Business
Private
DKKexc. VAT

Information Notice

1. PRIVACY STATEMENT

This policy describes the management of our web site as regard to processing activities concerning your personal data when visiting us at the following web page:

www.elfadistrelec.dk

(the "Website")

Specifically, it regards the content of our Website only and it does not concern any other web site that might be visited by users by clicking on external links which may be present on the Website.

Certain services or information offered on the portal may be subject to a different privacy policy. In such instances, a separate privacy policy will be posted.

"You" in this Privacy Statement means you as an individual.

"We" or "us" in this Privacy Statement means, in relation to your personal data, the Data Controller.

1.1. WHAT INFORMATION IS COLLECTED?

"Personal data" means information about you.

When you visit this Website we may collect personal data either:

(i) directly where you are asked to provide data. If you use any "Subscribe" feature of the Website you may need to provide contact information as well as information about the page you are on or the content you are viewing; or

(ii) indirectly, such as using cookies (as described below) or to track your use of certain pages of the Website (e.g. your internet protocol address) and other technical means to monitor your use of the Website.

We do not seek to collect sensitive data through the Website.

1.2. HOW WILL PERSONAL DATA BE USED?

We may process and use personal data collected via this Website for the following purposes:

• to administer the Website; and

• to provide information, products and services to you at your request - for example to tailor the content you see on the Website to your specific needs and to properly respond to your feedback and questions.

• to provide relevant product recommendations based on your interaction with our Website and the products you viewed e.g. in advertisements on external third-party websites. See section 2.8 for more detail.

1.3. ARE COOKIES USED ON THE PORTAL?

Cookies are information sent by a web server to a user's computer, which are stored therein.

In order to know which cookies are used on this Website, please see Distrelec and Cookies chapter, while if you want to refuse the use of any cookie, please correct the settings of your internet browser (in this regard, you can find details on how to undertake this action on the website of your browser).

Furthermore, in this case, please be aware that the web navigation and the enjoyment of the contents of this Website could be compromised.

1.4. HOW CAN I ACCESS, OR CHANGE MY PERSONAL DATA?

You are entitled to request access to, correct all your personal data collected by us, to object to the processing and to lodge a complaint.

For any further information about the processing activities carried out by the Data Controller, and/or the exercise of your rights, you may contact the Data Controller at the e-mail address danmark@elfa.se.

1.5. IS PERSONAL DATA TRANSFERRED TO ANOTHER COUNTRY AND IS PERSONAL DATA DISCLOSED TO OTHER ENTITIES?

The website is located on a server in the European Union (EU), data processed by Distrelec, will not be transferred outside the European Union.

With regard to third-party tools and products we use provided by Google Ireland Ltd., please note that some pseudonymised or anonymised data collected by Google Analytics and processed by Google Ireland Ltd, might, occasionally, be transferred by Google Ireland Ltd to Google LLC or another of the Google entities, based outside of the European Union in so-called third countries. For further information, please see section 2.8 for more detail.


1.6. HOW LONG IS PERSONAL DATA RETAINED FOR?

We will keep your personal data only as long as it is reasonably necessary for the purposes described in this Privacy Statement. If you request us your personal information will be deleted from the Website within a few weeks of your departure.

1.7. WHO IS THE DATA CONTROLLER?

Distrelec Manchester Ltd with registered office in 7th Floor, 2 St Peter's Square, Manchester, M2 3AA, United Kingdom, is the Data Controller of your personal data ("Data Controller").

 

2. DISTRELEC AND COOKIES

Our websites and mobile sites use cookies to improve your online experience. We use strictly necessary cookies that are essential for you to browse the website and use its features, such as accessing secure areas of the site. Furthermore, we use not strictly necessary cookies. By giving your consent to the setting of not strictly necessary cookies for enhanced functionality and measurement and optimisation cookies via our cookie consent banner you declare that you allow us to use such cookies in accordance with the terms of this policy.

2.1 What is a cookie, and how does the Distrelec website use cookies?

A cookie is a file that contains data (a string of letters and numbers); this file is transmitted from a web server to a web browser when you visit a website, and is then saved by the browser. The respective ID is then transmitted back again every time the browser requests a page from the server.

Cookies do not contain any information allowing you to be personally identified. It is, however, possible that we may link personal details that we have saved about you to the details stored in the cookies, and link them to these details received.

We use the information that we obtain from your use of the cookies for the following purposes:

  • To recognize your computer when you visit our website.
  • To improve the user-friendliness of the website.
  • To analyse how the website is used.
  • To manage the website.
  • To avoid fraud and increase the security of the website.
  • To personalise our website for you (by providing targeted news that might be of interest you).
  • To track the path you take through our website, which allows certain functions to be used (examples: adding/removing products in the shopping basket, finalising a purchase at the checkout).
  • To serve you relevant product recommendations based on your interaction with our Website and the products you viewed e.g. in advertisements on external websites. See section 2.8 for more detail.

When you add items to your order form, but then decide not to make any purchases during your visit, we save the reference number of the order form in a cookie in order to improve the user-friendliness, so that you can call up the form again on your next visit.

2.2 Is it safe to activate cookies?

Yes. Cookies are just short data strings that cannot perform any operations by themselves. Distrelec recommends that you allow the web browsers to accept cookies from our website.

2.3 How do I adjust my settings for cookies?

You can adjust your settings for cookies on our website or revoke/give your consent to the setting of not strictly necessary cookies at any time via our cookie consent banner, which you can find in the footer of our website.

To activate cookies, you can also follow the instructions below that apply to your particular browser.

Microsoft Internet Explorer

  • Select "Internet options" in the "Tools" menu.
  • Click on the tab "Privacy".
  • Under "Settings", click on the button "Standard" (or move the slider manually to "Medium").
  • Click OK.

Mozilla Firefox

  • Go to the "Tools" menu.
  • Select "Options".
  • Select the icon marked "Privacy".
  • Click in the box that allows websites to use cookies (under "Use custom settings for history").
  • Click on OK to save your changes.

Google Chrome

  • In the Customize and Control menu, select "Settings".
  • In the "Advanced settings" (Privacy, Content settings) find the section "Cookies".
  • To allow the use of cookies, you have to select "Allow local data to be set" (or "Activate all cookies").
  • Click on OK.

Safari

  • Select Safari > Settings, and click on Privacy.
  • In the field "Block cookies", specify if and when Safari should accept cookies from websites.

2.4 What types of cookies does the Distrelec website use?

You can set your browser to refuse cookies (you will find more details about this in the help text of your browser). Please note that if you do this, certain personalised functions of our website will no longer be available to you.

2.5 We use three different types of cookies:

Session cookies - these are temporary files that are only activated during your visit (session) to our website. Normally your browser deletes such cookies as soon as you close it.

Persistent cookies - these files are active after the browser session ends (example: when you register on a website and then later come back and visit it again, the website has learned who you are and displays a corresponding welcome message). Such behaviour is made possible by persistent cookies.

Third-party cookies - when you use our website, cookies from third-party providers may be transmitted to you. If you visit a website that has embedded content, such as YouTube videos for example, these websites may transmit cookies to you. Distrelec does not monitor the settings of such cookies. We recommend that you ask for more information about these cookies on the websites of such third-party providers, and find out the corresponding options for managing them.

Below you will find a list of the cookies that are most commonly used by Distrelec, and an explanation of how they are each used.

Cookie typeServicePurpose
Enhanced functionality
Also known as “functionality cookies,” these cookies allow a website to remember choices you have made in the past, like what language you prefer, what region you would like weather reports for, or what your user name and password are so you can automatically log in.
Google GStaticGoogle uses this domain to off-loaded static content (JavaScript code, images and CSS) to a different domain name in an effort to reduce bandwidth usage and increase network performance for the end user. gstatic.com is a cookieless domain to deliver static content for Google. One benefit of hosting static components on a cookie-free domain is that some proxies might refuse to cache the components that are requested with cookies.
Parcel LabsDistrelec partner with Parcel Labs to provide a seamless delivery experience. These cookies enable us to track your session in relation to your order and delivery options.
Measurement and optimisation
Also known as “performance cookies,” these cookies collect information about how you use a website, like which pages you visited and which links you clicked on. None of this information can be used to identify you. It is all aggregated and, therefore, anonymized. Their sole purpose is to improve website functions. This includes cookies from third-party analytics services as long as the cookies are for the exclusive use of the owner of the website visited.
Google AnalyticsGoogle Analytics cookies allow Distrelec to collect information about how visitors use the Website. They keep track of when a visitor enters and leaves the Website and what pages they view and actions they perform. They also allow Distrelec to improve the relevancy of product recommendations (e.g. in advertisements) on other websites. See section 2.8 for more detail.
ProductsupProductsup cookies are data stored by the Internet browser on the user's computer system. The cookies can be transmitted to a page when they are accessed and thus allow an assignment of the user. Cookies help to simplify the use of websites for users.
Google AppsGoogle Apps cookies are used to maintain a user’s preferences, to maintain and enhance a user’s experience during a specific browsing session and to improve the performance of Google services.
Microsoft ClarityIt helps Distrelec understand how users view and use our website across all modern devices and browsers and also gather user insight and feedback on how people use our site. These cookies will expire after one year.
Optimizely Optimizely is a tool used by Distrelec for A/B testing to optimise our website content for improved user experience.
Personalised content and advertising
These cookies track your online activity to help advertisers deliver more relevant advertising or to limit how many times you see an ad. These cookies can share that information with other organizations or advertisers. These are persistent cookies and almost always of third-party provenance.
Wistia VideosThis cookie is placed by our video hosting site Wistia and is used to support video functionality that may be found throughout the website. In addition to keeping track of the website visitor's position in a video should playback be interrupted, this cookie also notes user behaviour regarding the video itself.
VimeoVimeo OTT sets first-party, essential cookies to enable certain features and remember your preferences. For example, cookies keep you logged in, allow you to purchase items, and maintain your language and volume settings.
LinkedInThese cookies allow Distrelec to track your journey when you click through to the site from adverts externally.
Google AdsThese cookies allow Distrelec to show you relevant adverts when you navigate away from the site, also to track your journey when you click through to the site from external adverts.
Facebook Custom AudiencesThese cookies allow Distrelec to show you relevant adverts when you navigate away from the site, also to track your journey when you click through to the site from external adverts.
Google DoubleclickThese cookies allow Distrelec to track your journey when you click through to the site from adverts externally.
Push EngageDistrelec uses this to get the status of the subscriber. It includes domain pushengage.com
ReevooThese cookies allow us to integrate into our website customer reviews of our products left on the Reevoo website.
TwitterThese cookies allow Distrelec to show you relevant adverts when you navigate away from the site, also to track your journey when you click through to the site from external adverts.
BingThese cookies allow Distrelec to show you relevant adverts when you navigate away from the site, also to track your journey when you click through to the site from external adverts.
YouTubeYouTube is used by the Distrelec to store and show video content. These cookies are set by YouTube to track usage of its services. The YouTube Cookies are only installed when you press play.
Google SignalsGoogle Signals provides us with insights on how users behave across multiple devices and enables us to create more effective cross-device remarketing campaigns, helps us to better understand the customer journey.
Facebook Conversion APIThe Facebook Conversions API allows us to send website and offline events directly to Facebook, giving us a more complete view of our customers' behaviour and allowing us to optimize our Facebook ads for better performance
StackAdaptDistrelec uses StackAdapt, a programmatic advertising platform, to deliver personalized and relevant ads to users based on their browsing behavior and interests, enhancing their online experience and helping them discover products and services that meet their needs.
BloomreachBloomreach is a marketing system that allows Distrelec to collect information about how visitors use the Website. It uses customer data, such as name, company name, email address, and events such as when a visitor places a sales order, enters or leaves the Website, what pages they view and actions they perform. It allows Distrelec to provide information that is relevant to our customers in marketing emails and on our websites.
Strictly necessary cookies
These cookies are essential for you to browse the website and use its features, such as accessing secure areas of the site. Cookies that allow web shops to hold your items in your cart while you are shopping online are an example of strictly necessary cookies. These cookies will generally be first-party session cookies.
FusionFusion is an AI-powered technology for search, navigation, merchandising, personalization and recommendations. Most of the cookies "session cookies." They are automatically deleted after your visit. Other cookies remain in your device's memory until you delete them. These cookies make it possible to recognize your browser when you next visit the site. Cookies help website more user-friendly, efficient, and secure. It is used to track clicks, carts and checkouts.
FactFinderFACT-Finder is an AI-powered technology for search, navigation, merchandising, personalization and recommendations. Most of the cookies "session cookies." They are automatically deleted after your visit. Other cookies remain in your device's memory until you delete them. These cookies make it possible to recognize your browser when you next visit the site. Cookies help website more user-friendly, efficient, and secure. It is used to track clicks, carts and checkouts.
Javascript Crypto LibraryThese cookies are used to maximize network resources, manage traffic, and protect customer's sites from malicious traffic.
DistrelecWe use cookies to help us remember and process the items in your shopping cart. They are also used to help us understand your preferences based on previous or current site activity, which enables us to provide you with improved services. We also use cookies to help us compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future.
EnsightenEnsighten is a container tag management system. It addresses the problems associated with site tagging and tracking of online marketing campaigns by providing universal, or server side, tag solutions. Sometimes we'll advertise on 3rd party websites. Ensighten Cookies are used to help us and our advertisers see which advertisements you click on and interact with. Each individual advertiser uses its own tracking cookies and the data taken is not confidential or interchangeable.
Component SearchTriggered as part of traceparts integration (if this is not accepted then the footprint icon is not displayed). It includes componentsearchengine.com domain
TracepartsTraceparts uses cookies to recognize user’s device so he does not have to give the same information several times during one task. It also analyse data to help TraceParts understand how people interact with services so the Company can make them better and whom Measure the number of people using the Website
Rapidspikewe use cookies to help us remember and process the items in your shopping cart. They are also used to help us understand your preferences based on previous or current site activity, which enables us to provide you with improved services. We also use cookies to help us compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future.
Google ReCaptchaThese are essential site cookies, used by the google reCAPTCHA. These cookies use an unique identifier for tracking purposes.
distrelec.deWe use cookies to help us remember and process the items in your shopping cart. They are also used to help us understand your preferences based on previous or current site activity, which enables us to provide you with improved services. We also use cookies to help us compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future.
nexus.ensighten.comEnsighten is a container tag management system. It addresses the problems associated with site tagging and tracking of online marketing campaigns by providing universal, or server side, tag solutions. Sometimes we'll advertise on 3rd party websites. Ensighten Cookies are used to help us and our advertisers see which advertisements you click on and interact with. Each individual advertiser uses its own tracking cookies and the data taken is not confidential or interchangeable.
IncapsulaIncapsula DDoS protection and web application firewall cookie. Cookie is set to allow a visitor to receive site content from one out of multiple servers as the visitor browses the site. cookie is set to allow a visitor to receive site content from one out of multiple servers as the visitor browses the site. Allows the visitors session to be maintained. Cookie is removed after browser is closed while some persisted for 12 months.
GoogleIt is used to determine if a user will receive a captcha. Something which is used for bot protection
PiwikThis cookie stores unique ID of the user. It is used to recognize visitors and hold their various properties. It counts and tracks the pageviews. By default it expires after 13 months, but it can be changes.
CHEQCHEQ's advanced bot mitigation technology is aimed at reliably distinguishing between human and computer-generated activity. CHEQ's cookies are used to identify and block fraudulent access to our website. The cookies are not used for any other purpose and do not contain any personal data. For more information, please see our Privacy Policy

2.6 Cookie settings

You can adjust your settings for cookies on our website for not strictly necessary cookies at any time via our cookie consent banner, which you can find in the footer of our website.

You will find more information about the use of cookies on websites at www.allaboutcookies.org

2.7 Block cookies

Most browsers have an option to block cookies. An example of this:

  • In Internet Explorer you can block all cookies, by clicking on "Tools", "Internet options", "Privacy", and then use the slider to select "Block all cookies".
  • In Mozilla Firefox you can block all cookies by clicking on "Tools", and then "Options", and turn off "Accept cookies from sites" in the section "Privacy".

However, the blocking of all cookies has a negative effect on the usability of many websites.

2.8 Delete cookies

You can of course also delete any cookies that have already been saved on your computer.

  • If you are using Internet Explorer, you have to manually delete the cookie files (you will find instructions for this at http://support.microsoft.com/kb/278835).
  • If you are using Mozilla Firefox and you want to delete the cookies, you first have to check that cookies are deleted when you use the option "Remove private data" (you can change this setting by clicking on "Tools", "Options, "Settings" and "Privacy") and click on "Clear your recent history" in the "Tools" menu.

If you have given your consent to the setting of measurement and optimisation cookies, on this website and its mobile applications, data is collected and stored by Google Analytics, a Web analysis service provided by Google Ireland Limited. It is used to form user profiles under pseudonyms. Cookies are used as part of this. Google Analytics collects the following personal data: Online identifiers, including cookie identifiers, Internet Protocol addresses and device identifiers, client identifiers. The data generated by these cookies (including your shortened IP address) is transmitted to a Google server and stored there. Google will use this information to evaluate your use of the website, to compile reports on website activity for us and to generate further analysis and evaluations related to the use of our website and your internet usage for the improvement and effective design of our websites and product range. Google may also link this data to other data about you, such as your search history, personal Google account, usage data for other devices, and other data that Google has stored about you. Data stored by Google Analytics is stored for a period of up to 26 months. After this time, only aggregated statistics are stored by Google Analytics.

We only use Google Analytics if you have given your consent via our cookie banner. In some cases, please note that the aforementioned data and information may be transferred from Google to third countries where Google’s data centers are located or from which processing takes place and such third countries – such as the USA - do not have an adequate data protection level on the basis of a decision of the European Commission. The transfer by Google to such third countries may be associated with potential risks to your personal data, especially since access by US authorities cannot be excluded when transferring data to the US. Nevertheless, we have concluded the EU contractual clauses with Google which also include a variety of standard technical and organizational measures to ensure the security of your personal data. Take the above circumstances into account when giving your consent.

On this website, we also use a so-called re-targeting technology to collect and save information about the surfing behaviour of the website visitor in anonymised form. In some cases, Website activity data captured through Google Analytics is used to optimise this process. This data is stored on your computer using so-called "cookie" text files. The technology applies an algorithm to analyse the surfing behaviour, and can then display targeted product recommendations as interest-related ad banners on other websites (known as publishers). In no instance can this data be used to personally identify the visitors to this website. The collected data is used solely to improve the offer. There is no other use or passing on of the data to third parties.

For this website, you can revoke your consent to the tracking by Google Analytics at any time by adjusting your settings in our cookie consent banner, which you find in the footer of our website. You can also use a browser plug-in to prevent the information collected by cookies (including your IP address) from being sent to and used by Google. The following link will take you to the corresponding plugin: tools.google.com/dlpage/gaoptout

Note: By clicking on the above links, you will be re-directed to another page and we cannot modify or alter any information displayed there.

2.9 Embedding of social plugins

Social plugins for Facebook, Google and others are used on our website. Our Internet site thus displays a "+ 1" or "f" or "Thumbs up" button. These are offers by the US American firms Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) and Facebook Inc. (1601 S California Ave, Palo Alto, CA 94394 USA)

Only when you click on the button "+ 1" or "f" or "Thumbs up" does your browser set up a direct connection to the servers at Facebook or Google. The content of the "+ 1" or "f" or "Thumbs up" button is then passed on by Google or Facebook directly to your browser, and incorporated by it in the website. Thus, we have no influence on the extent of the data that Google or Facebook collects with the button.

On their Internet pages Facebook and Google (http://www.facebook.com/policy.php; http://www.google.com/Intel/de/+/policy/+1button.html) present detailed information about the scope, type, purpose and further processing of your data and your rights to protection of your privacy.

By first logging out from the pages of your social networks (Facebook and Google +) and deleting the cookies that have been set, you can prevent Facebook and Google from collecting information about you during your visit to our website.

2.10 Spam/DDOS Protection

We use tools (such as Google's reCAPTCHA and others) to protect our website from malicious traffic, in particular for spam and DDOS protection. Such types of service analyse your behaviour on the website, the configuration of your computer (including any Google or other third party cookies you already have installed) and your IP address to determine whether you are a genuine or malicious user. Where an issue is detected, you will be challenged to prove that you are not a robot when completing certain tasks. For example, when submitting a form.

This data is passed directly between your computer and Google's and other third parties' servers in Europe and the USA (as to Google) therefore we have no influence on the extent of the data that they collect, nor what that data is subsequently used for.

Google reCAPTCHA is a service provided by Google Inc, 1600 Ampitheatre Parkway, Mountain View, CA 94043, USA. For more information about the scope, type and further processing of your data and information on how to protect your privacy please refer to the Google privacy policy ( https://www.google.com/policies/privacy/ ) and terms of service ( www.google.com/policies/terms ).

 

3. INFORMATION NOTICE FOR PROSPECT CUSTOMERS

pursuant to Article 13 Regulation (EU) 2016/679 ("GDPR")

3.1 DATA CONTROLLER

Distrelec Manchester Ltd with registered office in 7th Floor, 2 St Peter's Square, Manchester, M2 3AA, United Kingdom.is the Data Controller of your personal data ("Data Controller").

You may contact the Data Controller at the e-mail address danmark@elfa.se or via express courier at the address 7th Floor, 2 St Peter's Square, Manchester, M2 3AA, United Kingdom.

3.2 PERSONAL DATA DEFINITION AND INFORMATION REGARDING THE PROCESSING ACTIVITIES

Under the GDPR personal data is defined as: “ Any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person ” (“Data”).

The Data Controller may process the following Data you might have provided the Data Controller with by registering to its online shop (“ Distrelec online shop”):

(i) title, first name, surname; e-mail address;

(ii) address;

(iii) job role and information relating to the company you work for (where applicable);

(iv) contact number (e.g., phone, mobile and/or fax number);

(v) industry;

(vi) any other information might be required or voluntarily provided in the context of your registration to Distrelec online shop.

The provision of Data listed above is voluntary; however, should you:

• refuse to provide data listed under points from (i) to (iv) above, it would not be possible for the Data Controller to let you create an account on Distrelec online shop;

• decide not to provide Data listed under point (v) above, it would not be possible for the Data Controller to contact you by phone (and/or fax) in case you might need assistance in the context of a request you might have done;

• do not provide Data listed under points (vi), it would not be possible for the Data Controller to provide you with news and updates relevant to the industry of your interest, offers dedicated to a particular field or area, and/or to provide you with dedicated services you might have asked for or need.

In any event, the Data Controller is committed to ensuring that the information collected and processed is appropriate for the purposes as set forth here below, and that this does not constitute an invasion of your privacy.

3.3 PURPOSES FOR THE PROCESSING AND RELEVANT LEGAL BASIS

a. Satisfaction of your requests

The Data Controller will process your Data listed under paragraph 3.2 above to follow up the requests you might have made in order to register to Distrelec online shop and to take advantages of services, features and tools provided for therein. By way of example, your Data is processed to provide you with (i) the access to Distrelec online shop, (ii) the chance to purchase the goods/services available therein (or to place an order), and (iii) the assistance and the support you might need in the context of you registering to or using Distrelec online shop. Please note that a registration for the Distrelec online shop and creation of an user account is non-mandatory, you can also place an order using our guest checkout, especially if you are acting in your capacity as a consumer, for further in formation on data processed in relation with orders you place, please see paragraph 4.2 and 4.4 below.

The legal basis of the processing of your Data is the performance of a contract of which you are a party to, or the satisfaction of your requests prior to the entering into the contract.

Please also be informed that, should you place an order or decide to purchase products or services through Distrelec online shop, you will enter into a contractual relationship with the seller that is the local legal entity member of the Distrelec group, which will process your Data mainly in order to manage your order and to provide you with the products and/or services you might have purchased. Accordingly, a further information notice under Article 14, GDPR, will be provided you at the checkout, before you place your order.

b. Compliance with a legal obligation

The Data Controller will process your Data, should it be necessary, to fulfill legal obligations related to your registration to Distrelec online shop, as well as, generally speaking, to the activities necessary to satisfy your request(s).

The provision of your Data for said purpose is mandatory.

c. Sending of customer satisfaction communications

Should you place an order, or carry out particular actions on Distrelec online shop, the Data Controller might process your Data to send you communications aimed at understanding customers satisfaction as to the services Distrelec online shop provided you with, whether you would recommend Distrelec to your friends and colleagues, and, generally speaking, whether you like your experience with us. This would help the Data Controller in improving the quality of the services it offers.

In doing so, your Data might be processed on the basis of the legitimate interest of the Data Controller, by respecting the principles set forth by the GDPR.

On this regard, please be informed that you have the right to object to the sending of such communications, at any time and free of charge, by following the link to unsubscribe available in the footer of each customer satisfaction communication you might receive; in case you exercise said right, it would not be possible for the Data Controller to send you further customer satisfaction communications of this kind in future.

d. Marketing

The Data Controller may process Data listed under paragraph 3.2 above, to: (i) send you marketing and/or promotional communications, relating to products and/or services available on Distrelec online shop, either they be of the Data Controller or of other legal entity (either members of the Group the Data Controller is a party or not) to which you might have shown your interest into, being they similar (or not) to those you already purchased, ordered or have manifested your interest into; (ii) invite you to take part to initiatives available on Distrelec online shop, promotional campaigns, loyalty programs, and/or to events/initiatives organized by the Data Controller, its partners, and/or by other legal entities members of the Group the Data Controller is a member of; (iii) invite you to try new features and/or new tools available on Distrelec online shop; (iv) send you reminders, in case you did not complete some actions you started on Distrelec online shop; (v) ask you for feedbacks and invite you to take part to surveys (even though they are not strictly related to a purchase you have made or an order you might have placed).

Please also be informed that, in order to make possible for the Data Controller to offer you services and products to which you might be interested, and/or provide you with the chance to take part to initiatives which might be of some interest for you, the Data Controller might need to take into account your preferences, as you showed when you registered on Distrelec online shop, by using the features available therein, or by purchasing some items instead of others. This, however, shall have no consequences on your rights and freedoms as a data subject, since in any case you shall be given the chance to have access to all products/services available on Distrelec online shop, to choose freely the products/services you want to buy/order, and there will be no restrictions which will be implemented on the basis of data subjects preferences.

This (i.e., sending of marketing communications listed under this paragraph) might be carried out by the Data Controller only whether your prior consent is given, being it the legal basis for the processing.

On this regard, please also be informed that you might decide to exercise your right to withdraw the consent previously given as to the processing of your Data for the mentioned purpose, at any time and free of charge, either by following the dedicated link available in the footer of each marketing communication you receive, or by contacting the Data Controller at the contact and with the modalities set forth below; in case you exercise your right to revoke the consent given, it would not be possible for the Data Controller to send you further marketing/commercial communications of this kind in future.

e. Statistical analysis (i.e., creation of business report at group level)

The Data Controller might carry out statistical analysis on purchases, orders and other sales activities carried out through Distrelec online shop or elsewhere.

In doing so, information are usually stored anonymously and processed as an aggregate. Therefore, said activities should not involve the process of your Data, intended as information referred to you as an identifiable individual.

Should your Data be processed, security measures to protect your Data (such as, by way of example, pseudonymization) shall be implemented; the relevant processing might be carried out by the Data Controller on the basis of its legitimate interest.

3.4 DISCLOSURE OF YOUR DATA TO EU THIRD PARTIES

The Data Controller may disclose your Data to third parties which provide the Data Controller with services necessary and/or functional to satisfy your request(s), and/or related to the management of activities relevant to the purposes set forth above.

In particular, your Data may be disclosed to organizations that support the Data Controller in maintaining and managing Distrelec online shop, creating, developing and implementing its features and tools, or which provide the Data Controller with services ancillary to said activities, including providers of IT services, marketing and/or advertising agencies, and/or external consultants.

Said third parties shall process your Data as data processors.

The Data Controller keeps the list of data processors up-to-date; you might ask for having access to said list by contacting the Data Controller at e-mail set forth below.

The Data Controller may also disclose your Data to third parties to which said disclosure is provided for as a legal obligation, to public authorities, and/or to other legal entities members of the Group established in the European Economic Area, and, in particular, to the group company which will enter into the (sale/supply) contractual relationship with you and/or to those which will deal with the delivery of services and/or products you ordered/purchased.

The Data Controller has no intention to make your Data available to the public.

3.5 TRANSFER OF DATA TO THIRD COUNTRIES

On top of this, for the purposes as set forth above, your Data might be transferred to other legal entities part of the Group of companies to which the Data Controller is a member (e.g., to the group company that will enter into the contractual relation with you in case you place an order, to those companies within the group which provide IT assistance service and/or to those that offer services necessary or relevant to the delivery of the products/services you might have purchased), or to third party companies established in countries outside the European Economic Area, which offer services relevant to the processing carried out by the Data Controller.

The mentioned transfer, whether the case be, shall take place only if the requirements provided for by the Regulation are fulfilled. In particular, on a case-by-case basis, the transfer might take place upon an adequacy decision issued by the European Commission, by the adoption of standard contractual clauses and/or upon any other appropriate safeguard provided for by the Regulation being implemented. For our use of Google Analytics and transfers that may occur in this respect from Google to third countries please find detailed information on such transfer and safeguards in place in section 2.8 above.

You might ask for information as to the countries outside the European Economic Area to which your Data has been transferred, by contacting the Data Controller at e-mail set forth above.

3.6 APPLICABLE RETENTION PERIOD

As a principle, the Data Controller is committed to ensure that your Data will be processed for the time strictly necessary to fulfil the purposes mentioned under paragraph 3.3 above.

In particular, you might find here below information about the retention period provided for by the Data Controller as regard to each purpose of the processing:

a) for the purpose of satisfying your request(s), your Data will be processed as long as you are registered to Distrelec online shop, that being said until you decide to unsubscribe by deleting the account you had created; thereafter, your Data will be stored either for a period of 24 months following to the deletion of the account, for the purpose of being compliant with legal obligations, or for the defense of the Data Controller’s rights only;

b) for the purpose of fulfilling legal obligations, your Data will be processed and stored by the Data Controller for the time necessary to comply with said legal obligations;

c) for the purpose of sending you customer satisfaction communications, your Data will be processed for the time strictly necessary to ask for your feedback following an order you placed or a particular actions you might have carried out on the Distrelec online shop (usually, said communication is sent no later than a month from the relevant order or a particular action you made on Distrelec online shop). Once a consumer satisfaction communication is sent with reference to an order you placed or a particular action you might have made, you will no longer receive further communication of this kind regarding said order/action; however, a new customer satisfaction communication might be sent you in case you place another order/carry out further significant actions on Distrelec online shop. You might decide, once and for all, to unsubscribe from receiving this kind of communication, at any time and free of charge, by exercising your right to object through the dedicated link you will find in the footer of each consumer satisfaction communication you might receive; in that case, the Data Controller will no longer process your data for this purpose in future;

d) for marketing purposes listed under paragraph 3.3, letter (d), above, provided that your prior consent is given, your Data will be processed as long as you are registered to Distrelec online shop (that being said until you decide to unsubscribe by deleting the account you had created), and for the 24 months thereafter. In this context, in order to send you promotional communications and/or invitations which might be of your interest, the Data Controller might take into account the preferences you showed in the previous 12 months only. This is without prejudice for you to exercise your right to revoke the consent previously given, at any time and free of charge, relevant to the receiving of marketing communication and promotional messages/invitations that might be of your interest;

e) for statistical analysis purposes, should information processed in that context falls within the definition of Data, your Data will be processed for the time strictly necessary to achieve said purpose. As a principle, the Data Controller is committed to make Data anonymous (or, at least, to pseudonymize it or adopt similar appropriate security measures) and to process, where possible, only aggregated information. In any case, reports will contain only anonymous information. No time retention limit is provided for in case of report containing anonymous information only.

3.7 YOUR DATA AS DATA SUBJECT

At any time, while the Data Controller is in possession of or processing your Data, you, the data subject, have the following rights:

Right of access – you have the right to obtain confirmation as to whether or not your Data is being processed, and, where that is the case, the right to access to the Data and to receive any information regarding said processing;

Right of rectification – you have the right to obtain without undue delay the rectification of your Data, should it be inaccurate or incomplete;

Right to erasure – provided that the conditions laid down in the GDPR are met, you have the right to obtain the erasure of your Data from our records;

Right to restriction of processing – where certain conditions apply, you have the right to obtain from the Data Controller restriction of processing;

Right of portability – you have the right to have your Data we hold transmitted to another data controller;

Right to object – you have the right to object, on grounds relating to your particular situation, at any time to processing of your Data which is based on the legitimate interest of the Data Controller, including profiling, unless the Data Controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims;

Right to withdraw the consent – you have the right to withdraw the consent previously given as regard to the processing of your Data, at any time, provided that the withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal;

Right to lodge a complaint before the Supervisory authority – should the Data Controller refuse to follow up to your request to exercise your rights as provided for by the GDPR, it shall provide you with the reason underpinning said refusal. If need be, you have the right to lodge a complaint as set forth under the paragraph below.

Should you intend to exercise your rights as provided for by the GDPR, please contact the Data Controller at the following dedicated e-mail address danmark@elfa.se , or via express courier at 7th Floor, 2 St Peter's Square, Manchester, M2 3AA, United Kingdom.

3.8 COMPLAINTS

Should you wish to file a motion as to how your Data is being processed by the Data Controller, or as to how your complaint has been handled, you have the right to lodge a complaint directly before the competent supervisory authority.

* * *

 

4. INFORMATION NOTICE FOR CUSTOMERS

pursuant to Article 14 Regulation (EU) 2016/679 (the “Regulation” or “GDPR”)

4 .1 DATA CONTROLLER

Elfa Distrelec A/S , with registered office in Naverland 2, DK-2600 Glostrup, in person of its legal representative pro tempore, is the data controller of your personal data (“ Data Controller”).

You may contact the Data Controller at the e-mail address danmark@elfa.se or via express courier at the address Naverland 2, DK-2600 Glostrup.

4.2 PERSONAL DATA DEFINITION AND INFORMATION REGARDING THE PROCESSING ACTIVITIES

Under the GDPR, personal data is defined as: “ Any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person ” (“Data”).

The Data Controller processes the following Data it collects in order to provide you with the goods or services you ordered/purchased through Distrelec online shop, and in the context of customer care activities:

(i) title, first name, surname;

(ii) e-mail address;

(iii) address;

(iv) credit card details or information as to the methods you used to pay at checkout;

(v) contact number (e.g., phone, mobile and/or fax number);

(vi) job role and information relating to the company you work for (where applicable);

(vii) industry;

(viii) any other Data might be required or you might voluntarily provide the Data Controller within the context of (a) an order or a purchase you might have done, (b) the activities ancillary to those necessary to provide you with the product or the service you bought or ordered, as well as (c) the actions the Data Controller might take in order to check your creditworthiness and/or to prevent fraud .The provision of Data listed above is voluntary; however, should you:

• refuse to provide data listed under points from (i) to (iv) above, it would not be possible for the Data Controller to follow up an order you might have submitted and/or to deliver you the products or services you are interested into or you purchased/ordered;

• decide not to provide Data listed under point (v) above, it would not be possible for the Data Controller to contact you by phone (and/or fax) in case you might need assistance in the context of an order or a purchase, to provide you with costumer care activities, or, generally speaking, to provide you with services and/or notification which might be of your interest;

• not provide Data listed under point (viii), depending on the missing information, it might not be possible for the Data Controller to either enter into the contractual relationship with you or provide you with the goods or services you might have asked for or need.

In any event, the Data Controller is committed to ensuring that the information collected and processed is appropriate for the purposes as set forth hereby, and that this does not involve an invasion of your privacy.

4.3 SOURCE THE DATA ORIGINATED FROM

Most of your Data has been collected by Distrelec Manchester Ltd., with registered office in 7th Floor, 2 St Peter’s Square, Manchester, M2 3AA, United Kingdom, when you created an account on/registered to Distrelec online shop.

Said Data is disclosed to the Data Controller when you place an order relevant to products/services sold by the Data Controller through Distrelec online shop or, more generally, in case of purchases for which the Data Controller manages the contractual relationship and the relevant delivery.

Other Data (such as, for example, the details of the credit card you used for payment) necessary to permit you to place an order might be collected directly from you at checkout page.

4.4 PURPOSES FOR THE PROCESSING AND RELEVANT LEGAL BASIS

a. Follow up your orders, pre-contractual ordinary checks and management of the contractual relationship, guest checkout

The Data Controller will process your Data listed under paragraph 4.2 above to follow up your orders, carry out pre-contractual ordinary checks, satisfy requests you might have made and manage the relevant contractual relationship with you. In particular, your Data might be processed in the context of the activities necessary or related to client engagement and administration, performance of checks prior to the entering into the contract with you aimed at assessing your credit standing/creditworthiness and at preventing frauds, order management, delivery of products/services you might have ordered, invoice issuing, payment collections, after sales and technical assistance or customer care activities in general, etc. If you have not registered for our online shop and placed an order in our Distrelec online shop using our guest checkout, we process the Data pursuant to paragraph 4.2 that is required to fulfil and process your order.

The legal basis of the processing of your Data is the performance of a contract of which you are a party to or the satisfaction of your request(s) prior to the entering into the contract.

b. Compliance with a legal obligation

The Data Controller will process your Data, should it be necessary, to fulfill legal obligations (including those provided for under anti-money laundering law) related to the management of the contractual relationship with you, as well as, generally speaking, to the activities necessary to satisfy your request(s).

The provision of your Data for said purpose is mandatory.
 

c. Sending of customer satisfaction communications

Should you purchase products and/or services through Distrelec online shop, by phone or via e-mail, the Data Controller might process your Data to send you communications aimed at understanding your satisfaction as to a particular order/purchase, the specific products/services you might have ordered or purchased, and, generally speaking, as to whether you like that purchase experience. This would help the Data Controller in improving the quality of the services it offers.

In doing so, your Data might be processed on the basis of the legitimate interest of the Data Controller, by respecting the principles set forth by the GDPR.

On this regard, please be informed that you have the right to object to the sending of such communications, at any time and free of charge, by following the link to unsubscribe available in the footer of each customer satisfaction communication you might receive; in case you exercise said right, it would not be possible for the Data Controller to send you further customer satisfaction communications relevant to a specific purchase/order in future.

d. Statistical analysis (i.e., creation of business report at company level)

The Data Controller might carry out statistical analysis on purchases, orders and other sales activities carried out by the Data Controller.

In doing so, information are usually stored anonymously and processed as an aggregate. Therefore, said activities should not involve the process of your Data, intended as information referred to you as an identifiable individual.

Should your Data be processed, security measures to protect your Data (such as, by way of example, pseudonymization) shall be implemented; the relevant processing might be carried out by the Data Controller on the basis of its legitimate interest.

e. Email communication with product recommendations for similar products to existing customers

If you place an order in our online shop, we will process your email address to inform you about other products from our range of products that are similar to the products you ordered. [We inform about this during the checkout process in our online shop.] The legal basis for the aforementioned processing is our legitimate interest (Art. 6 para. 1 s. 1 lit. f GDPR). We have a legitimate interest to send our existing customers who have already placed an order in our online shop advertising for our own similar goods via e-mail. You can object to receiving these e-mails free of charge by clicking serviceemail@distrelec.com before your e-mail address is processed by us for this purpose. You can also object later at any time and free of charge by clicking on the unsubscribe link provided in each email.

4.5 DISCLOSURE OF YOUR DATA TO EU THIRD PARTIES

The Data Controller may disclose your Data to third parties which provide the Data Controller with services necessary and/or functional to satisfy your request(s), and/or related to the management of activities relevant to the purposes set forth above.

In particular, your Data may be disclosed to organizations, either members of the Group of companies the Data Controller is a member of or not, that support the Data Controller in managing the contractual relationship with you, carrying out pre-contractual checks as to your creditworthiness and/or preventing fraud, delivering the products/services you purchased, issuing the relevant invoices, or which provide the Data Controller with services ancillary to said activities, including providers of IT services, and/or external consultants in general. Furthermore, for the purpose of sending you customer satisfaction communications as to a specific purchase you might have made or a particular order you placed, your Data might be disclosed to other legal entities within the Group which will process it on behalf of the Data Controller.

Said third parties shall process your Data as data processors.

The Data Controller keeps the list of data processors up-to-date; you might ask for having access to said list by contacting the Data Controller at e-mail set forth above.

The Data Controller may also disclose your Data to third parties to which said disclosure is provided for as a legal obligation, to public authorities, to other legal entities members of the Group it is a party to established in the European Economic Area (and, in particular, to those group companies which will deal with the delivery of services and/or products you ordered/purchased), to providers of commercial information, analytics, and insights for businesses, to banking institutions that the Data Controller uses to make payments and/or other financial institutions.

The Data Controller has no intention to make your Data available to the public.

4.6 TRANSFER OF DATA TO THIRD COUNTRIES

On top of this, for the purposes as set forth above, your Data might be transferred to other legal entities part of the Group of companies to which the Data Controller is a member (e.g., to those companies within the group which provide IT assistance service and/or to those that offer services necessary or relevant to the delivery of the products/services you might have purchased), or to third party companies established in countries outside the European Economic Area, which offer services relevant to the processing carried out by the Data Controller.

The mentioned transfer, whether the case be, shall take place only if the requirements provided for by the Regulation are fulfilled. In particular, on a case-by-case basis, the transfer might take place upon an adequacy decision issued by the European Commission, by the adoption of standard contractual clauses and/or upon any other appropriate safeguard provided for by the Regulation being implemented. For our use of Google Analytics and transfers that may occur in this respect from Google to third countries please find detailed information on such transfer and safeguards in place in section 2.8 above.

You might ask for information as to the countries to which your Data has been transferred, by contacting the Data Controller at e-mail set forth above.

4.7 APPLICABLE RETENTION PERIOD

As a principle, the Data Controller is committed to ensure that your Data will be processed for the time strictly necessary to fulfil the purposes mentioned under paragraph 4.4 above.

In particular, you might find here below information about the retention periods provided for by the Data Controller as regard to each purpose of the processing:

a) for the purpose of satisfying your request(s), your Data will be processed as long as a contractual relationship between you and the Data Controller is in place, that being said until the price for products/services purchased and delivered has been paid successfully in favor of the Data Controller and there is no pending open debit payment entry. Thereafter, your Data will be stored either for a period of 11 years for the purpose of being compliant with legal obligations, or for the defense of the Data Controller’s rights only;

b) for the purpose of fulfilling legal obligations, your Data will be processed and stored by the Data Controller for the time necessary to comply with said legal obligations;

c) for the purpose of sending you customer satisfaction communications, your Data will be processed for the time strictly necessary to ask for your feedback following a specific order you placed, a purchase you might have made, or the particular products/services you ordered/bought (usually, said communication is sent no later than a month from your last order or purchase). Once a consumer satisfaction communication is sent with reference to a specific order you placed, a purchase you might have made or the products/services you ordered/bought, you will no longer receive further communication of this kind regarding said order/purchase or the relevant products/services you ordered/bought; however, a new customer satisfaction communication might be sent you in case you place another order or purchase other products/services. You might decide, once and for all, to unsubscribe from receiving this kind of communication with reference to specific orders, purchases and/or to particular products/services you ordered/bought, at any time and free of charge, by exercising your right to object through the dedicated link you will find in the footer of each consumer satisfaction communication you might receive; in that case, the Data Controller will no longer process your data for this purpose in future;

d) for statistical analysis purposes, should information processed in that context falls within the definition of Data, your Data will be processed for the time strictly necessary to achieve said purpose. As a principle, the Data Controller is committed to make Data anonymous (or, at least, to pseudonymize it or adopt similar appropriate security measures) and to process, where possible, only aggregated information. In any case, reports will contain only anonymous information. No time retention limit is provided for in case of report containing anonymous information only.

4.8 YOUR DATA AS DATA SUBJECT

At any time, while the Data Controller is in possession of or processing your Data, you, the data subject, have the following rights:

Right of access – you have the right to obtain confirmation as to whether or not your Data is being processed, and, where that is the case, the right to access to the Data and to receive any information regarding said processing;

Right of rectification – you have the right to obtain without undue delay the rectification of your Data, should it be inaccurate or incomplete;

Right to erasure – provided that the conditions laid down in the GDPR are met, you have the right to obtain the erasure of your Data from our records;

Right to restriction of processing – where certain conditions apply, you have the right to obtain from the Data Controller restriction of processing;

Right of portability – you have the right to have your Data we hold transmitted to another data controller;

Right to object – you have the right to object, on grounds relating to your particular situation, at any time to processing of your Data which is based on the legitimate interest of the Data Controller, including profiling, unless the Data Controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims;

Right to withdraw the consent – you have the right to withdraw the consent previously given as regard to the processing of your Data, at any time, provided that the withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal;

Right to lodge a complaint before the supervisory authority – should the Data Controller refuse to follow up to your request to exercise your rights as provided for by the GDPR, it shall provide you with the reason underpinning said refusal. If need be, you have the right to lodge a complaint as set forth under the paragraph below.

Should you intend to exercise your rights as provided for by the GDPR, please contact the Data Controller at the following dedicated e-mail address danmark@elfa.se, on the phone number +45 86 24 64 22 or via express courier at Naverland 2, DK-2600 Glostrup.

4.9 COMPLAINTS

Should you wish to file a motion as to how your Data is being processed by the Data Controller, or as to how your complaint has been handled, you have the right to lodge a complaint directly before the competent supervisory authority.