Privacy policy
PERSONAL INFORMATION
On this page you can read about our personal data policy, which describes how Crystal Rainbow collects and processes information about you.
The personal data policy applies to both personal data that you submit to us and information that we collect via the Crystal Rainbow webshop.
Crystal Rainbow is the data controller for your personal data.
Below you will find the personal data we collect.
We also describe the purpose of the collection and the legal basis for the processing.
1.WHAT PERSONAL INFORMATION DO WE COLLECT, FOR WHICH PURPOSE AND WHAT IS THE LEGAL BASIS FOR THE PROCESSING ?
When you visit crystalrainbow.com
When you visit crystalrainbow.com, we automatically collect information about you and your use of the webshop. We register e.g. which type of browser you use, which search terms you use, your IP address, including your network location and information about your computer. The collection has no other purpose than to optimize the user experience and functions on dk.skallstudio.com, just as we use the information to target our marketing on various channels, for example Google Adwords. It helps us to offer our users the most relevant content. The legal basis for the processing is the EU Personal Data Regulation, art. 6, subsection 1, letter f.
When you shop at crystalrainbow.com
When you purchase a product or communicate with us on crystalrainbow.com, we collect the information you provide yourself. This can be name, address, e-mail address, phone number, payment method, information about which products you buy and possibly have returned, delivery requests, and information about the IP address from which the order was made.
To shop online at Crystal Rainbow, you must provide at least the following:
Name, address, email address and telephone/mobile number.
The purpose is to deliver the products you have ordered and otherwise fulfill our agreement with you, including to be able to manage your rights to return and advertise. We can also process information about your purchases to comply with legal requirements, including for bookkeeping and accounting.
When making a purchase, the IP address is collected for the purpose of preventing fraud.
The legal basis for the processing is the EU Personal Data Regulation, art. 6, subsection 1, letters b, c and f.
Newsletters
If you sign up for our newsletter, we collect information about your name, e-mail address and possibly mobile number. The purpose is to enable us to deliver newsletters to you. The legal basis for the processing is the EU Personal Data Regulation, art. 6, subsection 1, letter f.
2. RECIPIENTS OF PERSONAL INFORMATION
Recipients of Personal Information
Information about your name, address, e-mail, telephone number as well as order number and specific delivery wishes is passed on to the carrier responsible for the delivery of the purchased goods to you. When purchasing non-stock items, the mentioned information can be passed on to the manufacturer or seller of the item in question, who will then take care of the delivery.
Information can be left to external partners who process the information on our behalf. Collaborators may not use the information for any purpose other than fulfilling the agreement with us, and are subject to confidentiality regarding this.
3. YOUR RIGHTS
At any time, you have the right to ask us to be informed of what information we have registered about you, for what purpose, who has received it, and where the information comes from.
If you wish, we will provide a copy of the personal data that we process about you. You can ask for the information by sending a written request to info@crystalrainbow.com. In this connection, we may ask you to document that you are the person you say you are.
The right to rectification
We correct incorrect personal data for you. If you have become aware of errors in the information that we have registered about you, please contact us in writing, after which we will correct the information.
The right to erasure
Cases may arise where you have the right to have all or parts of your personal data deleted by us. However, not in the event that your information is necessary for us, for example to comply with legal obligations.
The right to restrict processing to storage
There may also be cases where you have the right to have the processing of your personal data limited to storage only. For example, if you believe that the information is incorrect.
The right to data portability
In certain cases, you have the right to have your personal data delivered in a structured format that enables you to transfer the data to another data controller.
The right to object
You can always object to our processing of your personal data that is used for marketing purposes. If your personal situation makes it necessary to object to our processing of your personal data, you also have the right to do so at any time.
The right to withdraw consent
You are at any time within your right to revoke a consent you have given us for a given processing of personal data. If you wish to revoke your consent, please contact us at info@crystalrainbow.com.
The right to complain
You have the right to lodge a complaint at any time with the Norwegian Data Protection Authority, Borgergade 28, 5, 1300 København K about our processing of your personal data. Complaints can be lodged, among other things, by email dt@datatilsynet.dk or telephone +45 33 19 32 00.
4. DELETION OF PERSONAL DATA
Information collected in connection with your registration for our newsletter is deleted when your consent to the newsletter is withdrawn, unless we have another basis for processing the information.
5. SECURITY
We have implemented appropriate technical and organizational security measures against personal data being accidentally or illegally destroyed, lost, changed or degraded, as well as against unauthorized access or misuse. Only employees who have a real need to access your personal data to perform their work have access to it.
6. CONTACT INFORMATION
Crystal Rainbow is the data controller for the personal data collected via the webshop. If you have questions or comments about this Personal Data Policy or wish to make use of one or more of your rights, you can contact: