Data Protection

**Privacy Policy**

The Livilea Webshop, operated by Livilea.dk, CVR number 37849537, based in Denmark, processes personal data from customers to fulfill and further confirm the terms and conditions required for processing electronic orders and shipments, as well as for necessary communication within the legal timeframe.

**General Provisions**

1. The controller of personal data, in accordance with GDPR (hereinafter referred to as the "Regulation"), is Livilea ApS, CVR number 37849537, based in Denmark (hereinafter referred to as the "Data Controller");

2. The contact information for the Data Controller is: email: mail@livilea.com, tel.: 35141141;

3. Personal data refers to any information relating to an identified or identifiable natural person.

**Source of Personal Data**

1. The Data Controller processes personal data obtained with the customer's consent and collected through the purchase agreement and the fulfillment of electronic orders created on the Livilea.dk webshop;

2. The Data Controller only processes identification and contact information necessary to fulfill the purchase agreement;

3. The Data Controller processes personal data for shipping, accounting purposes, and necessary communication between the contracting parties within the legally required time frame. Personal data will not be disclosed or transferred to other countries.

**Purpose of Data Processing**

The Data Controller processes the customer's personal data for the following purposes:

1. Registration on the Livilea.dk website in accordance with Chapter 4, Section 2 of the GDPR;

2. Fulfillment of the electronic order created by the customer (name, address, email, phone number);

3. Compliance with laws and regulations arising from the contractual relationship between the customer and the Data Controller;

4. Personal data is required to fulfill the purchase agreement. The agreement cannot be concluded without the personal data.

**Duration of Personal Data Storage**

1. The Data Controller stores personal data for the period necessary to fulfill the rights and obligations arising from the contractual relationship between the Data Controller and the customer, and for 3 years after the contract is concluded;

2. The Data Controller will delete all personal data after the required retention period has expired.

**Recipient and Processor of Personal Data**

Third parties who process customer personal data are subcontractors of the Data Controller. The services of these subcontractors are essential for the successful fulfillment of the purchase agreement and processing of the electronic order between the Data Controller and the customer.

Subcontractors of the Data Controller are:

- Webnode AG (e-shop system);

- Shipping company: GLS;

- Google Analytics (website analysis);

**Customer Rights**

In accordance with the Regulation, the customer is entitled to:

1. The right to access personal data;

2. The right to correct personal data;

3. The right to delete personal data;

4. The right to object to the processing of personal data;

5. The right to data portability;

6. The right to withdraw consent to the processing of personal data in writing or by email sent to mail@livilea.dk;

7. The right to lodge a complaint with the supervisory authority in the event of suspected violation of the Regulation.

**Security of Personal Data**

1. The Data Controller declares that all technical and organizational measures necessary for the protection of personal data have been taken;

2. The Data Controller has implemented technical measures to secure data storage areas, particularly by securing access to computers with a password, using antivirus software, and regularly maintaining computers.

**Final Provisions**

1. By placing an electronic order on the Livilea.dk website, the customer confirms that they have been informed of all conditions regarding the protection of personal data and fully accept them;

2. The customer accepts these rules by ticking the checkbox in the order form;

3. The Data Controller may update these rules at any time. The new, updated version will be published on the website.

These rules take effect on 01/10/2024.