Privacy Policy

1. We are the data controller – how do you contact us?

Aeropak A/S (we, our) is the data controller for the processing of the personal data we have received about you. You can find our contact information below.

Company: Aeropak A/S
Address: Aldumvej 1, 8722 Hedensted
VAT no.: 46 500 911
Phone no.: 75 89 23 55 / 30 53 97 86
Website: Aeropak – Aerosol, vi påfylder dine ønsker
Email: rikke@aeropak.dk

2. The purposes of and legal basis for the processing of your personal data

We process your personal data for the following purposes:

• To fulfill the agreement between us, including delivery, assisting with service delivery, order processing, and related inquiries.
• Handling ongoing correspondence with you as a customer, potential customer, supplier, or potential supplier.
• Processing of other customer inquiries or complaints.
• Use of cookies.

The legal basis for our processing of your personal data is based on:

• Article 6(1)(a) of the General Data Protection Regulation (GDPR) concerning consent.
• Article 6(1)(b) of the GDPR concerning compliance with a contract/agreement in connection with the delivery of services and goods.
• Article 6(1)(f) of the GDPR concerning our legitimate interest in processing other matters such as customer inquiries or complaints. We store necessary cookies with the same legal basis.

Legitimate interests pursued with the processing:
As mentioned above, our processing of your personal data (partially) is based on the balancing-of-interests rule in Article 6(1)(f) of the GDPR. The legitimate interests justifying the processing are our interest in being able to respond to customer inquiries or complaints. Additionally, we need to store necessary cookies for our website to function for the website user.

3. Categories of personal data

We process the following categories of personal data about you:

• Name, position, address, phone number, and email address.
• Customer number and payment information.
• Order number, order history, and similar.
• Other personal data you may have provided to us voluntarily.

4. Recipients or categories of recipients

We take data protection rules seriously, which is why we process received personal data with care and confidentiality.

However, we disclose personal data to data processors who process information according to our instructions. We ensure that data processing agreements are concluded with the data processors before we start processing with them, ensuring that your information is processed lawfully, confidentially, and with the necessary security.

In the event of a legal dispute, we may also be required to disclose your personal information in this context.

Furthermore, disclosure may occur to another advisor, provided under confidentiality, if there is legitimate interest and/or a legal basis for the disclosure.

5. Transfer to recipients in third countries, including international organizations

As a general rule, we do not transfer to recipients in third countries. However, we have data processors who use sub-processors in third countries. As a clear starting point, the transfers are made in accordance with the EU Commission’s standard contractual clauses or by certified companies in the USA under the EU-U.S. Data Privacy Framework. See more here: www.dataprivacyframework.gov

6. Storage of your personal data

We store your personal data for as long as we have a legitimate and lawful purpose for doing so, in accordance with the rules on obsolescence.

We have adopted internal procedures and policies that protect personal data from being destroyed, lost, or altered, from unauthorized disclosure, and from unauthorized access or knowledge.

We have also adopted internal deletion procedures, ensuring that personal data is stored in accordance with data protection rules and rules for the storage of accounting information, etc.

7. Right to withdraw consent

You have the right to withdraw your consent at any time. You can do this by contacting us using the contact information provided above in section 1.

If you choose to withdraw your consent, it does not affect the legality of our processing of your personal data based on your previously given consent and up to the time of withdrawal.

If you withdraw your consent, it will only take effect from that time.

8. Your rights

Under the General Data Protection Regulation, you have a number of rights regarding our processing of information about you. If you wish to exercise your rights, you must contact us.

Your rights are as follows:

• Right of access: You have the right to access the information we process about you, as well as a number of additional information.
• Right to rectification: You have the right to have incorrect information about yourself corrected.
• Right to erasure: In certain cases, you have the right to have information about you deleted before our usual general deletion time occurs.
• Right to restriction of processing: In certain cases, you have the right to have the processing of your personal data restricted. If you have the right to have processing restricted, we may only process the information in the future – except for storage – with your consent or for the purpose of establishing, asserting, or defending legal claims, or to protect a person or important public interests.
• Right to object: In certain cases, you have the right to object to our lawful processing of your personal data. You can also object to the processing of your information for direct marketing purposes.
• Right to data portability: In certain cases, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to have this personal data transferred from one data controller to another without hindrance.

You can read more about your rights in the Danish Data Protection Agency’s guidance on the rights of data subjects, which you can find at www.datatilsynet.dk.

9. Complaint to the Danish Data Protection Agency

You have the right to file a complaint with the Danish Data Protection Agency if you are dissatisfied with the way we process your personal data. You can find the Danish Data Protection Agency’s contact information at www.datatilsynet.dk.