BRIGHT WOOD

Last updated April 19, 2023.
 

We are delighted with your interest in Bolia A/S ('we', 'us', 'our') and our products.

We take the protection of your information seriously. This privacy policy describes in more detail how we process your personal data and what rights you have.

You give your consent for us to process your personal data in accordance with this privacy policy. The processing of your personal data is necessary so that we, for example, can enter into and honour agreements with you, respond to your enquiries and send you marketing material (if you have given your consent for this).

 

1 CONTACT INFORMATION

1.1 We are data controllers in accordance with applicable data protection legislation, including the Danish Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the 'General Data Protection Regulation').

1.2 If you have any questions or comments regarding this privacy policy you can contact us at:

Bolia A/S
Værkmestergade 11
8000 Aarhus C
Denmark
Email: gdpr@bolia.com
Telephone: +45 88 96 02 24

 

2 OUR PROCESSING OF YOUR PERSONAL DATA, INCLUDING THE PURPOSE AND THE BASIS FOR THE PROCESSING

In this section you can read more about the purposes for which we process your personal data, the legal basis for the processing and how long we process your personal data for.
 

2.1 Delivery of our goods to you

2.1.1 We process the following of your personal data in order to enter into an agreement with you and deliver our products to you.

2.1.2 For the purpose mentioned above, we process the following personal data:

  • Your full name

  • Contact details, including address, email address and telephone/mobile phone number

  • The IP address you are shopping from

  • Order details

  • Payment card details

  • The information you provide when contacting and communicating with us, including via the chat service on our website

  • Information about your approved loan or financing agreements, if you make use of financing via Express Bank (also called Bolia Furniture Credit). We receive this information from Express Bank A/S, with whom you have entered into a separate agreement.

2.1.3 The legal basis for our processing is our agreement with you on the delivery of goods to you, cf. Article 6(1)(b).

2.1.4 We store your personal data for up to 3 years after the fulfilment of the agreement.  However, we will retain bookkeeping material for the current year + 5 years in order to comply with the requirements in Section 10 of the Danish Bookkeeping Act and the legal basis for storage is our legal obligations, cf. GPDR Article 6(1)(c). In specific cases, we may also store the data for a longer period where it is necessary to establish, exercise or defend a legal claim, and the legal basis for this is our legitimate interest in this, as it is assessed that our interest in processing the personal data exceeds your interest in the data not being processed, cf. GPDR Article 6(1)(f).

 

2.2 Marketing, including profiling

2.2.1 If you have subscribed to our newsletter, we process your personal data in order to send marketing and carry out profiling so that we can better target marketing to you and your interests. For example, we can send you personal offers and recommendations (for example, information about cleaning products for your furniture or products in your basket), messages about inspiring promotions, new launches and invitations to events, if you have consented to this. Some of the personal data is collected via cookies, if you have consented to this, cf. more details in section 2.6.
We do not carry out profiling as covered by GDPR Article 22, i.e. profiling that may result in negative consequences for you.

2.2.2 For this purpose, we process the following personal data:

  • Your name

  • Contact details, including email address

  • Geographical location and your chosen language

  • Nearest Bolia store

  • History of your purchases with us

  • History of your searches on our website

  • History of your interaction with our newsletters

 

2.2.3 The legal basis for our processing is your consent, cf. GPDR Article 6(1)(a). You can withdraw your consent to marketing at any time by clicking on the link at the bottom of the emails received, clicking here or by contacting us using the contact details listed in section 1.

2.2.4 We process your personal data for this purpose until you withdraw your consent or after a period of 12 months in which you have not interacted with our marketing + 5 years thereafter to use as documentation in the event of any disputes.

2.2.5 In some cases, we may process your data to show you relevant banner ads and similar advertisements about us. This processing does not take place on the basis of your consent to the newsletter, but takes place using cookies if you have consented to this, cf. more details in section 2.6.

 

2.3 Communicating with you

2.3.1 If you contact us via our contact details or via the chat service on our website, we will process the personal data you provide us with in connection with our communication with you in order to be able to respond to your enquiry.

2.3.2 The legal basis for our processing is our legitimate interest in being able to respond to your enquiries, as it is assessed that our legitimate interest in processing the personal data exceeds your interest in the data not being processed, cf. GDPR Article 6(1)(f).

2.3.3 We store your personal data for this purpose for up to 3 months after the correspondence has been completed. If your enquiry ends in a purchase, we will store the correspondence with you in accordance with section 2.1.

 

 

2.4 Participating in competitions

2.4.1 If you participate in our competitions, we will process the personal data you provide to us in connection with your participation in our competitions for the purpose of communicating with you and to be able to send you any prizes.

2.4.2 The legal basis for our processing is our legitimate interest in running the competition, as it is assessed that our legitimate interest in processing the personal data exceeds your interest in the data not being processed, cf. GDPR Article 6(1)(f).

2.4.3 We will keep your personal data for this purpose for up to 3 months after the prizes have been awarded to the winners.

 

2.5 Cookies

2.5.1 If you have given your consent to the use of cookies on our website, we automatically collect certain personal data, including information about your browser and your device (computer, mobile or tablet), your behaviour on our website (including which pages you have visited and the length of your visit) and your IP address.

2.5.2 The purpose of the processing is to enable us to prepare statistics and analyses that enable us to improve our website and products, as well as to target our marketing and website to you and your interests. Our marketing based on your consent to cookies relates to banner ads and similar advertisements about us (as opposed to your consent to our newsletter sent to your email inbox). 

2.5.3 The legal basis for this processing is your consent, cf. GDPR Article 6(1)(a).

2.5.4 The information collected via cookies is stored until your consent is withdrawn or (if the consent is not withdrawn) until the cookies in question expire after the period stated in our cookie policy.

2.6.5 You can read more about this in our cookie policy, which you can find here.

 

 

3 TRANSFER OF YOUR PERSONAL DATA TO THIRD PARTIES

3.1 We can, to the relevant extent, transfer your personal data to the categories of recipients specified below:

  • Affiliated companies

  • Service providers, including hosting providers, CRM system providers and third parties providing IT support or assisting with marketing activities, etc.

  • Trade partners

  • Carriers

  • Consultants

  • Public authorities to the extent required by law or court order or where necessary to establish, exercise or defend our legal rights

  • Other third parties if you consent or if they are involved in a merger or acquisition involving all or part of our business or assets herein.

3.2 Several of these recipients are data processors for us and, in accordance with our instructions, process personal data for which we are the data controller. The data processors may not use the data for purposes other than fulfilment of their agreement with us, and must treat the data as confidential. We have entered into written data processing agreements with our data processors who process personal data on our behalf.

3.3 Certain recipients are independent data controllers (e.g. public authorities) and their processing is governed by their own privacy policy, which we have no influence over.

 

4 TRANSFER TO THIRD PARTIES OUTSIDE THE EU/EEA

4.1 Some of the third parties to which we transfer personal data may be located outside the EU/EEA, including the recipient being established in a country outside the EU/EEA or by the personal data being accessible by persons who are outside the EU/EEA.

4.2 When we transfer your personal data to recipients in countries outside the EU/EEA that do not have an adequate level of data protection in accordance with data protection legislation, we will always ensure that the necessary security measures for the protection of your personal data are in place. 46. Transfers will only take place if the recipient:

  • is located in a country which, according to the decision taken by the European Commission, has a sufficiently high level of protection, or

  • has entered into an agreement with us based on the European Commission’s Standard Contractual Clauses and where the risk assessment carried out indicates that a lawful transfer can take place.