1. General

On this page, you will find a description of how we collect and process your personal data, i.e. information about you. All of this is included in our Privacy Policy.

Our Privacy Policy applies to the information you provide to us yourself via the website (byic.com – hereinafter referred to as the “Website”), as well as information we collect about you via the Website or via Facebook in the form of advertisements.

BYIC ApS is the data controller for your personal data. If you have any questions, please contact us – you can find our phone number and email address further below.

2. Personal Data We Collect, Purpose, and Legal Basis for Processing

When you visit BYIC.com, we collect information about the IP address you use, browser type, operating system, and information about the type of device you use to visit BYIC.com.

The purpose of this is to optimize your user experience on BYIC.com. In addition, we use this information to target our marketing on Google, Facebook, and Instagram – including retargeting ads. This is done to improve BYIC.com and to show you relevant offers online, with the aim of increasing our sales.

The legal basis for this processing is Article 6(1)(f) of the EU General Data Protection Regulation (GDPR).

As described in section 1, when you purchase products on BYIC.com or communicate with us, you provide the following information: name, address, email address, phone number, payment information, and order details. We also collect information about which products you have shown interest in, the time of purchase, and whether you have previously returned items.

The purpose of this is to deliver the products or services you have purchased and paid for on BYIC.com and to fulfill our contractual obligations. Additionally, the data is used to comply with applicable accounting and bookkeeping legislation. To prevent fraud, we also register your IP address.

The legal basis for this processing is Article 6(1)(b), (c), and (f) of the GDPR.

When you sign up for our newsletter, we collect the following information: name, email address, method of signup, IP address, and open rate.

The purpose is to send you relevant newsletters with offers or guides and thereby market products to you in our legitimate interest. The legal basis for this processing is Article 6(1)(f) of the GDPR. Newsletter signup is always voluntary, and you can unsubscribe at any time via the link at the bottom of each newsletter.

3. Recipients of Personal Data

The Website shares data with the following third parties within the EU: DAO, Quickpay, Partner-ads, Tradedoubler, Sleeknote, Addwish, InMobile.

Some of the data processors we use are established outside the EU. The necessary safeguards for transferring data to the USA and Canada are ensured through the data processor’s certification under the EU–U.S. Privacy Shield, pursuant to Article 45 of the GDPR.

• Facebook Inc. certification:
  https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active 

• Google LLC certification:
  https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI

• Mailchimp certification:
  https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active

• Shopify certification:
  https://www.privacyshield.gov/participant?id=a2zt0000000TNSNAA4&status=Active

• Zendesk certification:
  https://www.privacyshield.gov/participant?id=a2zt0000000TOjeAAG&status=Active

Further details on data processing:

When you order one or more products on our Website, we share your information with partners such as GLS, who act as carriers or assist with delivery through services connecting the Website with the carrier. Manufacturers and suppliers may also receive your personal data in cases of direct delivery or complaints.

We use Quickpay as a payment gateway. This means Quickpay handles all payments on our webshop. To do so, we must transfer certain personal data, including IP address, order number, name, address, and payment card details. This data is used solely to process and manage payments.

We collaborate with affiliate networks Partner-ads and Tradedoubler for marketing. Order numbers and order totals are shared so they can calculate and pay commission to affiliate partners. No directly identifiable personal data is shared. Partner-ads and Tradedoubler are authorized to store and process this data in accordance with their privacy policies.

We use Zendesk to manage electronic communication (emails) with customers and visitors. Transferred data may include name, email address, IP address, and possibly order number.

We use Sleeknote to manage popups and collect email addresses, which may be transferred to Mailchimp. Your data may also be used to invite you to review us on Trustpilot.

We use InMobile to send SMS newsletters, where your mobile number may be used for targeted marketing.

We have entered into data processing agreements with all the above third parties, ensuring that all data is processed solely according to our instructions.

4. Your Rights

To ensure transparency, we inform you of your rights regarding your personal data.

Right of Access

You have the right to know what data we hold about you, where it comes from, and why.

Right to Rectification

If you discover incorrect information, you have the right to have it corrected.

Right to Erasure

In certain cases, you have the right to have your personal data deleted, unless we are legally obliged to retain it.

Right to Restriction of Processing

You may request restriction of processing to storage only, for example if you believe the data is incorrect.

Right to Data Portability

In certain cases, you have the right to receive your personal data in a machine-readable format.

Right to Object

You may object at any time to the use of your data for direct marketing or processing based on legitimate interests.

Right to Withdraw Consent

You may withdraw any previously given consent at any time by contacting us.

Right to Lodge a Complaint

You may lodge a complaint with the Danish Data Protection Agency (Datatilsynet). However, we encourage you to contact us first.

5. Deletion of Personal Data

Website usage data is deleted no later than one year after last use.

Newsletter data is deleted when you unsubscribe, unless we have a legitimate basis for retention.

Purchase-related data is generally deleted three years after the end of the calendar year of purchase, unless legal obligations require longer storage. Accounting records are stored for five years.

6. Security

We have implemented appropriate technical and organizational security measures to protect your personal data. Only employees with a legitimate need have access to your data.

7. Contact Information

BYIC ApS
Østerågade 17, 2nd floor, right
9000 Aalborg, Denmark

Phone: +45 31 90 00 53
Email: support@byic.com

8. Changes to the Privacy Policy

Any changes will be communicated the next time you visit BYIC.com.

9. Versions

This Privacy Policy is version 1 of BYIC ApS, dated 24 May 2018.