This privacy policy explains how Frederikke Thiberg / THE GOOD STATEMENT (“we” or “us”) processes your personal data. Data Controller The legal entity responsible for the processing of your personal data is: Frederikke Thiberg CVR No. 41173556 Løvstræde 8 B 2 tv, 1152 København K hello@thegoodstatement.com Description of processing In the following, we have described the purposes for which we process your personal data. 2.1 When you make a purchase via our website We process personal data about you when you purchase our products. We process your personal data in order to be able to deliver the times that you order. We process a variety of personal data about you, including your name, address, email address and telephone number. The legal basis for processing your personal data is the General Data Protection Regulation, Article 6(1)(b), as the processing is required in order to satisfy the contract to which you are a party. Where the processing of your personal data is not sufficiently linked to the satisfaction of the agreement, the processing of your personal data will instead be based on GDPR, Article 6(1)f), pursuant to which our legitimate interest is to manage our sale. We can share your data with our IT suppliers, collaborating partners, warehouse and shipping company. We will store your data for as long as it is required to be able to manage our sale. As a general rule, however, we will store your personal data for the use of this purpose for the current fiscal year plus 5 years in accordance with the associated Accounting Act regulations. 2.2 When you pay via Paypal On our website, we offer you the option to pay via PayPal’s payment solutions - either by paying immediately or by selecting deferred payment. If you choose to pay with one of PayPal’s solutions when placing an order via our website, we will disclose relevant information to PayPal to enable them to process your payment. You will be paying for the purchase of your goods directly to PayPal In connection with your order we will disclose your contact information, including your name, address, telephone number and email address as well as your order details to Klarna. The disclosure is made in accordance with Article 6(1)(b) of the GDPR. You can read PayPal privacy policy to find out what data they collect and how they are processed when you use Klarna’s payment options. Read more in PayPal privacy policy here. 2.3 Newsletter You can sign up to receive our newsletter in order to receive news and extraordinary offers. We process your personal data in order to be able to send the newsletter to you. We process your personal data in the form of your email address, which we need to be able to send the newsletter to you. The legal basis for processing your personal data is the balancing of interests provision in the General Data Protection Regulation, Article 6(1)(f). According to the Marketing Practices Act you can withdraw your consent at any time if you no longer wish to receive the newsletter. We can share your data with our IT suppliers and collaborating partners. We will store your data for as long as it is required to be able to send our newsletter to you. Generally, we will store your data for one year for documentation purposes after you unsubscribe from our newsletter. 2.4 Social Media We host fan pages or company pages on various social media which you can visit and make use of. Together with social media, we are joint controllers for collecting your personal data when you visit our page on social media. You can read the joint controller agreements with Facebook and Instagram here. The Facebook privacy policy tells you which data are collected and how they are processed when you visit our Facebook page. Read more in the Facebook privacy policy here. The Instagram privacy policy tells you which data are collected and how they are processed when you visit our Instagram page. Read more in the Instagram privacy policy here. We also process the data about you which you submit to us, e.g., in connection with a direct communication from you to us via one of the aforementioned platforms. This will typically be your name and your question to us. The legal basis for processing your personal data is the General Data Protection Regulation, Article 6(1)(f), as we have a legitimate interest in acquiring knowledge about users of our pages on social media. We do not store and do not have access to data regarding your online behavior, which is collected by the aforementioned social media. We are only given access to aggregated statistical data about the number of visitors, etc. Transfers to countries outside the EU/EEA We or our data processors can transfer your personal data to countries outside the EU/EEA. You can read more below about the countries to which we and our data processors can transfer personal data: Klaviyo, USA: See the list of sub-processors here. Shopify, Canada: See the list of sub-processors here. 3.1 Transfer basis Canada has been assessed by the Commission, with certain restrictions, as a country that generally, either via legislation or via other measures, ensures an adequate level of protection for personal data. Our data processor’s processing of your personal data is covered by this adequacy decision. In case of transfer to countries which have not been assessed by the Commission as countries which ensure an adequate protection level, we will ensure to have the necessary guarantees via the use of the Commission’s standard contracts as published by the Commission or via the use of other contracts approved by competent authorities. You can receive a copy of this contract/agreement by contacting us via hello@thegoodstatement.com (state 'privacy' in the subject line). You can also read the agreement with Klaviyo here. Mandatory information Information provided in connection with purchases, including purchasing via subscription, is mandatory. If you do not provide this information, we are unfortunately unable to enter into an agreement to supply goods to you. Your rights You have the following rights: You have the right to request the insight in, correction, or deletion of your personal data. You also have the right to have the processing of your personal data limited. If the processing of your personal data is based on your consent, you have the right to revoke your consent at any time. Your revocation will not affect the legality of processing performed before you revoked your consent. You can revoke your consent and exercise your rights as specified below. You have the right to receive the personal data which you have provided in a structured, commonly used and machine-readable format (data portability). You can always submit a complaint to a data protection authority, e.g., the Danish Data Protection Agency. You also have the right to object to our processing of your personal data in the following cases: If our processing of your personal data is based of Article 6(1)(e) (public interest or exercise of official authority) or Article 6(1)(f) (balance of interest test), see above under processing basis, you have the right, at any time, to object to any such processing on grounds that may relate to your particular situation. You also have an unconditional right to object to our processing of your personal information if we process your information with a view to direct marketing. You can exercise your rights by sending us an email via hello@thegoodstatement.com (state 'privacy' in the subject line). There may be conditions or limitations associated with these rights. It is not certain, therefore, that you have the right, e.g., to data portability in a specific instance - this depends on the specific circumstances related to the processing activities. The Good Statement's website uses cookies to help keep track of items you put into your shopping cart, including when you have abandoned your cart. This information is used to determine when to send cart reminder messages via SMS. he above excludes text messaging originator opt-in data and consent; this information will not be shared with any third parties.