Privacy Policy for http://www.heinemann-retail.dk

Gebr. Heinemann Retail Aps (hereinafter "we" or "us") takes the protection of personal data very seriously.

Collection, Processing and Use of Personal Data

Personal data within the meaning of this privacy policy are individual details of personal and factual circumstances of a particular or identifiable natural person. In the following, we explain what data is collected, saved and used when visiting our website.

General

When visiting our website, personal data will only be collected if you actively contact us; e.g. by using the contact form or the career portal. However, by visiting a website, data are always stored which are stored in a log file on a server and are evaluated anonymously for statistical purposes only.

Legal Bases

We collect and process personal data based on the following legal grounds:

a. Consent in accordance with Article 6 paragraph 1 (a) General Data Protection Regulation (GDPR). Consent meaning any freely given, specific, informed and unambiguous indication of agreement, which could be in the form of a statement or any other unambiguous confirmatory act, given by the data’s subject consenting to the processing of personal data relating to him or her.

b. Necessity for the performance of a contract or in order to take steps prior to entering into a contract according to Article 6 paragraph 1 (b) GDPR, meaning the data is required in order for us to fulfil our contractual obligations towards you or to prepare the conclusion of a contract with you.

c. Processing to fulfil a legal obligation in accordance with Article 6 paragraph 1 (c) GDPR, meaning that e.g. the processing of data is required by law or other provisions.

d. Processing in order to protect legitimate interests in accordance with Article 6 paragraph 1 (f) GDPR, meaning that the processing is necessary to protect legitimate interests pursued by us or by a third party, unless such interests are overridden by your interests or fundamental rights and freedoms which require the protection of personal data.

Data Subject Rights

You have the following rights with regards to the processing of your data through us:

a. The right to lodge a complaint with a supervisory authority in accordance with Article 13 paragraph 2 (d) GDPR and Article 14 paragraph 2 (e) GDPR.

b. Right of access in accordance with Article 15 GDPR

c. Right to rectification in accordance with Article 16 GDPR

d. Right to erasure („right to be forgotten“) in accordance with Article 17 GDPR

e. Right to restriction of processing in accordance with Article 18 GDPR

f. Right to data portability in accordance with Article 20 GDPR

g. Right to objection in accordance with Article 21 GDPR

Notice: Users may object to the processing of their personal data in accordance with legal allowances at any time. The objection may in particular be made against processing for the purposes of direct marketing.

Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of your place of residence, employment or the place of the alleged infringement, if you believe that the processing of your personal data violates the GDPR.

Career Portal

When using our career portal, we automatically forward it to http://taxfree-job.dk/. The portal is operated by Gebr. Heinemann Retail ApS, Vestvej 6, 2770 Kastrup, Denmark. Please note the data protection policy applicable there.

Tag Manager

1. Our online service uses the Google Tag Manager. This tool allows website tags / app tags to be managed through an interface. The Google Tool Manager only implements tags, does not set cookies and does not collect any personal data. The Google Tag Manager triggers other tags that may collect personal information. However, the Google Tag Manager does not access this data.

2. If deactivated at domain or cookie level, it will remain valid for all tracking tags implemented with Google Tag Manager.

Google Analytics

1. On the basis of your consent, we use your data for the analysis, optimisation and economic operation of our online offer in accordance with Art. 6 Para. 1 lit. a. DSGVO we use Google Analytics, a web analysis service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) - hereinafter "Google"). Google uses cookies and other technologies. The information generated by the service about the use of the online offer by the users is transferred to a Google server in the USA and processed there.

2. Google acts on our behalf in the context of order processing pursuant to Article 28 DSGVO. We have concluded a data protection agreement with Google which contains the EU standard data protection clauses.

3. In addition, we have concluded a joint responsibility agreement with Google for the use of Google's measurement services in accordance with Article 26 DSGVO (see https://support.google.com/analytics/answer/9012600). Within this framework, we have agreed with Google to be responsible for fulfilling the information obligations and for guaranteeing the rights of data subjects in accordance with Chapter 3 of the DSGVO, as well as for the security of processing and notification or notification obligations. (Articles 32 to 34 DSGVO). Google will use the information to evaluate the use of our website by users, to compile reports on the activities within this website and to provide us with further services associated with the use of this website and the use of the Internet. The processed data can be used to create pseudonymous user profiles of the users.

4. We use Google Analytics in order to display the advertisements placed within the advertising services of Google and its partners only to those users who have also shown an interest in our online offer or who exhibit certain characteristics (e.g. interests in certain topics or products determined by the websites visited) that we transmit to Google (so-called "Remarketing Audiences" or "Google Analytics Audiences"). With the help of remarketing studies, we also want to ensure that our advertisements correspond to the potential interest of the users and do not have a harassing effect.

5. We use Google Analytics with activated IP anonymisation.

6. Google Analytics stores cookies in your web browser for a period of two years since your last visit. These cookies contain a randomly generated user ID with which you can be recognised during future visits to the website. Users can prevent the storage of cookies by adjusting their browser software accordingly; users can also prevent the collection of data generated by the cookie and relating to their use of the online offer to Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/-dlpage/gaoptout?hl=de.

7. The recorded data is stored together with the randomly generated User-ID, which enables the evaluation of pseudonymous user profiles. These user-related data are automatically deleted after 14 months. Other data remain stored in aggregated form for an unlimited period of time.

8. Further information on the use of data by Google, setting and revocation options can be found on the websites of Google:
- https://policies.google.com/technologies/partner-sites?hl=de
("Data use by Google when you use websites or apps of our partners")
- https://policies.google.com/technologies/ads
("Data use for advertising purposes")
- https://adssettings.google.com/authenticated
("Manage information that Google uses to serve ads to you").

Data Security

Your personal data is protected by us with the greatest care and with the latest technology, such as SSL encryption. SSL stands for "Secure Socket Layer" and is an encryption method that is used successfully throughout the World Wide Web. All personal data are encrypted and thus are securely monitored when transmitting through the Internet. You will recognize that you are in the secure area on a symbol (closed padlock) in the bottom window bar of your browser. Alternatively, you can select an unencrypted transmission if, for example, it is not possible for technical reasons.

Links to Other Internet Pages

Our web pages contain links to other web pages, which we checked during the creation. We have no influence on the fact that their operators comply with data protection regulations. Despite careful control of the content, we can not accept liability for external links to third-party content. Please check the data protection of the respective responsible authority.

Right of Revocation, Information, Rectification and Deletion

You may at any time inform in writing about the data stored on your personal data or have your data corrected or deleted. Please use our contact form or the contact possibilities given in the imprint.

Cookie Policy

1. Cookies are information transmitted by our web server or third-party web servers to the users' web browsers where they are stored for later retrieval. Cookies can be in the form of small files or any other types of information storage.

2. Legal basis for the processing of (personal) data in connection with marketing cookies (if any) is the user’s consent.

3. Cookie overview

Name: _gid
Domain: heinemann-retail.dk
Provider: Google
Function: Registers a unique ID that is used to generate statistical data on how the visitor uses the website.
Term: 1 day

Name: _ga
Domain: heinemann-retail.dk
Provider: Google
Function: Registers a unique ID that is used to generate statistical data on how the visitor uses the website.
Term: 1 month

Name: _gat_#
Domain: heinemann-retail.dk
Provider: Google
Function: Used by Google Analytics to throttle request rate.
Term: browser session

4. Objection Options

After a given consent, you may object to the use of cookies that are used for measuring the range of coverage and promotional purposes via this link

Contact

For questions, suggestions or comments on the topic of data protection, please contact us at: info@heinemann-retail.dk

Copenhagen, December 2020