§ 1. Data Controller

1.1. ESME is the data controller for the processing of personal data collected through the webshop and in connection with the purchase of goods.

ESME
Dagmarsgade 9, 1.
2200 Copenhagen N
Email: contact@esmecph.com

 

§ 2. Purpose of Processing Personal Data

2.1. ESME processes personal data for the following purposes:

• Processing and delivering customer orders
   

• Customer service and communication
   

• Compliance with bookkeeping and accounting obligations
   

• Operation and security of the webshop (hosting, technical functionality, and necessary cookies)
   

2.2. ESME does not send newsletters but uses Google Analytics for marketing, marketing analysis, and statistical purposes.

 

§ 3. Categories of Personal Data

3.1. ESME may process the following categories of personal data:

• Identification data: name, address, email, telephone number
   

• Order information: purchase history, delivery details
   

• Technical data: IP address, browser information, cookies (necessary, analytical, and marketing cookies)
   

• Payment data (processed exclusively by third-party payment providers, including Stripe; ESME does not have access to card information)
   

 

§ 4. Legal Basis for Processing

4.1. Processing is based on the following legal grounds:

• Performance of a contract, GDPR Art. 6(1)(b): order handling and delivery
   

• Legal obligation, GDPR Art. 6(1)(c): accounting and recordkeeping
   

• Legitimate interest, GDPR Art. 6(1)(f): webshop operation, security, and internal administration
   

 

§ 5. Data Retention

5.1. Personal data is retained only for as long as necessary for the purposes stated.

5.2. Accounting records are stored for up to 5 years in accordance with Danish bookkeeping legislation.

5.3. Customer service correspondence is stored for up to 2 years.

5.4. Technical data and cookies are retained according to their specific expiration periods.

 

§ 6. Disclosure of Personal Data

6.1. Personal data is only disclosed when necessary for order processing or when required by law.

6.2. Disclosure may occur to:

• Payment providers, including Stripe
   

• Shipping and logistics partners
   

• The hosting provider WIX, acting as a data processor
   

• Bookkeeping or auditing providers where relevant
   

6.3. WIX may process data outside the EU/EEA. Such transfers rely on approved mechanisms such as Standard Contractual Clauses (SCC).

 

§ 7. Cookies

7.1. ESME uses necessary, analytical, and marketing cookies through Google Analytics, which supports both functionality and marketing activities.

7.2. Google Analytics collects behavioural data for marketing, marketing analysis, and statistical purposes.

 

§ 8. Security Measures

8.1. ESME processes personal data confidentially and implements appropriate technical and organizational safeguards, including:

• SSL encryption
   

• Access control
   

• Secure hosting via WIX’s infrastructure
   

 

§ 9. Customer Rights

9.1. Customers have the following rights under GDPR:

• Right of access
   

• Right to rectification
   

• Right to erasure
   

• Right to restriction of processing
   

• Right to object
   

• Right to data portability
   

• Right to lodge a complaint
   

9.2. Complaints can be submitted to:

The Danish Data Protection Agency
Carl Jacobsens Vej 35
2500 Valby
www.datatilsynet.dk

 

§ 10. Hosting and Data Processors

10.1. The webshop is hosted on WIX, which acts as a data processor on behalf of ESME.

10.2. WIX processes data in accordance with GDPR and implements recognized security standards.

 

§ 11. Amendments to the Privacy Policy

11.1. ESME reserves the right to amend this Privacy Policy due to legal changes, operational needs, or internal considerations.

11.2. The applicable version will always be available on the webshop.

 

This Privacy Policy applies to all processing of personal data carried out by ESME in connection with the operation of the webshop.