1. Data Controller

Who Dresses Who ApS is the data controller for the processing of the personal data we have received about you. The processing of your personal data is carried out in accordance with applicable legislation.

Our contact details are:

Who Dresses Who ApS
Nørregade 36–38
4600 Køge, Denmark
CVR: 25869397
info@whodresseswho.com
(+45) 69 58 12 34

2. The Personal Data We Collect, the Purpose of Collection, and the Legal Basis for Processing

2.1 Website Visits

When you visit www.whodresseswho.com, we collect the following information about you and your use of the website:

• Type of browser
• Search terms
• IP address
• Network location
• Information about your computer

The purpose of this collection is to optimize the user experience and functionality of the website, as well as for targeted marketing purposes, including retargeting via platforms such as Facebook and Google. This processing is necessary for us to pursue our legitimate interests in improving our website and displaying relevant offers.

Processing is carried out in accordance with Article 6(1)(f) of the EU General Data Protection Regulation (GDPR).

We share information with external partners for technical operation, maintenance, and marketing.

The data is deleted if you have not visited the website for 1 year.

2.2 Purchases or Communication via the Website

When making a purchase or communicating via our website, we collect:

• Name
• Address
• E-mail
• Phone number
• Payment method
• Delivery information
• IP address

The purpose is to deliver the products you have ordered, fulfil our agreement with you, and manage your rights, e.g. in connection with returns or complaints. The processing is also necessary to comply with accounting and bookkeeping requirements.

Processing is carried out in accordance with Article 6(1)(b) and (c) of the GDPR.

Data may be shared with logistics and delivery partners such as GLS, PostNord, or UPS.

The information is stored for up to 3 years after your purchase. Accounting information is retained for 5 years in accordance with the Danish Bookkeeping Act.

2.3 Newsletter Subscription

When you sign up for our newsletter, we collect:

• Name
• E-mail

The purpose is to send you relevant news and offers. The processing is based on Article 6(1)(f) of the GDPR, which allows us to pursue our legitimate interest in marketing.

We use external partners for technical operation and distribution of newsletters.
Your data is stored until you unsubscribe from the newsletter.

2.4 Customer Club Membership

When you sign up for our customer club, we collect:

• Name
• Address
• Date of birth
• E-mail
• Phone number

The purpose is to manage your membership and provide the benefits associated with the customer club.

Processing is carried out in accordance with Article 6(1)(b) of the GDPR (performance of a contract).
The data will be deleted if you have not logged in for 3 years or if you cancel your membership.

3. Your Rights

3.1 Right of Access

You have the right to access the personal data we hold about you, including information about the purpose of processing and any data recipients.

3.2 Right to Rectification

You have the right to have incorrect or outdated information corrected.

3.3 Right to Erasure

You have the right to have your personal data deleted, unless we are legally obliged to retain it.

3.4 Right to Restriction of Processing

In certain cases, you may request restriction of the processing of your personal data.

3.5 Right to Object

In certain cases, you have the right to object to our processing of your personal data.

3.6 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to have it transmitted to another data controller.

3.7 Right to Withdraw Consent

If you have given consent, you may withdraw it at any time by contacting us using the contact details provided above.

4. Security

We protect your personal data through appropriate technical and organizational measures against unauthorized access, alteration, deletion, or disclosure.
Only relevant employees have access to your information.

5. Complaints