At Digital Shopping Center (“DSC”, “we”, “us”), privacy and data protection are of the utmost priority. This Privacy Policy applies to our processing of personal data, including on the websites of the PanzerGlass Group, and sets out the guidelines for the processing of your personal data by DCS and provides you with the information you are entitled to receive in accordance with applicable data protection legislation. You should read the Privacy Policy before submitting your personal data to DCS.

1. Data controller and contact details

The controller of your personal data is:

Digital Shopping Center

Email: contact@digitalshoppingcenter.com

2. If you visit our websites

The following paragraph describes DSC’s processing  of personal data concerning visitors to our websites.

2.1 Cookies

We use cookies on our websites to, among other things, optimize the user experience and functions of the websites as well as to prevent misuse and downtimes. You can find out more about the use of cookies in our cookie banner, which appears on the homepage when you visit our websites for the first time.

You can always change your cookie settings by clicking on the small cookie symbol in the bottom left corner of the websites.

• If you use the contact form or chat function on the website, contact our customer service or communicate with us in another way

Types of personal data

When you use the contact form or chat function on our websites, contact our customer service or communicate with DSC in any other way, we collect and process your personal data. DSC may collect, process and store the following types of personal data about you:

• Name, email address, phone number, physical address (shipping address)
• Your request, for example your order and payment information
• Date of your request
• Other information provided by you in connection with your request. We ask that you do not provide us with sensitive personal data unless such sensitive personal data is strictly necessary for the processing of your request. In such a case, sensitive personal data should only be transmitted in a highly encrypted format if transmitted by email.

Purpose of processing

Your personal data may be processed for the following purposes:

• Processing your request and potential orders
• Management of potential rights
• General communication
• Statistics and analysis

Legal basis

PG processes your personal data on the following legal bases. The basis for processing depends on the nature of your request.

• Legitimate interests:  We may process your personal data on the basis of our legitimate interests in processing your request, communicating with you and developing our products and services.

• Contractual obligations:  If your request concerns the (potential) conclusion of a contract, we process your personal data in order to be able to implement measures prior to the conclusion of the contract.
  • When you register as a user on  DSC

Types of personal data

When you create a personal profile on the websites  DSC  processes your personal data.  DSC  may collect, process and store the following types of personal data about you:

• Name, email address, day of birth, telephone number, address
• Digital footprints
• Password and username
• Order and Receipt History
• Newsletter Subscriptions

Purpose of processing

Your personal data may be processed for the following purposes:

• User Account/Profile Management
• Analysis and statistics
• Marketing

Legal basis

PG processes your personal data on the following legal bases:

• Legitimate interests:  We may process your personal data on the basis of our legitimate interests in managing the user accounts created and our legitimate interest in developing statistics and performing analyses to improve the user experience.

• Consent:  DSC will only use your personal data for direct marketing purposes, including the publication of newsletters if you have given your prior explicit consent for such purposes.

2.4 If you use our online store

Types of personal data

When you use our online store, PG processes your personal data.  DSC  may collect, process and store the following types of personal data about you:

• Name, email address, telephone number and address
• Your payment information
• Information about your previous purchases
• Information you provide when you make a purchase or otherwise communicate with us
• Using discounts
• Digital footprints (e.g. how you use the DSC online store)

Purpose of processing

Your personal data may be processed for the following purposes:

• Finalizing orders in the DSC online store
• Shipping, Claims and Returns Management
• Managing user accounts/profiles
• Analysis and statistics
• Prevention and investigation of suspected fraud

Legal basis

DSC  processes your personal data on the following legal bases:

• Legitimate interests:  We process your personal data on the basis of our legitimate interest in promoting our products and services to you in cases where consent is not required, as well as our legitimate interest in being able to perform statistics and analyses in order to develop and improve our services.

• Contractual obligations:  We process your personal data to perform the agreement concluded, including delivery of ordered goods, processing of order confirmation, complaints, returns, etc.

3. If you subscribe to our newsletter(s)

Types of personal data

PG may collect, process and store your personal data for marketing purposes when you sign up for our newsletter(s).  DSC  may collect, process and store the following types of personal data about you:

• Name, email address, phone number, address, date of birth
• Your consent
• Your clicking behavior in the distributed material
• Information about your use of our website and services
• Order history, including any previous correspondence

Purpose of processing

Your personal data may be processed for the following purposes:

• Marketing
• Analysis and statistics

Legal basis

DSC  processes your personal data on the basis of one or more of the following legal bases:

• Consent:  DSC will only use your personal data for direct marketing purposes, including the publication of newsletters if you have given your prior explicit consent for such purposes.

• Legitimate interests:  The processing of your personal data for analysis and statistical purposes is based on our legitimate interests in being able to improve and develop our services.

4. If you use our whistleblower service

Types of personal data
We may process the following personal data about the reported person, if the data is provided in connection with the report. In addition, a report may contain personal data about third parties:   

• Name
• Contact details
• Job Title
• Reported information
• Description of the alleged offence
• Potential criminal offences

When a report is made, we will process the personal data of the persons concerned by the report (i.e. the sender of the report, the person reported and other third parties involved) in order to handle and investigate the alleged breach.

If you report a suspected violation, this report will remain confidential and, if you wish, anonymous. However, you must in all cases provide an email address, as we may need to obtain additional information about the violation in order to properly process the case.

Purpose of processing

Your personal data may be processed for the following purposes:

• Creation and administration of the whistleblowing service, where suspicions of unregulated conduct and violations of applicable law or internal guidelines can be reported
• Management of reported incidents, including clarification of potentially criminal issues

Legal basis

DSC  processes your personal data on the basis of one or more of the following legal bases:

• Legitimate interests:  We may process your personal data on the basis of our legitimate interest in investigating reported incidents.

• Legal obligation:  We process your personal data in order to fulfill our legal obligation.

5. If you are applying for a job at DSC

When you apply for a job at  DSC , we process your personal data as part of the recruitment process. We recommend that you do not disclose your social security number or any sensitive personal data in your application, such as personal data revealing racial or ethnic origin, religion, trade union membership, sexual orientation or health data.

Types of personal data

DSC  may collect, process and store the following types of personal data about you:

• Contact information, such as name, email address, and phone number
• Information contained in applications, CVs and all annexes, for example transcripts
• Relevant information publicly available on the Internet and social media (e.g., Facebook and LinkedIn), including information about past employment, activities, skills, performance and general appearance
• Results of personality and skills tests carried out (if applicable)
• References from former and/or current employers mentioned in your application or references that you have consented to contact us
• Health data if the position you have applied for imposes specific health requirements
• Other information you provide to us as part of the recruitment process

Purpose of processing

Your personal data will be used to assess whether we are interested in offering you a position at  DSC .

Legal basis

PG processes your personal data on the basis of one or more of the following legal bases:

• Legitimate interests  : We may process your personal data on the basis of our legitimate interests to assess whether we wish to offer you employment, including on the basis of the information you provide in your CV, application and any annexes, on the basis of relevant information publicly available on the internet and social media, the results of personality and skills tests, references of the persons you have mentioned in your application, as well as other information you may provide to us in the context of the recruitment procedure. Processing may also be necessary due to our legitimate interest in defending or exercising legal rights.

• Consent  : If we intend to collect references from former and/or current employers that you have not listed as references in your application, we will only do so if you have given your consent.

If the position for which you have applied, exceptionally, imposes special health requirements, we will ask – after a specific assessment and only when the collection of such data is lawful in accordance with national legislation – for your explicit consent before processing such personal data.

6. If you are a supplier, distributor, business partner, etc.

This paragraph includes the policy of processing by  DSC  of personal data concerning individual business owners or contact persons with suppliers, distributors and other business partners cooperating with  DSC .

Collection of personal data

DSC  may collect, process and store your personal data in the following cases:

• When your company or the company you are employed by enters into a contract with DSC
• When you have expressed an interest in DSC’s products and services, for example by giving DSC your business card
• When you cooperate and communicate with DSC

Types of personal data

DSC  may collect, process and store the following types of personal data about you:

• Name, email address, telephone number and similar contact details
• Individual data, such as preferred language
• Organizational data, such as company name and address, job title, industry, primary work location, and country
• Contractual data, such as orders, invoices, contracts and other agreements between your company (or your employer) and DSC, potentially including, for example, your contact details
• Financial data, such as payment terms and bank details (in the case of a sole proprietorship)

We may receive this data directly from you (primarily through emails and other correspondence with you) or from third parties, such as your employer.

Purpose of processing

Your personal data may be processed for the following purposes:

• General planning, execution and administration of cooperation, including contracts
• Administrative purposes, such as payment processing, accounting, auditing and providing support
• Newsletters and other promotional communications
• Processing your requests
• General communication
• Product and service development
• Statistics and analysis
• Compliance with applicable rules and regulations, such as meeting our obligations to prevent illegal activities
• Conflict management

Legal basis

PG processes your personal data on the basis of one or more of the following legal bases:

• Contractual obligations  :  In some cases, the processing of your personal data is necessary to perform a contract.

• Legitimate interests:  We may process your personal data on the basis of our legitimate interests, for example in managing day-to-day operations in accordance with lawful and fair business practices, including planning, executing and administering the cooperation or our legitimate interest, for example, in compiling statistics, carrying out analyses and marketing activities (not subject to consent), providing support and improving and developing our products and services. Processing may also be necessary due to our legitimate interests in preventing fraud or in establishing, defending or exercising legal rights.

• Legal obligation:  In some cases, the processing of your personal data will be necessary to comply with legal obligations, such as our obligation to prevent illegal activities.

7. If you visit our physical premises

Types of personal data

When you visit our premises and other buildings,  DSC  processes your personal data through video surveillance and possible access control.  DSC  may collect, process and store the following types of personal data about you:

• License plate
• Date and time of your visit
• Digital fingerprints, including information about where and when you used your access card (if you were issued an access card)
• Photo and video equipment related to video surveillance

Purpose of processing

Your personal data may be processed for the following purposes:

• To give you access to our premises and other buildings
• To manage your visit
• To ensure the security of our offices and other buildings
• Preventing and resolving criminal offences on our premises and other buildings

Legal basis

DSC  processes your personal data on the following legal basis:

• Legitimate interests:  Our processing of your personal data is based on our legitimate interests in being able to provide you with access to our premises and other buildings and to protect our physical premises. We process personal data relating to criminal offences collected through video surveillance on the basis of our legitimate interests in preventing and solving criminal offences.

8. If you visit our social media profiles

This paragraph includes the policy governing DSC ’s processing  of personal data collected through DSC  ’s social media profiles or sites  .

DSC  and the social media providers are jointly responsible for the processing of personal data collected in connection with your visit to the individual  DSC social media profiles or sites .  DSC complies with the guidelines of the data protection authorities regarding joint data control and strives, using the available tools and means, to ensure in the best possible way that you receive information about the processing of your personal data when you visit the DSC  social media profiles or sites  .

Collection of personal data

When you visit or interact with our social media profiles,  DSC  and the relevant social media provider may collect, process and store the following types of personal data about you:

• Information available on your profile, including your name, gender, marital status, place of work, interests and city
• Your “likes” or other reactions expressed on our profile
• Comments left by you on our publications
• Your visit to our profile

Purpose of processing

PG processes your personal data for the following purposes:

• To improve our products and services, including our social media profiles and sites
• Develop statistics and carry out analyses
• To be able to communicate with you if you comment on a post, leave a review or send us a message
• Carry out promotional marketing in general
• Recruitment

Social media providers process your personal data, among other things, for the following purposes:

• To improve their advertising system
• To provide DSC with statistics, among others, developed by these social media providers based on your visit to our profiles and sites
• Publicize and adapt activities on the site.

Please refer to the privacy policies of the various social media providers for information describing how long they store your personal data.

Legal basis

DSC  processes your personal data on the following legal bases:

• Legitimate Interests:  Our processing of your personal data is based on our legitimate interests in being able to communicate with you and market to you on our social media profiles as well as our legitimate interest in improving our products and services.

The social media providers base the processing of your personal data on their legitimate interests, in particular their interests in improving their advertising system and in providing statistics to  DSC , which the social media providers compile, for example, on the basis of your visit to the DSC social media profile or website  . Furthermore, the social media providers have a legitimate interest in providing innovative, individually tailored, secure and cost-effective services.

• Consent:  Social media providers process some of your personal data based on your consent, which you have the right to withdraw at any time via your social media privacy settings.

Who do social media providers share your personal data with?

Social media providers may, among others, share your personal data with the following categories of recipients:

• Other entities within the group of which the social media provider is a part
• External business partners providing analysis and survey services
• Advertisers
• Other people visiting our social media profile or site (to the extent your information is publicly available)
• Researchers and other academics
  • Please refer to the privacy policy of the individual social media providers for more details on the parties with whom the social media providers share your personal data.
  • Social media providers may transfer your personal data to recipients located outside the EU/EEA in accordance with applicable data protection legislation. Please consult the privacy policies of the individual providers for more details.
  • For more information on the parties with whom PG shares your personal data, please see the  Disclosure to other data controllers and outsourcing to data processors section.

9. How long do we keep your personal data?

We will delete your personal data when we no longer need to process it for one or more of the purposes set out above. However, data may be processed and stored for a longer period in an anonymous form, or if we are required to do so by law.

The personal data necessary for the documentation of your customer relationship are retained for as long as the customer relationship lasts. After the end of the customer relationship,  DSC  retains your data for as long as it is necessary to document  DSC ‘s legal situation  with regard to you, for example in the context of a dispute or recovery of arrears.

Accounting documents, including personal data, which we are required to keep in accordance with the Consolidated Accounting Act, are deleted at the earliest 5 years after the end of the financial year to which the data relates.

Your personal data will generally be retained for 3 years from the last activity recorded on your customer profile, or until you terminate your membership.

Purchases in the online store:

We will generally retain your personal data for 2 years from your last purchase. If you have purchased products covered by a warranty, we will delete your personal data at the earliest at the end of the warranty period.

Newsletters:

Your personal data will be kept as long as your consent to receive newsletters is active.

You may withdraw your consent at any time by using the unsubscribe link at the bottom of each email or by contacting us as described below. Withdrawing your consent, however, will not affect the lawfulness of processing carried out prior to its withdrawal.

We will retain any documentation relating to your consent under marketing legislation for two years from the date you withdrew your consent to receive direct marketing material. The retention period has been determined on the basis of PG’s legitimate interest in being able to document that direct marketing has taken place in accordance with applicable law.

Whistleblowing system:

DSC  retains personal data for as long as necessary to process specific reports.

Applications:

If you are offered employment with  DSC , your application and other relevant personal data collected as part of the recruitment process will be retained in your employee file, and for as long as it is necessary in the context of your employment.

If you are not offered a job, we will retain your application and any additional personal data collected as part of the recruitment process for a period of six months following the rejection of your application, unless you have consented to the storage of this personal data for a longer period.

You may withdraw any consent you have given in connection with our recruitment process at any time. Withdrawing your consent will affect the future processing of your personal data but will not affect the lawfulness of processing that took place based on your consent given before its withdrawal. If you wish to withdraw your consent, please contact us using the details below.

Video surveillance:

Recordings for crime prevention purposes will be deleted or anonymised within 30 days of the date of recording, unless it is necessary for  DSC  to store the recordings for the purpose of managing a specific dispute, for example in the context of resolving an offence.

10. Disclosure to other data controllers and outsourcing to data processors

In order to comply with the above-mentioned purposes, we may grant access to your personal data to third parties, providing relevant services on the basis of a contractual relationship with  DSC . These third parties may, for example, be IT suppliers, e-mail service providers and IT solution providers. These service providers will process your personal data only in accordance with our instructions in accordance with the data processing agreements concluded.

We also disclose your personal data to certain partners in connection, for example, with payment solutions on our website and with the delivery of your order. In addition, we may provide your IP address and information about your order to our affiliated marketing partners for the purpose of removing referrals to our online store.

As part of the development of  DSC , the structure of the company may be changed, for example through a total or partial sale of the company. In the event of a partial transfer of assets including personal data, the basis for processing incidental to the disclosure of the personal data in question is, as a rule, because  DSC  has a legitimate interest in transferring part of its assets as well as in carrying out business changes.

As a general rule, your personal data will not be disclosed to third parties without your consent, except in the cases described above. However, in certain circumstances and in accordance with the law, it may be necessary to disclose your personal data to:

• The police
• Lawyers
• Accountants
• Courts
• Public authorities
• Potential buyers
• Affiliated Companies

If your personal data is transferred to processors or data controllers established in countries outside the EU/EEA, which have not implemented an adequate level of protection, this transfer will be based on the European Commission’s standard contractual clauses, binding corporate rules or another legal basis for the transfer in accordance with Chapter V of the Regulation.

11. Your rights

• You have a right of access to the personal data that we process about you
• You have the right to object to our collection and further processing of your personal data.
• You have the right to rectify and erase your personal data, subject to certain legal exceptions, including the provisions of the Danish Consolidated Accounting Act.
• You have the right to ask us to restrict the processing of your personal data.
• In certain circumstances, you can also request to receive a copy of your personal data and request the transmission of your personal data that has been communicated to us to another data controller (data portability).
• You can withdraw your consent at any time. We will then delete your personal data, unless we can continue processing it on another basis. You can unsubscribe from our newsletter by clicking on the link at the bottom of the newsletter.