Privacy policy

Privacy policy for bycara.dk

DATA CONTROLLER

By C ApS is the data controller for the processing of the personal data we receive and process about our customers and business partners.

Contact details:
By C ApS
CVR (Danish company registration number): DK44213907
Rugvænget 19K, 1.
2630 Taastrup, Denmark
Email: info@bycara.dk

If you have questions about the processing of your personal data, you can contact us at the email address above.

PROCESSING ACTIVITIES

Website visits

We use cookies to make the website work, for statistics and for targeted marketing. You can always change or decline cookies via your browser or our cookie pop-up.

Communication and customer enquiries

When you write to us, for example by email or via the contact form, we process the information you provide yourself – typically name, email, telephone number and the subject of your enquiry – in order to answer your questions and provide customer service.

The legal basis for this is Article 6(1)(f) GDPR (legitimate interest).

Customer data and order processing

In order to fulfil our agreement and deliver your order, we process personal data such as name, address, email, payment details and purchase data.

The legal basis for this is Article 6(1)(b) GDPR (performance of a contract).

The data is retained for a minimum of 5 years in accordance with the Danish Bookkeeping Act.

Newsletters and marketing

If you sign up for our newsletter or SMS marketing, we process your information (name, email and/or telephone number) on the basis of your consent, in accordance with Article 6(1)(a) GDPR.
You can always unsubscribe again. When you unsubscribe, we keep documentation of your consent for 2 years in accordance with the guidelines of the Danish Consumer Ombudsman.

Job applications

If you send us a job application, we process your information to assess your match for the position.
Legal basis: Article 6(1)(f) GDPR.
Rejected applications are deleted as soon as possible, and always once the recruitment process has ended.

DATA PROCESSORS

We use external partners (data processors) for the operation of the webshop, payment, shipping, newsletters and more.
These include, for example:

  • Shopify (webshop)

  • Klaviyo (newsletter)

  • Shipping carriers (shipping)

  • Google Analytics (statistics)

  • Any other accounting or IT providers

We enter into data processing agreements to ensure your information is protected.

DISCLOSURE AND TRANSFERS

We do not disclose your information to unauthorised third parties.
In the event of a transfer to data processors outside the EU/EEA, we ensure that the level of protection meets GDPR requirements.

SECURITY OF PROCESSING

We protect your information with appropriate technical and organisational measures – for example access control, ongoing staff training, secure IT systems and regular risk assessments.

YOUR RIGHTS

Under the GDPR you have the right to:

  • Access to the information we process about you

  • Rectification (correction) of inaccurate information

  • Erasure of information (in special cases)

  • Restriction of processing

  • Objection to processing

  • Receive your information in a structured and machine-readable format (data portability)

  • Withdraw consent (for example to the newsletter)

If you wish to exercise your rights, contact us at info@bycara.dk.

RIGHT TO COMPLAIN

You have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) if you are dissatisfied with our processing of your personal data. You can also contact the data protection authority in your own country.
Read more at www.datatilsynet.dk.