Data protection

The webshop ecodiverse webshop on the website ecodiverse.dk CVR number 39622769 based in Denmark processes personal data of the customer to fulfill and further confirm terms and conditions to process electronic orders and shipments and for the necessary communication within a legal deadline.

General provisions

1. The controller of personal data in accordance with the GDPR (hereinafter referred to as "Regulation") is Ecodiverse ApS, CVR number 39622769 based in Denmark (hereinafter referred to as "Controller");

2. The contact details of the Data Controller are: e-mail: ik@ecodiverse.dk, tel.: +4550278537;

3. personal data is any information relating to an identified or identifiable natural person.

Source of personal data

1. The data controller processes personal data obtained with the consent of the customer and collected through the purchase agreement and fulfillment of electronic orders created in the webshop. ecodiverse.dk;

2. The data controller only processes the customer's identification and contact information that is necessary for the fulfillment of the purchase agreement;

3. The Data Controller processes personal data for shipping and accounting purposes and for the necessary communication between the contracting parties during the legal time required by law. Personal data will not be made public and will not be transferred to other countries.

Purpose of data processing

The data controller processes the customer's personal data for the following purposes:

1. registration on the website ecodiverse.dk in accordance with Chapter 4, Section 2 of the GDPR;

2. To fulfill the electronic order created by the customer (name, address, e-mail, telephone number);

3. To comply with laws and regulations arising from the contractual relationship between the Customer and the Data Controller;

4. personal data is necessary for the fulfillment of the purchase agreement. The agreement cannot be concluded without the personal data.

Duration of storage of personal data

1. The Data Controller shall store personal data for the period necessary for the fulfillment of rights and obligations arising from the contractual relationship between the Data Controller and the Customer and for 3 years after the conclusion of the contractual relationship;

2. the Data Controller shall delete all personal data after the expiry of the period required for the storage of personal data.

Recipient and processor of personal data

Third parties that process the Customer's personal data are subcontractors of the Data Controller. The services of these subcontractors are indispensable for the successful fulfillment of the contract for the purchase and processing of the electronic order between the Data Controller and the Customer.

The Data Controller's subcontractors are:

Webnode AG (e-shop system);

Shipping company;

Google Analytics (website analysis);

Rights of the customer

In accordance with the Regulation, the customer is entitled to:

1. the right of access to personal data;

2. the right to rectify personal data;

3. the right to erasure of personal data;

4. the right to object to the processing of personal data;

5. the right to data portability;

6. the right to withdraw consent to the processing of personal data in writing or by e-mail sent to: ik@ecodiverse.dk;

7. the right to lodge a complaint with the supervisory authority in case of suspected breach of the Regulation.

Security of personal data

1. The Data Controller declares to take all technical and organizational measures necessary for the protection of personal data;

2. The Data Controller has taken technical measures to secure data storage spaces, in particular to secure access to the computer with a password, by means of antivirus software and regular maintenance of computers.

Final provisions

1. By creating an electronic order on the ecodiverse.dk website, the Customer confirms having been informed of all the terms and conditions for the protection of personal data and fully accepts them;

2. The Customer accepts these rules by checking the box in the order form;

3. The Data Controller may update these rules at any time. New, updated version shall be published on the website.

These rules enter into force on 24-10-2023