1. Data controller
A. GAMBORG APS (CVR 35667326), Hovedgaden 52B, 3320 Skævinge, is the data controller for the processing of your personal data. Contact: anders@agamborg.dk.
2. Information collected
- Contact details: Name, email, address, phone number.
- Transaction data: Purchase history and payment details (encrypted).
- Technical data: IP address and browser data (via necessary cookies).
3. Purpose of processing
- Order handling, customer service and fulfilment of contract.
- Marketing is only sent with your explicit consent.
- Service improvement via anonymised analytics.
4. Your rights (GDPR)
- Access: Request a copy of your data.
- Rectification: Have incorrect information corrected.
- Erasure: Demand deletion ("right to be forgotten").
- Objection: Opt out of marketing or profiling.
- Data portability: Receive your data in a machine-readable format.
5. Retention
- Data is only retained as long as necessary — e.g. 5 years for accounting data under Danish bookkeeping law.
- Data is deleted automatically once the purpose has expired.
6. Security
- Data is encrypted in transit (TLS/SSL) and stored on EU-based servers.
- Access is restricted to authorised personnel via strong passwords and two-factor authentication where possible.
7. Third parties
- Data is only shared with processors under written data processing agreements (e.g. suppliers, payment gateways).
- No transfer to third countries without an adequate level of protection (Standard Contractual Clauses or adequacy decision).
8. Cookies
- We use cookies for functional and analytical purposes.
- You can reject non-essential cookies via your browser settings.
9. Contact and complaints
- Questions or complaints: anders@agamborg.dk.
- Complaint to the Danish Data Protection Agency: www.datatilsynet.dk.