Privacy Policy MessyWeekend ApS

1. MessyWeekend ApS is the Data Controller – How do you contact us?

MessyWeekend ApS is the data controller responsible for handling the personal data that we have collected from you. You can find our contact details below:

MessyWeekend ApS

Magstraede 10A, 2nd floor

1204 Copenhagen

Company Number.: DK39202247

Phone: +45 31516605

Mail: hello@messyweekend.com

If you have any questions or concerns or complaints about our Privacy Policy or our data collection and processing practices, or if you wish to exercise any of your rights or if you want to report any security violations to us, please contact us.

2. Purpose with and use of your personal data and the legal basis for the use of your data

We use your Personal Data in the following ways:

When you visit our website, we collect information regarding your use of our website including your browser type, which search terms you use, your IP address including your network location, and information about the device you are using to visit our website. Furthermore, we collect information regarding which products and services you click on and add to your basket. This information is collected through cookies. Learn more about our use of cookies in our cookie policy. (LINK). We use third-party analytics services to help analyze how users use our Site. The information generated by the Cookies or other technologies about your use of our Site is transmitted to the Analytics Services. The Analytics Services use Analytics Information to compile reports on user activity. The Analytics Services do also transfer the Analytics Information to third parties where required to do so by law, or where such third parties process Analytics Information on their behalf. Each Analytics Service’s ability to use and share Analytics Information is restricted by such Analytics Service’s Terms of Use and Privacy Policy. You can see who these third parties are in our Cookie policy.
- The purpose is:
  - to gather statistics to analyze trends, about our user movements and use of our website, so we better can tailor our Services to our users’ needs
  - to be able to give you recommendations to products on our website that we think you might be interested in, and
  - to carry out marketing of our products to you, including marketing via Facebook and Google, and
  - to improve the security of our website

The legal basis for processing is the EU General Data Protection Regulation (Henceforth “GDPR”) art 6 (1) (f) and your personal data will only be processed if you have given your consent to the processing of your personal data with this specific purpose.

When you order a product or communicate with us on our website, we collect the information you provide us, e.g. your name, address, email address, phone number, payment information, time of purchase, which products you purchase or may return, shipment information and the IP address for which you make the order.
- The purpose is:
  - to create a customer account and to deliver the products you have ordered as well as our agreement with you
  - to handle your rights to return and to complain
  - to prevent fraud, and
  - to fulfill any legal requirement including the Danish Accounting law and Annual report law
- The legal basis for processing is GDPR art 6 (1) (b) (3.2.1.1-2), art 6 (1)(c)(3.2.1.4), and art 6 (1)(f)(3.2.1.3) and the Danish accounting law paragraph 10.
If you sign up for our newsletter, we collect information regarding your name, email address, IP address, and your phone number if you provide us with it. We collect information regarding when you signed up for our newsletter, when you unsubscribe from our newsletter and information about where and when you open our newsletter.
- The purpose is:
  - to send you the newsletter
  - to construct statistic to optimize our newsletters and to carry out marketing of our services, and
  - to document your consent to receive the newsletter

The legal basis for processing is the EU GDPR art 6 (1) (f).

If you provide us feedback or contact us via e-mail, we will collect your name and e-mail address, as well as any other content included in the e-mail, to send you a reply

The purpose is:
- to send you an answer on your feedback or mail, and
- to process any complaint about a product failure

The legal basis for processing is the EU GDPR art 6 (1) (f).

When you visit our Facebook page, you shall be aware of that we make use of Facebook´s analysis tool “Page insight” to obtain statistics over visitors and to gain insights on visitors use of our Facebook page, including the number of likes, who likes our posts, number of page visitors and interactions with our page, the reach of our post and other insights.

In connection to this, Facebook collects information as a data controller together with us. When you visit our Facebook page, you will gain access to information regarding the processing of these data. For more information, follow this link https://www.facebook.com/legal/terms/information_about_page_insights_data

We have entered an agreement with Facebook regarding the shared responsibility of the data. You can read the agreement via this link https://www.facebook.com/legal/terms/page_controller_addendum

3 Legitimate interests we pursue with processing your personal data

As described above, parts of our processing of your personal data are carried out based on a legitimate interest according to GDPR Article 6 (1)(F). Our legitimate interest in using your personal data to carry out marketing activities, improve our website, improve the security of our website and prevent fraud, have been balanced concerning your interests, basic rights and freedom rights to secure our use of your data do not exceed these. If you want to learn more about how we have balanced our use of your data according to this paragraph, please contact us on one of the methods stated in section 1.

4 Receivers or categories of receivers of your personal data

Vi videregiver eller overlader dine personoplysninger til følgende modtagere:

We transfer or hand over your personal data to the following receivers:

Information regarding your name, address, email, phone number and order number, and specific shipping information will be transferred to Link Logistics, GLS, or any other carrier that handles the shipment of your order. If you purchase a product we do not have at our warehouse, information regarding your order will be transferred to the manufacturer or importer of the respective product and in such case, the manufacturer or the importer will handle the shipment of your order.
Personal data can be transferred to a government department if we are required to do so by law or if the police may suspect any break of law or as a part of an investigation of specific criminal offenses. Information regarding a purchase including who has made the order and any shipment information can be transferred to the credit card company if the cardholder expresses that the credit card has been abused in connection to the specific purchase.
Information can be handed over to third-party service providers that process data on our behalf. We use third-party service providers to, amongst others, hosting of our website as well as targeted marketing including retargeting and to collect customer reviews of our website and products. These companies are data processors and follow our instructions for processing your data which we are the data controller of. The data processors may not use your personal data with another aim than to fulfill their agreement with us and the information that the data processors receive are subject to confidentiality.

5 Transfer of your data to receivers outside of EU/EEA

We will transfer your personal data to data processors established outside of the EU/EEA.

As mentioned in section of this privacy policy, we share data with companies for targeted marketing as well as handling our website. Among these companies there are companies located outside of the EU/EEA.

Four of these data processors, Google Analytics v/Google LLC., ActiveCampaign LLC, Pinterest Inc, and Facebook Inc. is established in the USA. The necessary guarantees for transferring data to the USA are secured through data processor certification under EU-U.S. Privacy Shield, according to EU GDPR article 45.

Copy of Google LLC's certification can be found via this link:

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI

Copy of ActiveCampaign LLC's certification can be found via this link:

https://www.privacyshield.gov/participant?id=a2zt0000000GnH6AAK

Copy of Pinterest Inc´s certification can be found via this link:

https://www.privacyshield.gov/participant?id=a2zt00000008VVzAAM

Copy of Facebook Inc´s certification can be found via this link: :

https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

6 Storage of your personal data

Information collected when you make an order on our website as described in section 2.2 will normally be deleted after 2 years after the calendar year in which you make your order. However, information can be stored for a longer period if we have a legitimate need for longer storage, e.g. if it is necessary to store the data for a legal requirement can be determined, be in evidence, or defend the legal requirement. Also, the information will be stored if storage is necessary to fulfill a legal requirement. Furthermore, accounting records will be stored for 5 years from the ending of the calendar year in which you order has been made, for us to fulfill the requirements of the Danish accounting law.

Information collected when you sign up for our newsletter will be deleted when you withdraw your consent unless we have any other reason for using your data.

If you decide to delete your customer account, we will delete all data we have stored about you.

Information collected when you give us feedback or contact us per mail will be deleted after 2 year unless we have another reason for using your information.

For information collected through your use of our website as described in section 2.1 including cookies, you can find information regarding the deletion of such data in our cookie policy. (link)

7 The right to withdraw your consent

If we have collected and processed your personal information with your consent, then you can withdraw your consent at any time. To do this, please contact us via the contact information stated in section 1.

Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent

8 Your rights regarding the use of your information

According to GDPR you have several rights regarding our use of your personal data.

To exercise any of these rights, please contact us.

Right to obtain access to the information

You can request access to the personal information we use about you as well as other information we process.

Right to get untrue information corrected

You have the right to get any untrue information about you corrected.

Right to get data deleted

On special occasions, you have the right to get information about you deleted before we normally would delete such data.

You may change any of your Personal Data in your account by contacting hello@Nordgreen.com. You may request deletion of your Personal Data by us, and we will use commercially reasonable efforts to honor your request, but please note that we may be required to keep such information and not delete it (or to keep this information for a certain time, in which case we will comply with your deletion request only after we have fulfilled such requirements). We may also retain your information for fraud or similar purposes

Right to restricted processing

In some cases, you have the right to get the processing of your personal data restricted. If you have the right to get the use of your personal data restricted, we cannot process personal data about you in the future - except storage - without your consent unless we as a result of any legal requirement are required to do so or to protect a person or important public interests.

Right to object

In some cases, you can object to our or legal processing of your personal data. You can also object to the processing of your personal data to direct marketing.

Right to portability of your data

In some cases, you have the right to receive your personal information in a structured, widely used, and machine-readable format as well as get access to any personal data that we have transferred to a third-party.

9 Complain to a data protection authority

You have the right to complain to a data protection authority about our collection and use of your personal information.