Data Policy (GDPR)

[version 07-02-2024]

Here you can read about our processing of your personal data in connection with the use of ktlfloor.com

This notice describes how KTL Floor, as data controller, collects and processes your data in connection with the use of ktlfloor.com and the associated and connected online services.

Data controller and contact information

• KTL Group
• Walgerholm 7 
• 3500 Værløse, Denmark
• +45 44328450
• sales@ktlfloor.com

The purposes and legal basis for the processing of your personal data

We process your personal data for the following purposes:

• Creation and administration of your account, including completion of your purchases via our website and delivery of your goods
• Disclosure of information to carriers for the purpose of delivery of your goods
• Improvement and development of our website, services and products, including through the preparation of statistics in anonymized form
• Issuing service announcements, market-, satisfaction- and customer surveys as well as calls for user reviews
• Ensuring compliance with terms and conditions, including being able to determine, defend and enforce legal claims
• Fulfillment of requirements according to legislation, including in relation to bookkeeping

The legal basis for our processing of your personal data follows from:

• 1. Our entering into an agreement with you on the creation and administration of your account, including an agreement on the purchase of goods via our website, cf. the data protection regulation art. 6(b)
• 2. Our entering into an agreement with you on the delivery of your goods, cf. the data protection regulation art. 6(b)
• 3. Our legitimate interest in being able to improve and develop our website, services and products, cf. the data protection regulation art. 6(f)
• 4. Our legitimate interest in being able to carry out investigations etc., cf. the data protection regulation art. 6(f)
• 5. Our legitimate interest in ensuring compliance with terms and conditions, including being able to establish, defend and enforce legal claims, cf. the data protection regulation art. 6(f)
• 6. Our legal obligation to comply with the legislation, cf. the data protection regulation art. 6(c)

Categories of personal data

Personal information that may be collected and processed includes:

• Name, address and contact details
• Other information about you for use in your account, including information about your purchase history, order summary, place and time of delivery, most purchased items, etc.
• Information about your Digital Behavior collected via cookies
• Information relating to your account, i.e. login information (address and password)
• If you use a payment card, only our PCI Certified partner QuickPay will have access to your payment card information.

Categories of recipients

Depending on the circumstances, we may transfer your personal data to the following recipients as part of the fulfillment of the above purposes:

• Disclosure to carriers in connection with the delivery of your goods
• Entrustment to IT suppliers as part of operation and support
• Personal information may be passed on to third parties to a wider extent, e.g. if this is required pursuant to mandatory legal requirements or authority requirements or by disclosure to the police, courts, lawyers and accountants

Transfer to recipients in countries outside the EU/EEA

We use the following suppliers, which may result in the transfer of personal data to countries outside the EU/EEA:

• Microsoft Corporation: Headquartered in the USA
• Google LLC: Headquartered in the United States, and may be transferred to India.
• Trustpilot A/S: transfer to the USA and Australia may take place
• Facebook: Headquartered in the USA

The transfer basis is:

All data processors listed above use standard contract provisions as the basis for transfer, cf. the data protection regulation art. 46

Storage of your personal data

We store your personal data as long as it is necessary in relation to our purposes for the processing. We have the following storage periods:

• Inquiries to us per e-mail or telephone is deleted when the purpose of the storage is no longer present.
• Competitions, events, loyalty programs and the like are stored as long as there is a purpose for the storage.
• Sending newsletters and other marketing is stored until you unsubscribe from the newsletter or receiving marketing.
• We keep receipts for your purchases for up to 72 months in accordance with accounting legislation.
• Your Digital Behavior is saved until the user himself asks for them to be deleted.
• Documentation of your acceptance of our terms, conditions, privacy policies, etc. are stored as long as there is a purpose for the storage.

Your rights

According to the data protection regulation, you have a number of rights in relation to our processing of information about you.

You can read more about your rights in the Data Protection Authority’s guidance on the rights of data subjects, which you can find at www.datatilsynet.dk.

• You have the right to gain insight into the information that we process about you, as well as a number of additional information about the processing, cf. the data protection regulation art. 15.
• You have the right to have incorrect personal data corrected, cf. the data protection regulation art. 16.
• In a number of cases, you have the right to have personal data deleted before the time for our general deletion occurs, cf. the data protection regulation art. 17.
• In certain cases, you have the right to have the processing of your personal data limited to storage only, cf. the data protection regulation art. 18.
• If you have a special reason, you have the right to object to our otherwise lawful processing of your personal data. In addition, you have the right, without justification, to object to the processing of your personal data for direct marketing, including targeting cf. the data protection regulation art. 21.
• In certain cases, you have the right to receive your personal data in a structured, commonly used and machine-readable format and to have this personal data transferred from one data controller to another without hindrance, cf. the data protection regulation art. 20.
• You have the right to lodge a complaint with the Danish Data Protection Authority if you are dissatisfied with the way we process your personal data.

Changes

We reserve the right to make changes to this data policy. In case of changes, the date and version number of the privacy policy will be changed. The privacy policy in force at all times will be available on our website. If there are significant changes to our privacy policy, you will be informed about this via a service email.

[version 07-02-2024]