PRIVACY POLICY
Privacy policy
When you visit craft-stones.dk/frontpage, you entrust some information to us. This privacy policy is intended to help you understand what data we collect, why we collect it and what we do with it. This is important, not only to ensure the safety of your personal data, but also to assure you that Craft & Stones meets and complies with the General Data Protection Regulation (GDPR), which entered into force on 25th May, 2018.
The privacy policy concerns the following domain: http://www.craft-stones.dk
What is the General Data Protection Regulation?
Legally, GDPR is an EU regulation which aims to strengthen and unify data protection rules and rights for EU citizens. In other words, it aims to return control of data to users.
Although this is good news for individuals, it creates complex problems for companies.
The new rules apply to all organisations (of any size) that deliver goods and services to the EU and websites that use tracking technologies (such as cookies or tracking pixels) in order to monitor EU users’ behaviour.
In these many cases, data collection, no matter how insignificant, requires valid consent. Under the General Data Protection Regulation, consent cannot be implied or inferred from a person's actions. Valid consent must instead be specific to the data collected and given through a clear confirming action.
1. Personal information – What we collect and why
Craft & Stones offers some website functions, services, applications and tools that are available only through the use of the tracking technologies mentioned below. You always have the option to block, delete or disable these technologies if your browser, your installed application or your device permits it. If you choose to say no to cookies or other similar technologies, you may not be able to use certain website features, services, applications and tools.
Generally, these technologies allow our site, services, applications and tools to save and store the relevant information in your browser or device in order to later identify you in relation to our servers or internal systems. Where appropriate, we protect our cookies and other similar technologies to ensure that only we and/or our authorised service providers can interpret them by assigning them a unique identifier which is designed to only be interpreted by us.
This website collects and uses personal information for the following purposes:
1.1. Google Analytics
We have anonymized your IP address to Google so that you are anonymous to Google when you visit our website.
Like most websites, this site uses Google Analytics (GA) to track user behaviour. We use this data to determine the number of people using our site in order to better understand how they find and use our site and to follow their journey through the website.
Although GA records data such as your geographic location, device, browser and operating system, none of this information will identify you personally, neither to Google or to us. GA only records your IP address anonymously.
GA makes use of cookies, the details of which can be found in Google's development guides. For your information, our site uses analytics.js for the implementation of GA. We have decided not to let visiting history on our website expire.
Disabling cookies in your internet browser prevents GA from tracking your visits to pages on this site.
1.2. Google Tag Manager
We continuously try to improve the customer experience on our website by providing visitors with more personalised and targeted information. To do this, we use Google Tag Manager (GTM).
GTM is a small piece of code that helps us track users’ behaviour on our website and then send the data to our Google Analytics account. Then the data is stored in Google Analytics, allowing us to review and evaluate it in relation to potential improvements and changes to the website.
We consider Google a third-party data processor (see section 2 below).
Learn more about Google Tag Manager here.
1.3 Visits to the website
When you visit our site, we collect the following personal information about you and your use of the website:
- IP address
The aim is to optimise of the user experience and website features and to create targeted marketing, including remarketing via Facebook and Google, etc. This processing of information is necessary for us to manage our interests in improving the site and showing you relevant content.
The legal basis of our processing of your personal data is the balancing of interests rule in the EU General Data Protection Regulation. 6(1)(f).
The information will not be transferred to third countries outside the EU/EEA, and we can access your visiting history permanently through Google Analytics.
1.4. Contact, registration and download forms
If you choose to contact us via our contact form on our website or download "gated content" from our website, the information you enter will be saved and sent in an email via SMTP (Simple Mail Transfer Protocol).
The information in the form will be stored in the database in Dynamicweb (our website database), and will automatically be transferred to our Dynamics 365 CRM system. Afterwards, the data will be connected to an existing account with a similar email or will be registered as a new contact. Data is stored until you specifically request to have it deleted. If data concerns future or existing orders, or is subject to legislation, the information will be stored for at least five years.
The aim is to process your request, and the information will not be transferred to third countries outside the EU/EEA. The information will be stored until you ask us to delete the data from our system.
Our processing of your personal data is based on the balancing of interests rule in the EU General Data Protection Regulation’s Art. 6(1)(f).
1.5. Email newsletter
When you subscribe to our newsletter, we collect the following data:
- Name
- Email address
- Company
The purpose of this is to be able to send you newsletters, and your information will be stored for as long as you want to receive our newsletter.
The information will not be transferred to third countries outside the EU/EEA
If you choose to subscribe to our newsletter via email, the email address that you sign up with will be sent to SendGrid, which ensures that our email does not end up in your spam folder. We consider SendGrid a third-party data processor. In addition to SendGrid, your email will also be stored in the email recipient database in Dynamicweb and in our Dynamics 365 CRM system.
Your email address will remain in our own – and in SendGrid’s – database for as long as we continue to use SendGrid’s services for email marketing, or until you specifically request to be removed from the list. You can unsubscribe via the unsubscribe link in the newsletters we send to you by email. When requesting to unsubscribe via email, please use the email account you used when registering.
For as long as your email address is registered, you will receive periodic newsletters from us via email. Our newsletter will inform you, among other things, about matters relating to new products, guides and other information within our area of business.
Our processing of your personal data is based on the balancing of interests rule in the EU General Data Protection Regulation’s Art. 6(1)(f).
1.6 Cookies
We treat information collected by cookies and other technologies as non-personal information. To the extent that IP addresses or similar identifiers are considered personal information under local law, we treat these identifiers as personal information.
Similarly, to the extent that non-personal information is combined with personal information, we treat the combined information as personal information in accordance with this privacy policy.
If you delete or block cookies, advertisements shown will be less relevant to you and will be shown more frequently. You also risk the website not working properly, and there may be content which you cannot access.
2. Our third-party data processors
We use a number of third parties to process personal data on our behalf. These third parties have been carefully selected, and they all comply with the provisions of the EU General Data Protection Regulation 2018 (GDPR).
Google (privacy policy)
SendGrid (privacy policy)
Dynamicweb (privacy policy)
Hostnordic (IT security)
Microsoft Dynamics 365 (privacy and compliance)
Microsoft Office 365 (privacy statement)
3. Data infringements
If it appears that personal data stored in an identifiable way has been compromised, we will report any illegal data infringement of this website's database or of the databases of any of our third-party data processors to all relevant persons and authorities within 72 hours of the infringement taking place.
4. Data controller
The data controller for this website is: Craft & Stones, a Danish company with the company registration number 39332582 and the following office address:
CRAFT & STONES
Enghavevej 68
1674 København V.
Tel: +45 91 86 29 10
Email: info@crafts-stones.dk
5. Security
We take reasonable measures to protect your personal information on our web platform. The internet is not a 100% secure environment, and we therefore cannot ensure or guarantee the security of, i.a., theinformation you send us through forms on our website, and you should thus not send sensitive personal and/or confidential information to us in emails.
We are always working to improve our security procedures, as the internet is constantly evolving.
6. Right of access and right to be forgotten
You have the right to be given insight into the personal data we hold about you, to correct and update the personal information we hold about you, and to have the personal data we hold about you deleted or anonymized.
In some cases, you also have the right to restrict our processing of your personal data. If you have the right to restrict processing, we will only be allowed to process your data (apart from storing it) with your consent in the future, or with a view to establishing, validating or defending legal claims, or to protect a person or significant public interests. In some cases, you have the right to object to our or otherwise lawful processing of your personal data, and in some cases, you have the right to receive your personal data in a structured, widely used and machine-readable format and to transfer such personal data from one data controller to another without hindrance.
You have the right to withdraw your consent at any time. You can do this online on our website.
Please contact us if you wish to request access to the personal information we hold about you which is stored in our databases or if you want your personal data "deleted" from our databases. As a rule, we delete or anonymize all information that we are not legally required to store, although we reserve the right to store information about the conclusion of the contractual basis, specifications of services and other information about business relationships that may be relevant to the task's performance, solution, result and business relations.
We will respond without undue delay (and always within one month of receipt of your request, although this can be extended in difficult cases).
CRAFT & STONES
Henrik Steffens Vej 2
1866 Frederiksberg
Tel: +45 91 86 29 10
Email: info@crafts-stones.dk
For when a request for access/download is received, we have a dedicated team that aims to answer the question or the request we received. If your question or request is more extensive than that, it may be necessary to obtain more information from you.
7. Questions about our privacy policy
If you have any questions regarding our privacy policy or data processing, or if you wish to complain about a possible infringement of the General Data Protection Regulation, please contact us:
CRAFT & STONES
Henrik Steffens Vej 2
1866 Frederiksberg
Tel: +45 91 86 29 10
Email: info@crafts-stones.dk
For when questions or requests relating to our privacy policy or personal information are received, we have a dedicated team that aims to respond to the question or request. If your question or request is more extensive than that, it may be necessary to obtain more information from you.