Privacy policy

Privacy policy at Nofilter Lab ApS

We only collect personal data where it is relevant to us, and we only collect personal data if it is relevant to your activity with Nofilter Lab ApS.

When we collect, process and use your personal data we always comply with all relevant legislation.

We only keep your personal data for as long as we are either under a legal obligation to do so, or for as long as it is relevant to the purpose for which it was collected.

Information we collect

If you want to buy and receive a product or a service from us, we need to collect certain personal data in order to complete the sale and to provide our services. We may use cookies to keep track of the contents of your basket while you use our shop.

We may collect information such as your name, email address, postal address, delivery address (where it differs from the postal address), phone number and payment details.

Nofilter Lab ApS collects and processes your personal data when you do the following:

- Visit our website

- Complete a purchase of our products

- Create an account

- Sign up for our newsletter

- Review our website

- Send us questions, complaints or feedback

The data controller

The data controller for the collection, processing and use of your personal data on www.nofilterlab.com is Nofilter Lab ApS, Rådhusstræde 15, 1466 Copenhagen K, company reg. no. (CVR) 46232283.

Legal basis and purpose

We collect ordinary contact details such as your name and address in order to deliver the product or service you have bought from us. We collect your email address so we can send you an order confirmation and a delivery confirmation. This processing takes place because it is necessary to perform the contract we have entered into with you, under Article 6(1)(b) of the General Data Protection Regulation.

Processing and storage of information necessary to meet our legal obligations, including the bookkeeping rules, takes place under Article 6(1)(c) of the General Data Protection Regulation.

When you make a payment on our website, the necessary payment details are processed by our payment provider Shopify Payments. In connection with the payment, information such as name, payment method, transaction amount, billing details and technical information may be processed in order to complete the payment and perform the contract. When payments are made, the information needed to complete and administer the payment is passed to Shopify Payments, including the purchase amount and billing details.

If you have given us your consent during registration or on our website, we use your email address to send you a newsletter. You can subscribe and unsubscribe at any time, and every newsletter also contains an unsubscribe link. Where processing of personal data is based on your consent, you have the right to withdraw that consent at any time.

If you do not wish to give the personal data required to complete a purchase, you will unfortunately not be able to buy products from us on our website.

Information forming part of our accounting records is kept for 5 years from the end of the financial year the records relate to, in accordance with the Danish Bookkeeping Act. Other personal data is deleted once it is no longer necessary for the purpose it was collected for, unless we have another lawful basis for continued storage.

Other recipients of personal data

We do not sell your personal data to third parties. Some of our suppliers and processors may process personal data outside the EU/EEA. Where that happens, we make sure the transfer takes place on a valid basis in accordance with applicable data protection rules.

If we use an external review service to invite you to review your purchase, the necessary information such as name, email address and order details may be passed to that review service in order to send the invitation.

Our shop runs on Shopify, which processes personal data on our behalf in connection with hosting, order processing and running the shop, among other things. We use Shopify Payments to process payments. Simply.com is used for our domain and technical domain administration, among other things.

We use external companies as suppliers in order to deliver our services as well as possible. These external suppliers are data processors and in some cases process personal data in connection with the services they deliver to us. Our data processors only process personal data on our instructions and in accordance with the legal requirements for data processors.

Your rights

As a data subject you have a number of rights under the data protection rules. In certain cases you have the right to access the personal data we process about you, to have inaccurate data corrected, to have data deleted, to have the processing restricted, to object to the processing, and to receive your data in a structured, commonly used and machine-readable format where the rules on data portability apply.

Where our processing is based on your consent, you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of the processing already carried out on the basis of your consent.

If you no longer want us to process your personal data, or you want us to restrict the processing of your personal data, you can send us a request at hello@nofilterlab.com.

If you are unhappy with the way we process your personal data, you have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet).