1. General about our private policy

In this personal data policy, we elaborate on the circumstances in which we collect and process your personal information, how we protect your information, and what rights you have in relation to this collection and processing. You will also find information about how long we store your data and what organizational and technical security measures we have implemented so that we secure your data in the best way.

At Old St. Croix Spirits ApS, we have an ambition to minimize the processing of your personal data as much as possible and to create a high degree of transparency in relation to how your personal data is processed. We know that the protection of personal data is important to many, which is why we would love to hear from you if you do not find an answer on this page – or are in doubt about our handling of your data.

1.1 Data controller and contact information

Old St. Croix Spirits is the data controller, and thereby also overall responsible for all the information we process and store about you. If you have general questions about our handling of personal data, or if you wish to assert your rights, you are very welcome to contact us via the contact information: Old St. Croix Spirits ApS CVR no. 45332381, A. P. Møllers Allé 9C, 2791 Dragør or via e-mail: info@oldstcroix.com

We will always process your request for your personal information without undue delay. Processing time will vary depending on the complexity of your inquiry, but we will always be able to provide you with an estimated delivery time.

1.2 What legislation is involved?

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals about the processing of personal data – popularly known as the “Personal Data Regulation”, the “Data Protection Regulation” or “GDPR” – has been implemented in Denmark by the Data Protection Act. Act No. 502 of 23 May 2018.

1.3 When we change our privacy policy

Legislation is constantly changing and so is our business. We may therefore change our privacy policy at any time should it become necessary. The privacy policy in force at any time will always appear on our website.

2. Processing of your personal data

2.1 What personal information do we process about you?

Old St. Croix Spirits pays close attention to data protection. We comply with the Personal Data Ordinance, and we do everything we can to ensure that your personal data is always protected. We are constantly working to optimize all security measures so that you can safely use our services.

Below you will find information about how we handle your personal data. We have divided it into headings so you can easily orient yourself.

2.1.1 When you use our website

It is provided by law that we may store cookies on your computer, tablet, or other device if they are strictly necessary to ensure the display of the website that you have expressly requested to visit. If we use other types of cookies e.g., for marketing, we must obtain your consent, which you may choose to give us when you visit the Website for the first time. You can always change your choices later and withdraw your consent. If you want to know more about which cookies we use, we refer to our cookie policy.

2.1.2 When you visit us on social media

When you visit Old St. Croix Spirits on our “fan pages” on LinkedIn, Facebook, and Instagram, respectively, both we and the social media will collect and process personal information. This is done for the purpose of marketing, answering customer inquiries and the like.

In this situation, there is so-called “shared data responsibility” between us and social media. We always stay up to date in the Danish Data Protection Agency’s guidelines in this area.

On social media, we collect your contact information e.g., your name. If you voluntarily provide us with information that we consider sensitive, it will be deleted as soon as we discover it.

The personal information you may provide in public notices will remain in the notice until our site no longer exists. However, your rights regarding objection and request for deletion also apply.

You must be aware that the information you provide via our social media pages will very well be used by the media itself for e.g., profiling, for marketing other companies, own services etc. This does not apply to Old St. Croix Spirits, and the only way to avoid this is by not using our pages on social media.

2.1.3 When you sign up for our newsletter

If you give us express consent to sign up for our newsletters, we will use your name and e-mail address to send you e-mails with news. The processing of your personal data as well as the sending out of newsletters is done based on your consent.

You will always be able to revoke your consent to receive newsletters. You can do this by following the unsubscribe instructions in an already sent out newsletter.

2.1.4 When you register for one of our competitions

We regularly offer competitions on our website or on social media. When you enter the competition, we use your name and email to be able to find a winner. The winner will be notified directly. We need to receive information about your address to submit the prize. Your information will then be deleted.

2.1.4 Do we use data for profiling?

We may use profiling to target our advertising. This only happens if you have accepted the marketing cookie when you visit our website. This cookie contributes i.e., so that we can collect information about how you interact with the website, which pages you look at, which products you show interest in, etc. This information helps to provide you with a personalized content of which any ads will be relevant to you and your interests.

2.2 To whom is personal data transferred and transferred

To make it possible to provide our services to you, however, we use data processors to which data will be transferred in this connection. Data processors are used i.e., for controlling operating systems such as when posting, the ability to send emails, etc.

We only use data processors who, through their data processor agreement, have provided guarantees for the implementation of necessary measures, and who can ensure the security of your personal data and the protection of your rights. We regularly ensure that our data processors have an appropriate and adequate level of security. This is both to ensure the processing of your information, but also to prevent accidental and illegal loss of your information.

2.3 How do we protect your information?

To best safeguard your personal information, we have put in place appropriate and organizational security measures. Your personal information is stored on secure networks, which have several levels of IT security, and which can only be accessed by a limited number of employees with rights to this type of information. These employees are subject to our internal personal data policy which ensures compliance with applicable legislation in the area. We continuously monitor our internal processing processes and have ongoing evaluations of our security measures.

2.4 When do we delete your information

We only store your personal information if we have a legitimate purpose, or we are legally obliged to do so. We either delete or anonymize your personal information when it is no longer necessary to store it. We process your personal information differently depending on which of our services you have received.

2.5 What happens if a data breach occurs?

If, despite the technical and organizational measures we have implemented to ensure the protection of your personal data, there is still a breach of the security of the data, we will contact you without undue delay if the data breach has in any way led to or had the potential to to pose a real risk to your rights. We will inform you of all relevant information regarding the specific data breach, just as we will inform you of the consequences it may have for your information, as well as what measures we will take as a result. In the specific situation, we will of course also make sure to observe our duties in relation to reporting data breaches to the Danish Data Protection Agency.

3. Especially regarding B2B

As a distributor, you can be assigned a user profile that gives special access to our website. Here you can e.g., read about our products, get information with special content, see photos for our campaigns, price lists, see our partnership agreement, and much more.

The only personal information we store on you in this connection is your e-mail which you use in connection with the login on the website. We only store your log-in information if we have entered into a cooperation agreement, to which they will otherwise be deleted.

4. Your rights as registered

It is your right that you may at any time have access to, correct incorrect information, what information we process about you, how it is processed, how it is stored, and how it is collected.

This right may be limited by law, or if there is an outstanding balance with Old St. Croix Spirits. It is our clear belief that the processing of your personal data is completely transparent to you as a customer with us.

Below you will find information about your rights as registered. If you wish to exercise your rights regarding your data, this must be done in accordance with the following:

Right to insight

You have in accordance with the Data Protection Ordinance art. 15 as a starting point the right to gain insight into the personal data that we process about you. In this connection, you have the right to e.g. be informed what personal information we store on you, what information may be shared with others, and how long the information is retained.

Right to rectification

You have in accordance with the Data Protection Ordinance art. 16 the right to have incorrect information about you corrected, if it may be incorrect unless otherwise stated in legislation or government instructions. We will always strive to accommodate your inquiry without undue delay, and no longer than 30 days from receipt of the objection. We will always let you know.

Right to delete

You have in accordance with the Data Protection Ordinance art. 17 as a starting point the right to be “forgotten”, which means that you can have your personal information deleted. Deletion of your information may result in us not being able to offer our service to you, and we will of course notify you if this should be the case.

We will always strive to accommodate your inquiry and delete your information without undue delay, however, no longer than 30 days from receipt of the objection. We will always let you know.

Right to limitation of treatment

You have in accordance with the Data Protection Ordinance art. 18 right to request that we restrict the processing of your personal data for certain limited purposes.

Right to data portability

You have in accordance with the Data Protection Ordinance art. 20 right to ask us to transfer your personal information from one IT environment to another, if technically possible. If you want us to transfer your data to another data controller, we will do our best to accommodate this.

Right to object

You have in accordance with the Data Protection Ordinance art. 21 right to object to our otherwise lawful processing of your personal data. This can e.g., be how we may use your data for marketing You also have the right to object to any profiling in accordance with the nature of the Data Protection Regulation 22.

Right to complain

If you want to complain about our processing of your personal information, you can send an email to info@oldstcroix.com

Complaints about our processing of your information to the relevant authority must be made to:

The Data Inspectorate
Carl Jacobsens Vej 35
2500 Valby
Tel. 33 19 32 00
or via e-mail: dt@datatilsynet.dk