Last updated 2022-04-07
1.1 When you visit gogift.com, we will collect and process personal information about you, such as cookies and IP address. Below we have described what personal data we process about you, the purpose, the legal basis for the processing and your rights in connection therewith. This applies to you both as a consumer and as an employee of one of our partners and customers.
2 Data Controller
2.1 GoGift, Mosedalvej 14, 2500 Valby, Denmark is the Data Controller (referred to herein as "we", "us" or "our"). This means that we are responsible for your personal information.
3 The purpose and basis for collecting personal data
3.1 We will ensure that your personal information is collected and processed solely for one of the following purposes:
(a) to promote and/or deliver products and services that you have ordered;
(b) to answer any questions or objections you may have;
(c) to prevent abuse and fraud;
(d) to notify you of any changes in our services;
(e) for you to be able to partake in competitions and campaigns;
(f) if you consent to marketing cookies, to fulfill the direct marketing in accordance to your consent;
(g) to provide you with information about the actual products and services as well as products and services similar to these, you have previously bought, redeemed to or contacted us about;
(h) to be able to exchange and redeem a gift card;
(i) if you consent to marketing cookies (cookies from third party) we transfer information about you, including your IP address, to partners and other third parties to be used for direct marketing;
(j) to improve our website, products and services;
(k) to improve on security;
(l) if you consent to preference- and statistics cookies: To improve our website, products and services, and we transfer information about you, including your IP address, to third parties such as Google Analytics to compile statistics on i.e. your behaviour on our website;
(m) to retain personal data to the extent necessary to comply with the Accounting Act, the Consumer Agreement Act and any other legal obligations GoGift may have.
3.2 Our basis for processing is:
(a) The processing is necessary to fulfil a contract, of which you are a party in the context of the purposes described in Sections 3.1 a-b, d and h;
(b) Th processing is based on the consent you provide in connection with the purposes stated in Sections 3.1 e-g, i and l. You may revoke your consent at any time by sending an e-mail to firstname.lastname@example.org, and you may revoke or change your cookie consent by updating your choices in the consent banner through the link "Update your cookie consent" found in the footer on gogift.com (desktop) and in the menu (mobile). Withdrawal of your consent, however, does not affect the lawfulness of the treatment based on your consent prior to the withdrawal.
(c) The processing is necessary for us to be able to pursue our legitimate interests, in particular to improve user experience, security as well as prevent fraud and abuse in connection with the purposes described in Sections 3. c and j-k.
(d) The processing is necessary for compliance with a legal obligation to which we are subject for the purposes described in Sections 3.1 h and m.
3.3 We store your personal information
(a) up to five (5) years from the purchase of the gift or gift voucher from us, to be able to prove our compliance with the Danish Bookkeeping Act and the Danish Consumer Contracts Act. This applies to name, address and international VAT number for business customers, as well as e-mail or telephone number for use in contact with the customer or exchange of gift cards.
(b) If you withdraw your consent to marketing, we delete your personal information from our marketing lists, however, we keep documentation of your consents given for 2 years after the withdrawal.
(c) Where processing is based on your consent to cookies, we store your personal information for as long as we process your personal information for this purpose. The storage period will depend on the type of cookies and the expiration of the individual cookies.
(d) up to 90 days in connection with greetings, after which these are automatically deleted from the system. This is only relevant for orders where the buyer has attached a greeting to the order.
4 Categories of Personal Information Used
4.1 We will process and store personally identifiable information about you such as your name, address, telephone number, email address, financial and payment card information, IP address or other personally identifiable information which you voluntarily disclose when visiting/using our websites and using our services our services in general.
5 Your Rights
5.1 If you have any questions regarding our processing of your personal information, please contact us via the contact details given in Section 10 below.
5.2 You can access your personal information at any time and request us to correct, delete or change any incorrect personal information by contacting us via the contact details given in Section 10 below. You can also request us to limit the processing, for data portability or object to our processing of your personal information.
5.3 If you wish to appeal against our processing of your personal information, please contact the Danish Data Protection Agency.
5.4 You also have the right at any time to object to the processing of the personal data that we use to conduct direct marketing.
5.5 To the extent that our processing of your personal data takes place on the basis of your consent, you have the right to withdraw your consent at any time by contacting us via the contact information described in point 10 below, or revoking or changing your cookie consent by updating your choices in the consent banner through the link "Update your cookie consent" found in the footer on gogift.com (desktop) and in the menu (mobile).
6 Personal Information — Children
6.1 We only process personal information about children under the age of 13 if there is an adult user ordering gifts or a gift voucher for a child. In this case, the information is used solely for delivering the gift voucher.
7 Transfer of Personal Information
7.1 Transfer of personal information to affiliates and to professional advisers may take place in accordance with applicable data protection legislation.
7.2 Only trusted employees, agents and suppliers with work-related needs, in accordance with applicable data protection legislation, have access to your personal information to the extent that is necessary for providing a service to us or acting on our behalf.
7.3 We reserve the right to use or disclose information to the extent that is necessary for complying with the applicable legislation, carrying out investigations in relation to complaints, protecting the integrity of the site, responding to your requests or for investigative purposes.
7.4 Transfer of personal information is done in accordance with applicable data protection legislation, including the conclusion of data processing agreements with our data processor in order to ensure that personal data will be treated only for the specified purposes and ensure adequate security measures.
7.5 Personal information we have collected from you may be transferred to countries outside the EU/EEA ("EEA"), including to the United States pursuant to the EU-US Privacy Shield. If personal information is transferred outside the EEA, we will ensure that it is either transferred to countries which the Commission has determined have a sufficient level of security or that the transfer is in accordance with the standard rules of the Commission.
7.6 We may contact you via e-mail to invite your to review our services and/or products, you have received from us, to get your feedback and improve our services and products ("The purpose").
8 Securing your Personal Information
8.1 We will take care of your personal information by taking the necessary technical and organisational security measures to prevent information being accidentally or illegally destroyed, lost or damaged, and to prevent unauthorised persons obtaining knowledge of this information or otherwise treating it in violation of the applicable data protection legislation.
10 Contact Information
10.1 If you wish to request insight, rectification, the right to be forgotten, deletion, limitation, objection or data portability, or if you wish to complain about the processing of your personal information, you may use: