At BAK Skincare ApS ("BAK Skincare", "we", "us" or "our") we give high priority to confidentiality and data security. This privacy policy applies to our processing of personal data and establishes guidelines for the way BAK Skincare processes your personal data and provides you with the information that you are entitled to receive under applicable data protection laws. You should read the privacy policy before you hand over your personal data to BAK Skincare.
1. Data controller and contact information
The data controller of your personal data is:
BAK Skincare ApS
Address: Lersø Parkallé 42, 2., 2100 København Ø
CVR-no.: 43318217
2. If you visit the website https://www.bakskincare.com/
2.1 Cookies
Types of personal data
BAK Skincare uses cookies on the website https://www.bakskincare.com/ and in this connection processes your personal data. BAK Skincare may collect the following personal data about you, when you visit our website:
-
IP address
-
MAC address
-
Browsing History
We use cookies to collect the above-mentioned personal data. You can read more about the use of cookies in our cookie policy, which you can find on the website.
The purposes of the process
Your personal data may be processed for the following purposes:
-
Marketing in general
-
Product and service development
Legal basis for processing
BAK Skincare processes your personal data on the following basis:
-
Legitimate interests: We base the processing of your personal data on our legitimate interests in, for example, conducting statistics, analyses, providing support, as well as improving and developing our products and services (Article 6(1)(f) of the General Data Protection Regulation).
When you visit our website, we ask for your informed consent to place cookies that are not functional cookies according to the cookie rules. You have the right to withdraw your consent at any time. You can read more about how you change your cookie settings in our cookie policy.
Retention period
Cookies are deleted in accordance with our cookie policy.
However, the information may be stored for a longer period in anonymised form.
2.2 If you use our web shop
Types of personal data
When you use our web shop, BAK Skincare processes your personal data. BAK Skincare may collect, process, and store the following types of your personal data:
-
Your name
-
Your e-mail address
-
Your phone number
-
Your address
-
Your payment information
-
Information about your order/purchase history
-
Information about if you experience side effects when using our products. This might include your health information if you provide us with such type of information.
The purposes of the process
Your personal data will be processed for the following purposes:
-
Completion of orders in BAK Skincare’s web shop
-
Managing of shipments, complaints, and returns
-
Publication of marketing without consent based on previous purchases with us in cases where we choose to avail ourselves of this option in the Danish Marketing Practices Act
-
Statistics and analysis
-
Regulatory requirements when processing inquiries on side effects
Legal basis for processing
BAK Skincare processes your personal data on the following basis:
-
Legitimate interests: We process your personal data based on our legitimate interest in marketing us to you in cases where consent is not required as well as our legitimate interest in being able to conduct statistics and analysis with the purpose of developing and improving our services (Article 6(1)(f) of the General Data Protection Regulation).
-
Contractual obligations: We process your personal data to fulfil the contract of purchase with you, including to be able to deliver the ordered goods, handle complaints, returns, etc. (Article 6(1)(b) of the General Data Protection Regulation).
-
Legal obligation: The processing of your personal data will in some cases be necessary for compliance with legal obligations, such as our obligation to process an inquiry from you regarding side effects when using our products (Article 6(1)(c) of the General Data Protection Regulation). If we your inquiry includes health information our legal basis for processing of this data is Article 9(2)(b) of the General Data Protection Regulation in order to comply with our legal obligations to process your inquiry pursuant to Danish health legislation.
Retention period
As a general rule, we will store your personal data for 5 years after your last purchase. If you have purchased products covered by a warranty, we will delete your personal data at the end of the warranty period.
Information relating to accounting material is kept for 5 years from the end of the financial year to which the data relate.
However, we can process your personal data for a longer period in anonymised form.
3. If you sign up for our newsletter(s) and participate in competitions
Types of personal data
BAK Skincare collects, processes, and stores your personal data for marketing purposes when you sign up for newsletter(s). BAK Skincare may collect, process, and store the following types of your personal data:
-
Name and e-mail address
BAK Skincare may also process your personal data when you participate in competitions via our social media sites. We do note that these sites are joint controllers or independent data controllers for the personal data you provide when participating in a competition.
The purposes of the processing
Your personal data may be processed for the following purposes:
-
Marketing
Legal basis for processing
BAK Skincare processes your personal data on one or more of the following grounds:
-
Consent: BAK Skincare will only use your personal data for direct marketing, including for sending out newsletters, if you have given your prior and explicit consent to this (Article 6(1)(a) of the General Data Protection Regulation).
-
Legitimate interests: The processing of your personal data will, in connection with analysis and statistics, be based on our legitimate interests in being able to improve and develop our service (Article 6(1)(f) of the General Data Protection Regulation).
Retention period
Your personal data will be stored as long as your consent to receive newsletters is active.
You can always withdraw your consent by clicking on the unsubscribe link at the bottom of each e-mail or by contacting us as described below. However, withdrawing your consent does not affect the legality of the processing that preceded the withdrawal.
Documentation of your marketing consent is kept for 2 years from the time you have withdrawn your consent to receive direct marketing material. The retention period is determined based on Lactobio's legitimate interest in being able to document that direct marketing has been carried out in accordance with the applicable legislation (Article 6(1)(f) of the General Data Protection Regulation).
We clean up our social media on a regular basis and at least every two years so ensure the relevance of our posts. However, when you participate in a competition via social media you have an obligation to delete personal data you have commented on our posts or posted on our pages.
In addition, the information can be stored for a longer period in anonymised form.
4. If you are a supplier, collaborator etc.
This section contains the policy for BAK Skincare's processing of personal data of sole proprietorship owners or contacts of suppliers and other business partners working with BAK Skincare.
Collection of personal data
BAK Skincare may collect, process, and store your personal data in the following cases:
-
When your company or the company you work at enters into an agreement with BAK Skincare
Types of personal data
BAK Skincare may collect, process, and store the following types of personal data about you:
-
Name, e-mail address, phone number, and corresponding contact information
We may receive such information directly from you (primarily through e-mails and other correspondence with you) or from a third party such as your employer.
The purposes of the processing
Your personal data may be processed for the following purposes:
-
General planning, fulfilment, and the management of collaborations, including contracts
Legal basis for processing
BAK Skincare primarily processes your personal data on one or more of the following grounds:
-
Contractual obligations: In certain cases, the processing of your personal data is necessary to fulfil a contract (Article 6(1)(b) of the General Data Protection Regulation).
-
Legitimate interests: We may process your personal data on the basis of our legitimate interests in, for example, managing day-to-day operations in accordance with legitimate and fair business practices, including planning, execution and management of the cooperation or our legitimate interest in, for example, performing The processing may also be necessary for our legitimate interest in preventing fraud or establishing, defending, or asserting legal claims (Article 6(1)(f) of the General Data Protection Regulation).]
-
Legal obligation: The processing of your personal data will in some cases be necessary for compliance with legal obligations, such as our obligation to prevent illegal activities (Article 6(1)(c) of the General Data Protection Regulation).
Retention period
As a general rule, we will store your personal data for 5 years after our contact with you have ended.
Information relating to accounting material is kept for 5 years from the end of the financial year to which the data relate.
However, we can process your personal data for a longer period in anonymised form.
5. Transmission to other controllers and entrustment to data processors
To achieve the above purposes, we may give third parties access to your personal data, which, based on a contractual relationship with BAK Skincare, provides relevant services, this could be IT suppliers or other suppliers that process personal data for us. Such suppliers will only process personal data in accordance with our instructions according to the signed data processing agreements.
In the context of BAK Skincare's development, the corporate structure may change, e.g., by the total or partial sale of the company. In the case of a partial transfer of assets containing personal data, the processing basis for the related transfer of personal data is, as a rule, Article 6(1)(f) of the General Data Protection Regulation, since BAK Skincare has an interest in transferring parts of its assets and making commercial/structural changes.
In addition to what is described above, your personal data is generally not disclosed to a third party without your consent. However, in certain circumstances and under the law, it may be necessary to disclose your personal data to e.g.
If your personal data are transferred to data processors or data controllers established in countries outside the EU/EEA that do not have an adequate level of protection, such a transfer will only take place once a transfer basis is secured. In addition, the transfer will be based on the EU Commission's standard contracts. If you have any questions about the basis for transfers to countries outside the EU/EEA please contact us at contact@bakskincare.com.
6. Your rights
-
You have the right to access the personal data we process about you
-
You have the right to object to our collection and further processing of your personal data
-
You have the right to rectification and deletion of your personal data, however there are certain statutory exceptions, including the Bookkeeping Act
-
You have the right to ask us to restrict the processing of your personal data
-
In certain circumstances, you may also request to receive a copy of your personal data and to transmit the personal data you have provided to us to another data controller (data portability)
-
You can withdraw any consents you may have given at any time. We will then delete your personal data unless we may continue the processing on another basis. You can cancel our newsletter by clicking on the link at the bottom of the newsletter
7. Questions and complaints
If you have any questions about this privacy policy or if you wish to complain about the way we process your personal data, please feel free to contact us:
BAK Skincare ApS
Address: Lersø Parkallé 42, 2.,
2100 København Ø
If your complaint is not resolved by us and you want to proceed with the case, you can complain to the Danish Data Protection Agency:
The Danish Data Protection Agency
Carl Jacobsens Vej 35
2500 Valby
Phone number: 33 19 32 00
E-mail: dt@datatilsynet.dk
|
Version |
Approved |
Changes |
|
Draft |
Charlotte Berglund Thomsen, 18/3/2024 |
Fully replaced |