Privacy Policy

Last updated:

1. Introduction

Fryxarinkroz (“we”, “us”, or “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website at https://fryxarinkroz.world (the “Website”) and use our services.

This policy is designed to comply with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the Danish Data Protection Act (Databeskyttelsesloven), and other applicable data protection legislation.

2. Data Controller

The data controller responsible for your personal data is:

Fryxarinkroz
Falkoner Allé 21, 2000 Frederiksberg, Denmark
Email: write-to-us@fryxarinkroz.world

If you have any questions about this Privacy Policy or our data processing practices, please contact us at the email address above.

3. What Personal Data We Collect

We may collect and process the following categories of personal data:

3.1 Data You Provide Directly

  • Full name — provided through our order form
  • Email address — provided through our order form
  • Phone number (optional) — provided through our order form
  • Message content — provided through our order form
  • Consent status — your GDPR consent checkbox selection

3.2 Data Collected Automatically

  • IP address
  • Browser type and version
  • Operating system
  • Referring website
  • Pages visited and time spent on each page
  • Date and time of access
  • Cookie data (see our Cookie Policy)

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under Article 6 of the GDPR:

  • Consent (Art. 6(1)(a)): When you submit our order form and check the consent checkbox, you give us explicit consent to process your personal data for the purpose of handling your order and communication.
  • Contract Performance (Art. 6(1)(b)): Processing is necessary for the performance of a contract to which you are a party, or in order to take steps at your request prior to entering into a contract.
  • Legitimate Interest (Art. 6(1)(f)): We may process data for our legitimate interests, such as improving our Website and services, provided these interests do not override your fundamental rights and freedoms.
  • Legal Obligation (Art. 6(1)(c)): We may process data where necessary to comply with a legal obligation to which we are subject.

5. Purposes of Data Processing

We use your personal data for the following purposes:

  • To process and fulfill your orders
  • To respond to your inquiries and provide customer support
  • To send order confirmations and shipping notifications
  • To improve our Website, products, and services
  • To comply with legal and regulatory requirements
  • To prevent fraud and ensure the security of our Website
  • To analyze Website usage and optimize user experience (with consent)

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

  • Order data: Retained for 5 years from the date of the transaction, as required by Danish bookkeeping legislation (Bogføringsloven).
  • Communication data: Retained for up to 2 years after the last interaction.
  • Cookie data: Retained according to the specific cookie duration described in our Cookie Policy.
  • Analytics data: Retained in anonymized form for up to 26 months.

After the retention period expires, your data will be securely deleted or anonymized.

7. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data to third parties. We may share your data with:

  • Service providers: Trusted third-party service providers who assist us in operating our Website, processing payments, and delivering orders. These providers are contractually bound to protect your data and process it only on our instructions.
  • Legal authorities: When required by law, regulation, or legal process, we may disclose your data to competent authorities.
  • Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction, subject to the same privacy protections.

8. International Data Transfers

Your personal data is primarily processed within the European Economic Area (EEA). If any data transfer outside the EEA is necessary, we ensure that appropriate safeguards are in place, including:

  • EU Standard Contractual Clauses (SCCs)
  • Adequacy decisions by the European Commission
  • Binding Corporate Rules where applicable

9. Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

  • Right of Access (Art. 15): You have the right to request a copy of the personal data we hold about you.
  • Right to Rectification (Art. 16): You have the right to request correction of inaccurate or incomplete data.
  • Right to Erasure (Art. 17): You have the right to request deletion of your personal data, subject to legal retention obligations.
  • Right to Restriction (Art. 18): You have the right to request restriction of processing in certain circumstances.
  • Right to Data Portability (Art. 20): You have the right to receive your data in a structured, commonly used, and machine-readable format.
  • Right to Object (Art. 21): You have the right to object to processing based on legitimate interests or direct marketing.
  • Right to Withdraw Consent (Art. 7(3)): Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
  • Right to Lodge a Complaint: You have the right to file a complaint with the Danish Data Protection Agency (Datatilsynet), Borgergade 28, 5, 1300 Copenhagen K, Denmark, or at dt@datatilsynet.dk.

To exercise any of these rights, please contact us at write-to-us@fryxarinkroz.world.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Use of HTTPS encryption for all data transmitted through our Website
  • Access controls limiting data access to authorized personnel only
  • Regular security assessments and updates
  • Secure storage of personal data with encryption at rest
  • Staff training on data protection best practices

11. Children's Privacy

Our Website and products are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 18, we will take steps to delete that information promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. Any updates will be posted on this page with a revised “Last updated” date. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:

Fryxarinkroz
Falkoner Allé 21, 2000 Frederiksberg, Denmark
Email: write-to-us@fryxarinkroz.world