Personal data and Privacy Policy
We inform you that the Controller of your personal data is Change of Scandinavia A/S with its registered seat in FarumDenmark, Farum Gydevej 73, 3520 Farum, CVR 28711328. If you have any questions about the protection of personal data, please contactus by letter or by e-mail: .
The Data Controller has appointed a Data Protection Officer who can be contacted by mail toChange of Scandinavia A/S, Farum Gydevej 73, 3520 Farum, CVR 28711328, or by e-mail to the following address: .
Collected by the Administrator, personal dataare processed only for the purposes described in thesePrivacy Policy.
Purposes and scope of personal data processing:
to fulfill and execute the contract of sale based on a purchase order placed in the Store by theCustomer:
Personal data of a person placing a purchase order: first name, last name, e-mail address, telephone number, shipping address; if shipping address is different than the purchase order address: name, surname, email address, telephone, addressdetails, company name (optional). In the case of placing an order in relation to business activity - additionally:company name,tax identification number;
to handle complaints and returns resulting from the concluded sales agreement: first name, last name, e-mail address, telephone number, address details,shipping address, if other than the data of theperson who placed the order: name, surname, e-mail address, telephone, address details, company name (optional), and in the case of placing a complaint I relation to business activity: company name, tax identification number;
to proceed with registration of a customer account in the online Store:
Account holder's details: name, e-mail address, telephone, address; in the case of account registration in relation to business activity, additionally: company name, tax identificationnumber;
to issue accounting documents such as for example, invoices and related tax obligations: name, company name (if applicable) full address, Social Security number or Tax ID, other data required by local laws;
to proceed with registration and participation in the loyalty program "Club Change": name and last name, address, country, telephone number, e-mail address, gender, size;
to receive and respond to e-mail correspondence:name, last name (if provided), e-mail address, additional data provided by the person during correspondence, necessary to settle the case;
to take part in contests on the Change of Scandinavia profile on the Facebook, Instagram or other social media platforms: name, last name, delivery address, telephone, e-mailaddress;
to compliance with legal requirements for e.g. withdrawal of products or the need to take other actions: data required by law, or data necessary for the performance of tasks imposedby law, administrative or judicial decisions.
for technical purposes and store statistics:IP-address, location (if provided by the user), type of device, operating system, and browser;
for marketing and commercial purposes including sending the newsletter: after the customer's prior explicit and specificconsent: name, last name, e-mail address, telephone number;
Our Store uses cookies to improve your browsing experience and provide you with personalized services. We use both essential and non-essential cookies. Essential cookies are necessary for the proper functioning of the Store, while non-essential cookies are used for analytics and marketing purposes. You have the right to withdraw your consent to the use of non-essential cookies at any time by adjusting the settings in your browser. For more information about the types of cookies we use and their purpose, please refer to our cookie policyplease refer to our cookie policy available at the bottom of this website.
Legal basis for data processing:
due to the need to fulfill the salescontract, handling complaints andreturns, registration of the store account,technical needs of thestore:the legal basis fordata processing is Art. 6(b) GDPR: processing is necessary for the performance of a contract to which the data subject is a party or to take action at the request of the data subject before the conclusion of the contract, and (f) the processing is necessary for the purposes arising from legitimate interests pursued by the controller, such as the recovery of claims arising from the concluded contract or to take action related to the improvement of the Operation of the Store including the provision of data security;
in relationto e-mailcorrespondence: the legal basis is Article 6(1)(f) GDPR: processing is necessary for purposes arising from legitimate interests pursued by the controller, such as receiving and responding to correspondence;
in relation to the customer's registration for the loyalty program "Club Change", participation in contests on the Change of Scandinavia profiles on Facebook, Instagram and other social media platforms,for marketing and commercial purposes and sending a newsletter:the basis of data processing is the consent expressed by the data subject;
in relation to fulfilment of legal requirements: thelegal basis for data processing, depending on the purpose are specific legal provisions or decisions of state institutions.
Obligation to provide data:
Personal data provided in relation to fulfill the sales contract,handling complaints and returns, registration of an account in the Store, technical needs of the store are provided voluntarily,but are necessary for the purpose for which they were collected. Not providing above data will result in lack of possibility to place and order or to handle a complaint or return.
Personal data collected in relation to the customer's registration for the loyalty program "Club Change",participation in contests on the Change profile on the Facebook, Instagram or other social media platforms, for marketing and commercial purposes and sending the newsletter are provided voluntarily on the basis of your consent. Consent may be revoked at any time without affecting the lawfulness of processing based on consent prior to its withdrawal.
Transfer of personal data
Personal data will be transferred to other recipients, i.e.: partners providing technical services, payment providers, business partners, telecommunications entrepreneurs, companies providing hosting and advisory services, companies providing marketing services in the field of sms campaigns, sending newsletters, document archiving companies, postal operators, carriers, companies printing correspondence or serving correspondence solely to the extent necessary for the purposes for which the data was collected. Data may also be made available to public authorities such as administrative authorities, ordinary courts, police.
The Administrator, working with third-party companies, ensures that customer data is processed in accordance with the highest data protection standards. Customer and correspondence managers' data is confidential and cannot be used for purposes other than those collected and to a different extent than that provided for in contracts concluded with contractors.
Obligation to provide data:
Personal data provided in relation to fulfill the sales contract,handling complaints and returns, registration of an account in the Store, technical needs of the store are provided voluntarily,but are necessary for the purpose for which they were collected. Not providing above data will result in lack of possibility to place and order or to handle a complaint or return.
Personal data collected in relation to the customer's registration for the loyalty program "Club Change",participation in contests on the Change profile on the Facebook, Instagram or other social media platforms, for marketing and commercial purposes and sending the newsletter are provided voluntarily on the basis of your consent. Consent may be revoked at any time without affecting the lawfulness of processing based on consent prior to its withdrawal.
Transfer of personal data
Personal data will be transferred to other recipients, i.e.: partners providing technical services, payment providers, business partners, telecommunications entrepreneurs, companies providing hosting and advisory services, companies providing marketing services in the field of sms campaigns, sending newsletters, document archiving companies, postal operators, carriers, companies printing correspondence or serving correspondence solely to the extent necessary for the purposes for which the data was collected. Data may also be made available to public authorities such as administrative authorities, ordinary courts, police.
The Administrator, working with third-party companies, ensures that customer data is processed in accordance with the highest data protection standards. Customer and correspondence managers' data is confidential and cannot be used for purposes other than those collected and to a different extent than that provided for in contracts concluded with contractors.
In accordance with the Data Protection Regulation, the Customer has the following rights:
The right of access to personal data,
The right to rectification, i.e. correcting incorrect data or completing incomplete personal data,
The right to delete your personal data,
The right to restrict the processing of personal data,
The right to object to the use of personal data for direct marketing,
The right to object to automated individual decisions, including profiling,
The right to personal data portability,
The right towithdrawconsent at any time – in the case of processing based on consent, without affecting the lawfulness of processing based on consent before its withdrawal,
The right to lodge a complaint with the supervisory authority of the country of Your residencewhich can be found HERE:
https://edpb.europa.eu/about-edpb/about-edpb/members_en#member-pl
Storing of personal data:
Customer data is stored for the time permitted by law. This time depends on the type of information and on the purposes for which this information is stored. The Controller will process the Customer's personal data for accounting purposes for a period of 5 years from the end of the year in which the VAT document was issued.
Customer data registered with Club CHANGE, on whose profile the administrator will not observe any traffic will be deleted within three years, this is related to the period that the Customer is entitled to file a complaint.
If the Customer exercises the right to delete data after the period during which the law requires the Controller to store personal data, the Administrator anonymizes it and non-personalized information will be processed for statistical purposes only.
Data is deleted from the database when it is no longer needed to achieve the purposes for which it was collected.
Personal data of the persons directing correspondence to the Administrator will be processed only for the period necessary to settle the case, no longer than 3 years after the end of correspondence ina given case in order to secure the possibility of implementing possible claims of persons.
Safety precautions
Ensuring the security of our Customers and business partners against unauthorized access, modification, disclosure or destruction of stored personal data, the following organizational and technical measures have been implemented:
antivirus software in all IT systems that process personal data,
backups of all IT systems in which personal data are processed,
limited access to personal data, permitted only if necessary,
protection of all IT systems with passwords
agreements regarding the processing of data with suppliers who process personal data on behalf of the Controller,
confidentiality declarations with employees who process personal data,
guidelines for the secure processing of personal data and information resources for employees with access to information systems.
implementation of risk assessment and documentation of all systems processing personal data, in order to ensure a high level of security of the personal data processed.
Changes
These Policy is subject to change. The Customer belonging to Club Change will be informed by e-mail about each change, provided that the relevant data are provided on the form.
Information about the change of terms and conditions will also be provided on the home page change.shop.pl for a period of 14 consecutive calendar days.
Requests and complaints
Any requests or complaints regarding the processing of personal data, including statements of withdrawal of consents granted (e.g. in terms of receiving newsletters), requests for data change, deletion of data, restriction of data processing, access to data should be sent to the e-mail address: or by contacting Customer Service.