Nordahl Andersen ApS, Færøvej 3, 8700 Horsens, Denmark, CVR no. 3007 4785, is the data controller responsible for processing the personal data we have received about you. You can contact us by phone at +45 66 11 17 00 or by email at info@noa.dk regarding questions concerning the processing of your personal data.

Purpose, categories of personal data and legal basis for processing

When you make a purchase, we register a number of details about you, including your name, address, postal code, city, country, telephone number, email address, order details, tracking number (delivery), payment information and, where applicable, company address.

The information is used to:

• identify you as the purchaser, which is a requirement under Danish VAT regulations.
• send you a receipt for your purchase pursuant to Article 6(1)(b) of the General Data Protection Regulation (performance of a contract).
• process payment for your order pursuant to Article 6(1)(b) of the General Data Protection Regulation (performance of a contract).
• deliver the product pursuant to Article 6(1)(b) of the General Data Protection Regulation (performance of a contract).
• contact you in cases such as delayed delivery pursuant to Article 6(1)(f) of the General Data Protection Regulation (legitimate interest).

Retention of your information

Accounting records will be retained for five years from the end of the financial year to which the records relate, in accordance with the Danish Bookkeeping Act (invoice).

Information that is not regarded as accounting records will be deleted once the product has been delivered and received by the purchaser (email address and telephone number).

The tracking number will be retained for six months, as we experience that errors may occur in connection with delivery, pursuant to Article 6(1)(f) of the General Data Protection Regulation (legitimate interest).

We may disclose your information to the following recipients

Article 6(1)(b) of the General Data Protection Regulation (performance of a contract):

• Payment solution provider – necessary for processing payment.
• Shipping companies – necessary for delivery of the product.

Article 6(1)(c) of the General Data Protection Regulation (legal obligations):

• Auditing firm, as accounting information must be included in the annual accounts in accordance with the Danish Financial Statements Act and the Danish Companies Act.

Access/disclosure protected by confidentiality and a data processing agreement

We use IT suppliers that perform a number of tasks on our behalf. They may have access to your personal data when our IT systems require maintenance.

In addition, your information is transferred to our suppliers in connection with website hosting, support for our webshop platform, accounting system, website payment gateway, and logistics and distribution systems.

Your rights

Under the General Data Protection Regulation, you have a number of rights in relation to our processing of information about you. If you wish to exercise your rights, please contact us.

Right of access

You have the right to obtain access to the information we process about you, as well as certain additional information.

Right to rectification

You have the right to have incorrect information about yourself corrected.

Right to erasure

In certain circumstances, you have the right to have information about you erased before the time at which our normal general deletion procedure would otherwise take place.

Right to restriction of processing

In certain circumstances, you have the right to restrict the processing of your personal data. If you are entitled to have processing restricted, we may in future only process the information – apart from storing it – with your consent, for the establishment, exercise or defence of legal claims, for the protection of another person, or for reasons of important public interest.

Right to object

In certain circumstances, you have the right to object to our otherwise lawful processing of your personal data.

Right to data portability

In certain circumstances, you have the right to receive your personal data in a structured, commonly used and machine-readable format and to have this personal data transmitted from one data controller to another without hindrance.

Right to lodge a complaint with the Danish Data Protection Agency

You have the right to lodge a complaint concerning our processing of your personal data with the Danish Data Protection Agency (Datatilsynet). You can find the contact details of the Danish Data Protection Agency on its website at www.datatilsynet.dk.

Duty to provide information – enquiries via the website

Nordahl Andersen ApS, Færøvej 3, 8700 Horsens, Denmark, CVR no. 3007 4785, is the data controller responsible for processing the personal data we have received about you. You can contact us by phone at +45 66 11 17 00 or by email at info@noa.dk regarding questions concerning the processing of your personal data.

Purpose, categories of personal data and legal basis for processing

You can contact us through our website. In this connection, we register the following information: name, email address, comments and telephone number (optional).

The information is registered exclusively for the purpose of responding to your enquiry and meeting your requirements as effectively as possible pursuant to Article 6(1)(f) of the General Data Protection Regulation (legitimate interest).

Retention of your information

Your enquiry will be deleted once it has been answered.

Disclosure of your information

Processing protected by a data processing agreement

When we receive your enquiry through our website, your information will automatically be transferred to our IT suppliers, who ensure the secure handling of emails, restoration of data in the event of IT system failure (backup), and website hosting.

Your rights

Under the General Data Protection Regulation, you have a number of rights in relation to our processing of information about you. If you wish to exercise your rights, please contact us.

Right of access

You have the right to obtain access to the information we process about you, as well as certain additional information.

Right to rectification

You have the right to have incorrect information about yourself corrected.

Right to erasure

In certain circumstances, you have the right to have information about you erased before the time at which our normal general deletion procedure would otherwise take place.

Right to restriction of processing

In certain circumstances, you have the right to restrict the processing of your personal data. If you are entitled to have processing restricted, we may in future only process the information – apart from storing it – with your consent, for the establishment, exercise or defence of legal claims, for the protection of another person, or for reasons of important public interest.

Right to object

In certain circumstances, you have the right to object to our otherwise lawful processing of your personal data.

Right to lodge a complaint with the Danish Data Protection Agency

You have the right to lodge a complaint concerning our processing of your personal data with the Danish Data Protection Agency (Datatilsynet). You can find the contact details of the Danish Data Protection Agency on its website at www.datatilsynet.dk.

Duty to provide information – enquiries via social media

Nordahl Jewellery, SON of NOA, Siersbøl and NOA Kids are Danish brands owned by Nordahl Andersen. Nordahl Andersen therefore handles all enquiries made via Facebook and Instagram concerning these brands.

Nordahl Andersen ApS, Færøvej 3, 8700 Horsens, Denmark, CVR no. 3007 4785, is the data controller responsible for processing the personal data we have received about you. You can contact us by phone at +45 66 11 17 04 or by email at customerservice@noa.dk regarding questions concerning the processing of your personal data.

Purpose, categories of personal data and legal basis for processing

You can contact us via Facebook and Instagram. In this connection, we may register information that you have voluntarily provided to us.

The information is registered exclusively for the purpose of responding to your enquiry and meeting your requirements as effectively as possible pursuant to Article 6(1)(f) of the General Data Protection Regulation (legitimate interest).

Retention of your information

Your enquiry will be deleted immediately after it has been answered, and no later than 30 days after you first contacted Nordahl Andersen.

Recipients of your information

When we receive your enquiry through social media, the registered information will be processed exclusively by the selected social media platform.

There may be a possibility that your personal data is transferred to a third country when you contact us. This is because Facebook and Instagram are, among other places, established in the United States.

To ensure an adequate level of protection in the event of such a transfer, Instagram has entered into the European Commission's Standard Contractual Clauses, and Facebook has joined the EU-US Privacy Shield.

Facebook's EU-US Privacy Shield certificate can be found here:

https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

Your rights

Under the General Data Protection Regulation, you have a number of rights in relation to our processing of information about you. If you wish to exercise your rights, please contact us.

Right of access

You have the right to obtain access to the information we process about you, as well as certain additional information.

Right to rectification

You have the right to have incorrect information about yourself corrected.

Right to erasure

In certain circumstances, you have the right to have information about you erased before the time at which our normal general deletion procedure would otherwise take place.

Right to restriction of processing

In certain circumstances, you have the right to restrict the processing of your personal data. If you are entitled to have processing restricted, we may in future only process the information – apart from storing it – with your consent, for the establishment, exercise or defence of legal claims, for the protection of another person, or for reasons of important public interest.

Right to object

In certain circumstances, you have the right to object to our otherwise lawful processing of your personal data.

Right to lodge a complaint with the Danish Data Protection Agency

You have the right to lodge a complaint concerning our processing of your personal data with the Danish Data Protection Agency (Datatilsynet). You can find the contact details of the Danish Data Protection Agency on its website at www.datatilsynet.dk.

Duty to provide information – newsletter subscription

Nordahl Andersen ApS, Færøvej 3, 8700 Horsens, Denmark, CVR no. 3007 4785, is the data controller responsible for processing the personal data we have received about you. You can contact us by phone at +45 66 11 17 00 or by email at info@noa.dk regarding questions concerning the processing of your personal data.

Purpose of processing, categories of personal data and legal basis for processing

If you choose to subscribe to our newsletter, you consent to us informing you about new products, offers, inspiration and campaigns pursuant to Article 6(1)(a) of the General Data Protection Regulation.

For this purpose, we register your email address.

We also register which version of the newsletter you have chosen to subscribe to (country and customer category). This is necessary in order to adapt the language, currency and content of the newsletter pursuant to Article 6(1)(f) of the General Data Protection Regulation (legitimate interest).

We also register the name of your store where this is necessary in order to identify you among colleagues who may also be subscribed to our newsletter pursuant to Article 6(1)(f) of the General Data Protection Regulation (legitimate interest).

How long do we process your personal data?

Your information will only be processed for as long as necessary to fulfil the purposes for which it was collected. This means that your information will be retained until you choose to unsubscribe from the newsletter.

Right to withdraw consent

You may withdraw your consent at any time. You can do so by contacting us using the contact details above.

If you choose to withdraw your consent, this does not affect the lawfulness of our processing of your personal data based on the consent you previously provided and up to the point at which your consent was withdrawn. Therefore, withdrawal of consent only takes effect from the time of withdrawal.

Other recipients who may process your information

To ensure a satisfactory newsletter experience, we use a number of suppliers, including suppliers involved in newsletter management and backup of our IT systems. Your information will therefore be stored with these suppliers.

Your rights

Under the General Data Protection Regulation, you have a number of rights in relation to our processing of information about you. If you wish to exercise your rights, please contact us.

Right of access

You have the right to obtain access to the information we process about you, as well as certain additional information.

Right to rectification

You have the right to have incorrect information about yourself corrected.

Right to erasure

In certain circumstances, you have the right to have information about you erased before the time at which our normal general deletion procedure would otherwise take place.

Right to restriction of processing

In certain circumstances, you have the right to restrict the processing of your personal data. If you are entitled to have processing restricted, we may in future only process the information – apart from storing it – with your consent, for the establishment, exercise or defence of legal claims, for the protection of another person, or for reasons of important public interest.

Right to data portability

In certain circumstances, you have the right to receive your personal data in a structured, commonly used and machine-readable format and to have this personal data transmitted from one data controller to another without hindrance.

Right to lodge a complaint with the Danish Data Protection Agency

You have the right to lodge a complaint concerning our processing of your personal data with the Danish Data Protection Agency (Datatilsynet). You can find the contact details of the Danish Data Protection Agency at www.datatilsynet.dk.