Privacy policy
1. Data Controller
· Company name: MARIA XENIA
· Copenhagen 2100
· +45 60139717
2. Purpose
· Processing purchases, delivery of goods, sending newsletters, customer service, accounting, etc.
3. Types of Data
· Name, address, phone number, email, payment information, IP address, purchase history.
4. Legal Basis for Processing (GDPR Article 6)
· Art. 6(1)(b): Performance of a contract (e.g., when a customer makes a purchase on the webshop).
· Art. 6(1)(c): Legal obligation (e.g., accounting laws requiring data to be stored for 5 years).
· Art. 6(1)(a): Consent (e.g., when a customer subscribes to a newsletter or accepts cookies for marketing).
· Art. 6(1)(f): Legitimate interests (e.g., the use of basic analytical tools).
5. Retention Period
· For example, 5 years for accounting data, otherwise only as long as necessary for the purpose or until consent is withdrawn.
6. Data Sharing
· Shipping providers, payment processors, IT service providers.
7. Security
· Technical and organizational measures (e.g., encryption, access restrictions).
You may simply state that you implement the necessary technical and organizational measures to store data securely.
8. Rights
· Right of access, rectification, erasure, data portability, restriction of processing, objection, withdrawal of consent.
You may refer users to read more about their rights at www.datatilsynet.dk.
9. Right to Complain
· A complaint can be submitted to the Danish Data Protection Agency (Datatilsynet).
10. Contact Information
· +45 60139717
· Copenhagen 2100
· for inquiries about personal data.
Last updated: October 2, 2025