Ordin Privacy Policy

Introduction

This Privacy Policy describes how Ordin ("we", "our", "us") collects, uses, and shares personal data when customers ("you") use our online ordering platform. We are committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) in Denmark.

This Privacy Policy is to be understood in the context of the Terms of Use found on the Ordin Website https://www.ordin.online

Data Collected and Purpose

Orders

  • Why: When placing an order, all related information is stored, including:
    • Time of order
    • Contact information (Name, Email, Phone, Delivery Address)
    • Ordered products
  • Legal Basis: Consent
  • Retention:
    • Contact information is anonymised after two (2) years.
    • Orders are stored for up to five (5) years for tax and compliance purposes.
  • Deletion: Automatically once the retention period ends.

Account

  • Why: Customers can create an account for easier future ordering by entering their information, including:
    • Contact information (Name, Email, Phone, Delivery Address)
  • Legal Basis: Consent
  • Retention: Stored indefinitely unless inactive.
  • Deletion: Contact information automatically deleted 1 year after last interaction. Customers may also request account deletion at any time.

Age Confirmation

  • Why: A feature that the business can activate to verify the age of the user, when purchasing items that require age verification according to law.
  • Legal Basis: Legal obligation
  • Retention: Stored for two (2) years.
  • Deletion: Automatically once the retention period ends.

Marketing Consent

  • Why: Used to send marketing communications.
  • Legal Basis: Consent
  • Retention: Stored until consent is revoked.
  • Deletion: Can be unsubscribed at any time, and data is removed immediately.

Notification Token

  • Why: Enables push notifications for order updates.
  • Legal Basis: Consent
  • Retention: Stored as long as push notifications are enabled.
  • Deletion: Removed when the customer disables notifications.

Cookies & Analytics

  • Why: Used to analyze website usage if consent is provided.
  • Legal Basis: Consent
  • Retention: Stored based on cookie settings.
  • Deletion: Can be modified at any time in cookie settings. Cookie data is deleted according to configured retention policies.

Subprocessors

Your data may be shared with third-party services for operational purposes. These include:

Data Storage

  • Google Firebase – EU servers (Belgium, Netherlands)
  • Supabase – AWS EU (Frankfurt)

Authentication

  • Meta Platforms, Inc. – Facebook login
  • Google LLC – Google login
  • Apple Inc. – Apple login
  • IN Groupe Signaturgruppen A/S – Age verification via NemID

Communication

  • MailerSend (MailerLite Limited) – Email services
  • GatewayAPI (OnlineCity ApS) – SMS services

Payment Processing

  • Adyen N.V. – Payment processing
  • Stripe, Inc. – Payment processing

Marketing & Analytics

  • Google Analytics & Google Tag Manager – Analytics and marketing tools

POS System Integration

  • ExtendaGO (Extenda Retail AB) – POS integration
  • Superb ApS – POS integration

International Data Transfers

Some of our subprocessors may store or process data outside the EU/EEA. Please refer to the subprocessors for their usage of the data.

Data Subject Rights

Customers have the following rights regarding their personal data:

  • Right to Access: Request a copy of their data.
  • Right to Rectification: Request corrections to inaccurate or incomplete data.
  • Right to Erasure: Request deletion of their data under applicable conditions.
  • Right to Restriction: Request limitation of processing in certain cases.
  • Right to Data Portability: Receive their data in a structured format.
  • Right to Object: Object to data processing based on legitimate interests.
  • Right to Withdraw Consent: Withdraw previously given consent at any time.

Customers can exercise their rights by contacting us, see how below.

Data Security Measures

We implement appropriate security measures to protect personal data, including encryption, access controls, and regular security audits.

Contact Information

For any privacy-related concerns, contact us at:

Ordin ApS

Email: hello@ordin.dk

We reserve the right to update this Privacy Policy as needed to comply with legal and operational changes. Any significant updates will be communicated to users.

This Privacy Policy was last updated on 1/3/2025