Who we are
1.1 This policy on the processing of personal data (“Privacy Policy”) describes how Sarah Vium (“Sarah Vium”, “us”, “our”, “we”) collects and processes information about you.
1.2 The Privacy Policy applies to personal data that you provide to us or that we collect via Sarah Vium’s website (“Website”). The websites include sarahvium.com and sarahvium.dk.
1.3 Sarah is the data controller for your personal data. All inquiries to Sarah can be made via contact@sarahvium.com.
2. What personal data we collect, for what purposes, and the legal basis for processing
2.1 When you visit the Website, we automatically collect information about you and your use of the Website, such as the type of browser you use, the search terms you use on the Website, your IP address, including your network location, and information about your computer. Additionally, Sarah Vium’s Cookie Policy applies when you use Sarahvium.com.
The purpose is to optimize the user experience and functionality of the Website, generate useful and accurate statistics, respond to your questions via our chat function, and, based on the information we receive from you through your use of the Website, perform personalized marketing, including retargeting via Facebook, Instagram, Pinterest, Snapchat, Google, and YouTube, if you have consented to marketing cookies.
The legal basis for processing is your consent to our use of cookies and the EU General Data Protection Regulation (GDPR) Article 6(1)(a), your consent to chat with our customer service under GDPR Article 9(2)(a) and Article 6(1)(a), as well as our legitimate interest in improving our Website and being as relevant as possible in our marketing under GDPR Article 6(1)(f).
2.2 When you purchase a product, we collect the information you provide, such as name, address, email address, phone number, payment method, details of the products you purchase and may return, delivery preferences, and the IP address from which the order was placed. This processing of information is carried out to deliver the products you have ordered and otherwise fulfill our agreement with you, including managing your rights to return and complain, as well as contacting you regarding your order. Information about your purchases may also be processed to comply with legal requirements, including bookkeeping and accounting, as well as for targeted marketing if permitted. The IP address is collected to prevent fraud. Additionally, we collect information on how you have interacted with emails, SMS, website, and app push notifications to document receipt of order confirmations and information about your orders and improve your interaction with our products.
The legal basis for processing is GDPR Article 6(1)(b), (c), and (f).
3. Recipients of Personal Data
3.1 We may share your information with our affiliated companies for internal administrative purposes, business intelligence, analysis, and statistics to offer you the best possible service and tailor our content, products, and services to present the best possible offers to you.
The legal basis for processing is GDPR Article 6(1)(f), regarding legitimate interest, and our legitimate interest is to operate and develop the best possible digital book business and platform, as well as to market our products and services across our group companies.
3.2 Information about your name, address, email, phone number, order number, and specific delivery preferences is shared with the carrier responsible for delivering the purchased goods to you. For non-stocked items, the mentioned information may be shared with the manufacturer or seller of the product, who will then handle the delivery.
Recipients of Personal Data within the EU/EEA
3.3 Information may be disclosed to external partners who process data on our behalf and in accordance with our consents, such as consent for marketing. We use external partners for technical operation and improvements of the Website, sending newsletters, targeted marketing, including retargeting (e.g., recommendations based on your preferences), and reviewing our company and products. These companies act as data processors under our instructions and may not use the information for purposes other than fulfilling their agreement with us. We have entered into written data processor agreements with all data processors handling personal data on our behalf.
Recipients of Personal Data outside the EU/EEA
3.4 Information may be disclosed to external partners who process data on our behalf and in accordance with our consents, such as consent for marketing. We use external partners for technical operation and improvements of the Website, sending newsletters, targeted marketing, including retargeting, and reviewing our company and products. These companies act as data processors under our instructions and may not use the information for purposes other than fulfilling their agreement with us.
We only use data processors in countries that provide adequate protection for your data. When using data processors in an unsafe third country outside the EU/EEA, all data transfers are based on the EU Commission’s standard contractual clauses as the transfer basis.
4. Your Rights
4.1 To create transparency about our processing of your data, we must inform you of your rights.
4.2 Right of access
4.2.1 You have the right to request information about the data we have registered about you, the purpose of the registration, the categories of personal data, any recipients of the data, and where the data originates.
4.3 Right to rectification
4.3.1 You have the right to have incorrect personal data about yourself corrected.
4.4 Right to erasure
4.4.1 In certain cases, you have the right to have all or some of your personal data deleted.
4.5 Right to restriction of processing
4.5.1 In certain cases, you have the right to have the processing of your personal data restricted to storage only.
4.6 Right to data portability
4.6.1 In certain cases, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and transmit those data to another data controller.
4.7 Right to object
4.7.1 You have the right to object to our processing of your personal data for direct marketing purposes, including profiling for targeted marketing.
4.8 Right to withdraw consent
4.8.1 You can withdraw your consent at any time for a given processing of personal data.
4.9 Right to complain
4.9.1 You have the right to lodge a complaint with the Data Protection Authority, Borgergade 28, 5, 1300 Copenhagen K, regarding our processing of your personal data.
5. Deletion of Personal Data
5.1 Data collected about your use of the Website will be anonymized if you have not used the Website for two years.
5.2 Data collected in connection with purchases will generally be anonymized two years after the order is completed or canceled unless you have an active user profile.
6. Contact Information
6.1 sarahvium.com is the data controller for the personal data collected via the Website.
sarahvium.com shares data responsibility with Meta for the personal data collected via our publicly accessible Meta pages.
6.2 If you have any questions or comments regarding this Privacy Policy or wish to exercise one or more of your rights described in section 4, you can contact us at:
E-mail: contact@sarahvium.com