Privacy policy
**Privacy Policy - Last updated: August 14, 2024**
This Privacy Policy explains how CASETORI (referred to as the "Site", "we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, make a purchase from Casetori.com (the "Site"), or communicate with us regarding the Site (collectively referred to as the "Services"). In the context of this Privacy Policy, "you" and "your" refer to the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected as described in this Privacy Policy.
Please read this Privacy Policy carefully.
**1. If you visit our websites**
This section describes CASETORI's processing of personal data about visitors to our websites.
**1.1 Cookies**
We use cookies on our websites to optimize the user experience, enhance website functionality, and prevent abuse and downtime. You can learn more about the use of cookies in our cookie banner, which appears on the front page when you visit our websites for the first time.
You can always change your cookie settings by clicking on the small cookie symbol in the lower left corner of the websites.
**2. If you use the contact form or chat function on the website, contact our customer service department, or otherwise communicate with us**
**Types of personal data**
When you use the contact form or chat function on our websites, contact our customer service department, or otherwise communicate with CASETORI, we collect and process your personal data. CASETORI may collect, process, and store the following types of personal data about you:
- Name, email address, telephone number, physical address (shipping address)
- Your inquiry, such as order and payment information
- Date of your inquiry
- Other information provided by you in connection with your inquiry. We urge you not to provide us with sensitive personal data unless such data is strictly necessary for processing your inquiry. If sensitive data is required, it should be forwarded in a highly encrypted format if sent via email.
**Purpose of processing**
Your personal data may be processed for the following purposes:
- Handling your inquiry and potential orders
- Administration of potential rights
- General communication
- Statistics and analytics
**Legal basis**
CASETORI processes your personal data based on the following legal bases, depending on the nature of your inquiry:
- **Legitimate interests:** We may process your personal data based on our legitimate interests in handling your inquiry, communicating with you, and developing our products and services (Article 6(1)(f) of the GDPR).
- **Contractual obligations:** If your inquiry pertains to a (potential) contract, we process your personal data to implement measures prior to the conclusion of the contract (Article 6(1)(b) of the GDPR).
**3. When you register as a user on My Casetori**
**Types of personal data**
When you create a personal profile on the websites at “Casetori”, CASETORI processes your personal data. CASETORI may collect, process, and store the following types of personal data about you:
- Name, email address, date of birth, telephone number, address
- Digital footprints
- Password and username
- Order history and receipts
- Subscriptions to newsletters
**Purpose of processing**
Your personal data may be processed for the following purposes:
- Management of user account/profile
- Analytics and statistics
- Marketing
**Legal basis**
CASETORI processes your personal data on the following legal bases:
- **Legitimate interests:** We may process your personal data based on our legitimate interests in managing the created user accounts and in performing analyses to improve the user experience (Article 6(1)(f) of the GDPR).
- **Consent:** CASETORI will use your personal data for direct marketing purposes, including newsletters, only if you have given your prior explicit consent to such purposes (Article 6(1)(a) of the GDPR).
**4. If you use our webshop**
**Types of personal data**
When you use our webshop, CASETORI processes your personal data. CASETORI may collect, process, and store the following types of personal data about you:
- Name, email address, telephone number, and address
- Your payment information
- Information about your previous purchases
- Information provided when completing a purchase or communicating with us in other ways
- Use of discounts
- Digital footprints (e.g., how you use CASETORI’s webshop)
**Purpose of processing**
Your personal data may be processed for the following purposes:
- Completion of orders in CASETORI's webshop
- Management of shipment, complaints, and returns
- Management of user accounts/profiles
- Analytics and statistics
- Prevention and investigation of suspected fraud
**Legal basis**
CASETORI processes your personal data on the following legal bases:
- **Legitimate interests:** We process your personal data based on our legitimate interest in promoting our products and services to you in cases where consent is not required, and in conducting statistics and analysis to improve our services (Article 6(1)(f) of the GDPR).
- **Contractual obligations:** We process your personal data to fulfill the concluded agreement, including delivering the ordered goods, handling order confirmation, complaints, returns, etc. (Article 6(1)(b) of the GDPR).
**5. If you sign up for our newsletter(s)**
**Types of personal data**
CASETORI may collect, process, and store your personal data for marketing purposes when you sign up for our newsletter(s). CASETORI may collect, process, and store the following types of personal data about you:
- Name, email address, telephone number, address, date of birth
- Your consent
- Your click behavior in the distributed material
- Information on your use of our website and services
- Order history, including any previous correspondence
**Purpose of processing**
Your personal data may be processed for the following purposes:
- Marketing
- Analytics and statistics
**Legal basis**
CASETORI processes your personal data on one or more of the following legal bases:
- **Consent:** CASETORI will use your personal data for direct marketing purposes, including newsletters, only if you have given your prior explicit consent (Article 6(1)(a) of the GDPR).
- **Legitimate interests:** The processing of your personal data for analytics and statistics purposes is based on our legitimate interests in improving and developing our services (Article 6(1)(f) of the GDPR).
**6. If you use our whistle-blower service**
**Types of personal data**
We may process the following personal data about the reported person if the data is provided in relation to the report. Additionally, a report may contain personal data about third parties:
- Name
- Contact information
- Job title
- Reported information
- Description of the alleged infringement
- Potential criminal offenses
When a report is made, we will process personal data about the data subjects involved in the report (i.e., the sender, the reported person, and other third parties) to handle and investigate the alleged infringement. Reports will remain confidential and, if you wish, anonymous, though you should provide an email address in case further information is needed to handle the case properly.
**Purpose of processing**
Your personal data may be processed for the following purposes:
- Establishment and administration of the whistleblower service, where unregulated conduct and violations of applicable law or internal guidelines can be reported
- Administration of reported incidents, including clarification of potentially criminal matters
**Legal basis**
CASETORI processes your personal data on one or more of the following legal bases:
- **Legitimate interests:** We may process your personal data based on our legitimate interest in investigating reported incidents (Article 6(1)(f) of the GDPR).
- **Legal obligation:** We process your personal data to fulfill our legal obligations (Article 6(1)(c) of the GDPR).
**7. If you apply for a job with CASETORI**
When you apply for a job with CASETORI, we process your personal data during the recruitment process. We recommend that you do not disclose your social security number or any sensitive personal data in your application, such as data revealing racial or ethnic origin, religion, trade union membership, sexual orientation, or health data.
**Types of personal data**
CASETORI may collect, process, and store the following types of personal data about you:
- Contact details, such as name, email address, and telephone number
- Information from applications, CVs, and any appendices, such as grade transcripts
- Relevant information publicly available on the internet and social media (e.g., Facebook and LinkedIn), including information on previous employment, activities, skills, performance, and general appearance
- Outcome of personality and skills tests (if any)
- References from former and/or current employers listed in your application or those you have consented to us contacting
- Health data if the position you have applied for imposes special health requirements
- Other information provided by you in connection with the recruitment procedure
**Purpose of processing**
Your personal data will be used to assess whether we wish to offer you a position at CASETORI.
**Legal basis**
CASETORI processes your personal data on one or more of the following legal bases:
- **Legitimate interests:** We may process your personal data based on our legitimate interests in assessing your application, including information from your CV, application, and appendices, publicly available information on the internet and social media, outcome of personality and skills tests, references, and other information you provide during the recruitment process. The processing may also be necessary due to our legitimate interest in defending or exercising legal claims (Article 6(1)(f) of the GDPR).
- **Consent:** If we intend to collect references from employers not listed as references in your application, we will do so only with your explicit consent (Article 6(1)(a)
of the GDPR). If the position you have applied for imposes special health requirements, we will, following a specific assessment and where lawful according to national legislation, ask for your explicit consent prior to processing such personal data (Article 9(2)(a) and Article 6(1)(a) of the GDPR).
**8. If you are a supplier, distributor, business partner, etc.**
This section includes the policy on CASETORI's processing of personal data about owners of sole proprietorship businesses or contact persons with suppliers, distributors, and other business partners cooperating with CASETORI.
**Collection of personal data**
CASETORI may collect, process, and store your personal data in the following events:
- When your business or the business with which you are employed concludes a contract with CASETORI
- When you have shown an interest in CASETORI’s products and services by, for example, giving CASETORI your business card
- When you cooperate and communicate with CASETORI
**Types of personal data**
CASETORI may collect, process, and store the following types of personal data about you:
- Name, email address, telephone number, and similar contact details
- Individual data, such as preferred language
- Organizational data, such as the name and address of the business, job title, employment area, primary workplace, and country
- Contractual data, such as orders, invoices, contracts, and other agreements between your business (or your employer) and CASETORI, potentially including, for example, your contact details
- Financial data, such as terms of payment and bank details (in the case of a sole proprietorship)
We may receive such data directly from you (primarily via emails and other correspondence) or from third parties, such as your employer.
**Purpose of processing**
Your personal data may be processed for the following purposes:
- General planning, execution, and administration of cooperation, including contracts
- Administrative purposes, such as processing payments, bookkeeping, audits, and provision of support
- Newsletters and other promotional communication
- Handling your inquiries
- General communication
- Development of products and services
- Statistics and analytics
- Compliance with applicable rules and regulations, such as fulfilling our obligations to prevent illegal activities
- Conflict management
**Legal basis**
CASETORI processes your personal data on one or more of the following legal bases:
- **Contractual obligations:** In certain cases, the processing of your personal data is necessary to perform a contract (Article 6(1)(b) of the GDPR).
- **Legitimate interests:** We may process your personal data based on our legitimate interests in, for example, managing day-to-day operations in accordance with lawful and fair business practices, including planning, execution, and administration of the cooperation, or our legitimate interest in, for example, conducting statistics, performing analyses, and marketing activities (not subject to consent), providing support, as well as improving and developing our products and services. The processing may also be necessary due to our legitimate interests in preventing fraud or establishing, defending, or exercising legal claims (Article 6(1)(f) of the GDPR).
- **Legal obligation:** In some cases, processing your personal data will be necessary to comply with legal obligations, such as our obligation to prevent illegal activities (Article 6(1)(c) of the GDPR).
**9. If you visit our physical premises**
**Types of personal data**
When you visit our office premises and other buildings, CASETORI processes your personal data via video-surveillance and possible access control. CASETORI may collect, process, and store the following types of personal data about you:
- License plate
- Date and time of your visit
- Digital footprints, including information on where and when you have used an access card (if you have been issued an access card)
- Photo and video material in relation to video surveillance
**Purpose of processing**
Your personal data may be processed for the following purposes:
- To give you access to our office premises and other buildings
- To manage your visit
- To ensure the security of our office premises and other buildings
- To prevent and solve criminal offenses on our office premises and other buildings
**Legal basis**
CASETORI processes your personal data on the following legal basis:
- **Legitimate interests:** Our processing of your personal data is based on our legitimate interests in giving you access to our office premises and other buildings and protecting our physical premises (Article 6(1)(f) of the GDPR). We process personal data relating to criminal offenses collected via video surveillance based on our legitimate interests in preventing and solving criminal offenses (Section 8(3) of the Danish Data Protection Act).
**10. If you visit our social media profiles**
This section covers the policy governing CASETORI’s processing of personal data collected via CASETORI’s social media profiles or sites.
CASETORI and the social media providers are joint data controllers in respect of the processing of personal data collected in connection with your visit to CASETORI’s individual social media profiles or sites. CASETORI complies with the guidelines of the data protection authorities for joint data controllership and attempts, by using available tools and means, to ensure that you receive information on the processing of your personal data when you visit CASETORI’s social media profiles or sites.
CASETORI has the following social media profiles or sites:
-
- Facebook (Facebook Ireland Ltd.)
- YouTube (Google LLC)
- LinkedIn (LinkedIn Ireland Unlimited Company)
- Instagram (Instagram, Inc.)
- Instagram's privacy policy is available here
- You may adjust your privacy settings for Instagram here
- Vimeo
- Vimeo privacy policy is available here
- Pinterest privacy policy is available here
- TikTok
**Collection of personal data**
When you visit or interact with our social media profiles, CASETORI and the relevant social media provider may collect, process, and store the following types of personal data about you:
- Information available on your profile, including your name, gender, marital status, workplace, interests, and town
- Your "likes" or other reactions expressed on our profile
- Comments left by you on our postings
- Your visit to our profile
**Purpose of processing**
CASETORI processes your personal data for the following purposes:
- To improve our products and services, including our social media profiles and sites
- To compile statistics and perform analyses
- To communicate with you if you comment on a post, leave a review, or send us a message
- To perform promotional marketing in general
- Recruitment
**Legal basis**
CASETORI processes your personal data on the following legal bases:
- **Legitimate interests:** Our processing of your personal data is based on our legitimate interests in communicating with you and marketing ourselves via our social media profiles, as well as our legitimate interest in improving our products and services (Article 6(1)(f) of the GDPR).
- **Consent:** Social media providers process some of your personal data in accordance with your consent, which you can withdraw at any time via your social media privacy settings (Article 6(1)(a) of the GDPR).
**11. Disclosure to other data controllers and outsourcing to data processors**
In order to achieve the purposes stated above, we may grant access to your personal data to third parties delivering relevant services based on a contractual relationship with CASETORI. Such third parties may include IT suppliers, email service providers, and suppliers of IT solutions. These service providers will process your personal data only in accordance with our instructions as per data processing agreements.
We may also disclose your personal data to certain partners in relation to payment solutions on our website and regarding the delivery of your order. Additionally, we may provide your IP address and order information to our affiliate marketing partners for the purpose of clearing referrals to our webshop.
In connection with CASETORI’s development, the company structure may change, for example, by way of a full or partial sale of the business. In the event of a partial transfer of assets including personal data, the basis for processing incidental to the disclosure of personal data is generally Article 6(1)(f) of the GDPR, as CASETORI has a legitimate interest in transferring parts of its assets and making commercial changes.
As a general rule, your personal data will not be disclosed to any third parties without your consent, other than in the circumstances described above. However, in certain circumstances and according to law, it may become necessary to disclose your personal data to:
- The police
- Lawyers
- Accountants
- Courts
- Public authorities
- Potential buyers
- Affiliated companies
If your personal data is transferred to data processors or data controllers established in countries outside the EU/EEA that have not implemented an adequate level of protection, such transfer will be based on the European Commission’s Standard Contractual Clauses, Binding Corporate Rules, or another legal basis for transfer in accordance with Chapter V of the GDPR.
**12. How long do we store your personal data?**
We will delete your personal data when it is no longer necessary for one or more of the purposes set out above. However, the data may be processed and stored for a longer period in anonymized form, or if required by law.
Personal data necessary to document your customer relationship is stored for as long as the customer relationship lasts. After termination of the customer relationship, CASETORI stores your data as long as it is necessary to document CASETORI's legal position vis-à-vis you, such as in connection with a dispute or collection of arrears.
Bookkeeping material, including personal data, which we are obliged to store in accordance with the Danish Consolidated Bookkeeping Act (Bogføringsloven), is deleted no earlier than five years after the end of the financial year to which the data relates.
**13. My Casetori**
Your personal data will generally be stored for two years from the last registered activity on your customer profile, or until you terminate your membership.
**14. Purchases in webshop**
We will generally store your personal data for two years from your most recent purchase. If you have purchased products covered by a warranty, we will delete your personal data at the earliest at the end
of the warranty period.
**15. Newsletters**
Your personal data will be stored as long as your consent to receiving newsletters is active.
You may withdraw your consent at any time by using the unsubscribe link at the bottom of each email or by contacting us as described below. Withdrawal of your consent does not, however, affect the legality of the processing that took place prior to such withdrawal.
Any documentation of your consent under marketing law will be stored for two years from the date when you withdrew your consent to receiving direct marketing material. The storage period has been determined based on CASETORI's legitimate interest in being able to document that direct marketing occurred in accordance with applicable law (Article 6(1)(f) of the GDPR).
**16. Whistleblower system**
CASETORI stores personal data for as long as is necessary to handle the specific reports.
**17. Job applications**
If you are offered a job at CASETORI, your application and other relevant personal data collected during the recruitment process will be stored in your employee file and retained as long as necessary for your employment.
If you are not offered a job, we will store your application and any additional personal data collected during the recruitment process for six months following our rejection, unless you consent to storage of such data for a longer period.
You may withdraw any consent you may have given as part of our recruitment process at any time. Withdrawing your consent will affect future processing of your personal data, but it will not affect the legitimacy of processing that took place before the withdrawal. If you wish to withdraw your consent, please contact us using the details below.
**18. Video surveillance**
Recordings for the purpose of crime prevention will be deleted or anonymized within 30 days from the date of the recording unless it is necessary for CASETORI to store the recordings for the purpose of handling a specific dispute, such as in connection with solving an offense.
**19. Disclosure to other data controllers and outsourcing to data processors**
In order to achieve the purposes stated above, we may grant access to your personal data to third parties delivering relevant services based on a contractual relationship with CASETORI. Such third parties may include IT suppliers, email service providers, and suppliers of IT solutions. These service providers will process your personal data only in accordance with our instructions as per data processing agreements.
We may also disclose your personal data to certain partners in relation to payment solutions on our website and regarding the delivery of your order. Additionally, we may provide your IP address and order information to our affiliate marketing partners for the purpose of clearing referrals to our webshop.
In connection with CASETORI’s development, the company structure may change, for example, by way of a full or partial sale of the business. In the event of a partial transfer of assets including personal data, the basis for processing incidental to the disclosure of personal data is generally Article 6(1)(f) of the GDPR, as CASETORI has a legitimate interest in transferring parts of its assets and making commercial changes.
As a general rule, your personal data will not be disclosed to any third parties without your consent, other than in the circumstances described above. However, in certain circumstances and according to law, it may become necessary to disclose your personal data to:
- The police
- Lawyers
- Accountants
- Courts
- Public authorities
- Potential buyers
- Affiliated companies
If your personal data is transferred to data processors or data controllers established in countries outside the EU/EEA that have not implemented an adequate level of protection, such transfer will be based on the European Commission’s Standard Contractual Clauses, Binding Corporate Rules, or another legal basis for transfer in accordance with Chapter V of the GDPR.
**Your rights**
You have the following rights concerning your personal data:
- The right to access the personal data we process about you
- The right to object to our collection and further processing of your personal data
- The right to rectify and erase your personal data, subject to certain statutory exceptions, including the provisions of the Danish Consolidated Bookkeeping Act
- The right to request that we restrict the processing of your personal data
- The right to request a copy of your personal data and request the transmission of your data to another data controller (data portability)
- The right to withdraw any consent you may have given. Upon withdrawal, we will delete your personal data unless we can continue the processing on another legal basis. You can unsubscribe from our newsletter by clicking the link at the bottom of each email or by contacting us.
**Questions and complaints**
If you have any questions regarding this Privacy Policy or if you wish to file a complaint about our processing of your personal data, please contact us at:
**Contact**
If you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of your rights, please contact us at info@casetori.com or visit us at Lindenallee 12b, Rostock, 18057, Germany.
For the purpose of applicable data protection laws and unless explicitly stated otherwise, we are the data controller of your personal information.