1. OUR ROLE AS DATA CONTROLLER
ECOOKING has developed Danish certified & effective skincare since 2015. Our products are sold on our own website and through our many skilled partners and retailers. In the course of operating our business, we process a range of personal data. We do this so that we can provide you with the best possible service.
We process your personal data in a number of different situations. Read more below about our processing in these different situations.
2. PERSONAL DATA COLLECTED THROUGH COOKIES ON ECOOKING WEBSITES
To ensure that ECOOKING websites function optimally, we place small data files called cookies on your device. A cookie is a small text file stored in the web browser on your computer, smartphone, tablet or whatever else you use to browse the internet when you visit websites.
A wide range of information is collected through cookies. This information is not necessarily personal data in itself. However, the combination of this information can make it personal data. The specific collection depends on whether and to what extent you have consented to cookies.
We always place necessary cookies. They help us make our website usable by enabling basic functions such as page navigation and access to secure areas of the website. The website cannot function optimally without these cookies. The information we collect about you using these cookies includes your preferred settings and choices on our website. It may also include your IP address, including your network location, and information about your computer, device and browser. We collect this information so that we can show you the version of the website that matches your preferences. The information is also used to determine your preferred region and language and to display videos and other visual elements on the website.
If you consent, we may also place statistical and marketing cookies.
Through statistical cookies, we collect information about how you interact with our website, including information about your visit, such as how you access our website, the type of browser you use, how you navigate the website, which pages you visit, the content you view and how often you visit the site. We collect this information to optimise the design and usability of our website and improve its effectiveness. We also use the information to provide you with personalised content and prepare market analyses.
Through marketing cookies, we collect information about your interests, including which pages and advertisements you click on, which products or services you show interest in or purchase on our website and other websites, and which advertisements you view. We do this so that we can show you advertisements relevant to you and your interests.
To show you relevant content and targeted advertisements on our website and other websites, we work with other companies with which we share information.
We load content from third-party websites as part of the user experience. This happens, for example, when our Trustpilot score is loaded. When the content is loaded, your browser sends data to Trustpilot indicating that your browser has visited our website, as well as information about your browser, your operating system, the URL you are visiting and your IP address. In these cases, as a user, you will be subject to Trustpilot's privacy policies (which can be read here).
If you have consented to statistical and marketing cookies, we use third-party technologies to collect data for statistics, analysis and marketing on our channels and to optimise our advertisements outside ecooking.dk. This means that if you consent to statistical and marketing cookies when you visit our website, our partners will receive certain information about you and your use of our website. Our partners use personal data collected on our website to improve their advertising systems and the advertisements you see about our products on our website or on other websites and channels. Our partners will act either as joint controllers or independent controllers. You can read more about our partners' collection and processing of your personal data in their privacy policies, links to which can be found in our cookie overview via the cookie policy on our website.
Some of our partners may be located outside the EU/EEA. These are the following partners:
To the extent that we use partners established outside the EU/EEA, this will take place with valid transfer safeguards in the form of the European Commission's standard contractual clauses, cf. Article 46 of the General Data Protection Regulation, or, for companies established in the USA, as a result of the US company's participation in the EU-U.S. Data Privacy Framework programme (DPF). You can see a list of US companies enrolled in the DPF here. If you would like more information about the basis for our transfers, you are welcome to contact us.
Our basis for processing (including disclosure of) the personal data we collect through necessary cookies is our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation). For information collected through statistical and marketing cookies, our basis for processing (including disclosure of) your personal data is your consent (Article 6(1)(a) of the General Data Protection Regulation and section 3 of the Danish cookie order). You can withdraw your consent at any time via the cookie overview on our website or by deleting cookies in your browser.
Personal data is retained for the period necessary to fulfil the purpose of the processing. You can read more about the retention periods for the different types of information in our cookie overview via the cookie policy on our website.
You can find our cookie policy here.
3. INFORMATION YOU PROVIDE TO US IN CONNECTION WITH PURCHASES ETC.
When you purchase a product from us as a private individual or communicate with us about products you have purchased, you provide us with a range of information.
The information you provide to us may include your name, address, email address, telephone number, payment method, information about which products you purchase and may have returned, information about enquiries and complaints, delivery preferences and the IP address from which an order is placed if the order is placed via our website.
We also process data you provide to us in connection with your use of our website, for example when you complete a contact form or create a profile, including your name, telephone number/mobile number, email address and other information you provide to us in free-text fields.
We use an AI-based chatbot (provided by Flyweight GmbH, Germany) to answer enquiries on our website. When the chatbot is used, information from the conversation and technical information, including the IP address, are processed to the extent necessary to answer the enquiry. If an enquiry requires a search of our systems (for example, order status) or personal assistance, the chatbot will ask you to complete a separate form with relevant information, such as an order number, postcode or contact details. This information is used solely to handle your enquiry (for example, by looking up information in Shopify) and is not used to train the AI model used.
Personalisation and recommendations: We process information about your preferences, needs and choices, including answers you provide in our digital tools and relevant information about your shopping basket, customer profile and previous purchases. We use the information to personalise your experience, remember your choices and recommend products and care routines that suit you. The information may be linked to your shopping basket or customer profile and used on subsequent visits. Processing takes place when necessary to provide a service you have requested as part of an agreement with us (Article 6(1)(b) of the General Data Protection Regulation), or on the basis of our legitimate interest in offering relevant product guidance and personal recommendations (Article 6(1)(f)). We retain the information for as long as it is relevant to the purpose, taking into account your use of our website and customer profile, and delete it when it is no longer necessary. You can request access to, rectification or deletion of your information and object to processing based on our legitimate interests by contacting us.
The purpose of our processing is to enable us to deliver the products you have ordered and otherwise fulfil our agreement with you, including administering your user profile or your rights to return products and make complaints, and to contact you if necessary.
We may also process information about your purchases to comply with legal requirements, including those relating to product withdrawals and bookkeeping. When you make a purchase on our website, the IP address is collected for the purpose of pursuing our interest in preventing fraud.
When you purchase an item, your name, address, email, telephone number, order number and specific delivery preferences will be disclosed to the carrier responsible for delivering the purchased items to you. When you complete payment transactions on our website, this takes place through our partner. When you use a payment card on our website, only our partner – and not us – has access to your card details.
Our basis for processing your information is our agreement with you concerning (1) the purchase of products, (2) the creation of a user profile or (3) our contacting you (Article 6(1)(b) of the General Data Protection Regulation), or our legal obligation to comply with legal requirements concerning withdrawals and bookkeeping (Article 6(1)(c) of the General Data Protection Regulation) and our legitimate interest in preventing fraud (Article 6(1)(f) of the General Data Protection Regulation).
Information collected in connection with your purchases and enquiries to us will generally be deleted 5 years after your purchase. We retain the information for this period to meet your or our legitimate needs, for example to ensure your right to make a complaint about the item, comply with invoicing requirements and accounting legislation, use the information where necessary to establish, exercise or defend legal claims, or retain it where necessary for us to comply with other legal requirements.
4. RECIPIENTS OF OUR NEWSLETTER AND OTHER MARKETING
We may send marketing material to you by email, SMS or another electronic channel, either (1) when we have obtained your consent to do so, where required under the rules of the Danish Marketing Practices Act, or (2) when we receive your email address in connection with your purchase of our products and you have had the opportunity to opt out of marketing.
We process your information to send marketing about our company and products and to register and administer you as a marketing subscriber. We use information about your preferences and use to understand how our customers respond to our marketing and to improve marketing to you and our other customers.
When you receive marketing from ECOOKING, we process information about your name, email address and/or telephone number. If you have accepted marketing cookies, we may also process information about your marketing or communication preferences and your use of the marketing we send you (including, for example, whether you have opened an email from us, whether the email has been read, which links you have opened or whether you have interacted with our SMS).
When you subscribe to the ECOOKING newsletter or SMS marketing, you give ECOOKING consent to process your personal data (Article 6(1)(a) of the General Data Protection Regulation and section 10 of the Danish Marketing Practices Act) solely for the purpose of receiving newsletters and marketing material. You can withdraw your consent at any time by unsubscribing via the link in emails or by replying STOP to an SMS. Your information will then be deleted unless we have another lawful basis allowing us to continue processing the personal data.
When you receive our newsletter or SMS marketing because you have purchased products from us, we process your personal data on the basis of our legitimate interest (Article 6(1)(f) of the General Data Protection Regulation).
Information about you is deleted if you unsubscribe from marketing from us.
5. VISITORS TO OUR SOCIAL MEDIA PROFILES
When you visit Austrailian Bodycares pages on social media (Facebook, Instagram, Youtube, Snapchat, TikTok and LinkedIn), we may process the information you have made available through settings on our social media, your reactions to our posts, your sharing of them and comments on our posts.
When you participate in live events and provide comments during the event, we collect your comments, which will be visible at the event.
The legal basis for our processing of your personal data is our legitimate interest in marketing ourselves through our presence and meeting you as a customer on the social media you use (Article 6(1)(f) of the General Data Protection Regulation).
When you use the social media mentioned, the social media platforms process your personal data collected via our pages for their own use, for example to improve their advertising systems. You can read more about the processing of personal data that takes place on each social media platform in their respective privacy policies, which you can find on the social media platform's website.
Information you provide on our social media pages will generally remain on those pages as part of the page history unless you delete it yourself.
6. INFORMATION ABOUT BUSINESS CONTACTS
When you are a business customer or potential business customer of ECOOKING or a contact person at one of ECOOKING's business customers or potential business customers, ECOOKING processes personal data about your name, company name, company address, work telephone number/mobile number, email address, title, your purchases, payment information, as well as information from publicly available sources and other information you provide to us.
We process personal data for the purpose of fulfilling agreements with our business customers, delivering services, invoicing, compiling statistics and carrying out quality management, as well as maintaining our customer records and providing general service, marketing and sales to our business customers and potential business customers.
When you are a partner or supplier to ECOOKING or a contact person at a partner or supplier, we also process information about your name, company name, business address, work telephone number, email address and title, as well as publicly available information and other information you provide to us.
We process the information for contract management and to receive goods and services from our suppliers and partners and, where relevant, to fulfil agreements with our customers. We may supplement the information described above with information from other sources. This may be publicly available information, including information we obtain through generally accessible sources.
Our basis for processing is our legitimate interests in fulfilling agreements with our business contacts and marketing ourselves to relevant business contacts (Article 6(1)(f) of the General Data Protection Regulation).
Information from business contacts is retained for as long as it is relevant to existing or potential business relationships and for a subsequent period for as long as necessary to document the relationship, including agreements etc.
7. OTHER GENERAL PURPOSES FOR PROCESSING DATA
ECOOKING may also process information we have collected for the purposes described above to comply with laws and regulations to which ECOOKING is subject in connection with the operation of our business or to fulfil various reporting or disclosure obligations under applicable laws and regulations (Article 6(1)(c) of the General Data Protection Regulation).
If ECOOKING sells all or part of our business or sells or transfers our assets or is otherwise involved in a merger or transfer of all or a substantial part of our business, ECOOKING may transfer your information to the party or parties involved in the transfer as part of that transaction, where permitted by law (Article 6(1)(f) of the General Data Protection Regulation).
Finally, ECOOKING may process your personal data to enforce or defend our or a third party's legal rights or legitimate interests where this is necessary, justified and proportionate (Article 6(1)(c) of the General Data Protection Regulation).
8. SHARING INFORMATION WITH DATA PROCESSORS
As part of operating our business, we share the personal data we process with various data processors. These may be processors that provide parts of our IT systems, host our servers, etc.
The data processors act solely on our instructions and in accordance with a data processing agreement entered into between us and them.
In connection with our processing of your personal data, we may in some cases transfer the information to countries outside the EU/EEA. Data protection legislation in these countries may be less stringent than in Denmark and the rest of the EU/EEA. For certain countries, however, the European Commission has determined that the level of data protection is equivalent to the level of protection in the EU/EEA.
To the extent that we use data processors established outside the EU/EEA, this will take place with valid transfer safeguards in the form of the European Commission's standard contractual clauses, cf. Article 46 of the General Data Protection Regulation, or, for companies established in the USA, as a result of the US company's participation in the EU-U.S. Data Privacy Framework programme (DPF). You can see a list of US companies enrolled in the DPF here. If you would like more information about the basis for our transfers, you are welcome to contact us.
9. DATA INTEGRITY AND SECURITY
It is our policy to protect personal data by taking adequate technical and organisational security measures.
We have implemented security measures intended to ensure data protection for all personal data we process. We regularly conduct internal reviews of the adequacy of and compliance with policies and measures.
10. YOUR RIGHTS
As a data subject, you have a number of rights under the General Data Protection Regulation. If you wish to exercise your rights, please contact us.
You can withdraw any consent at any time. You can do so by sending us an email (see email below). Withdrawal of your consent will not have any negative effect. However, it may mean that we cannot fulfil specific requests from you in the future.
Withdrawal of your consent will not affect the lawfulness of processing based on consent before it is withdrawn. Nor will it affect any processing carried out on another lawful basis.
Withdrawal of your consent will not affect the lawfulness of processing based on consent before it is withdrawn. Nor will it affect any processing carried out on another lawful basis.
There may be conditions or limitations on your rights depending on the specific circumstances of the processing activity.
11. CONTACT DETAILS
If you have any questions or complaints about our processing of your personal data, you can contact ECOOKING here:
ECOOKING A/S
Trævænget 14
5492 Vissenbjerg
CVR no. 34226261
Email info@ecooking.dk
Below you can find contact details for your national data protection authority:
The Austrian Data Protection Authority - www.dsb.gv.at/
The Croatian Personal Data Protection Agency – www.azop.hr
The Czech Office for Personal Data Protection – www.uoou.gov.cz
The Danish Data Protection Agency – www.datatilsynet.dk
The Data Protection Authority of the Faroe Islands - www.dat.fo
The Dutch Data Protection Authority - www.autoriteitpersoonsgegevens.nl
The Finnish Office of the Data Protection Ombudsman – www.tietosuoja.fi
The French Data Protection Authority - www.cnil.fr
The German Federal Commissioner for Data Protection and Freedom of Information - www.bfdi.bund.de
The Icelandic Data Protection Authority - www.personuvernd.is
The Information Commissioner of the Republic of Slovenia - www.ip-rs.si
The Italian Data Protection Authority - www.garanteprivacy.it
The Lithuanian State Data Protection Inspectorate www.vdai.lrv.lt
The Maltese Information and Data Protection Commissioner – www.idpc.org.mt
The Norwegian Data Protection Authority – www.datatilsynet.no
The Polish Data Protection Authority - www.uodo.gov.pl
The Spanish Data Protection Authority - www.aepd.es
The Swedish Data Protection Authority - www.datainspektionen.se
The Swiss Federal Data Protection and Information Commissioner - www.edoeb.admin.ch/edoeb/en/home.html
12. UPDATES
We continually review and update our privacy policy. It is therefore a good idea to keep up to date. At the top, you can see when the privacy policy was last updated. The latest version will always be available on our websites.