Privacy Policy | Kræss Store

Last Updated: May 2, 2025

1. Introduction

Welcome to woojbrass.live (“we”, “us”, “our”). We are committed to protecting your privacy and handling your personal data transparently and securely in compliance with the General Data Protection Regulation (GDPR) and relevant Danish data protection laws.

This Privacy Policy explains what personal data we collect from you when you visit or make a purchase from https://woojbrass.live (the “Site”), how we use it, how we share it, and your rights regarding your data.

2. Data Controller

The legal entity responsible for the processing of your personal data (data controller) is:

Kræss ApS

Blågårdsgade 17A

2200, København N

Denmark

CVR/VAT NO.: 43762265

[email protected]

(+45) 26848168

3. What Personal Data We Collect

We collect personal data in various ways when you interact with our Site:

Information You Provide Directly:
- Contact Information: Name, email address, phone number, shipping address, billing address (when you create an account, place an order, subscribe to our newsletter, or contact customer service).
- Order Information: Details about the products you purchase, order history, payment information (Note: We typically use third-party payment processors like Stripe, PayPal, etc. We do not store your full credit card details, though we may store partial information like the last four digits and expiry date for reference).
- Account Information: Username, password (stored securely, typically hashed), preferences.
- Communication Information: Records of your correspondence with us (e.g., emails, chat messages).
Information Collected Automatically:
- Device and Usage Information: IP address, browser type, operating system, device identifiers, referring URLs, pages visited on our Site, time spent on pages, links clicked, interactions with the Site.
- Cookie Data: Information collected via cookies and similar tracking technologies (like pixels). See Section 9 for details.

4. How We Use Your Personal Data

We use your personal data for the following purposes, based on specific legal grounds:

To Fulfill Our Contract with You (Art. 6(1)(b) GDPR):
- Processing and delivering your orders (including managing payments, shipping, and returns).
- Creating and managing your customer account.
- Providing customer support and responding to your inquiries.
For Our Legitimate Interests (Art. 6(1)(f) GDPR):
- Improving our Site, products, and services (analyzing usage patterns, gathering feedback).
- Website security and fraud prevention.
- Marketing communications to existing customers about similar products or services (you can always opt-out).
- Business analytics and reporting.
Based on Your Explicit Consent (Art. 6(1)(a) GDPR):
- Sending marketing newsletters and promotional offers (if you have subscribed).
- Using non-essential cookies and tracking technologies for analytics, personalization, and advertising (see Section 9).
- Any other purpose for which we ask for your specific consent.
To Comply with Legal Obligations (Art. 6(1)(c) GDPR):
- Maintaining records for tax and accounting purposes (e.g., Danish Bookkeeping Act – Bogføringsloven).
- Complying with requests from authorities.

4a. Specifics regarding the ‘Art Wall’ / ‘Billedvæg’ and ‘Quick View’ Features

Our website offers an “Art Wall” feature (as well as the related “Quick View”) that allows you to visualize how our posters and frames look on a wall.

Storing Designs on Your Device: When you use the “Art Wall” / “Billedvæg” feature to compose posters and frames, we utilize your web browser’s localStorage. This is a technology that makes it possible to temporarily store your design in progress (selected products, layout, etc.) directly on your own computer or device. The purpose is solely to ensure the function’s usability, so that your choices are remembered during your visit and possibly between sessions on the same device. This information is not automatically sent to us but remains locally with you. The processing occurs to deliver the functionality you actively use (GDPR art. 6(1)(b) or (f)).

Upload of Your Own Wall Picture (Voluntary): You have the option to voluntarily upload a picture of your own wall for a more realistic visualization. If you choose to use this feature, you actively upload the picture to us. Your upload and the subsequent use of the picture in the function occur solely based on your explicit consent (GDPR art. 6(1)(a)), which you provide by performing the upload.

Save and Share Feature: The feature allows you to save your designed “Art Wall”, including the uploaded picture, and share it via a unique link. When you actively choose to save and/or share your design, you consent to this specific design (including the picture, if you have uploaded one) being made available to the people who receive or have access to the link. Be aware of who you share the link with.

5. How We Share Your Personal Data

We do not sell your personal data. We may share your data with trusted third parties only when necessary for the purposes outlined above:

Payment Processors: To securely process your payments (e.g., Stripe, PayPal, MobilePay). They process your payment data according to their own privacy policies.
Shipping and Logistics Partners: To deliver your orders (e.g., PostNord, GLS, DHL).
IT Service Providers: Hosting providers, website platform providers (e.g., Shopify, WooCommerce), analytics providers (e.g., Google Analytics), email service providers (e.g., Mailchimp, SendGrid), customer service software providers.
Marketing Partners: Advertising platforms and analytics tools (only if you consent to relevant cookies).
Legal and Regulatory Authorities: If required by law or to protect our rights.

We ensure that these third parties are contractually obligated to protect your data and use it only for the specific purposes for which we share it.

6. International Data Transfers

Some of our third-party service providers may be located outside the European Economic Area (EEA). When we transfer your personal data outside the EEA, we ensure appropriate safeguards are in place, such as:

Transferring to countries deemed to have adequate data protection levels by the European Commission.
Using Standard Contractual Clauses (SCCs) approved by the European Commission.
Implementing other valid transfer mechanisms under GDPR.

You can request more information about the safeguards we use for international transfers by contacting us.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for satisfying any legal, accounting, or reporting requirements.

Order Information: Typically retained for the period required by Danish bookkeeping laws (currently 5 years from the end of the financial year the transaction relates to).
Account Information: Retained as long as your account is active, or until you request deletion.
Consent-Based Data (e.g., Newsletter): Retained until you withdraw your consent.
Cookie Data: Retained according to the lifespan of the specific cookie (detailed in our Cookie Policy/Consent Tool).

After the retention period expires, we will securely delete or anonymize your personal data.

8. Your Data Protection Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can request correction of inaccurate or incomplete data.
Right to Erasure (‘Right to be Forgotten’): You can request deletion of your personal data under certain conditions (e.g., if it’s no longer necessary for the original purpose).
Right to Restriction of Processing: You can request that we limit the processing of your data under certain circumstances.
Right to Data Portability: You can request to receive your data in a structured, commonly used, machine-readable format and transfer it to another controller.
Right to Object: You can object to the processing of your data based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent: If processing is based on consent, you can withdraw your consent at any time (this does not affect the lawfulness of processing before withdrawal).
Right to Lodge a Complaint: You have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet – www.datatilsynet.dk) if you believe your data protection rights have been violated.

To exercise any of these rights, please contact us at [email protected]. We may need to verify your identity before processing your request.

9. Cookies and Tracking Technologies

We use cookies and similar technologies (like pixels or web beacons) on our Site. Cookies are small text files stored on your device when you visit a website.

Essential Cookies: Necessary for the basic functionality of the Site (e.g., shopping cart, login). These do not require your consent.
Non-Essential Cookies (Performance, Functional, Marketing): Used for analytics (understanding how users interact with the Site), personalization (remembering preferences), and advertising. We only use these cookies if you provide your explicit consent via our cookie consent banner/tool.

Our cookie consent tool provides detailed information about the specific cookies we use, their purpose, duration, and allows you to manage your preferences at any time.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These include measures like [mention briefly, e.g., encryption (SSL), access controls, regular security reviews – do not reveal too much detail]. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. We will post the updated version on this page and indicate the date of the latest revision. For significant changes, we may notify you via email or a prominent notice on our Site.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data handling practices, please contact us: