Privacy Policy
Crateit ApS - CVR: 42356786
- Updated 01.04.2025
1. General
1.1 This policy on the processing of personal data (the Privacy Policy) describes howcrateit.toyss, Crateit ApS (Crateit, we, us, our) collects and processes information about you.
1.2 The Privacy Policy applies to personal data that you provide to us or that we collect viacrateit.toys, e-mail, SMS and other electronic messages, conversations with customer service, printed and digital forms for e.g. competitions and events, as well as generally available information from social networks.
1.3 Crateit is the data controller of your personal data. All enquiries to Crateit can be made via the contact details listed under section 8.
2. What personal data we collect, for what purpose and on what legal basis
2.1 When you visitcrateit.toyswe automatically collect information about your use ofcrateit.toyse.g. which type of browser you use, which search criteria you use oncrateit.toys, your IP address, including your network location, and information about your computer or mobile device, geographical location and similar data.
2.1.1 The purpose is to optimise the user experience and the functioning ofcrateit.toys.and to target marketing, including advertising via Facebook, Instagram, YouTube and Google. The purpose of this processing of personal data is to enable us to improvecrateit.dkand show you relevant products.
2.1.2 The legal basis for the processing is our legitimate interest, cf. Article 6 of the General Data Protection Regulation.
2.2 When you enter into an agreement or communicate with us oncrateit.toys, we collect the information you provide yourself, such as name, address, e-mail address, phone number, payment method, information about which products you buy and possibly return, delivery preferences, and the IP address from which the order was placed.
2.2.1 The purpose is to enable us to deliver the products you have ordered and otherwise fulfil our agreement with you, including administering your rights to return and complain. We may also process information about your purchases to comply with legal requirements, including bookkeeping and accounting. The IP address is collected for this purpose and to prevent fraud.
2.2.2 The legal basis for the processing is our contractual obligation, cf. Article 6 of the General Data Protection Regulation.
2.3 When you enter into an agreement, communicate with us or collect products you have ordered oncrateit.toys, we collect the information you provide yourself, such as name, address, e-mail address, phone number, payment method, and information about which products you buy and possibly return.
2.3.1 The purpose is to enable us to deliver the products you have ordered and otherwise fulfil our agreement with you, including administering your rights to return and complain. We may also process information about your purchases to comply with legal requirements, including bookkeeping and accounting, and to handle your enquiries, answer questions, and process any complaints and support requests (including technical support).
2.3.2 The legal basis for the processing is our contractual obligation, cf. Article 6 of the General Data Protection Regulation.
2.4 When you sign up for our newsletter, we collect your name and e-mail address.
2.4.1 The purpose is to enable us to fulfil our obligation and deliver the newsletter to you.
2.4.2 The legal basis for the processing is our contractual obligation, cf. Article 6 of the General Data Protection Regulation.
2.5 When you contactinfo@crateit.dkwe store the information you provide yourself, such as name, civil registration number and contact details, e.g. address, e-mail address and phone number; your correspondence; information about the time of purchase and where you bought the goods; any faults/complaints; technical information about your device; health-related information (e.g. allergies and other information you provide about your health); and information about your use of My Pages (members only).
Calls with Crateit ApS may be recorded in accordance with applicable law for local operational needs (e.g. quality or training purposes) and in some cases archived as proof of consent to direct marketing and profiling. Payment card details are not recorded. Where required by applicable law, you will be informed of the recording at the start of the call and will be able to opt out of it.
2.5.1 The purpose is to handle your enquiries to Crateit ApS, answer any questions, and process any complaints and support requests (including technical support).
2.5.2 The legal basis for the processing is our contractual obligation and legal obligation, cf. Article 6 of the General Data Protection Regulation.
3. Recipients of personal data
3.1 Information about your name, address, e-mail address, phone number, customer number, order and invoice number and any specific delivery preferences is passed on to the carrier responsible for delivering the ordered goods to you.
3.2 Information may be passed on to external partners who process the information on our behalf. We use external partners for, among other things, technical operations, improvements and shipping, sending newsletters and targeted marketing, including advertising, and for your evaluation of our company and products. Among other things, your name and e-mail address may be passed on to Trustpilot so that they can, on our behalf, send you an invitation to review us on Trustpilot. If you choose to submit a review, Trustpilot becomes the data controller of the information you provide. These third parties are data processors acting solely on our instructions and processing data for which we are the data controller. The data processors may not use the information for purposes other than fulfilling their contract with us and are subject to confidentiality.
3.3 Two of these data processors, Google Analytics by Google LLC and Meta Platforms Inc. (Facebook), are based in the USA. The transfer of data to the USA is based on the EU-US Data Privacy Framework (DPF), adopted pursuant to Article 45 of the EU General Data Protection Regulation.
3.3.1 Google LLC’s DPF certification can be verified on the EU-US Data Privacy Framework participant list:https://www.dataprivacyframework.gov/
3.3.2 Meta Platforms Inc.’s DPF certification can be verified on the EU-US Data Privacy Framework participant list:https://www.dataprivacyframework.gov/.
3.4 We also share personal data with certain companies that are independent data controllers. This means that we do not control how the information you have provided is processed. Independent data controllers we share your personal data with are:
- Public authorities (police, tax authorities or other authorities) to the extent we are obliged to under applicable law, or in case of suspected crime.
- Companies offering payment solutions (card issuers, banks and other payment service providers).
When your personal data is shared with a company that is an independent data controller, that company privacy policy and processing of personal data applies.
4. Your rights
4.1 As data controller, we want to inform you of your rights in order to create transparency about how we process your data.
4.2 Right of access
4.2.1 You have the right at any time to ask us for information about, among other things, what data we have registered about you, the purpose of the registration, the categories of personal data and recipients of data, and information about where the data originates from.
4.2.2 You have the right to receive a copy of the personal data we process about you. To receive a copy, send a written request to Crateit ApS, Att: GDPR, Emil Neckelmanns Vej 15C, 5220 Odense SØ, Denmark. You may be asked to verify your identity.
4.3 Right to rectification
4.3.1 You have the right to have incorrect personal data about you corrected by us. If you become aware of errors in the data we have registered about you, we encourage you to send us a written notice so the data can be corrected.
4.4 Right to erasure
4.4.1 In certain cases you have the right to have all or part of your personal data erased by us, for example if you withdraw your consent and we have no other legal basis for continuing the processing. To the extent that continued processing of your data is necessary, e.g. for us to comply with our legal obligations or for legal claims to be established, exercised or defended, we cannot accommodate your request for erasure.
4.5 Right to restriction of processing to storage
4.5.1 In certain cases you have the right to have the processing of your personal data restricted to storage only, e.g. if you believe the information we process about you is not correct.
4.6 Right to data portability
4.6.1 In certain cases you have the right to receive personal data you have made available to us in a structured, commonly used, machine-readable and interoperable format and to have it transferred to another data controller.
4.7 Right to object
4.7.1 You have the right at any time to object to our processing of your personal data for direct marketing purposes, including the profiling carried out to enable such direct marketing.
4.7.2 You also have the right at any time to object to our processing of your personal data based on the legal grounds for processing set out in this policy. We cannot guarantee that we can accommodate your wishes in every respect, as we may be obliged to store personal data by law or due to a contractual obligation towards you.
4.8 Right to complain
4.8.1 You have the right at any time to lodge a complaint about our processing of your personal data with the Danish Data Protection Agency (Datatilsynet), Borgergade 28, 5, 1300 Copenhagen K, Denmark. Complaints can be submitted by e-mail todt@datatilsynet.dkor by phone +45 33 19 32 00.
5. Deletion and transfer of personal data
5.1 We only store personal data for as long as necessary to fulfil the purpose of the processing.
5.2 Information collected about your use ofcrateit.toys, cf. section 2.1, is deleted no later than when you have not usedcrateit.toysfor a period of 24 months.
5.3 Information collected in connection with your subscription to our newsletter is deleted when you withdraw your consent to the newsletter, unless we have other grounds for processing the information.
5.4 Information collected in connection with purchases made oncrateit.toys, is as a general rule deleted 2 years after the end of the calendar year in which the purchase was made. Information may however be stored longer if we have a legitimate need, e.g. to establish, exercise or defend legal claims, or where storage is required by law. To comply with the Danish Bookkeeping Act, accounting records are kept for 5 years until the end of a financial year.
5.5 You have the right to request the transfer of your personal data (data portability).
6. Security
6.1 We have taken appropriate technical and organisational measures to prevent personal data from being accidentally or unlawfully damaged, lost, altered or impaired, and to prevent unauthorised access or misuse.
6.2 Only employees with a genuine need to access your personal data in order to perform their work have access to it.
7. Contact details
7.1 We do not resell personal data and do not pass on your personal data to others; it is only registered in our customer database. You can have your data deleted at any time.
7.2 In order for you to enter into an agreement with Crateit ApS, we need the following information: Name. Address. Phone number. E-mail address.
We register your personal data for the purpose of delivering the goods to you.
The personal data is registered with Crateit ApS and stored for up to five years, after which it is deleted.
When personal data is collected via our website, we ensure that it always happens with your explicit consent, so that you are informed of exactly what data is collected and why.
7.3 The director and employees of Crateit ApS have access to the data registered about you.
The data controller at Crateit ApS is: Tonny Kaagaard Olsen
We do not store or transmit customer data in encrypted form.
As a data subject registered with Crateit ApS you always have the right to object to the registration. You also have the right to access the data registered about you. You have these rights under the Danish Data Protection Act; enquiries should be directed toinfo@crateit.dk.
7.4 Cookies on https://www.crateit.toyscookies are used with the purpose of optimising the website and its functionality, making your visit as easy as possible for you.
You can delete cookies from your computer at any time; see the instructions atWebshop Cookies and Privacy Policy.
7.5 Log statistics: we use log statistics onhttps://www.crateit.toys, which means that a statistics system collects information that can provide a statistical picture of how many visitors we have, where they come from and where on the website they leave, etc.
The log statistics are used solely to optimise the Crateit ApS website.
8. Consumer protection
Payments on crateit.toys are processed via Stripe, a certified PCI DSS Level 1 payment service. Read more about Stripe’s security standards:https://stripe.com/docs/security
8.1 crateit.toys, Crateit ApS is the data controller of the personal data collected viacrateit.toys
8.2 If you have questions or comments about this Privacy Policy, or if you wish to exercise one or more of your rights as described in section 4, please contact:
Crateit ApSGDPR
Emil Neckelmanns Vej 15C, 5220 Odense SØ. Tel: +45 70 60 33 73
E-mail: info@crateit.dk
9. Changes to the Privacy Policy
9.1 The latest version of the Crateit Privacy Policy can always be found on this page.
9.2 In case of significant changes (e.g. measures regarding personal data processing or categories of personal data), you will be informed by e-mail or oncrateit.toys
10. Versions
10.2 This is version 1 of the Crateit ApS Privacy Policy, dated 01.05.2025