Privacy policy
This page explains what personal data we keep, why, and your rights.
Data controller
Karrosseriet, CVR 12345678
Eksempelvej 1, 1234 Eksempelby
E-mail: info@karrosseriet.dk
What we keep and why
- When you order: name, e-mail, phone number (if given), delivery address and what you bought. We use it to deliver, to send the order confirmation and updates about the order, and to handle returns and complaints. The basis is our agreement with you (GDPR art. 6(1)(b)) and the Danish Bookkeeping Act (art. 6(1)(c)).
- When you write to us through the contact form: name, e-mail and your message, so we can answer (our legitimate interest, art. 6(1)(f)).
- Payment: card details are entered at QuickPay and never reach us. We only keep the payment's number and status.
We don't use your data for marketing and never sell it.
Who receives the data
- QuickPay and the card acquirer, when you pay.
- The carrier delivering the parcel (name, address, phone and e-mail).
- Our hosting and e-mail providers, which store data on our behalf (data processors).
How long
Orders and invoice data are kept for 5 years from the end of the financial year, as the Bookkeeping Act requires. Contact form messages are kept as long as needed to answer them.
Cookies
We only use cookies the shop needs to work, so no consent is required:
- sid: remembers your shopping cart (30 days).
- lang: remembers whether you read the site in Danish or English (1 year).
- car: remembers the car you chose, to show parts that fit (1 year). Forget the car with × next to "My car".
We use no statistics or advertising cookies, and the site loads nothing from other services while you shop; only when you pay are you sent to QuickPay.
Your rights
You have the right to access the data we hold about you, to have it corrected, erased or restricted, to object, and to receive your data (data portability). Write to info@karrosseriet.dk. Data we must keep under the Bookkeeping Act can only be erased once that period has ended.
Complaints
You can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, datatilsynet.dk.