implemented necessary security measures to ensure that your personal data will not be subject to any unauthorized use or knowledge, and to ensure that it is not changed, forfeited, destroyed, or weakened.
Furthermore, your personal data is only being processed by employees who it is essential for to do their work. These employees are instructed in how to process your information in a responsible way.
Our website contains links to other websites or to integrated sites. We are not responsible for the content of other companies’ websites or for their practices regarding the collection of personal data. When you visit other websites, you should read the owners' policies on the protection of personal data and other relevant policies.