Privacy Policy

1. We are the data controller – how do you contact us?

Barnhouse Studios (we, us, our) is the data controller for the processing of the personal data we have received about you. You will find our contact details below.

2. The purposes and legal basis for the processing of your personal data?

We process your personal data for the following purposes:

• To fulfill the agreement entered into between us, including delivery, assisting with the provision of services, processing orders and purchases and related inquiries
• Processing other customer inquiries, including filling out our contact form or complaints
• Write-up for our showroom
• The use of cookies.

The legal basis for our processing of your personal data follows from:

• Article 6(1)(a) of the General Data Protection Regulation concerning consent
• Article 6(1)(b) of the General Data Protection Regulation concerning compliance with the contract/agreement in connection with the provision of services and goods
• Article 6(1)(f) of the General Data Protection Regulation concerns our legitimate interest in processing other matters such as customer inquiries or complaints. We store necessary cookies with the same legal basis.

1.1.1 Legitimate interests pursued by the processing
As mentioned above, our processing of your personal data is ((partially)) based on the balancing of interests rule in Article 6(1)(f) of the General Data Protection Regulation. The legitimate interests that justify the processing are our interest in being able to respond to a customer's inquiries or complaints. In addition, we need to store necessary cookies for our website to function for the website user.

3. Categories of personal data

We process your personal data for the following purposes:

• Name, address, telephone number and email address
• Email correspondence
• Order number, order history and similar
• Other personal information you may have provided to us on your own initiative.

4. Recipients or categories of recipients

We take the data protection regulations seriously, which is why we treat received personal data with care and confidentiality.

However, we entrust personal data to data processors, who process the data according to our instructions. We ensure that data processing agreements have been entered into with the data processors before we initiate the processing with them, so that your data is processed legally, confidentially and with the necessary security. If there is a legal dispute, we may also be forced to disclose your personal data in this connection.

We may also disclose personal data to public authorities, including the public, e.g. to SKAT. Furthermore, disclosure may take place to another advisor, provided under conditions of confidentiality, if there is a legitimate interest and/or a legal basis for the disclosure.

5. Transfer to recipients in third countries, including international organisations

We will transfer your personal data to recipients outside the EU and EEA. These are Google and Microsoft, which are located in the USA.

We can inform you that Google and Microsoft are certified under the Data Privacy Framework, which is why we do not transfer personal data to countries that cannot provide the same level of protection as Denmark or European countries/EEA countries.
See more here: Participant Search (dataprivacyframework.gov)

6. Storage of your personal data

We will retain your personal data for as long as we have a legitimate and objective purpose for doing so, subject to the rules on limitation.

We have adopted internal procedures and policies that protect personal data from being destroyed, lost or altered, from unauthorized disclosure, and from unauthorized access or knowledge.

We have also adopted internal deletion procedures that ensure that personal data is stored in accordance with data protection regulations and rules for the storage of accounting information, etc.

7. The right to withdraw consent

You have the right to withdraw your consent at any time. You can do this by contacting us using the contact details provided above in point 1.

If you choose to withdraw your consent, this will not affect the lawfulness of our processing of your personal data based on your previously given consent up to the time of withdrawal. If you withdraw your consent, it will therefore only take effect from that time.

8. Your rights

You have a number of rights under the General Data Protection Regulation in relation to our processing of information about you. If you wish to exercise your rights, please contact us.

• Right to see information (right of access)
  You have the right to access the information we process about you, as well as a number of additional information.
• Right to rectification (correction)
  You have the right to have incorrect information about yourself corrected.
• Right to erasure
  In special cases, you have the right to have information about you deleted before our general erasure date occurs.
• Right to restriction of processing
  You have the right to restrict the processing of your personal data in certain cases. If you have the right to restrict processing, we may only process the data – with the exception of storage – with your consent, or for the establishment, exercise or defence of legal claims, or to protect a person or important public interests.
• Right to object
  You have the right to object to our or lawful processing of your personal data in certain cases. You can also object to the processing of your data for direct marketing purposes.
• Right to transmit information (data portability)
  In certain cases, you have the right to receive your personal data in a structured, commonly used and machine-readable format and to have this personal data transferred from one data controller to another without hindrance.

You can read more about your rights in the Danish Data Protection Agency's guidance on the rights of data subjects, which you can find at www.datatilsynet.dk.

9. Complaint to the Danish Data Protection Agency

You have the right to file a complaint with the Danish Data Protection Agency if you are dissatisfied with the way we process your personal data. You can find the Danish Data Protection Agency's contact information at www.datatilsynet.dk.