PRIVACY POLICY
1. Purpose of policy
1.1. The purpose of the privacy policy is to make you aware of how hummel Cenozoic ApS and in some cases hummel A/S (“we”, “us”) process personal data. With this policy we want to inform you which personal that are collected and processed, and as far as possible how long personal data are stored. The privacy policy regards processing of personal data in hummel Cenozoic ApS and in some cases hummel A/S, when you enter into contracts, interacts or in any other exchange personal data with us.
2. What your personal data is used for
2.1. hummel Cenozoic ApS process your personal data for one or more specific purposes according to the data protection regulations. We process if you are our customer, business partner, vendor, visit our website or our social media, or if you sign up for our newsletter. As an overriding rule, the information will mostly come directly from you, and we only process your personal data as long as it is necessary to the purpose in which they were collected. However, personal data can in some cases be processed and stored longer for hummel’s legitimate interests in daily operations or in anonymous form.
For more information about the different types of processing that we make, read below
2.1.1. Cookies and website
During daily operations of our website we collect personal data about you through cookies to improve the experience with the website and to make statistics. Information that we collect through cookies includes your IP-address, type of browser, your operating system, your interaction with advertisements and the websites you visit. You give your consent according to the cookie regulation, and further consent according to the data protection regulations (GDPR art. 6(1)(a)) to the further processing of your information.
We have pixels from social media among others on our website, which can collect data about you, if you give consent according to GDPR art. 6(1)(a). We use pixels from Facebook, Instagram, Youtube, TikTok and Twitter. We have a joint controllership with each media. You can read about this below in section 2.1.2 Social media.You can contact us through our contact form on our website. In this case, we process your personal data for our legitimate interest in order to respond according to GDPR art. 6(1)(f). We process name, email and information about your request. You also have the opportunity to write in a free text box, however we discourage you to write any personal data in this box, unless it is relevant to the request.
Personal data that we process through the contact form are ongoing deleted and latest 5 years after the latest contact.
2.1.2. Social media
We use some social media; Facebook, Instagram, YouTube and Twitter to interact with our existing and potential customers and to promote our marketing. If you have visited and “liked” our fan page on the social media or have been in contact with us at the media, we inevitable process your personal data. In this case, we only process information about your name, email and other information collected through cookies from the social media and eventually your purchases if this appears from the context.
If you contact us through social media, we process your personal data according to our interest in contacting and replying to your request (GDPR 6(1)(f)). The information will be collected from you as a data subject as well as the social media where you reached out to us.
We have a joint controllership with the social media platforms that we use, because we have joint purposes in processing your personal data. You can read more about the social medias processing of your personal data in the links below:
- Facebook og Instagram’s processing of your personal here and about the joint controllership here and here.
- YouTubes (Googles) processing of your personal data here.
- TikToks processing of your personal data here and about the joint controllership here.
Personal data that is processed that regards direct communication on social media are deleted immediately after the end of the conversation. Posts on e.g., Facebook pages or in public groups are not deleted due to the public nature of posts and comments. Read more about the public nature of posts etc. here.
2.1.3. Marketing
We only process your personal data for the purpose of marketing if you have given your consent according to GDPR art. 6(1)(a). This purpose can contain receiving newsletters about apparel, footwear, bags, accessories, sports articles, as well as information about the company hummel Cenozoic ApS or hummel’s activities and news about new collections, offers, sale, competitions, and other marketing initiatives. The extent of our processing of your personal data will appear in the specific consent.
We send you marketing by email, text messages on phone and on social media (Instagram, Facebook, Youtube, TikTok, Twitter). For more information about the social media’s processing of your personal data, read section 2.1.2 in this policy.
We can use your browser history as well for the purpose of marketing of our products on social media if you have given consent according to GDPR art. 6(1)(a). In some cases, we can supplement our information about you with the information that you give us, e.g., information about your preferences and demographic information as your sex, birthdate, and address for the purpose of profiling, so we can make our marketing efforts as relevant as possible for you. This happens on the basis of your consent according to GDPR art. 6(1)(a). If you are an existing customer, please view the section regarding profiling and our legal basis for this purpose in section 2.1.4 Private Customers below.
If you have given your consent to receive marketing material from us, we as a rule only process the following personal data: your name, email, history of purchases and browser history.
You can at any time withdraw your consent for marketing purposes by using link in the received newsletter, text messages and the like or by sending an email to support@newlinesport.com or call us at +45 88 70 49 61.We store documentation for your consent as long as you receive marketing material from us or participate in our marketing, and 2 years after that you have withdrawn your consent due to the limitation deadline for eventual liability that hummel may be accounted for. If your information in clubhummel is used for the purpose of marketing, we will collect your consent according to GDPR art. 6(1)(a).
2.1.4. Customer relations
Business customer
In connection with wholesale of products to business customers, hummel Cenozoic ApS, hummel A/S or other parts of the hummel group process personal data about business customers’ contacts to pursue its legitimate interests in daily operations according GDPR art. 6(1)(f). This information includes contact information such as name, company name, email, address, phone number and history of purchase and payment details.
Information will be deleted on a continuous basis, at its latest 5 years after a customer relationship has been terminated. Local bookkeeping regulations can extend this period even further.
Private customers
hummel Cenozoic ApS process your personal data as a private customer when you are customer at our E-shop. We process your personal data in connection with sale of products to enter and fulfil a contract with you (GDPR art. 6(1)(b)). These personal data include name, email, address, phone number and history of purchases and payment details.
Information will be deleted on a continuous basis, at its latest 5 years after a customer relationship has been terminated. Local bookkeeping regulations can extend this period even further.
In some cases, we can supplement our information about you with the information that you give us, e.g., information about previous purchases and demographic information as your sex, birthdate, and address for the purpose of profiling, so we can make our marketing efforts as relevant as possible for you. This happens according to our legitimate interest (GDPR art. 6(1)(f)) because we assess that our interest in offering you the best service overrides your interest in not having your non-special categories processed by us. However, you always have the possibility to get an assessment whether you can get access to your data or/ and get them deleted. Read more about your rights in section 4 below.
2.1.5. Marketplaces
hummel Cenozoic ApS also distributes products through different online marketplaces and this includes processing of personal data: name, birthdate, email, address, payment details and information about order (style and size) (GDPR art. 6(1)(b)).
2.1.6. Vendors and business partners
When we enter contracts with vendors and business partners, we process personal data of the contacts at our partners. This includes information as name, position, phone number, email and if necessary, payment details.
The personal data are either processed, because it is necessary for the performance of the contract with the vendor or business partner (GDPR art. 6 (1)(b)) or because we have legitimate interests in processing the contact’s contact information due to the contract (GDPR art. 6(1)(f)).
We store relevant contact information as long as the business relationship continues. Written correspondences are deleted in a continuous basis, and information that is necessary to fulfil legal obligations according to bookkeeping regulations are stored according to applicable law.
3. Recipients of personal data
3.1. We process your personal data in confidence. However, we can share your personal data, if you have given your consent or we have a legitimate interest and reason to share them.
The information that we have collected on the basis of your consent for the purposes listed in the above section 2.1.1, 2.1.2 and 2.1.3, we can give to third parties, who have the same purposes as us. Do you choose to withdraw your consent, we will of course notify third parties, so future processing also stops here. A list of relevant third parties are available here.
3.2. We can let vendors/ data processors of systems and the like process personal data on our behalf according to our specific instructions given in the entered data processing agreement.
3.3. Some of our data processors, and the social media mentioned above, is either located or transfers personal data outside EU. If this happens, we have ensured an adequate transfer tool, including the European Commission’s standard contractual clauses regarding transfers of personal data outside EU.
4. Your rights according to GDPR
4.1. When we collect and process personal data about you, you have a set of rights according to the data protection regulation. Your rights include the right of access to information about you, the right to rectification or to be forgotten (erasure), restriction of and objection to our processing, and the right to receive your information in a structured and readable format (data portability).
4.2. The rights mentioned above can be subject to circumscription. Whether you as a data subject can make use of your rights, will be assessed at each individual request.
4.3. If you have given consent to our processing of your personal data, you can at any time withdraw your consent. If you wish to withdraw your consent, you can send an email to support@newlinesport.com or call us at +45 88 70 49 61
4.4. If you are not satisfied with our processing of your personal data, you can make a formal complaint to The Data Protection Agency through their website English (datatilsynet.dk) or by calling them at +45 33 19 32 00.
5. Data Controllers and contact info
The data controller for the processing of your personal data:
hummel Cenozoic ApS
CVR.nr: 43317032
Balticagade 20, 8000 Aarhus C
Denmark
If you have any questions regarding our processing of your personal data, you can contact us at support@newlinesport.com or call us at +45 88 70 49 61
Data Controller | Responsible for |
hummel Cenozoic ApS Company registration number: 43317032 |
All online activities on following sites: Hummel
NewlineHalo NewlineSport
Sometime Soon |
6. Changes and updates
6.1. We reserve the right to update and change these guidelines for processing of personal data. In case of essential changes, we will contact you by email or make an announcement of our website.
6.2. This privacy policy is recently updated 04 december 2023.
Personal data for third parties
Information we have collected on the basis of your consent for the purposes listed in section 2.1.1, 2.1.2 and 2.1.3 of our Privacy Policy, can be shared with certain third parties, who have the same purposes as us. Do you choose to withdraw your consent, we will of course notify the third parties, so future processing also stops here. Below is a list of relevant third parties:
- Youtube
- X (Twitter)
- Tik Tok
- tv2.dk
- BT
- Ekstra Bladet
- Jyllands Posten
- Politiken