Privacy Policy

Last updated: 30-01-2024

DATA PROTECTION – GrowGrounds ApS

Welcome to our website. We hope that you find the information you are looking for. When you visit our website, we will process information that can be traced back to you. This also applies if you choose to contact us, e.g. by filling in our application form, or by sending us an e-mail. Here you can read about how GrowGrounds collects and processes your data.

As a general rule, we only process personal data that is relevant and necessary to fulfill the stated purposes, and your data is deleted when it is no longer necessary.

The policy contains the following:

 

  • Your rights
  • In which situations do we process your personal data
  • How we get information about you
  • With whom we may share your information
  • Where your personal data is processed
  • Contact us
  • Amendment

 

According to the current data protection regulation, personal data may only be collected for “specific and legitimate purposes”. The collected information must then not be processed in ways that are incompatible with these purposes. In addition, the data processing must be legally justified, a so-called legal basis. Our processing of your information is based on one or more of the following legal bases:

 

  • processing is necessary for the performance of our contract with you (“Contract”),
  • processing is necessary for us to fulfill an obligation set out in another law (“legal obligation”),
  • processing is necessary for our legitimate interest, unless your interests or rights to data protection take precedence (“balancing of interests”); or
  • in specific cases where you have given your consent to the processing of the relevant information (“consent”).

 

In most cases, the legal basis is determined by a contract, legal obligation or balancing of interests. In certain cases, however, your consent is required, and in such cases, we will ask for your consent to the processing of the personal data in question before the processing begins.

You can always contact us if you have questions about data protection by sending us an e-mail at dataprotection@growgrounds.org.

Your rights

According to the applicable data protection regulation, you have the right to information about when and how we process your personal data. In certain cases, you also have the right to see your information or have it moved, changed or deleted. More information can be found here:

  • Right to access
  • Right to rectification
  • Right to be forgotten
  • Right to restriction of processing
  • Data portability
  • Right to object
  • Complaints
  • Compensation and compensation


Right to access

You have the right to obtain information free of charge about the information we have registered about you. A request for this must be submitted in writing and signed by you. Please note that we only pass on information that we know for sure is yours. We cannot disclose information that violates the rights of others. You must send the request to the address below. Check the “Data protection” envelope.

GrowGrounds ApS

Østergade 17

1100 Copenhagen K

To ensure that the information is not sent to the wrong person, it is sent to your registered address.


Right to rectification

We constantly endeavor to ensure that your personal data is correct and up to date. If we discover incorrect or incomplete information, we will try to correct or remove it.

If the information is corrected at your request, we are obliged to inform those with whom we have shared the information. However, this does not apply if the task is considered impossible or is too great a burden for us. You also have the right to be informed with whom we have shared your information.


Right to be forgotten

If we have collected your personal data, you have the right to request the deletion of your data. We are obliged to delete information in the following cases:

  • If the information is no longer necessary for the purposes for which it was originally collected.
  • If the processing is based on your consent and you withdraw the consent.
  • If the information is used for direct marketing and you object to the processing of the information in this way.
  • If you object to the processing of personal data that takes place after a balance of interests and there is no legitimate reason that outweighs your interests.
  • If the personal data is processed illegally.
  • If deletion is required to comply with a legal obligation.
  • However, if we need the information to fulfill a contract with you, or if there is a legal requirement for us to retain the personal data, we cannot delete it.
  • If the information is deleted at your request, we are obliged to inform those with whom we have shared the information. However, this does not apply if the task is considered impossible or is too great a burden for us. You also have the right to be informed with whom we have shared your information.

 

Right to restriction of processing

In certain cases, you have the right to limited processing of your personal data.

This applies, among other things, to if you believe the information is incorrect and have requested a correction. Here you can ask for limited processing while the information is prepared.

When the restriction ends, you will be informed.


Data portability

In certain cases, you have the right to receive your personal data and use it elsewhere (data portability). We are obliged to facilitate such a transfer of personal data. A condition for data portability is that the recipient processes the personal data with your consent or to fulfill a contract with you, and that this only applies to the personal data you have provided yourself.


Right to object

In certain cases, you have the right to object to our processing of your personal data. The right to object applies when personal data is processed after balancing interests.

If you object to the processing of your personal data, we must respect this, unless we can demonstrate a legitimate interest in processing that overrides your interests, rights and freedoms or if the processing is based on establishing, defending or asserting a legal claim.

You always have the right to object to the processing of your personal data for direct marketing. Such an objection can be raised at any time. If you object to processing for the purpose of direct marketing, the personal data may no longer be processed for such purposes.

Complaints

If you believe that we are processing your personal data in violation of the applicable data protection regulation, please notify us as soon as possible. You can also contact the Danish Data Protection Authority directly and file a complaint.

Datatilsynet (The Data Protection Authority)

Borgergade 28, 5.

1300 Copenhagen K

Tel. +45 3319 3200

Email dt@datatilsynet.dk


Compensation

A person who has suffered damage as a result of a violation of the data protection regulation has the right to receive compensation from the data controller(s) who participated in the processing. The individual can demand compensation from the data controller or the controller or bring a compensation claim to court.

In which situations do we process your personal data

We may process your personal data in the following situations:

  • Contacts and complaints
  • Newsletters
  • Visits to our websites and cookies
  • Social Media
  • Jobs available


We process your personal data, partly to fulfill the contract with you or the organization you represent, but also if, contrary to expectations and our intentions, we have to live up to our obligations, according to the Product Liability Act. In other words, we may have a duty to contact you if there is something wrong with the product you have ordered. When we contact you, we will use the address/phone number/email that you provided at the time of ordering.

So, the legal basis for our processing is fulfillment of contract and legal obligation.

We store your personal data as long as you are registered as a customer with us.

If you do not use our website for a period of 5 years, we will automatically delete the information we have registered about you, however, in order to meet legal requirements, including requirements in accounting legislation (5 years from the end of the financial year) and consumer legislation (2-year right of complaint), can store certain personal data for a longer period.


Customer contact and complaints

If you contact us, we need to be able to identify you as a customer and in many cases we need information about your purchase in order to handle complaints and inquiries. The information we process is the information you give us when you contact us, usually contact information (name, address, e-mail and telephone number).

In the event of a claim from a person, we create a complaint case that contains information about the claim. This usually includes the identity of the claimant, but in certain situations the case also requires processing of the identity of other persons who have an influence on the case.

If the claim relates to one of our employees or one of our partners’ employees, we will often need to identify the claimant to the person to whom the claim relates. If the person making the complaint does not want this information to be disclosed, we will of course respect this. However, it may be impossible to process such a complaint anonymously.

The processes described above are important for us to handle information about the product you have purchased. Our obligation to correct errors may be set out in contracts and/or legislation, including consumer protection rules. The legal basis for processing can therefore be both the fulfillment of a contract and a legal obligation.

From time-to-time telephone calls to our office may be recorded for educational purposes. Information about this will be given before the call is forwarded. Recordings are saved for one month.

If you have a case registered with our customer service, we will save your information for the entire case processing period and for three months thereafter.


Newsletters

If you have provided us with your email address, we may use it to send you a newsletter for marketing purposes or to provide information about our products. Each newsletter will contain instructions on how to opt out of future communications.

If you are a customer, the legal basis for our shipments may be a balance of interests. You may also have given your consent to newsletters at one of our events or by other contact with us or one of our dealers (shops) or cafes. Regardless of the legal basis on which our processing is based, you have the right to reject further e-mails at any time by simply letting us know.

Your e-mail address will be processed for the above purposes until you decline further e-mails. If you choose to unsubscribe from our newsletter, we will immediately remove your information from these e-mail lists.


Visits to our websites and cookies

We use cookies on our websites to collect information and information about visitor behavior patterns. We do this to optimize the user experience and ensure that mandatory functions work as intended. Information is processed without identifying a person.

You can read more about how we use cookies in our cookie policy, which can be found on our website. The legal basis for processing is consent, which you give when you accept cookies when visiting our website, which also states exactly which cookies we use.

If we wish to collect personally identifiable information through our website, we will provide information about this in advance. We will say when we collect information and explain what we will do with it.


Social Media

We use social media such as Facebook, Instagram, LinkedIn, TikTok and YouTube, through which it is partly possible to comment on our page and partly possible to send us a message.

For all mentioned media, comments with personal information are deleted as soon as possible.

Messages sent to us via said social media will be deleted after 3 months and will not be shared with other companies or organizations.

The legal basis for the processing is balancing of interests.


Jobs available

The information you provide us with your job application will only be used to:

  • evaluation of the application
  • to contact you
  • fulfillment of legal requirements


We will not share any of the information you provide during the recruitment process with third parties for marketing purposes. We also do not store your data outside the European Economic Area (EEA).

The information you provide will be stored securely by us and/or our data processor.

The legal basis for processing your personal data, in connection with your application for employment, is therefore consent and/or balance of interests.


What information do we ask for and why?

We do not collect more information than we need to fulfill the given purposes, and we do not store it longer than necessary.

The information we ask for is only used to assess your suitability for employment. You are not required to provide what we ask for, but it may affect your application if you do not.


Application phase

If you apply via our website, your information may be collected by a data processor and/or recruitment agency on our behalf.

We will ask you to share personal information, including name and contact information. We will also ask for your previous experience and education relevant to the job you have applied for.


Use of recruitment agency

If we use a recruitment agency, we will transfer your personal data to them. The recruitment agency must be considered a third party in relation to you. An agreement is drawn up for each recruitment agency to ensure they comply with our procedures and requirements. These agreements mean that they cannot do anything with your personal data that is contrary to our instructions. Nor will they share your personal data with organizations other than us. They are also obliged to store your personal data in a secure manner and for a period that is not longer than we have decided.

If you have questions regarding a recruitment agency’s use of your information, you can contact us at dataprotection@growgrounds.org to obtain information about which subcontractors have processed your information.


How long the information is stored

If we are unable to offer you employment at the end of the recruitment process, we will retain your information for a period of 12 months to maintain our legal basis.


Unsolicited applications

We do not accept unsolicited applications, but you have the option to register via the contact form on our website, so that you receive a notification when we have a vacancy, and you can unsubscribe at any time.

How we obtain information about you

Information that you share with us

We collect information about you in various ways. This can be, for example, when you give us your information yourself, when you contact us. We may collect the following personal data from you:

  • contact information (name, address, e-mail address and telephone number)

 

The information we collect about you

When you contact us or visit our website, we may automatically collect information about you. When you visit our website, we may collect the following personal data:

  • information about how you interact with us (how you use our services, including page response time, download errors, how you have reached and left the service, and delivery notifications when we contact you)
  • information about your computer or mobile device (eg IP address, language settings, browser settings, time zone, operating system, platform and screen resolution)

 

Sensitive information

We do not collect sensitive personal data (information about race or ethnicity, political or religious beliefs, philosophical views, health, trade union affiliation, sexual relations or genetic and biometric data). A CPR number is not sensitive personal data, according to current legislation, but to the extent that we store CPR numbers, we will treat them as confidential information.

Who we may share your information with

To protect your rights, when we share your information with service providers or other business partners, all sharing is done in accordance with written agreements that govern the rights and obligations of the recipient with respect to the processing of your personal information.

We never sell your personal data to third parties unless we have your permission to do so. We also do not share your personal data with third parties to be used for marketing purposes, unless we have received your consent. As with unsolicited emails from us, you have the legal right to object to future marketing emails from third parties to whom we have transferred your personal data, subject to your consent. However, you must contact this third party directly if you wish to object to continued processing of your information for this purpose.

We may share your information with the following parties:

  • Our suppliers
  • Our business partners

 

Our suppliers

We may share your personal data with our suppliers, who in relation to you constitute a third party. In order to perform the services, we purchase or to develop our products and services, our suppliers must in certain situations process your personal data.

In the agreements we enter into with our suppliers, there are clear rules for how your personal data may be used. However, GrowGrounds ApS and the suppliers are separate legal entities. We cannot therefore normally be considered responsible if they do not follow applicable legislation. If you have questions regarding a supplier’s use of your information, you can contact us at dataprotection@growgrounds.org to obtain information about which suppliers have processed your information.

Where will your personal data be processed

We primarily process your personal data in Denmark. Transfer to another EU country may occur.

Contact us

GrowGrounds ApS is registered under CVR number 44096641 and has addresses at Østergade 17, 1100 Copenhagen K. GrowGrounds ApS is the personal data controller for processing your personal data in accordance with this document and complies with Danish data protection legislation.

You can always ask us about how we process your personal data at dataprotection@growgrounds.org.


Amendment

We may need to update this information, for example if we process your information for a new purpose, collect other information or share your information with parties other than those specified in this text. An updated version of this information can always be found here at growgrounds.org/privacy-policy.