Kvadrat Privacy Policy

Kvadrat A/S and each of its subsidiaries (collectively referred to as "Kvadrat") are committed to handling personal data responsibly and in accordance with applicable data protection legislation.

Kvadrat A/S
business registration no. 45998517
Lundbergsvej 10,
8400 Ebeltoft,
Denmark
kvadrat@kvadrat.org
Phone number: +45 89531866

This privacy policy is intended to provide information on Kvadrat’s processing of personal data collected from users of our websites, contact persons at Kvadrat B2B clients, suppliers, data processors, customers, dealers, and other business partners as well as Kvadrat’s designers and agents.

The data responsibility between Kvadrat A/S and its subsidiaries will for the data described below be shared data responsibility, except in situations where Kvadrat A/S acts as data processor on behalf of the subsidiary company. This will typically be the case where Kvadrat subsidiaries make use of services provided by Kvadrat A/S for IT, Finance, legal support or similar.

We encourage you to read this policy to learn more about the ways we collect, use, disclose and protect your personal data.

    Data controller

    Unless otherwise informed, Kvadrat A/S is the data controller in relation to the personal data collected about you as a customer and when you visit and make use of the functions on our websites. You can read more about cookies on our website in the cookie policy.

    Purpose of the processing

    Kvadrat may collect, process and store personal data about you when you visit and browse our websites and if you choose to create a user account. Your personal data is used for user creation, website customization and optimization all to ensure you get the best possible experience as a visitor.

    When you visit our website, you can give us your consent to use cookies as described in the cookie banner. In Kvadrat we have our own cookies as well as third party cookies. When you give your consent to cookies on Kvadrat´s webpage the processing of your personal data stores preferences and statistics for marketing purposes.

    Types of personal data processed

    • Company name, CVR or other unique ID.
    • Company address, zip code, city, and country
    • Work e-mail address and work phone number
    • Name of administrator of user account
    • Username, Unique ID, customer number
    • Line of business, interests, language preferences
    • IP address
    • Information about your usage of our websites

    Legal basis

    • Legitimate interests: The processing of your personal data will be based on our legitimate interest when you choose to create a user account (Article 6(1)(f) of the GDPR).

    • Consent: Kvadrat will only process your personal data in line with our cookie policy which you can find on Kvadrat.dk (Article 6(1)(a) of the GDPR).

    Disclosure to other data controllers and transfer to data processors

    Kvadrat uses data processors for cookie administration depending on your consent or strictly necessary ex: PHP, HR-Skyen, Amazon Web Services, Microsoft Azure, Cookie Information, Microsoft, ASP.NET, Microsoft, New Relic, Google, Cloudflare, Spotify, Google Analytics, Microsoft Clarity, Google Tag Manager, Vimeo, Agillic, YouTube Google, Microsoft Bing, and Facebook.

    Retention period

    Your personal data will be retained in accordance with our cookie policy and the specific consent you have given or when you ask us to close your user account unless a longer retention period is required by applicable law. We keep the consent 2 years after withdrawal or closing of consent, to document compliance.

  • Data controller

    Unless otherwise informed, Kvadrat A/S and the subsidiary who collected your personal data are the data controllers in relation to the personal data collected about you based on consent when you sign up to our newsletter or receive invitations for events.

    Purpose of the processing

    Kvadrat may collect, process and store personal data about you to deliver newsletters and other promotional communication such as event invitations and product and service development. Kvadrat may use profilling to give you the most relevant updates on products, you have the right to ask Kvadrat not to be profiled, if you do not wish to be profiled, please reach out to us on privacy@kvadrat.org.

    Types of personal data
    Kvadrat may collect, process, and store the following personal data about you:

    • Name
    • Work e-mail address and mobile phone number
    • Company name
    • Company address, zip code, city, and country
    • Country of residence
    • Interests
    • Food preferences (events)

     

    Legal basis
    Kvadrat will process your personal data based on the following legal basis:

    • Consent: Kvadrat will only use your personal data to send you product information, newsletters, and other marketing material via e-mail if you have provided your prior and explicit consent hereto, unless applicable legislation allows us to contact you without such consent (Article 6(1)(a) of the GDPR).

    • Legitimate interests: Internally in the Kvadrat Group your consent information will be shared between companies based on our legitimate interest in, for instance, conducting statistics, analysis, marketing activities (where consent is not required), providing support as well as improving and developing our products and services (Article 6(1)(f) of the GDPR).

    Disclosure to other data controllers and transfer to data processors

    Kvadrat uses data processors for marketing execution, documentation and for communication purposes. Consent information is also shared internally within the Kvadrat Group due to shared data responsibility.

    Retention period

    Your personal data will be retained until two years after you choose to withdraw your consent or when the event has finished within one year.

  • Data controller

    Depending on your country of residence while placing your order, Kvadrat A/S and/or a Kvadrat subsidiary nearest to your location will be the data controller in relation to the personal data collected about you as a customer or contact person when you place an order.

    Purpose of the processing

    Kvadrat may collect, process and store personal data about you as a customer and/or contact person when you place an order or make inquiries through our website, by contacting sales or customer service by e-mail or phone to be able to process your order and deliver the product to you. Kvadrat will also process your personal data to provide support and for product and service development.

    Types of personal data

    Kvadrat may collect, process, and store the following personal data about you:
    • Company name, CVR or other unique ID.
    • Company address, zip code, city, and country
    • Work e-mail and company phone number
    • Username, Unique ID, customer number
    • Bank account information
    • If necessary, home address, contact name

    Legal basis

    Kvadrat will process your personal data based on one or more of the following legal bases:

    • Contractual obligation: The processing of your personal data is necessary for the performance of a contract/order delivery between Kvadrat and you (Article 6(1)(b) of the GDPR).

    • Legitimate interests: In some cases, the processing of your personal data will be based on our legitimate interest in, for instance, conducting statistics, analysis, marketing activities (where consent is not required), providing support as well as improving and developing our products and services (Article 6(1)(f) of the GDPR).

    Disclosure to other data controllers and transfer to data processors

    Kvadrat may share some personal data to handle the sales order within our CRM system with data processors such as Microsoft and external consultants. Information of delivery will be shared with different freight companies. Kvadrat will also share information of delivery addresses to our supplier/suppliers’ forwarding companies when necessary.

    Retention period

    Your personal data will be retained for the period necessary to fulfill all our obligations in relation to the order or including warranties and retention periods based on accounting law.

  • Data controller

    Unless otherwise informed, Kvadrat A/S and its subsidiaries have a shared data responsibility in relation to the personal data collected about you when you choose to participate in our customer satisfactions survey.

    Purpose of the processing

    Kvadrat may collect, process and store personal data about you if you choose to participate in our customer satisfaction survey. You can also participate without giving any personal data to Kvadrat, by choosing to be anonymous. When Kvadrat processes your personal data in the survey, we process these data to get feedback from you on how Kvadrat is performing, and how we can do better. Retaining your personal data allows us to follow up and ask you to elaborate on how you feel we can do better. It is also necessary to participate in the draw for a chance to win Kvadrat products through participation.

    Types of personal data
    Kvadrat may collect, process, and store the following personal data about you:

    • Name
    • Language preferences
    • Work information (title, specialization etc.)
    • Company name
    • Work e-email and work phone number


    Legal basis


    Kvadrat will process your personal data based on the following legal basis:

    • Legitimate interests: The processing of your personal data will be based on our legitimate interest in obtaining your feedback regarding customer satisfaction in order for Kvadrat to deliver a better service and product to you (Article 6(1)(f) of the GDPR).

    Disclosure to other data controllers and transfer to data processors

    Information of the customer satisfaction survey is shared internally within the Kvadrat Group companies and with a data processor who collects the data on behalf of Kvadrat.

    Retention period

    Your personal data will be retained for 3 years, which gives Kvadrat the possibility to follow up and compare previous years customer satisfaction survey.

  • This section sets out the policy of Kvadrat’s processing of personal data collected from owners of sole proprietorships or contact persons at Kvadrat B2B clients, data processors, suppliers, dealers, and other business partners who collaborate with Kvadrat.

    Data controller

    For contact information Kvadrat A/S and it´s sales subsidiaries have a shared data responsibility in relation to the personal data collected for the purposes listed below.

    Purposes of the processing

    Your personal data may be processed for managing our business relationship, including any contracts. Administration, such as processing payments (including collection of outstanding invoices), evaluation of credit ratings, performing accounting, auditing, and billing activities, arranging shipments and deliveries, general communication, contract obligations as well as providing support services.

    Kvadrat may also process your personal data for product and service development which includes statistics and analytics.

    Kvadrat is also subject to process personal data for compliance and regulatory purposes, such as fulfilling our legal and compliance-related obligations to prevent illegal activity and dispute resolution.

    Types of personal data

    Kvadrat may collect, process, and store the following personal data:

    • Name
    • Work e-mail address and work telephone number
    • Preferred language
    • Organizational data, such as company name, company address, job position, business area, primary work location and country
    • Contractual data, such as purchase orders, invoices, contracts, and other agreements between your company (or your employer) and Kvadrat, that may include e.g. your contact information
    • Financial data, such as payment terms, bank account details and credit ratings
    • IT-related data, such as user-ID, passwords (however, Kvadrat has no access to such passwords), log-in details as well as data and logs about your usage of Kvadrat’s websites and portals
    • IP Adress

    Such information may be provided directly by you (primarily via e-mails and other correspondence) or by a third party such as your employer.

    Legal basis

    Kvadrat will mainly process your personal data based on the following legal bases:

    • Contractual obligation: The processing of your personal data will in some cases be necessary for the performance of a contract (Article 6(1)(b) of the GDPR).
    • Legitimate interests: We may process your personal data pursuant to our legitimate interest in, for instance, to manage daily operations according to lawful and fair business practices, including planning, performing and managing the business relationship or our legitimate interest in e.g. conducting credit ratings, statistics, analysis, marketing activities (where consent is not required), providing support as well as improving and developing our products and services (Article 6(1)(f) of the GDPR).

    • Legal claims: The processing may also be necessary to prevent fraud or establish, exercise, or defend legal claims (Article 6(1)(f) of the GDPR).
    • Legal obligation: The processing of your personal data will in some cases be necessary to comply with legal obligations, such as our obligations to prevent illegal activity (Article 6(1)(c) of the GDPR).

     

    Disclosure to other data controllers and transfer to data processors

    Kvadrat may share some personal data to handle the sales order within our CRM system with data processors such as Microsoft and external consultants. Information of delivery will be shared with different freight companies.

    Retention period

    Your personal data will be retained for the period necessary to fulfill the purposes outlined above unless a longer retention period is required by applicable law. The retention periods may differ from country to country due to applicable national legislation.

  • Data controller

    During your collaboration with Kvadrat, we may process your personal data. Unless otherwise informed, the Kvadrat entity you, your company, or your company of employment conclude an agreement or correspondence with is the data controller in relation to the personal data collected.

    Purposes of the processing

    Your personal data may be processed for the following purposes:

    • Generally, to plan, perform and manage the business relationship, including any contracts
    • Administration, such as processing payments and registration in Kvadrat’s files
    • General communication
    • Statistics and analytics
    • Compliance and regulatory purposes, such as fulfilling our legal and compliance-related obligations to prevent illegal activity

     

    Types of personal data
    Kvadrat may collect, process, and store the following personal data:

    • Name
    • Work e-mail address and work telephone number
    • Home address
    • Preferred language
    • Organizational data, such as company name, company address, job position, business area, primary work location and country
    • Contractual data, such as contracts and other agreements between you (or your company) and Kvadrat, that may include e.g. your contact information
    • Financial data, such as bank account details
    • IT-related data, such as user-ID, passwords (however, Kvadrat has no access to such passwords), log-in details as well as data and logs about your usage of Kvadrat’s websites and portals

    Such information may be provided directly by you to us (primarily via e-mails and other correspondence) or by a third party such as your employer.

    Legal basis
    Kvadrat will mainly process your personal data based on the following legal bases:

    • Contractual obligation: The processing of your personal data will in some cases be necessary for the performance of a contract (Article 6(1)(b) of the GDPR).
    • Legitimate interests: We may process your personal data pursuant to our legitimate interest in, for instance, to manage daily operations according to lawful and fair business practices, including planning, performing, and managing the business relationship (Article 6(1)(f) of the GDPR).

    • Legal claims: The processing may also be necessary to prevent fraud or establish, exercise or defend legal claims (Article 6(1)(f) of the GDPR).
    • Legal obligation: The processing of your personal data will in some cases be necessary to comply with legal obligations, such as our obligations to prevent illegal activity (Article 6(1)(c) of the GDPR).
    • Consent: In exceptional cases and only when no other legal basis can be applied, Kvadrat may ask separately for your consent to process your personal data (Article 6(1)(a) of the GDPR).

    Disclosure to other data controllers and transfer to data processors

    Information for payment of royalties, and contact information is processed in Kvadrat’s IT-systems and hence can be subject of the processing of data processors on behalf of Kvadrat.

    Retention period

    Your personal data will be retained for the period necessary to fulfill the purposes outlined above unless a longer retention period is required by applicable law. The retention periods may differ from country to country due to applicable national legislation.

  • Transfers to third countries

    If your personal data is transferred to data processors or data controllers established in countries outside the EU/EEA which do not have an adequate level of protection, such transfers will as a main rule be based on the EU Commission’s Standard Contractual Clauses or similar legal transfer grounds and on Kvadrat´s instructions.

    Cookies

    We use cookies on our websites. Please read more about the use of cookies in our cookie polices, which are available on the relevant Kvadrat group websites.

    Security

    We have implemented numerous security measures to prevent, for example, the loss and misuse of personal data under our control. Accordingly, we use our best endeavours to protect the quality and integrity of your personal data. 

Your rights

  • You have the right to access the personal data we process about you
  • You have a right of objection towards our collection and further processing of your personal data
  • You have the right to have your personal data rectified and deleted, with certain national statutory exceptions
  • You have the right to request us to restrict the processing of your personal data
  • Under certain circumstances you may also request to receive a copy of your personal data as well as the transmission of your personal data which you have provided us with to another data controller (data portability)
  • You may at any point withdraw the consents that you have given. You can unsubscribe from our newsletter by clicking the link at the bottom of the newsletter

Questions or complaints

  1. Questions or complaints

If you have any questions in relation to this privacy policy or if you wish to make a complaint in connection to our processing of your personal data, please contact us on privacy@kvadrat.org. You can also write to us at the following address:

Kvadrat A/S
Lundbergsvej 10
8400 Ebeltoft
Denmark

If your complaint is not resolved by us and you wish to proceed with the case, you can send your complaint to the supervisory authority in your country. A list of European supervisory authorities is available here.

 

Latest update 27 June 2023