Cookie and Privacy Policy – Nolo Collective

Introduction
When you visit our website, information about you is collected. This information is used to adapt and improve our content and to increase the value of the advertisements displayed on the site. If you do not wish for information to be collected, you should delete your cookies (see instructions) and refrain from further use of the website. Below we explain in more detail what information we collect, the purpose of the collection, and which third parties may have access to it.

Cookies
The website uses cookies, which are small text files stored on your computer, mobile, or similar device with the purpose of recognizing it, remembering settings, compiling statistics, and targeting ads. Cookies cannot contain harmful code such as viruses.

It is possible to delete or block cookies. See instructions: http://minecookies.org/cookiehandtering

If you delete or block cookies, ads may become less relevant to you and appear more frequently. You may also risk that the website does not function optimally and that certain content becomes inaccessible.

The website contains cookies from third parties, which to varying degrees may include:

• Dandomain

• Facebook (read more about Facebook’s GDPR handling here: https://www.facebook.com/business/gdpr)

• Google Ads and Google Analytics

Data Controller
We are the data controller for the processing of personal information that we handle about our customers and business partners. You will find our contact details below.

Nolo Collective ApS
Rammetoften 12, 2950 Vedbæk
CVR no.: 44985314

If you have questions about the processing of your personal data, you can contact us via hello@nolocollective.com

Processing Activities
As the data controller under GDPR, we have the following processing activities.

Visit to website
When you visit our website, we use cookies to ensure the website functions properly, which you can read more about in our cookie policy above.

Communication with potential customers
When you have questions about our website or wish to hear more about our services, you can contact us via:
Email: hello@nolocollective.com
Phone: +45 20 49 52 29

Through this, we will process your personal data so that we can engage in dialogue with you, for example answering questions about our services. We only process the information you provide us in connection with our communication. We will typically process the following general information: name, email, and phone number.

Our legal basis for processing this personal data is GDPR Article 6(1)(f). We delete our communication with you once it is clear whether you wish to use our services or not. In special cases, it may be necessary to store your personal data for a longer period.

Customers
We need to communicate with our customers to ensure that the service is delivered correctly. Through this, we may process information such as name, address, services, specific agreements, payment information, and similar data.

The legal basis for processing this personal data is GDPR Article 6(1)(b). When the service has been delivered and any outstanding matters are concluded, we will delete the personal data shortly thereafter.

Newsletter
We have a newsletter that you can choose to subscribe to – and you can unsubscribe from it at any time.

The purpose of the newsletter is to send subscribers emails with new information from the company, which may include new website content or promotion of our services.

We will only send you emails if you have given your active consent. This requires that you provide your email address, to which we will then send a confirmation email so you can verify your subscription. In this way, we ensure that you have actively consented to receiving the newsletter.

Our legal basis for processing your personal data (email address) in connection with the newsletter is GDPR Article 6(1)(a). We will process your personal data as long as you are subscribed to the newsletter. Upon unsubscribing, we will stop sending it to you. If we have not sent you a newsletter for one year, your consent will expire due to our inactivity.

When you unsubscribe, we store your previous consent for two years after its last use due to limitation requirements in accordance with the Danish Consumer Ombudsman’s spam guidelines section 11.3.

Accounting
We are obliged to retain all accounting records in accordance with the Danish Bookkeeping Act. This means we keep invoices and similar documents for accounting purposes. These may include general personal information such as name, address, and service description.

Our legal basis for processing personal data for accounting is GDPR Article 6(1)(c). We keep this information for at least five years after the end of the current financial year.

Data Processors
Few businesses can do everything themselves, and the same applies to us. We therefore work with partners and suppliers, some of whom may act as data processors.

External suppliers may, for example, provide systems to organize our work, services, consultancy, IT hosting, or marketing. It is our responsibility to ensure that your personal data is handled properly. Therefore, we place high demands on our partners, and they must guarantee that your personal data is protected. We enter into agreements with companies (data processors) that handle personal data on our behalf to increase the security of your personal data.

Disclosure of Personal Data
Data about your use of our website, which ads you receive, your geographic location, gender, age segment, etc. is disclosed only to third parties to the extent that this information is known and only if we use such third parties. You can see which third parties we use in the Cookies section above. The information will be used for targeted advertising.

Profiling and Automated Decisions
We do not carry out profiling or automated decision-making.

Transfers to Third Countries
We primarily use data processors within the EU/EEA or who store data within the EU/EEA. In some cases, this is not possible, and we may use data processors outside the EU/EEA if they can provide adequate protection of your personal data.

Data Security
We keep the processing of personal data secure by having implemented appropriate technical and organizational measures. We have carried out risk assessments of our processing of personal data and subsequently implemented measures to increase data security. One of our most important measures is keeping our employees updated on GDPR through continuous awareness training, GDPR courses, and regular reviews of our GDPR procedures with staff.

Rights of Data Subjects
Under the GDPR, you have a number of rights regarding our processing of your personal data. If you wish to exercise your rights, you must contact us so we can assist you.

Right of access: you have the right to access the information we process about you, as well as certain additional information.
Right to rectification: you have the right to have inaccurate information about yourself corrected.
Right to erasure: in special cases, you have the right to have information about you deleted before our general deletion takes place.
Right to restriction of processing: in some cases, you have the right to restrict the processing of your personal data. If you are entitled to restriction, we may only process the data – except for storage – with your consent or for legal claims to be established, exercised, or defended, or to protect a person or important public interests.
Right to object: in some cases, you have the right to object to our otherwise lawful processing of your personal data. You may also object to processing of your data for direct marketing.
Right to data portability: in some cases, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to have these personal data transferred from one controller to another without hindrance.

You can read more about your rights in the Danish Data Protection Agency’s guidance on the rights of data subjects at www.datatilsynet.dk.

Withdrawal of Consent
When our processing of your personal data is based on your consent, you have the right to withdraw your consent at any time.

Complaint to the Danish Data Protection Agency
You have the right to lodge a complaint with the Danish Data Protection Agency if you are dissatisfied with the way we process your personal data. You can find the Agency’s contact information at www.datatilsynet.dk.

We generally encourage you to read more about GDPR so you stay updated on the rules.