Privacy policy

Privacy Policy

1. Purpose of policy

1.1. The purpose of the privacy policy is to make you aware of how DBU A/S and hummel Cenozoic ApS (“we”, “us”, “DBU, “hummel”) process personal data. With this policy we want to inform you which personal data that are collected and processed, and as far as possible how long personal data are stored. The privacy policy regards processing of personal data in DBU and hummel, when you enter into contracts, visit and buy products from this website, interacts or in any other exchange personal data with us. DBU will be acting as data controller for those personal data, and in some cases hummel as well. You can contact us regarding your processing of personal data by contact detail that you will find below

2. THE DATA CONTROLLERS FOR YOUR PERSONAL DATA
The joint controllers for the processing of your personal data are:

2. the data controllers for your personal data

The controllers for the processing of your personal data are:

DBU A/S

CVR-no. 33396406

DBU Allé 1

DK-2605 Brøndby

Tlf.: +45 43 26 22 22

E-mail: persondata@dbu.dk

and

hummel Cenozoic ApS
CVR-no. 43317032
C/O hummel A/S

Balticagade 20
DK-8000 Aarhus C

E-mail: onlinesupportDK@hummel.dk

3. WHAT your personal data is used for

3.1. DBU and hummel process your personal data for one or more specific purposes according to the data protection regulations. We process your personal data if you are our customer, business partner, vendor, visit our website or our social media, or if you sign up for our newsletter. As an overriding rule, the information will mostly come directly from you, and we only process your personal data as long as it is necessary to the purpose in which they were collected. However, personal data can in some cases be processed and stored longer for DBU or hummel’s legitimate interests in daily operations or in anonymous form.

For more information about the different types of processing that we make, read below.

3.1.1. Cookies and website

During daily operations of our website, we collect personal data about you through cookies to improve the experience with the website and to make statistics. Information that we collect through cookies includes your IP-address, type of browser, your operating system, your interaction with advertisements and the websites you visit. You give your consent according to the cookie regulation, but the further processing of your information happens according to our legitimate interests according to GDPR art. 6(1)(f).

We have pixels from social media on our website, which can collect data about you, if you choose to click on the pixels and being send to DBU site on social media. DBU use pixels from Facebook, Instagram and YouTube. DBU have a joint controllership with each media. You can read about this below in section 3.1.2 Social media.

You can contact us by sending an email to DBU@DBU.dk or +45 43 26 22 22 if it is DBU you wish to contact and onlinesupportDK@hummel.dk or call us at +45 88 70 49 50 if you wish to contact hummel. In this case, we process your personal data for our legitimate interests in order to respond according to GDPR art. 6(1)(f). We process name, email and information about your request. We discourage you to write any personal data in this box, unless it is relevant to the request.

Personal data that we process through the contact are ongoing deleted and latest 5 years after the latest contact.

3.1.2. Social media

We use some social media; Facebook, Instagram and YouTube to interact with our existing and potential customers and to promote our marketing. If you have visited and “liked” DBU or hummel’s fan page on the social media or have been in contact with us at the media, we inevitable process your personal data. In this case, we only process information about your name, email and other information collected through cookies from the social media and eventually your purchases if this appears from the context.

If you contact us through social media, we process your personal data according to our interest in contacting and replying to your request (GDPR 6(1)(f)). The information will be collected from you as a data subject as well as the social media where you reached out to us.

We have a joint controllership with the social media platforms that we use, because we have joint purposes in processing your personal data. You can read more about the social medias processing of your personal data in the links below:

· Facebook og Instagram’s processing of your personal here and about the joint controllership here and here.

· YouTubes (Googles) processing of your personal data here.

Personal data that is processed that regards direct communication on social media are deleted immediately after the end of the conversation. Posts on e.g., Facebook pages or in public groups are not deleted due to the public nature of posts and comments. Read more about the public nature of posts etc. here.

3.1.3. Marketing

DBU and hummel process your personal data for the purpose of marketing if you have given your consent according to GDPR art. 6(1)(a). This purpose can contain receiving newsletters about apparel, footwear, bags, accessories, sports articles, as well as information about DBU or hummel Cenozoic ApS or DBU or hummel’s activities and news about new collections, offers, sale, competitions, and other marketing initiatives, by email, text message or adds.

We can use your browser history as well for the purpose of marketing of our products on social media if you have given consent according to GDPR art. 6(1)(a). For more information about the social media’s processing of your personal data, read section 3.1.2 in this policy.

In some cases, we can supplement our information about you with the information that you give us, e.g., information about your preferences and demographic information as your sex, birthdate, and address for the purpose of profiling, so we can make our marketing efforts as relevant as possible for you. This happens on the basis of your consent according to GDPR art. 6(1)(a). If you are an existing customer, please view the section regarding profiling and our legal basis for this purpose in section 2.1.4 Private Customers below.

Furthermore, we can process your personal data for the purpose of marketing for you to receive content with exclusive offers, inspiring news and personal recommendations from DBU or hummel through advertisement on third party websites. These adds can appear on other websites than the websites of DBU and hummel depending on your cookie preferences and online behaviour. Examples of this could be Facebook, Instagram, Google, Youtube, Pinterest, ads on e.g. tv2.dk and other websites, that you visit, who makes advertisement space available to DBU or hummel. This happens if you have given your consent according to GDPR art. 6(1)(a).

The personal data, that we have collected based on your consent according to GDPR art. 6(1)(a), for the purpose of the listed sub-purposes described above can be transferred to third parties, if the third parties have the same purpose as us. If you wish to withdraw your consent, we will off course notify third parties, so they no longer process your personal data. In order to send you relevant marketing on this website and other websites, we cooperate with other companies to whom we share information. Please view the section 3.1.5.

You can at any time withdraw your consent for marketing purposes by using link in e.g. the received newsletter, update your consent in the cookie banner or by sending an email to DBU@DBU.dk or +45 43 26 22 22 if it is DBU you wish to contact, and onlinesupportDK@hummel.dk or call us at +45 88 70 49 50 if you wish to contact hummel.

We store documentation for your consent as long as you receive marketing material from us or participate in our marketing, and 2 years after that you have withdrawn your consent due to the limitation deadline for eventual liability that DBU or hummel may be accounted for.

3.1.4. Customer relations

Business customer

In connection with wholesale of products to business customers, DBU A/S, hummel Cenozoic ApS or hummel A/S process personal data about business customers’ contacts to pursue its legitimate interests in daily operations according GDPR art. 6(1)(f). This information includes contact information such as name, company name, email, address, phone number and history of purchase and payment details.

Information will be deleted on a continuous basis, at its latest 5 years after a customer relationship has been terminated. Local bookkeeping regulations can extend this period even further.

Private customers

DBU and hummel process your personal data as a private customer when you are customer at our web-shop. We process your personal data in connection with sale of products to enter and fulfil a contract with you (GDPR art. 6(1)(b)). These personal data include name, email, address, phone number and history of purchases and payment details.

Information will be deleted on a continuous basis, at its latest 5 years after a customer relationship has been terminated. Local bookkeeping regulations can extend this period even further.

In some cases, we can supplement our information about you with the information that you give us, e.g., information about previous purchases and demographic information as your sex, birthdate, and address for the purpose of profiling, so we can make our marketing efforts as relevant as possible for you. This happens according to our legitimate interest (GDPR art. 6(1)(f)) because we assess that our interest in offering you the best service overrides your interest in not having your non-special categories of personal data processed by us. However, you always have the possibility to object to the processing and get an assessment whether you can get access to your data or/ and get them deleted. Read more about your rights in section 4 below.

3.1.5. Vendors and business partners

When we enter contracts with vendors and business partners, we process personal data of the contacts at our partners. This includes information as name, position, phone number, email and if necessary, payment details.

The personal data are either processed, because it is necessary for the performance of the contract with the vendor or business partner (GDPR art. 6 (1)(b)) or because we have legitimate interests in processing the contact’s contact information due to the contract (GDPR art. 6(1)(f)).

We store relevant contact information as long as the business relationship continues. Written correspondences are deleted in a continuous basis, and information that is necessary to fulfil legal obligations according to bookkeeping regulations are stored according to applicable law.

4. Recipients of personal data

4.1. We process your personal data in confidence. However, we can share your personal data, if you have given your consent or we have a legitimate interest and reason to share them.

4.2. We can share your personal with partner and other affiliated companies, including MarkOn A/S and our logistics partners who deliver your goods to you. MarkOn A/S is making sure that your order is packed and sent to your address.

4.3. We can let vendors/ data processors of systems and the like process personal data on our behalf according to our specific instructions given in the entered data processing agreement.

4.4. Some of our data processors, and the social media mentioned above, is either located or transfers personal data outside EU. If this happens, we have ensured an adequate transfer tool, including the European Commission’s standard contractual clauses or similar regarding transfers of personal data outside EU.

5. YOUR RIGHTS ACCORDING TO GDPR

5.1. When we collect and process personal data about you, you have a set of rights according to the data protection regulation. Your rights include the right of access to information about you, the right to rectification or to be forgotten (erasure), restriction of and objection to our processing, and the right to receive your information in a structured and readable format (data portability).

5.2. The rights mentioned above can be subject to circumscription. Whether you as a data subject can make use of your rights, will be assessed at each individual request.

5.3. If you have given consent to our processing of your personal data, you can at any time withdraw your consent. If you wish to withdraw your consent, you can send an email to DBU@DBU.dk or +45 43 26 22 22 if it is DBU you wish to contact and onlinesupportDK@hummel.dk or call us at +45 88 70 49 50 if you wish to contact hummel.

5.4. If you are not satisfied with our processing of your personal data, you can make a formal complaint to The Data Protection Agency through their website English (datatilsynet.dk) or by calling them at +45 33 19 32 00.

6. DATA CONTROLLERS AND CONTACT INFO

The data controller for the processing of your personal data:

The controllers for the processing of your personal data are:

DBU A/S

CVR-no. 33396406

DBU Allé 1

DK-2605 Brøndby

If you have any questions regarding our processing of your personal data, you can contact us at persondata@dbu.dk or +45 43 26 22 22

hummel Cenozoic ApS

CVR.nr: 43317032

Balticagade 20, 8000 Aarhus C

Denmark

If you have any questions regarding our processing of your personal data, you can contact us at onlinesupportDK@hummel.dk or call us at +45 88 70 49 50

7. CHANGES AND UPDATES

7.1. We reserve the right to update and change these guidelines for processing of personal data. In case of essential changes, we will contact you by email or make an announcement of our website.

7.2. This privacy policy is recently updated 31 October 2024.