Privacy Policy

Personal data is any information about an identified person.

Personal data is divided into identified persons and identifiable personal data, which are all types of data that may be related to you to an extent. Our privacy policy applies to the information you provide to us and/or to the information we collect from you as a user of our services or by the behavior on our websites.

In the privacy policy you can read how we handle the data we come into possession of and how long we keep data about you.

This privacy policy applies in cases where Cold Hawaii Watersport (https://coldhawaiiwatersport.dk/) is the data controller for the processing of your personal data.

1.Data Responsible

We are the data controller for the processing of the personal data that we process about our users and business partners. You will find our contact information below.

Cold Hawaii Watersports
WEST-POINT HOLDINGS ApS
Aggervej 28
7770 Westervig
CVR No.: 21304905

Feel free to contact us at [h@westbank.dk] (mailto: h@westbank.dk). Write “Privacy Policy” in the subject line. You can write to us if you have questions about the processing of your personal data, if you want to claim your rights, if you want to change or delete your personal data about you, or if you have questions in relation to our privacy policy.

2.Processing activities

As a data controller cf. GDPR, then we have the following processing activities with our webshop (https://coldhawaiiwatersport.dk/).

2.1 Visit to website

When you visit our website, we use cookies to make the website work, which you can read more about in our [cookie policy] (https://coldhawaiiwatersport.dk/cookiepolitik-eu/).

You can refuse the use of cookies at any time. You can do this by changing the appropriate settings in your browser. Instructions can be found here: ** [Simsoft delete cookies page.] (https://simsoft.dk/hvordan-sletter-man-cookies/) **

If you delete or block cookies, ads may become less relevant to you and appear more frequently. You may also run the risk that the website does not work optimally and that there is content that you cannot access.

2.2 Communication with Users or Potential Users

If you have any questions about our site, or would like to hear more about our services, you can contact us via

• E-mail
• Telephone
• Contact form

Through this, we will process your personal data so that we can enter into a dialogue with you, for example, to answer questions about our services. We only process the information that you provide to us in connection with our communications.

We will typically process the following common information: name, email, telephone number.

Our right to process this personal data is Article 6 (1) (f) of the General Data Protection Regulation.

We delete our communications with you when it becomes clear whether you want our services or not.

If, in a particular case, there is a need to store your personal data for a longer period of time, this may be the case.

2.3 Payment

When purchasing an item on our webshop, the customer's payment information is processed. We use a payment gateway and the provider of this is a separate data controller.

• QuickPay (https://quickpay.net/dk/)

Our right to process your personal data (i.e. billing information) in connection with payment will be Article 6 (1) (a) (f) of the General Data Protection Regulation.

2.4 Return of goods

If we receive returned goods from customers, we process personal data so that we can refund the money for the goods to the customer.

Our right to process your personal data (i.e. billing information) in connection with the return of goods will be Article 6 (1) (a) (f) of the General Data Protection Regulation.

2.5 Purchase History and Booking

A customer's purchase on our site is recorded and the invoice is used for invoicing and stored in accordance with the rules of the Accounting Act.

We must store all accounting documents in accordance with the Accounting Act. This means that we store invoices and similar supporting documents for accounting purposes. This may include general personal data such as name, address, description of services.

Our right to process personal data for accounting purposes is Article 6 (1) (f) of the General Data Protection Regulation.

We retain this information for a minimum of 5 years after the end of the current financial year.

2.6 Complain

You can contact us with a complaint via [h@westbank.dk] (mailto: h@westbank.dk). In accordance with the law, we will process your complaint no later than 28 days in advance, or we will also notify you of the need to extend the time limit for consideration of your complaint.

3.Data Processors

Few can handle everything themselves, and the same applies to us. We therefore have partners and use suppliers, some of whom may be data processors. External suppliers can, for example, provide systems to organize our work, services, consulting, IT hosting or marketing.

It is our responsibility to ensure that your personal data is processed properly. Therefore, we place high demands on our business partners, and our partners must guarantee that your personal data is protected.

We therefore enter into agreements with companies (data processors) that handle personal data on our behalf in order to increase the security of your personal data.

4.Disclosure of Personal Data

We do not disclose your personal data to third parties.

5.Profiling and Automated Decisions

We do not make profiling or automated decisions.

6.Third Country Transfers

As a rule, we use data processors located in the EU/EEA or who store data in the EU/EEA.

In some cases this is not possible and data processors outside the EU/EEA may be used here, provided that they can ensure adequate protection of your personal data and belong to secure third countries.

7.Processing Security

We keep the processing of personal data secure by having in place appropriate technical and organisational measures.

We have carried out risk assessments of our processing of personal data and have subsequently put in place appropriate technical and organisational measures to increase the security of the processing.

One of our most important measures is to keep our employees up to date on GDPR through ongoing awareness training, GDPR training, as well as by reviewing our GDPR procedures with employees.

8.The rights of the data subject

You have a number of rights under the Data Protection Regulation in relation to our processing of information about you. If you want to exercise your rights, please contact us so that we can help you with this.

**8.1 Right to view information (right of access) **

You have the right to access the information that we process about you, as well as a number of additional information.

**8.2 Right of rectification (correction) **

You have the right to have misinformation about yourself corrected.

8.3 Right to delete

In special cases, you have the right to have information about you deleted before the time of our regular general deletion.

8.4 Right to restriction of processing

In certain cases, you have the right to have the processing of your personal data restricted. If you have the right to have the processing restricted, in future we will only process the data — other than storage — with your consent, or for the purpose of establishing, asserting or defending legal claims, or for the protection of a person or important public interests.

8.5 Right to object

In certain cases, you have the right to object to our otherwise lawful processing of your personal data. You can also object to the processing of your information for direct marketing purposes.

8.6 Right to transmit information (data portability)

In certain cases, you have the right to receive your personal data in a structured, commonly used and machine-readable format and to have this personal data transferred from one controller to another without hindrance.

You can read more about your rights in the Data Protection Agency's guide on the rights of data subjects, which can be found at [www.datatilsynet.dk] (http://www.datatilsynet.dk/).

Where our processing of your personal data is based on your consent, then you have the right to withdraw your consent.

9.Storage and deleting

We will delete your personal data when we no longer need to process it to fulfill one or more of the purposes mentioned above.

We store your information in accordance with applicable law.

The information may also be processed and stored longer if it is anonymised.

10.Complaint to the Data Inspector

You have the right to lodge a complaint with the Danish Data Protection Authority if you are dissatisfied with the way we process your personal data. You can find the contact details of the Data Protection Agency at [www.datatilsynet.dk] (http://www.datatilsynet.dk/).

Contact information:

Carl Jacobsen Road 35
2500 Valby
Telefon: +45 3319 3200
E-mail: [dt@datatilsynet.dk] (mailto: dt@datatilsynet.dk)