VELUX privatlivspolitik

 We respect and protect your privacy. In the following you can read about how we handle your personal data.

This VELUX Privacy Policy ("VELUX Privacy Policy") describes how we process the data you provide to us or we collect through our digital platforms and that enables you to access our online services. This privacy policy is in accordance with the EU General Data Protection Regulation 2016/679 ("GDPR") as well as the Danish Data Protection Act.

VELUX Danmark A/S is responsible for collecting, storing and processing your personal data. Our parent company is VELUX A/S, which is registered in Denmark under the CVR number 30003519, and the registered head office is located at Ådalsvej 99, 2970 Hørsholm.

1. The legal basis for our data processing
When we process personal data in connection with a contract or potential contract with you, the lawful basis is that the processing is necessary for us to perform the contract with you or to take action at your request before the contract is concluded. If the lawful basis for the data processing consists in consent, you have the right to withdraw your consent at any time as mentioned below, but this has no effect on the lawfulness of the processing that we carry out before you withdraw your consent. If we share personal data with law enforcement or other public authorities, we will share your personal data because we are legally obliged to do so.

2. Our reasons for and purpose for collecting personal
data The following are the main categories of data collected by VELUX Danmark A/S as well as the main purposes for collecting the personal data:

2.1 As part of VELUX' general operational activities
We collect personal data about individuals, customers, suppliers (including third-party service providers) and other stakeholders. This data may include an individual's name, contact information, and other information necessary to do business with you or your organization.

2.2 In connection with the handling of questions
You may choose to provide personal data such as your name, email address or other contact details when you contact us by phone, email, post or via our digital platforms. This personal data enables us to respond to inquiries about information regarding, for example, VELUX products, to arrange an action and submit an offer for the installation of VELUX products, or to arrange service on a window or to present claims covered by the VELUX warranty. The information may be passed on to VELUX A/S or other VELUX sales companies, relevant independent installers or dealers in order to assist our customers with their inquiries or arrange services or an offer.

2.3 Customers and Potential Customers
We may collect personal data about customers and potential customers, including name, contact details, payment and credit card details and other information necessary for us to do business with that person or organisation. We may disclose the information to dealers or independent installers and logistics partners for the purpose of handling a customer's order, including arranging delivery of VELUX products to the customer or handling other inquiries.

2.4 Business development
The personal data you provide to us, as well as personal data collected on our digital platforms, is used to improve our consumer insight and to allow us to provide relevant communications and offers via all the touchpoints that you may have with us and VELUX A/S. Personal data is also used for product development.

2.5 Marketing communication
With your permission, we process your personal data for the purpose of informing you about VELUX's operational activities, products and services. For the above purposes, we create marketing tailored to your preferences and profile, which will be based on your contact information, browsing history, sales and subscription information; such as name, address, email, phone number, purchase history, unique identifiers such as cookie IDs or device IDs, and tracked browsing history based on those IDs. Please be aware that this list is not exhaustive as we may use personal information collected in connection with your interactions with VELUX A/S and its websites, mobile applications, products and services.

If you do not wish to receive further information, you can unsubscribe from our marketing communications easily and free of charge at any time. You will find ways to unsubscribe in connection with subscribing to or receiving marketing communications from us. You can also contact us by email or post to unsubscribe, see section 8. If you unsubscribe from receiving marketing communications, we will delete your personal data within two months, unless we process your personal data for other purposes in sections 2.1-2.9.

2.6 Surveys of customers and visitors
We may collect personal data from visitors to digital platforms or from customers in connection with surveys regarding our services and products. We may send your personal data to VELUX A/S so that VELUX A/S can also conduct surveys. Your personal data will not be used for marketing purposes without your consent.

2.7 Potential employees and contractors When a person applies for a job or enters
into a contract with us, we collect certain information, such as name, contact details, details of previous employment relationships, diplomas, relevant certificates and information about professional interests. This information can be collected directly from the person, from a recruiter, and from the person's former employers and others, including recommendations and publicly available sources. The information is used to inform or help us decide whether to offer the person employment or enter into a contract with the person.

2.8 Business intelligence
We collect general personal data about customers and business partners, which we can search through publicly available sources such as Google, LinkedIn, etc. We record the information for the purpose of market analysis. We continuously evaluate and update the collected personal data and make corrections when we become aware that personal data needs to be corrected.

2.9 To comply with the law
We may collect personal data as required or permitted by law.
Personal as well as non-personal information collected by us is treated as confidential and will never be sold or disclosed to third parties, except for the exceptions discussed in sections
2 and 4.

participate in public forums or other activities on our Digital Platforms, respond to customer surveys, or otherwise interact with us.
We collect information through various technologies, such as cookies. Please refer to our cookie policy at the bottom of this page under the section About VELUX Danmark A/S.

3.1 Links to other websites
This website contains links to other websites (such as Facebook, Google+, YouTube and Pinterest) where this privacy policy does not apply. Please note that we do not vouch for other websites and their content. We encourage you to read the privacy policies of each website you visit.

4. Sharing your information with other companies
We do not share your personal information with others, except in very few cases, including:

When VELUX A/S, our affiliates and third parties perform services on our behalf, e.g. delivery of parcels and provide customer service. These companies are prohibited from using your personal data for purposes other than those we have requested or as required by law.
When we share personal data with VELUX A/S, our affiliates and third parties to guarantee the safety of our customers, to protect our rights and property, to comply with legal processes or in other cases where we believe in good faith that the sharing is required by law.
When you allow us to share your personal data with third parties, such as:
You decide to share your personal data with carefully selected companies so that they can send you offers and advertisements for their products and services.
When you ask us to share your personal data with third-party sites or platforms, such as social networking sites.
If we cooperate with external service providers (data processors), we enter into a data processing agreement regarding the service providers' processing of your personal data.

We have not included an overview of all recipients of personal data – only those outside the EU. See sections 4.1-4.2 below. The reason is that we are part of a large group that operates all over the world and works with a large number of suppliers. We change suppliers regularly. It would therefore be administratively burdensome to update a detailed list of recipients all the time. We would also have to notify you every time we add or remove a recipient, which would be to your detriment. We therefore believe that it is more transparent and user-friendly to provide you with an overview of recipient categories than to include an overview of all recipients.

Recipients outside the European Union:

4.1 HubSpot
We use HubSpot, a software program of HubSpot Inc. in the United States, for our online marketing activities, such as distributing newsletters. This software is used for marketing purposes and helps us with statistical analyses and evaluations of the logged user behavior so that we can better coordinate our marketing strategy and optimize the content we provide to you. HubSpot uses cookies. For more information, see the HubSpot Inc. Terms of Use and Privacy Policy at http://www.hubspot.com/terms-of-service and http://www.hubspot.com/privacy-policy. All information we collect is subject to this Privacy Policy. HubSpot is subject to TRUSTe's EU-U.S. privacy shield principles and Switzerland-U.S.

5. Your Control and Choices
We give you the ability to exercise a certain degree of control and make certain choices in relation to our collection, use and sharing of your personal data. By law, your governance and choices may include the following:

You can change your choices in relation to subscriptions, newsletters and messages
You can choose whether to receive marketing communications from us regarding products and services that we believe will be of interest to you
You can choose whether we may share your personal data with other companies so that they can send you marketing communications regarding their products and services.
You can choose whether you want to receive targeted marketing from advertising networks, data exchanges, marketing analysts and other service providers
You can request access to the personal data we have stored about you for the purpose of correcting inaccurate or incomplete information, and you can, in certain circumstances, request that the data we have stored about you transferred to another control centre, restrict access to it or delete it from our records (personal rights). You can also object to our processing of your personal data.
You can exercise your rights of control and choice, or request access to your personal data by contacting Customer Service or by following the instructions previously provided to you. Please be aware that not giving us the right to collect your personal data may prevent us from providing certain products and services to you and some of our services may not be able to take into account your interests and preferences. If you have any questions regarding the specific personal data about you that we process or store, please contact Customer Service by email: velux-dk@velux.com.
We will respond to your request for a right of access within one month, but we reserve the right to extend this period by two months. If we extend the response time, we will notify you within one month of the request.

6. Data Security, Integrity and Storage
The security, integrity and confidentiality of your personal data is extremely important to us. Therefore, we have implemented technical, administrative and physical security measures designed to protect your personal data from unauthorized access, disclosure and alteration. From time to time, we review our security procedures to take into account relevant new technologies and methods. Please be aware that, despite our very best efforts, there are no security measures that are perfect or impenetrable.
We will store your personal data for the period required to fulfil the purposes defined in this VELUX Privacy Policy, unless a longer retention period is required or permitted by law. We routinely update the information to ensure it is always accurate.

7. Data Transfers, Storage and Global Handling
Our company is part of the VELUX Group, which operates worldwide, and we may transfer your personal data to individual VELUX companies or third parties located worldwide for the purposes described in this Privacy Policy. Regardless of where your personal data is transferred to, stored or handled by us, we will take reasonable steps to ensure the confidentiality of your personal data. In addition, when we use or disclose personal data transferred from the EU, we will comply with the EU-US Privacy Shield Principles and Switzerland-US, use standard contractual clauses approved by the European Commission, and follow various other measures under EU law aimed at ensuring adequate data security, or obtain your consent.

Your personal data is stored on servers in the EU, unless otherwise stated.

8. Changes to this Privacy Policy from VELUX
From time to time, we may amend this Privacy Policy to meet the latest technologies, industry practices, legal requirements, or for other reasons. We publish the latest version on our website at all times. We therefore recommend that you read the Privacy Policy periodically. Where required by applicable law, we will obtain your consent.

9. Comments and Questions
If you have a comment or question regarding this Privacy Policy, please contact velux-dk@velux.com.
You can lodge a complaint about the way we handle your personal data. You can contact us using the contact details at the bottom of this Privacy Policy. If a complaint is submitted, the name and contact details of the complainant must be provided to VELUX Danmark, Breeltevej 18, 2970 Hørsholm. We will investigate the complaint and respond within one month. If you believe that we have not handled the complaint satisfactorily, you can complain to the Danish Data Protection Agency, Carl Jacobsens Vej 35, 2500 Valby, Phone: +45 33 19 32 00, e-mail address: dt@datatilsynet.dk.

10. Contact information
This website is owned and operated by VELUX Danmark A/S.

This privacy policy was last updated in November 2018.