This Privacy Notice describes how Ragbag ApS (hereinafter referred to as “Ragbag”, “We”, or “us”) process personal data. We are strongly committed to process personal data in a transparent and secure manner.
This Privacy Notice is intended for any former, current, or potential customer and user of a product or service offered by Ragbag, or just as a visitor to our website.
Below, we have described how we process your personal data as well as the rights you have in relation to the processing of these data.
1. DATA CONTROLLER
brand institute is the legal entity who is responsible for the overall processing of personal data and making sure it’s processed in accordance with the data protection legislation. Besides that, Ragbag is the data controller who is responsible for the processing of the personal data we have obtained from you or about you.
brand institute ApS
VAT: DK40833714
Aaboulevarden 52, 2-4. floor
8000 Aarhus C
Denmark
(+45) 88 77 59 00
Ragbag ApS
VAT: DK38576267
Aaboulevarden 52, 2. floor
8000 Aarhus C
Denmark
1.1 CONTACT
Should you have any questions or concerns regarding the processing of your personal data, you are very welcome to contact us at privacy@brandinstitute.dk.
You are welcome to contact us using one of the following languages: Danish, English, Swedish, or German. All such communications are examined, and replies are issued where appropriate as soon as possible. Please allow us a maximum of one month to process your request. If your request concerns one of the rights stated in GDPR art. 15-22, we will reply without undue delay and within 10 days.
2. THE PURPOSES OF DATA PROCESSING
We process the personal data for the following purposes:
- To provide customer service, hereinunder to evaluate, develop, and improve our products and services.
- To examine and complete orders as well as processing payment transactions.
- To address your requirements and meet your needs regarding information, communication, and marketing on our website and social media.
- To administer clients, including invoicing.
- To promote our company as well as our products.
- To manage and improve our website as well as user and shopping experience.
- To engage in employee recruitment efforts.
- To comply with different regulatory requirements.
- To maintain statistical records of product sales.
3. THE LEGAL BASIS OF DATA PROCESSING
The legal basis of our data processing of your personal data for the above-mentioned purposes will in most cases be one or more of the following:
- Consent (GDPR article 6.1.a and 9.2.a)
- To perform our obligations under the contract that you are a part of (GDPR article 6.1.b)
- To comply with a legal obligation that we are subject to (GDPR article 6.1.c)
- To pursue legitimate interests (GDPR article 6.1.f)
- Personal data already published by yourself (GDPR article 9.1.e).
4. CATEGORIES OF PERSONAL DATA
The personal data we process depends on the specific situation, which is described below.
4.1 GENERAL PERSONAL DATA
4.1.1 MARKETING
We use personal data for marketing purposes, hereinunder to target it specifically for the individual person. This includes sending newsletters and presenting relevant marketing to you on our website as well as other websites and social media. To this end, we only treat common personal data including name, email, and user-generated data, such as purchases- and browsing history.
When subscribing to our marketing, your IP address as well as date and time for visiting our website will be registered.
4.1.2 COMPLETION OF YOUR ORDER
When you place an order, you need to provide your name, address, email, phone number, and your choice of payment method. Additionally, you need to specify which products you want to purchase. This is necessary for us to be able to complete and deliver your placed order as well as handling the payment for it.
If you have entered personal data but have not completed your order, and have already subscribed to our newsletter and marketing, your data will also be stored.
This is to market our products and facilitate your return to your incomplete order.
4.1.3 CUSTOMER SERVICE
If you have any questions or complaints regarding our products and services or just in general, you are more than welcome to contact our customer service through email, chat, phone, contact form, etc.
Through this, we process your personal data in order to manage communication with you and provide our service. We only process the personal data about you that you provide yourself, such as name, address, email, and phone number.
4.1.4 MODELS
Ragbag processes data about models booked for jobs in relation to our products in order to fulfill the concluded agreement. This data includes general data such as name and photos.
4.1.5 B2B CUSTOMERS
We need to be able to communicate with our current customers as well as potential customers to enter into agreements and ensure that our services and products are delivered correctly. Additionally, it is necessary to be able to invoice for such services and products.
To maintain and develop existing and potential customer relationships as well as to uphold our relationship with business partners and other relevant entities, we process the necessary data.
In this connection, we process data such as name, title, company, address, telephone number and billing information. The data is collected from you if you choose to give it to us, e.g. via your email signature etc. We may also collect information from other sources such as publicly available information from your employer's website or virk.dk.
4.1.6 COOKIES
We use cookies to collect necessary data to improve the user and shopping experience on our website and to customize content based on your interests. When you accept cookies, data about your browsing behavior is collected, allowing us to improve the user experience, website layout, and the overall website experience. We also use your browser data to recommend specific products to you that we believe you will like.
You can read more about the use of cookies in our cookie policy.
4.1.7 ACCOUNTING
We store invoices and similar attachments for accounting purposes. This may include general personal data such as name, address, service description.
4.1.8 JOB APPLICATION AND JOB AGENT
If you apply for a job at Ragbag, we register the data, you send to us, such as address, phone number, email, pictures, video, application, and CV.
If you sign up for our job agent, we register the data you provide, including name and email, to send you relevant job postings.
If you are part of a recruitment process and/or hired for the job, we will give you separate information about how we process your personal data.
5. WHERE DOES THE PERSONAL DATA COME FROM?
We collect personal data from the following sources:
- Google Analytics.
- Cookies.
- Directly from you.
- Our website.
- Shopify.
- Clients.
- Groupconnected companies.
- Publicly available sites including, but not limited to LinkedIn, Instagram or Facebook.
6. RECEPIENTS OR RECIPIENT CATEGORIES
We process personal data confidentially. To offer you our various services, it’s necessary for us to share your personal data with our partners and suppliers. We only share the data with the necessary recipients.
All our partners are obligated to treat your data with a sufficient level of protection. Some of our partners are independent "data controllers," while others are "data processors."
Below, you can find the recipients to whom we disclose your data:
- Internal departments/personnel.
- Group connected companies.
- IT-providers, such as; e-mail, Cloud Services, telephone, and internet.
- Subcontractors and couriers such as Traede, Webshipper, Economic, and Klaviyo.
- Different payment systems such as Shopify, Apple Pay, Google Pay, Mobile Pay (Pensopay), and Storebuddy.
- Advertising partners such as Facebook and Instragram – advertising partners use data provided by us and collected from cookies and other tracking technologies to predict your preferences and interests.
7. TRANSFERS OF PERSONAL DATA TO THIRD COUNTRIES
We generally only use data processors located within the EU/EEA or those who store data within the EU/EEA.
However, in some cases, it might be necessary to transfer personal data to recipients in countries outside the EU/EEA.
Transfer of personal data to third countries takes place within the framework of chapter 5 in the General Data Protection Regulation, meaning that such transfers will only happen:
- towards third countries, one or more specific sectors within a third country or international organizations for which the European Commission deems that an adequate level of protection of personal data is in place; or
- if the recipient of the data obtained an appropriate certification or adhered to a specific code of conduct ensuring that the processing of personal data is appropriate and equal to those provided under EU law; or
- if the recipient implemented appropriate standard contractual clauses, prepared by the European Commission or prepared by the national Data Protection Agency and approved by the European Commission.
8. STORAGE OF YOUR PERSONAL DATA
We prioritize the careful handling of your personal data. The data we collect about you is stored and processed in compliance with the legislation in force at any time.
In existing customer or business relationships the data is stored as long as the customer or business relationship exists, and as long as there is a relevant purpose for this.
In general, we only store your data for the duration necessary to fulfill the purposes for which it was collected or to comply with legal obligations in the jurisdictions where we conduct business. Accordingly, we anonymize and/or delete the data once it’s no longer necessary to achieve the purpose for which it was collected.
- When you complete an order through our website or enter your personal data but do not complete your order and have already subscribed to our newsletter and marketing, your entered personal data will be stored as long as you are an active customer with us. If the customer relationship is terminated, your data will be stored for up to three years, depending on the nature and relevance of the data.
- The data you provide when contacting our customer service is stored for as long as necessary to manage communication with you, which includes responding to inquiries and resolving any issues you may encounter.
- If you, as a customer, have filed a complaint regarding our products, etc., your data will be retained for up to three years following the conclusion of the particular customer relationship, unless the data remains relevant for documentation purposes in ongoing complaints or disputes.
- If you subscribe to our newsletter, hereinunder to participate in our contests, your personal data associated with this is stored for as long as you remain an active customer/user or until you withdraw your consent. Should you choose to unsubscribe from the newsletter, we will store your prior consent and the associated data for up to 2 years after its last use, in compliance with the statute of limitations outlined in the Consumer Ombudsman’s Spam Instruction section 11.3.
- Personal data regarding models and influencers are kept on record for the duration of our collaboration with each respective party.
- Business records related to previous clients/customer and collaborations are kept on record for 5 years, running from the most recent collaboration between Ragbag and the client. In specific cases, this can be extended due to regulatory requirements.
- Contracts or Agreements containing usage rights are kept on record for 20 years following the completion of the agreement.
- Upon submission of a job application to Ragbag, the application along with the candidate's personal data will be stored for a period of up to 6 months from the date of receipt. Additionally, if you sign up to our job agent, your data will also be stored accordingly and deleted once you unsubscribe.
- We store data in relation to accounting for a minimum of 5 years after the current financial year has ended, cf. the Danish Bookkeeping act.
9. YOUR RIGHTS
According to the General Data Protection Regulation (GDPR), you are entitled to the following rights regarding our processing of data about you:
9.1 THE RIGHT TO REQUEST ACCESS TO YOUR PERSONAL DATA
You have the right of access to the data we process about you, in addition to additional data.
9.2 THE RIGHT TO RECTIFICATION OF YOUR PERSONAL DATA
You have the right to have incorrect data about you corrected.
9.3 THE RIGHT TO ERASURE OF YOUR PERSONAL DATA
In certain cases, you have the right to request the deletion of your data before the usual and general erasure period.
9.4 THE RIGHT TO RESTRICTION OF PROCESSING
In certain cases, you have the right to request the restriction of processing of your personal data. If the restriction is granted, moving forward we will only be allowed to process your data with your consent, or for the establishment, exercise, or defense of legal claims, or to protect the rights of another natural or legal person, or for reasons of significant public interest – with the exception of storage.
9.5 THE RIGHT TO DATA PORTABILITY
In certain cases, you have the right to receive the personal data about you in a structured, commonly used, and machine-readable format, and you have the right to transmit those data from one data controller to another without hindrance.
9.6 THE RIGHT TO OBJECT AGAINST THE PROCESSING OF YOUR PERSONAL DATA
You have the right to object to processing of your data for direct marketing purposes.
10. THE RIGHT TO WITHDRAW CONSENT
If processing is based on your consent, you have the right to withdraw your consent at any time.
If you do choose to withdraw your consent, this does not affect the legality of us processing your personal data based on your previous consent and up until the time of withdrawal. If you withdraw your consent, it will take effect from the time of withdrawal.
11. COMPLAINTS
You have the right to file a complaint with the competent supervisory authority, which in the case for brand institute is “The Danish Data Protection Agency” (Datatilsynet).
More information can be found here: www.datatilsynet.dk
12. REVISION OF OUR PRIVACY NOTICE
We keep our privacy notice under regular review and thus, the notice may be subject to changes from time to time. The date of the latest revision of the Privacy Notice can be found on the bottom of this page. Any new, modified, or amended privacy notice will apply as per the revision date. Therefore, we encourage you to periodically review this statement to be informed about how we are protecting your personal data.
Revision date: 21.02.2024