Privacy Policy

Last Updated: 13.04.2025

1. Introduction and Scope

This Privacy Policy outlines how Jørgen Kruuse A/S (“we,” “us,” or “our”) collects, processes, and protects your personal data when you visit our website. It applies specifically to the use of cookies and related technologies in compliance with the General Data Protection Regulation (GDPR) and Danish data protection laws.

This policy ensures transparency regarding the types of data we collect, the purposes for which we process it, and your rights as a data subject. By using our website, you consent to the practices described herein.

2. Data Controller Information

The data controller responsible for the processing of your personal data on this website is:

Jørgen Kruuse A/S
Address: Havretoften 4, DK-5550 Langeskov, Denmark
Email: kruuse.danmark@kruuse.com
Phone: +45 72 14 14 14

If you have any questions or concerns regarding the processing of your personal data, you may contact our Data Protection Officer (DPO) at: morten.spangaard@kruuse.com
Data Protection Officer: Morten Spangaard Andersen, IT Manager
Email: morten.spangaard@kruuse.com

3. Types of Data Collected

When you visit our website, we collect data primarily through the use of cookies. The types of data collected include:

1. Functional Cookies: These cookies are essential for the proper functioning of the website.
2. Statistical Cookies: These cookies collect anonymous data to help us understand how visitors interact with our website.
   No sensitive personal data is collected through these cookies. All data collected is pseudonymized or anonymized where possible.

4. Purpose and Legal Basis for Data Processing

We process your personal data collected through cookies for the following purposes:

1. Functional Cookies:
   • To ensure the proper functioning of our website, including enabling essential features like user login, language preferences, and shopping cart functionality.
   • Legal Basis: Legitimate interest under Article 6(1)(f) GDPR, as these cookies are necessary for the operation of our website.
2. Statistical Cookies:
   • To analyze website usage and improve user experience by understanding visitor behavior and preferences.
   • Legal Basis: Consent under Article 6(1)(a) GDPR, as these cookies are not strictly necessary and require your explicit approval.

We do not use the data collected through cookies for profiling or automated decision-making.

5. Cookie Usage

6. Data Retention

We retain personal data collected through cookies for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by applicable laws. The retention periods for cookies are as follows:

1. Functional Cookies:
   These cookies are retained for the duration of your session or until you clear your browser cache.
2. Statistical Cookies:
   These cookies are retained for a predefined period to analyze user behavior and improve website functionality.
   • Example: VisitorSessionID is retained for the duration of the session.

You can manage or delete cookies at any time through your browser settings, which may impact the retention period.

7. Data Subject Rights

As a data subject, you have the following rights under the GDPR:

1. Right of Access: Request access to your personal data and obtain information about how it is processed.
2. Right to Rectification: Request the correction of inaccurate or incomplete personal data.
3. Right to Erasure (“Right to be Forgotten”): Request the deletion of your personal data, subject to certain conditions.
4. Right to Restriction of Processing: Request that we limit the processing of your personal data under specific circumstances.
5. Right to Data Portability: Receive your personal data in a structured, commonly used, and machine-readable format and transfer it to another controller.
6. Right to Object: Object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
7. Right to Withdraw Consent: Withdraw consent at any time without affecting the lawfulness of prior processing.
8. Right to Lodge a Complaint: Lodge a complaint with a supervisory authority, such as the Datatilsynet in Denmark.

To exercise your rights, please contact us using the details provided in the “Contact Information” section.

8. Data Security

We implement appropriate technical and organizational measures to ensure the security of your personal data and to protect it against unauthorized access, loss, destruction, or alteration. These measures include:

• Encryption: Data transmitted through our website is encrypted using secure protocols.
• Access Controls: Access to personal data is restricted to authorized personnel only.
• Regular Audits: We regularly review our data security practices to ensure compliance with GDPR and German data protection laws.
• Cookie Management: Cookies are securely stored and managed to prevent unauthorized access or misuse.

9. International Data Transfers

As part of a global organization, we may transfer your personal data to affiliates of Jørgen Kruuse A/S or third-party service providers located outside the European Economic Area (EEA). When such transfers occur, we ensure that appropriate safeguards are in place to protect your data, as required by GDPR. These safeguards include:

• Standard Contractual Clauses (SCCs) approved by the European Commission.
• Adequacy Decisions for countries deemed to provide adequate data protection.
• Binding Corporate Rules (BCRs) for intra-group data transfers.

10. Changes to the Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, our data processing practices, or the functionality of our website. Any updates will be published on this page, and where required by law, we will notify you of significant changes.

11. Contact Information

If you have any questions or concerns about this Privacy Policy or your personal data, please contact us at:
Jørgen Kruuse A/S
E-mail: kruuse.danmark@kruuse.com