Privacy policy
Anders Barslund – last updated: 28th of January 2021
This privacy policy describes how your personal data may be processed when you use the website, and when you buy goods and services or sign up for my newsletter on the website.
If you have any questions about or comments to this privacy policy, you are welcome to contact me (the data controller):
Anders Barslund
Abildgaardsvej 51
2830 Virum, Denmark
(“I”, “me”, “mine”)
Tel.: (+45) 60 63 40 24
Email: hello@andersbarslund.dk
Purpose, legal basis and storage period
Purchases made on the website
If you buy goods or services on the website, including goods, digital content or subscriptions for digital content, I will process your personal data in order to deliver such goods and services to you, manage payments and administer your user account. For these purposes, I will process the information that you enter on the website, including for instance your name, your contact details, your order details, your account details and other information relating to your user account.
I process this information in order for me to perform a contract, to which you are a party according to Article 6(1)(b) of the General Data Protection Regulation (GDPR).
The data will be deleted three years after the performance of the contract; however, see item 1.4 below.
Queries and support
If you contact me in relation to the products offered on the website, I will process information about your name, your contact details and other information that you provide to me in connection with your query in order to reply to your query.
The processing is based on my legitimate interest in being able to reply to your queries where it is deemed that my legitimate interest in processing the personal data outweighs your interest in not having the data processed; see GDPR Article 6(1)(f).
The data will be deleted three months after your latest query has been replied to or at such time when there is no longer any reason to believe that further correspondence will be necessary.
Marketing
If you sign up for my newsletter, I will process information about your name and email address in order to be able to communicate with you.
The processing is carried out in order for me to send you marketing material in accordance with your consent; see GDPR Article 6(1)(a). You may withdraw your consent at any time by using the contact details provided at the top of this privacy policy. If you withdraw your consent, this will not affect the lawfulness of any prior processing.
The information will be deleted when you withdraw your consent or after a period of 12 months where I have had no communication with you. However, documentation of your consent will be stored for a period of up to five years after the consent has been withdrawn or has expired, and the legal basis for such processing is my legitimate interest in being able to document a prior consent, see GDPR Article 6(1)(f), where it is deemed to override your interest in not having the data processed.
Legal rights and obligations
I process the information included on your invoice for the purpose of fulfilling the legal obligations set out in the Danish Bookkeeping Act concerning the retention of accounting records.
This processing is carried out in order for me to fulfil the legal obligations set out in the Bookkeeping Act; see GDPR Article 6(1)(c).
The information will be deleted after five years as from the end of the financial year to which the information relates.
In addition, I may process the personal data referred to in items 1.1-1.4 in order to establish, exercise or defend my legal rights in connection with a dispute, a complaint or an investigation initiated by a public authority. In such case, the legal basis for my processing is my legitimate interest in processing the data, where it is deemed to override your interest in not having the data processed; see GDPR Article 6(1)(f). The data will be deleted (if there is no other legal basis for retaining the data) when, following a specific assessment, it is deemed that the data is no longer considered necessary for the purposes of the dispute, complaint or investigation.
Transfer of your personal data to third parties
Your personal data may be transferred/disclosed to the following third parties:
Service providers and suppliers assisting in our business activities, including for instance hosting providers and suppliers of IT services.
External advisers.
Other third parties, subject to your consent, or third parties involved in a merger or acquisition involving all or part of my business or its assets.
Your personal data will not be transferred to third parties established outside of the EU/the EEA.
Your rights
In certain circumstances, you have the following rights under data protection law:
Right to access:
You are entitled to request information about or access to your personal data. However, there are exceptions, and you will not always be entitled to receive all the information that we process.Right to rectification:
You are entitled to obtain rectification of incorrect personal data concerning you. You are also entitled to have incomplete personal data completed.Right to erasure:
In certain instances, you are entitled to request the erasure of personal data concerning you.Right to restriction of processing:
In certain instances, you are entitled to obtain restriction of the processing of your personal data.Right to data portability:
You have the right to receive a copy of your personal data in a structured, commonly used and machine-readable format. If technically feasible, you have the right to request that your personal data be transmitted directly to another company or person acting as data controller.Right to object:
You are entitled to object to the processing of your personal data. This means that you can stop or prevent the processing of your personal data. However, this applies only in certain cases, and I am not compelled to stop the processing of your personal data if there are legitimate grounds for continuing such processing.Exercise of rights and the right to complain:
If you wish to exercise the above rights, you are welcome to contact me using the contact details provided at the top of this privacy policy. If you wish to complain about my processing of your personal data, you should contact the Danish Data Protection Agency at www.datatilsynet.dk.