GDPR Compliance

Last updated: January 2024

Our Commitment to GDPR

Nordic Curtains is fully committed to compliance with the General Data Protection Regulation (GDPR). As a company operating within the European Union, we recognise the importance of protecting personal data and respecting individual privacy rights.

Your Rights Under GDPR

The GDPR provides you with specific rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of your request.

Right to Rectification

If any personal data we hold is inaccurate or incomplete, you have the right to request correction. We will address such requests promptly.

Right to Erasure

Also known as the right to be forgotten, you may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose or you withdraw consent.

Right to Restrict Processing

You may request that we limit how we use your data while we address your concerns about accuracy or our legal basis for processing.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format and to transmit it to another controller where technically feasible.

Right to Object

You may object to processing of your personal data based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that significantly affect you. We do not currently use automated decision-making systems.

How We Process Your Data

We process personal data only when we have a valid legal basis:

• When you have given consent for specific purposes
• When necessary to fulfil a contract with you
• When required to comply with legal obligations
• When necessary for our legitimate business interests, provided these do not override your rights

Data Protection Measures

We implement appropriate technical and organisational measures to ensure data security:

• Secure data storage with access controls
• Encryption of sensitive data in transit
• Regular security assessments and updates
• Staff training on data protection practices
• Clear data handling procedures

Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Danish Data Protection Agency within 72 hours. If the breach is likely to result in a high risk to you, we will also inform you directly.

International Data Transfers

We primarily process data within the European Economic Area. Any transfers to third countries are conducted with appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission.

Data Protection Officer

While not legally required for our organisation size, we have designated a privacy contact to handle data protection matters and enquiries.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us using the details below. We may need to verify your identity before processing your request. There is no charge for most requests, though we reserve the right to charge a reasonable fee for manifestly unfounded or excessive requests.

Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet):

Datatilsynet
Carl Jacobsens Vej 35
2500 Valby, Denmark
Website: datatilsynet.dk

Contact Us

For any questions about GDPR or to submit a data protection request:

Nordic Curtains
Vesterbrogade 42, 3rd Floor
1620 Copenhagen V, Denmark
Email: [email protected]