Privacy Policy
ASTARRI A/S, Egeskovvej 29, DK-8700 Horsens, company registration no. 46481410, is the Data Controller of personal data covered by the privacy policy. In the following ASTARRI A/S is referred to as “ASTARRI”.
ASTARRI takes privacy and security concerns seriously and it is important to us to ensure your personal data is protected when using our services.
Our privacy policy sets out how and why we collect, store, process and share your personal data. Our privacy policy informs you about your rights in relation to the personal data you share with us.
ASTARRI collects, stores, processes and shares your personal data in accordance with applicable data protection law.
ASTARRI’s collection of personal data
Customer service
If you contact our customer service team, we will process the personal data you provide us with. Furthermore, we process all your order information, so we can help you in the best possible way, whether you have questions about or related to the FRANDSEN product you have purchased or if you have any complaints.
The legal basis for the processing is partly the contractual necessity, cf. GDPR, art. 6 (1)(b), partly our legitimate interest in providing you with an optimal service, cf. GDPR, art. 6 (1)(f).
Improvement of your user experience
ASTARRI constantly strives to give you the very best user experience on our website. We do that in different ways, but an important part of it is being able to track your browsing on our site. We do that by using cookies. You can read more about cookies in our cookie policy.
Information obtained via cookies is processed for marketing purposes based on your consent, cf. GDPR article 6 (1) (a).
Competitions
If you participate in competitions/events arranged by us, you may need to submit additional information depending on the nature of the competition/event. We use this information to complete the competition/event, draw winners and distribute any prizes. Winners may be published in our communications, on our websites or social media profiles.
Our legal basis for processing your personal data in relation to competitions/events is your consent, cf. GDPR article 6 (1) (a). Any publishing of winners is based on our legitimate interest in documenting the winners towards all participants, cf. GDPR article 6 (1) (f).
Newsletter
When you sign up to our newsletter, we process information about your name and e-mail address. The purpose of our processing is to provide you with our newsletter.
The legal basis for the processing is your consent, cf. GDPR, art. 6 (1)(a). A consent to receive newsletters can be withdrawn at any time.
Other contact
When you contact us, we process the personal data you provide us with.
Furthermore, we process information about your name and other personal data you provide us with when engaging with our social media platforms.
The purpose of the processing is to fulfil your request and provide you with an optimal service.
The legal basis for the processing is our legitimate interest in fulfilling your request, cf. GDPR, art. 6 (1)(f).
Fraud prevention
We use the personal data submitted by you when you place an order for fraud detection and fraud prevention purposes. For those purposes we may also receive additional information from our payment solution partners.
The legal basis for the processing is our legitimate interest in prevention and detecting fraud, cf. GDPR, art. 6 (1)(f).
Regulatory requirements
We use and store your personal data in order to comply with regulatory requirements, e.g. bookkeeping regulations.
The legal basis for the processing is our legal obligations, cf. GDPR, art. 6 (1) (c).
Security
ASTARRI has implemented several security measures to protect your personal information from being destroyed, lost/modified, unauthorized disclosure and accidental access. We always strive to protect your personal data in the best possible way.
Sharing Personal data other companies
We share your personal data with third parties who work with us to provide products and services. We share your personal data with the following categories:
Suppliers (e.g. warehouse partners, payment solution suppliers, carrier partners, customer service suppliers)
Affiliates – companies within our group (for internal business purposes, including e.g. technical operations)
Public and governmental authorities, if required by law
Some of these parties are “data controllers” and others are “data processors”. Data processors are only allowed to process personal data on behalf of us and according to our instructions. Data controllers are directly responsible for the processing of personal data and they are prohibited by contract from using or disclosing personal data for any purpose other than to provide this assistance, except to the extent required by law.
Transferring data outside the EEA
Some personal data may be handled by suppliers (data processors) outside the EEA. In such case we always ensure that personal data is still governed by an adequate level of data protection. Currently, some of our partners are located in the USA and the data transfers are safeguarded by the EU-US Data Privacy Framework or the EU Commission’s Standard Contractual Clauses.
In addition, some of our suppliers (data processors) may use subcontractors (sub-processors) located outside the EEA. In such case, our partner is obligated to keep personal data equally safeguarded. If you want specific information about our non-EEA partners or sub-processors, please contact GDPR@astarri.com.
Storage Period
We store and process personal data as long as it is necessary to meet the above-mentioned purposes or as long as required by law. The storage period depends on the nature of the data and the purpose for storing the data.
Personal data on newsletters subscribers are saved until the user unsubscribe from the newsletter and requests data deleted. However, information about consent will be stored for a period of 2 years for documentation purposes.
Information may be stored for a longer period if we are required to do so in order to comply with legal requirements or in order to establish, exercise or defend legal claims.
Right of Access
You have a number of rights in connection with our processing of your personal data.
Access Right
You are entitled to get access to and copy of your personal data that has been processed by us.
Right to be forgotten
You are under certain conditions entitled to be forgotten, meaning you can file a request asking that we delete all personal data we have registered about you.
Right to restriction
You are under certain conditions entitled to demand that we limit our processing of your personal data.
Right to object
You are under certain conditions entitled to object to our processing of your personal data.
Right to rectification
You are entitled to have incorrect personal data corrected.
Right to data portability
You are under certain conditions entitled to demand that we transmit your personal data to you or another data controller in a structured, commonly used and machine-readable format (“data portability”)
Withdrawal of consent
You may at any given time withdraw your consent to our processing of your personal data when our processing is based on your consent.
Complaints
If you wish to lodge a complaint about how we handle your personal data, you can always contact our customer service team. You can also file a complaint with your local data supervisory authority.
Policy changes
ASTARRI’s privacy policy will be updated continuously, so please keep updated with the latest version of our privacy policy when using our services.
Contact
Feel free to contact us if you have any questions regarding the protection of your personal data or wish to use your rights under it. You can contact us at GDPR@astarri.com.