Privacy Policy
1. PURPOSE OF POLICY
1.1. The purpose of the privacy policy is to make you aware of how hummel Cenozoic ApS and DBU A/S (“we”, “us”, “hummel” / “DBU”) process personal data. With this policy we want to inform you which personal that are collected and processed, and as far as possible how long personal data are stored. The privacy policy regards processing of personal data in hummel and DBU, when you enter into contracts, interacts or in any other exchange personal data with us. We will be acting as data controllers for those personal data. There will be a joint controllership between hummel and DBU because these two parties jointly process personal data on the website. You can contact us regarding your processing of personal data by contact detail that you will find below.
2. THE DATA CONTROLLERS FOR YOUR PERSONAL DATA
The joint controllers for the processing of your personal data are:
hummel Cenozoic ApS
CVR-no. 43317032
C/O hummel A/S
Balticagade 20
DK-8000 Aarhus C
Contact us at:
Tlf.: +45 88 70 49 50
E-mail: onlinesupportDK@hummel.dk
DBU A/S
CVR-no. 33396406
DBU Allé 1
DK-2605 Brøndby
Contact us at:
Tlf.: +45 43 26 22 22
E-mail: persondata@dbu.dk
3. WHAT YOUR PERSONAL DATA IS USED FOR
3.1. hummel and DBU process your personal data for one or more specific purposes according to the data protection regulations. We process if you are our customer, business partner, vendor, visit our website or our social media, or if you sign up for our newsletter. As an overriding rule, the information will mostly come directly from you, and we only process your personal data as long as it is necessary to the purpose in which they were collected. However, personal data can in some cases be processed and stored longer for hummel’s legitimate interests in daily operations or in anonymous form.
For more information about the different types of processing that we make, read below.
3.1.1. Cookies and website
During daily operations of our website we collect personal data about you through cookies to improve the experience with the website and to make statistics. Information that we collect through cookies includes your IP-address, type of browser, your operating system, your interaction with advertisements and the websites you visit. You give your consent according to the cookie regulation, but the further processing of your information happens according to our legitimate interests according to GDPR art. 6(1)(f).
We have pixels from social media on our website, which can collect data about you, if you choose to click on the pixels and being send to hummel site on social media. We use pixels from Facebook, Instagram and YouTube. We have a joint controllership with each media. You can read about this below in section 2.1.2 Social media.
You can contact us by sending an email to onlinesupportDK@hummel.dk or call us at +45 88 70 49 50 if you wish to contact hummel and DBU@DBU.dk or +45 43 26 22 22 if it is DBU you wish to contact. In this case, we process your personal data for our legitimate interests in order to respond according to GDPR art. 6(1)(f). We process name, email and information about your request. We discourage you to write any personal data in this box, unless it is relevant to the request.
Personal data that we process through the contact are ongoing deleted and latest 5 years after the latest contact.
3.1.2. Social media
We use some social media; Facebook, Instagram and YouTube to interact with our existing and potential customers and to promote our marketing. If you have visited and “liked” our fan page on the social media or have been in contact with us at the media, we inevitable process your personal data. In this case, we only process information about your name, email and other information collected through cookies from the social media and eventually your purchases if this appears from the context.
If you contact us through social media, we process your personal data according to our interest in contacting and replying to your request (GDPR 6(1)(f)). The information will be collected from you as a data subject as well as the social media where you reached out to us.
We have a joint controllership with the social media platforms that we use, because we have joint purposes in processing your personal data. You can read more about the social medias processing of your personal data in the links below:
- Facebook og Instagram’s processing of your personal here and about the joint controllership here and here.
- YouTubes (Googles) processing of your personal data here.
Personal data that is processed that regards direct communication on social media are deleted immediately after the end of the conversation. Posts on e.g., Facebook pages or in public groups are not deleted due to the public nature of posts and comments. Read more about the public nature of posts etc. here.
3.1.3. Marketing
We only process your personal data for the purpose of marketing if you have given your consent according to GDPR art. 6(1)(a). This purpose can contain receiving newsletters about apparel, footwear, bags, accessories, sports articles, as well as information about the company hummel Cenozoic ApS or hummel’s activities and news about new collections, offers, sale, competitions, and other marketing initiatives. The extent of our processing of your personal data will appear in the specific consent.
We send you marketing by email and on social media (Instagram, Facebook, Twitter, TikTok and Pinterest). For more information about the social media’s processing of your personal data, read section 2.1.3 in this policy.
If you have given your consent to receive marketing material from us, we as a rule only process the following personal data: your name, email, and history of purchases. You can at any time withdraw your consent for marketing purposes by using link in the received newsletter or by sending an email to onlinesupportDK@hummel.dk or call us at +45 88 70 49 50 if you wish to contact hummel and DBU@DBU.dk or +45 43 26 22 22 if it is DBU you wish to contact.
We store documentation for your consent as long as you receive marketing material from us or participate in our marketing, and 2 years after that you have withdrawn your consent due to the limitation deadline for eventual liability that hummel may be accounted for.
3.1.4. Customer relations
Business customer
In connection with wholesale of products to business customers, hummel Cenozoic ApS, hummel A/S or other parts of the hummel group process personal data about business customers’ contacts to pursue its legitimate interests in daily operations according GDPR art. 6(1)(f). This information includes contact information such as name, company name, email, address, phone number and history of purchase and payment details.
Information will be deleted on a continuous basis, at its latest 5 years after a customer relationship has been terminated. Local bookkeeping regulations can extend this period even further.
Private customers
hummel Cenozoic ApS process your personal data as a private customer when you are customer at our E-shop. We process your personal data in connection with sale of products to enter and fulfil a contract with you (GDPR art. 6(1)(b)). These personal data include name, email, address, phone number and history of purchases and payment details.
Information will be deleted on a continuous basis, at its latest 5 years after a customer relationship has been terminated. Local bookkeeping regulations can extend this period even further.
In some cases, we can supplement our information about you with the information that you give us, e.g., information about previous purchases and demographic information as your sex, birthdate, and address for the purpose of profiling, so we can make our marketing efforts as relevant as possible for you. This happens according to our legitimate interest (GDPR art. 6(1)(f)) because we assess that our interest in offering you the best service overrides your interest in not having your non-special categories processed by us. However, you always have the possibility to get an assessment whether you can get access to your data or/ and get them deleted. Read more about your rights in section 4 below.
3.1.5. Vendors and business partners
When we enter contracts with vendors and business partners, we process personal data of the contacts at our partners. This includes information as name, position, phone number, email and if necessary, payment details.
The personal data are either processed, because it is necessary for the performance of the contract with the vendor or business partner (GDPR art. 6 (1)(b)) or because we have legitimate interests in processing the contact’s contact information due to the contract (GDPR art. 6(1)(f)).
We store relevant contact information as long as the business relationship continues. Written correspondences are deleted in a continuous basis, and information that is necessary to fulfil legal obligations according to bookkeeping regulations are stored according to applicable law.
4. Recipients of personal data
4.1. We process your personal data in confidence. However, we can share your personal data, if you have given your consent or we have a legitimate interest and reason to share them.
4.2. We can share your personal with partner and other affiliated companies, including MarkOn A/S and our logistics partners who deliver your goods to you. MarkOn A/S is making sure that the your order is packed and sent to your address.
4.3. We can let vendors/ data processors of systems and the like process personal data on our behalf according to our specific instructions given in the entered data processing agreement.
4.4. Some of our data processors, and the social media mentioned above, is either located or transfers personal data outside EU. If this happens, we have ensured an adequate transfer tool, including the European Commission’s standard contractual clauses regarding transfers of personal data outside EU.
5. YOUR RIGHTS ACCORDING TO GDPR
5.1. When we collect and process personal data about you, you have a set of rights according to the data protection regulation. Your rights include the right of access to information about you, the right to rectification or to be forgotten (erasure), restriction of and objection to our processing, and the right to receive your information in a structured and readable format (data portability).
5.2. The rights mentioned above can be subject to circumscription. Whether you as a data subject can make use of your rights, will be assessed at each individual request.
5.3. If you have given consent to our processing of your personal data, you can at any time withdraw your consent. If you wish to withdraw your consent, you can send an email to onlinesupportDK@hummel.dk or call us at +45 88 70 49 50 if you wish to contact hummel and DBU@DBU.dk or +45 43 26 22 22 if it is DBU you wish to contact.
5.4. If you are not satisfied with our processing of your personal data, you can make a formal complaint to The Data Protection Agency through their website English (datatilsynet.dk) or by calling them at +45 33 19 32 00.
6. DATA CONTROLLERS AND CONTACT INFO
The data controller for the processing of your personal data:
A joint controllership exists between:
hummel Cenozoic ApS
CVR.nr: 43317032
Balticagade 20, 8000 Aarhus C
Denmark
If you have any questions regarding our processing of your personal data, you can contact us at onlinesupportDK@hummel.dk or call us at +45 88 70 49 50
&
DBU A/S
CVR-no. 33396406
DBU Allé 1
DK-2605 Brøndby
If you have any questions regarding our processing of your personal data, you can contact us at persondata@dbu.dk or +45 43 26 22 22
7. CHANGES AND UPDATES
7.1. We reserve the right to update and change these guidelines for processing of personal data. In case of essential changes, we will contact you by email or make an announcement of our website.
7.2. This privacy policy is recently updated 29 August 2023.
