Privacy policy

Privacy Policy for visits to our website, in our stores, for purchases of goods and use of our services

This privacy policy is effective from June 2025 and replaces all previous versions of Cartel Copenhagen's privacy policy.

We are pleased with your interest in Cartel Copenhagen ("Copenhagen Cartel", "Cartel", "we", "us", "our"). Cartel Copenhagen is owned by Aktieselskabet Th. Wessel & Vett. Magasin du Nord.

We take the protection of your personal data seriously. In this privacy policy, you can read more about how we process your personal data in connection with your visit to our website, our social media pages, as well as when you make purchases, and what rights you have in this regard.

1. We are the data controller – how do you contact us?

We are the data controller for the processing of the personal data that we process about you. You can find our contact information below:

Copenhagen Cartel ApS
Kongens Nytorv 13
1050 København K
CVR-nr. 41 07 98 51

Email address: privacy@magasin.dk

2. What are the purposes and legal basis for the processing of your personal data?

We process your personal data for the following purposes and on the following legal basis:

2.1 When you visit our website and interact with our newsletters and push notifications

We process information about you in order to make our website usable by activating basic functions such as navigation on the site (necessary cookies), in order to show the version of our website that matches your preferences, for example which region you prefer (functional/personalized cookies), in order to conduct surveys, statistics and analyses when using our platforms (statistical cookies) and in order to personalize content and target advertisements on our and others' websites to you (marketing cookies).

The legal basis for processing your personal data in connection with functional/personalized cookies, statistical cookies and marketing cookies is your consent, cf. Article 6(1)(a) of the Data Protection Regulation.

The legal basis for processing your personal data in connection with necessary cookies is our legitimate interest in activating basic functions on our website, cf. Article 6(1)(f) of the Data Protection Regulation.

In connection with the processing of information about you for these purposes, we use cookies and similar tracking technologies to understand your behavior as a user. You can read more about our use of cookies and similar technologies in our cookie policy.

2.2 Delivery of the goods you purchase and the services you use

This includes fulfilling our legal obligations to process, including store, personal data in relation to the delivery of goods and services.

The legal basis for the processing is our agreement with you regarding the purchase of goods or delivery of other services, cf. Article 6(1)(b) of the Data Protection Regulation, as well as our legal obligations, including to maintain bookkeeping in accordance with the Bookkeeping Act, cf. Article 6(1)(c) of the Data Protection Regulation.

2.3 Communication with you

This includes when you contact us, as well as in connection with your participation in our competitions outside of social media.

The legal basis for the processing is our legitimate interests in i) being able to respond to your inquiry and keep statistics in this regard, and ii) conduct competitions, cf. Article 6(1)(f) of the Data Protection Regulation.

2.4 Marketing on social media

This includes responding to your inquiries, allowing you to participate in our competitions and contacting you if you win.

The legal basis for the processing is our legitimate interest in marketing Cartel through Cartel's presence on social media, which customers often already use, cf. Article 6(1)(f) of the Data Protection Regulation.

In this connection, we have emphasized that the processing of information about you for the purpose of marketing Copenhagen Cartel will not lead to exclusion or discrimination against you. In addition, it is not likely that this processing will evoke negative feelings in you or result in disproportionately negative consequences, as the marketing will include limited information about you, cf. section 3.2 below. Furthermore, we have emphasized that the collected information originates from a previous or current customer relationship, visits to our website or participation in our competitions, which justifies the processing of information about you. By weighing these factors against your interest in this processing not occurring, we have concluded that we have a sufficiently compelling and legitimate interest in carrying out the relevant processing to base the processing on Article 6(1)(f).

If you have given separate consent in connection with your participation in one of our competitions, the legal basis for processing your personal data is, however, your consent, cf. Article 6(1)(a) of the Data Protection Regulation.

2.5 Establish, exercise or defend our legal rights

This includes combating fraud and documenting events on our platforms.

The legal basis for this processing is our legitimate interest in safeguarding our legal rights, cf. Article 6(1)(f) of the Data Protection Regulation and section 8(3), 2nd sentence of the Data Protection Act.

2.6 Analysis and statistics

We analyze and keep statistics on our customers' purchases and preferences in order to gain a better understanding of this group's interests and patterns.

The legal basis for this processing is our legitimate interest in getting to know our customers better at an overall level, so that we can best identify new groups of customers and organize our website in a way that interests visitors, cf. Article 6(1)(f) of the Data Protection Regulation. We have also emphasized that the information is aggregated for analysis and statistical purposes and thus not used for profiling or direct marketing to individual customers.

2.7 Sending marketing

We send marketing if you have given us your consent to do so, so that we can send offers and other relevant communication to you and target these approaches to you. The legal basis for the processing is your consent to this.

Certain personal data processed for this purpose may be collected via cookies, if you have given separate consent to this. You can read more about our use of cookies on the website in our cookie policy.

3. What personal data do we process about you?

3.1 For the purposes mentioned in sections 2.1, 2.2 and 2.3 above

Depending on your use of the website, we process general personal data about you, for example:

Name and address
Email and phone number
Order information, purchase history and case numbers
Information you provide in connection with your communication with us
Information about your activity on our platforms, including which pages you visit, which products you click on and put in the basket, and how you interact with our communication
Information collected via cookies to the extent that you have separately consented to our use of cookies

3.2 For the purpose mentioned in section 2.4

We process the following general information about you:

Information you provide in connection with your communication with us, including your reactions to, sharing of and comments on our posts on social media
Information you provide in connection with your participation in competitions
Information you have made available via settings on the individual social media

3.3 For the purpose mentioned in section 2.6

We may process the information mentioned above in sections 3.1-3.2.

3.4 For the purposes mentioned in section 2.7

In addition to the information mentioned above in sections 3.1 and 3.2, we may process the following information about you:

Date of birth
Gender
Information collected in connection with our communication with you

4. Who do we share your personal data with?

We share information about you with our external partners who process the information on our behalf. The information we have collected about you is only shared to the extent necessary to fulfill the agreement with each individual partnership:

Providers who assist with technical operation of our website and our apps, including providers of hosting services and solutions that support functionality
Providers who assist with marketing activities and communication with customers
Providers of analysis tools that help us optimize our business and your experience as a customer
Partners who assist with the operation of customer service, including regarding delivery of goods from the webshop
Partners who assist with handling personal data security

These partners are data processors and process personal data for which we are data controllers according to our instructions. The data processors may not use the information for any other purpose than fulfilling their agreement with us, and must treat the information confidentially. We have entered into written data processing agreements with all our data processors.

Individual partners to whom we transfer your personal data are independent data controllers. This means that they process your data in order to deliver their service or similar, without being able to be said to be subject to our instructions. This could, for example, be our external warehouse that packs and ships your order.

When we enter into advertising partnerships with, for example, social media, we have the opportunity to pass on certain information about customers and visitors to the individual social media, if we assume that these customers and visitors belong to target groups at the media or exhibit certain characteristics (for example, age group, interest or geographical location).

You can always reach out to us if you have questions about this, just as you can read more about the below-mentioned social media's processing of personal data for marketing purposes in their privacy policies, which you can find here:

Facebook: https://www.facebook.com/privacy/explanation
Instagram: https://help.instagram.com/155833707900388
Youtube: https://www.youtube.com/intl/ALL_dk/howyoutubeworks/our-commitments/protecting-user-data/
LinkedIn: https://dk.linkedin.com/legal/privacy-policy
TikTok: https://www.tiktok.com/legal/page/eea/privacy-policy/da

We may also share personal data with our external advisors, e.g. auditors and lawyers, as well as public authorities, if required by law.

5. When do we transfer your personal data to countries outside the EU/EEA?

We will transfer your personal data to recipients outside the EU/EEA. This concerns the following categories of recipients:

Providers who assist with marketing activities and communication on our technical systems
Providers of analysis tools that help us optimize our business and your experience when using our website and services
Providers who assist with technical operation of our website and our apps, including providers of hosting services and solutions that support functionality

For transfers to recipients outside the EU/EEA, we ensure that there is a valid transfer basis. This means that if the recipient is not located in a country outside the EU/EEA that has been assessed as a "safe third country", we ensure the protection of your personal data by using standard contracts approved by the EU Commission or the Data Protection Authority or the EU – U.S. Data Privacy Framework program (DPF). This ensures that your rights and level of protection follow your personal data. If you want a copy of the standard contract terms or a list of our current data processors and sub-data processors, you are welcome to contact us via the contact information in section 1 above.

6. Where do your personal data come from?

We process the personal data you give us, as well as the personal data about you that is collected automatically, including through your digital behavior (including cookies).

7. How long do we store your personal data?

7.1 General principle

We store your information for as long as it is necessary.

7.2 Purchases and communication

Information about purchases and communication with us about this will generally be deleted 2 years after your purchase in accordance with the Sale of Goods Act's complaint period. Information may be stored for a longer period if this follows from legal requirements, including the Bookkeeping Act's requirement to store transaction information for the current year + 5 years, or if we can demonstrate a legitimate need to store the information for a longer period, for example to establish legal claims.

Information that you provide in connection with your communication with us via our website or social media, and which does not concern purchases, is stored as long as there is a purpose for this and depends on the nature of the inquiry.

7.3 Surveys, statistics and analyses

Information collected for use in surveys, statistics and analyses is deleted after 2 years.

The result of certain statistical surveys or analyses may be aggregated information, in which case it will no longer be personal data.

7.4 Competitions

Information we receive from you in connection with your participation in competitions is deleted 6 months after the competition is held. Information about prizes is deleted 1 year after the competition is held, but only after the current year + 5 years, to the extent that transactions are involved.

7.5 Social media

Information you provide on Copenhagen Cartel's social media remains on the relevant social media unless you delete it yourself.

7.6 Cookies

Regarding deletion of information originating from cookies, reference is made to our cookie policy.

8. How do we contact you about changes in the processing of your personal data?

You can always follow any changes in our processing of your information via our privacy policy on copenhagencartel.dk. We encourage you to stay informed regularly, so that you always know how we process your personal data.

9. What rights do you have?

According to the Data Protection Regulation, you have a number of rights in relation to our processing of information about you:

You have the right to access the information we process about you, as well as a number of additional information
You have the right to rectification of your personal data
In certain cases, you have the right to have the processing of your information restricted to only consist of storage
In certain cases, you have the right to transmit information, i.e. you can have your personal data delivered or transferred to another data controller

In special cases, you have the right to have information about you deleted before the time for our ordinary general deletion occurs, and in certain cases you have the right to object to our processing. You always have the right to withdraw given consent to processing of personal data by writing to us at the email given in section 1 above. Note that if you ask us to delete your information or withdraw your consent to subscribed services, this will mean that certain services cannot be delivered.

If you choose to withdraw your consent, it does not affect the lawfulness of our processing of your personal data based on your previously given consent up to the time of withdrawal. If you withdraw your consent, it therefore only takes effect from this point forward.

You can read more about your rights in the Data Protection Authority's guidance on data subjects' rights, which you can find at www.datatilsynet.dk.

You are also always welcome to contact privacy@magasin.dk if you have questions about the processing of your personal data.

10. Complaint to the Data Protection Authority

You have the right to file a complaint with the Data Protection Authority if you are dissatisfied with the way we process your personal data. You can find the Data Protection Authority's contact information at www.datatilsynet.dk.