1.2 The personal data policy applies to personal data which you provide us with or which we gather via Juliana Group Ltd.’s websites Juliana.com, Greenhouses.com, Hallsgreenhouses.com and Edengreenhouses.com ("the Websites").
1.3 Juliana Group Ltd. is owned 100 % by Juliana Drivhuse A/S. Juliana Drivhuse A/S is the data controller of your personal data. All enquiries to Juliana Drivhuse A/S shall be addressed to the contact details set out under item 8.
2. WHAT PERSONAL DATA WE GATHER, FOR WHAT PURPOSE AND THE LEGAL BASIS FOR OUR PROCESSING OF THIS DATA
2.1 When you visit the Websites we automatically gather data concerning you and your use of the Websites, e.g. concerning which web browser you use, what search terms you use on the Websites, your IP address including network location and information concerning your computer.
2.1.1 The purpose of gathering this data is to optimise the user experience and the functioning of the Website and to facilitate targeted marketing, including retargeting via Facebook and Google. This processing of data is necessary in order for us to be able to safeguard our interests in terms of improving the Websites and sharing relevant offers with you.
2.1.2 The legal basis of gathering this data is article 6, item 1, subparagraph f of the EU General Data Protection Regulation.
2.2 When you purchase a product or communicate with us via the Websites we gather data which you provide us with such as your name, address, email address, telephone number, payment method, information concerning which products you purchase and where applicable have returned, delivery preferences, together with information concerning the IP address via which you place your order.
2.2.1 The purpose of this is to enable us to deliver the products you have ordered and in other respects fulfil the agreement we have entered into with you, including being able to administer your right to return and make a complaint. We may also process information concerning your purchases in order to comply with statutory requirements, including with respect to bookkeeping and accounting. When you make a purchase your IP address is recorded for this purpose, and in order to safeguard our interests in terms of preventing fraud.
2.2.2 The legal basis of gathering this data is article 6, item 1, subparagraphs b, c and f of the EU General Data Protection Regulation.
2.3 When you subscribe to our newsletter we gather data concerning your email address and where applicable your name, address and mobile telephone number.
2.3.1 The purpose of this is to safeguard our interests in terms of being able to deliver newsletters to you.
2.3.2 The legal basis of gathering this data is article 6, item 1, subparagraph f of the EU General Data Protection Regulation.
3. RECIPIENTS OF PERSONAL DATA
3.1 Data concerning your name, address, email address, telephone number and order number, together with specific delivery preferences, will be passed on to a carrier which is responsible to delivery of the purchased products to you. When purchasing items which are not in stock, the aforementioned data may be passed on to the manufacturer or the seller of the product in question, who will then assume responsibility for the delivery.
3.2 Data may be passed on to external partners who process the data on our behalf. We make use of external partners for among other things technical operation and improvements to the Websites, sending out newsletters and targeted marketing, including retargeting, and for your evaluation of our company and products. Among other data your name and email address are passed on to TrustPilot such that TrustPilot is able, on our behalf, to send you an invitation to review us on TrustPilot’s website. These companies are data processors and subject to our instructions, and handle data of which we are data controllers. The data processors are not permitted to make use of the data for any other purpose than fulfilment of their agreement with us, and are subject to confidentiality requirements concerning this data. We have entered into written data processor agreements with all data processors who handle personal data on our behalf. If you choose, like in the above mentioned case, to submit a review, TrustPilot will become the data controller of the data provided to them.
3.3 Five of these data processors, Google Analytics c/o Google LLC, Facebook Inc., Mailchimp c/o The Rocket Science Group LLC, Wufoo c/o Survey Monkey Inc. and Campaign Monitor Pty Ltd. are based in the United States, Canada or Australia. The necessary guarantees for transfer of data to the United States are secured via the data processor’s EU-US certification. Privacy Shield, cf. article 45 of the EU General Data Protection Regulation or binding commercial regulations.
3.3.1 A copy of Google LLC's certification is available here: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI
3.3.2 A copy of Facebook Inc.'s certification is available here: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
3.3.3 A copy of The Rocket Science Group LLC’s certification is available here: https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active
4. YOUR RIGHTS
4.1 With a view to bringing about greater openness surrounding handling of your data we must, as a data controller, inform you concerning your rights.
4.2 Right of Access
4.2.1 At all times you have the right to request from us information concerning among other things what data we have recorded concerning you, what purpose recording this information serves, what categories of personal data and recipients of data this recording concerns, together with information concerning the origin of the data.
4.2.2 You have the right to be provided with a copy of the personal data we process concerning you. If you require a copy of your personal data you must submit a written request to email@example.com. You may be asked to prove that you are who you claim to be.
4.3 Right to Rectification
4.3.1 You have the right to have incorrect personal data concerning yourself to be rectified by us. If you become aware that there is an error in the data we have registered concerning you, you are encouraged to send us a written application to us so that the data can be corrected.
4.4 Right to Erasure
4.4.1 In certain cases you have the right to have all or specific parts of your personal data deleted by us, e.g. in the event that you revoke your consent and we have no other legal basis for continuing to process this data. To the extent continued processing of your data is necessary, e.g. in order for us to comply with our legal obligations or for the purpose of defining, advancing or defending legal claims, we are under no obligation to delete your personal data.
4.5 The right to restrict the processing for storage
4.5.1 In certain circumstances you have the right to limited processing of your personal data so that it only consists of storage, for example if you believe that the information that we hold about you is incorrect.
4.6 The right to data portability
4.6.1 In certain circumstances you have the right to have the personal data which you have supplied yourself delivered in a structured, frequently used and machine readable format and have the right to transfer this information to another data controller.
4.7 The right to object
4.7.1 At any time you have the right to object to our processing of your personal data with regard to direct marketing purposes, including the profiling that is undertaken to target our direct marketing.
4.7.2 Furthermore, you have the right at any time, for reasons that affect your personal situation, to object to the processing of your personal data, which we undertake on the basis of our legitimate interests, see point 2.1 and 2.3.
4.8 The right to withdraw consent
4.8.1 You have the right at any time to withdraw consent that has previously been given at any processing of personal data. If you wish to withdraw your consent, please contact us on firstname.lastname@example.org.
4.9 The right to complain
4.9.1 You have the right at any time to complain to Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF about our processing of your personal data. Complaints can be sent by e-mail to email@example.com or by telephone on 0303 123 1113 or 01625 545 745.
5. ERASURE OF PERSONAL DATA
5.1 Information collected about your use of the website under point 2.1 will be erased at the latest 1 year after you last used the website.
5.2 Information collected in connection with your registration to our newsletter is erased if you withdraw your consent to the newsletter, unless we have another reason for processing your data.
5.3 Data collected in connection with purchases that have been made on the website, see point 2.2, or via a retailer will be saved for up to 12 years after the end of the calendar year in which you made that purchase in order to protect your product warranty. Data can be stored for a longer period of time if we have a legitimate need for a longer storage time, for example if it is a necessary right that can be demonstrated, shown to be applicable or defended, or if storage is required for legal purposes. Your information may also be stored for a longer period of time if you give explicit and separate consent for this. Accounting records are stored for 6 years until the end of the financial year to fulfil the book keeping requirements.
6. IF YOU ARE APPLYING FOR A JOB WITH JULIANA GROUP LTD
6.1 When you apply for a job with Juliana Group Ltd., the information that you give in connection with your application will be processed. This will typically contain information such as name, address, telephone number and e-mail address, information about your educational background and your current and previous employment.
6.2 Juliana Group Ltd. will use the information to evaluate whether we would like to offer you a position and to communicate with you about the recruitment process.
6.3 If you are employed by Juliana Group Ltd., your information will be stored in accordance with our Personal Data Policy for employees, which is distributed/sent in connection with application/recruitment.
6.4 Data from applicants that are not successful is erased 6 months after the deadline for applications.
6.5 With regard to your rights and our protection of your personal data, please refer to points 4 and 7 in this policy.
7.1 We have instigated appropriate technical and organisational security measures to ensure that personal data either accidentally or illegally is not destroyed, lost, changed or damaged as well as ensuring that it is kept confidential and not misused.
7.2 Only employees that need access to your personal data to carry out their work will have access to it.
8. CONTACT DETAILS
8.1 Juliana Drivhuse A/S is the data controller for the personal data which is collected via the websites.
8.2 If you have any questions or remarks for this Personal Data Policy, or wish to exercise one or more of your rights described in point 4, please contact:
Juliana Drivhuse A/S
DK-5260 Odense S
Tel. No.: +45 66 11 18 11
9. CHANGES IN THE POLICY ON PERSONAL DATA
9.1 If we make changes to the personal data policy, you will be informed of this on your next visit to the website.
10.1 This is draft 1 of the Juliana Group Ltd.’ Personal Data Policy dated 05-15-2018.