Personal data

When you sign up, we enter into a data processing agreement – regardless of whether you are a freemium user or a paying customer – as it is important to us that you feel secure that orderstep protects your data.

1. General

1.1. The cookie and privacy policy in this section describes how orderstep ApS, Lautruphøj 5, 2750 Ballerup, CVR number 39107457 collects and processes your personal information when you use the systems at orderstep.dk for preparing offers, managing information and collecting data with for the purpose of making statistics.

1.2. orderstep is the data controller and you can always contact orderstep’s data controller, which is currently Monica Damsted Thygesen, regarding questions about the processing of your personal data at either persondata@orderstep.dk or telephone 4110 9090.

2. What personal data is collected and what the data is used for

2.1. Processing of the information we receive about you as a user of the system

2.1.1. Your name, company or organization name, job title, telephone number and e-mail will be registered in orderstep’s systems.

2.1.2. The information provided is used for dispatch and delivery of the ordered subscription. In addition, they are also used for communication about updates to the systems and expected downtime on the system, etc.

2.1.3. The legal basis for the processing of the information provided about you as a user of the systems is the EU Data Protection Regulation, Article 6, subsection 1, letters b, c and f.

2.2. Processing of information when you visit the website orderstep.dk

2.2.1. orderstep.dk uses cookies. A cookie is a small text file that many websites use to recognize your computer each time you visit the website. A cookie is a passive file and cannot spread viruses or other harmful programs. The cookies used do not identify the individual user, but rather the user’s computer.

orderstep’s use of cookies depends on which pages you visit on the website.When you visit www.orderstep.dk, and not secure.orderstep.dk, you visit the parts of the website whose purpose is sales and customer care for customers and potential customers at orderstep. Here, orderstep uses cookies to improve your experience on the website, assess the use of the individual elements on the website and to improve the marketing of our products and services. See further information under point 7 “Cookies”.

2.2.2. When you use orderstep.dk, your actions on the pages are registered in a log. The log stores data about all activities you carry out on the website. Which information is logged depends on the pages you visit on the website.
On all the pages you visit on the website, orderstep logs:

which IP address you use,
which user ID you are logged in with,
which pages you have visited

In addition, orderstep logs most of what you do in the systems, e.g. which offers, customers, etc. you have created, edited, viewed, deleted etc., including what you have entered along the way.

orderstep uses the information in the log to document what you have done, improve user-friendliness, target marketing and as a documentation basis for resolving any discrepancies.

2.2.3 If you write to us, we process the personal data you give us to answer your inquiry.

2.2.4 The legal basis for the processing of information when you visit the website orderstep.dk is the EU Data Protection Regulation, Article 6, subsection 1, letters b, c and f.

3. Recipients of personal data
3.1. orderstep does not sell the personal data you have entered when ordering the subscription to third parties.

3.2. orderstep does not pass on the registered personal data to third parties unless it is expressly stated in these conditions.

3.3. In order to manage and improve your subscription, personal information will be passed on to external partners. The external partners that can be used are, among other things, payment intermediaries, a web hosting provider, a provider of newsletters, a provider of an evaluation system and a provider of a CRM system. In the case of telephone inquiries, a telephone provider will also be used.

3.4. orderstep also uses external partners for, among other things, improving the website and targeted marketing, including retargeting. See further information in point 7 “Cookies”.

4. Deletion of personal information

4.1. The information is stored for 5 years from the end of the financial year to which the material relates.

4.2. Deletion of information as a result of you having an activity on orderstep.dk (does not apply to secure.orderstep.dk) takes place two years after the activity.

5. Security

5.1. orderstep maintains appropriate technical and organizational security measures against the accidental or illegal destruction, loss or deterioration of the personal data, as well as against unauthorized access or misuse.

5.2. Only employees who have a real need to access your personal data to perform their work have access to it.
5.3. The information is not stored encrypted, but transmitted encrypted.

6. Your rights

6.1. As a registered person, you always have the opportunity to gain insight and to be able to object to a registration in accordance with the rules of the Data Protection Regulation.

6.2. The Data Protection Regulation gives you the following rights as a registered person:

6.2.1. The right to access your own personal data

You are entitled at any time to receive information about how your personal data is processed, including e.g. what information is registered about you, what purpose, the registration serves, the category of personal data, recipients of personal data, etc. If you want insight into the processing of your personal data, you must send a written request to the data controller at orderstep. You may be asked to document that you are who you say you are.

6.2.2. The right to rectification

You have the right to have incorrect personal data about yourself corrected. If you become aware that there are errors in the information registered about you, orderstep may have made it possible for you to correct the information you entered directly in the system. If it is not possible to change the information directly in the system, you are encouraged to contact orderstep so that the information can be corrected.

6.2.3. The right to erasure

In certain cases, you have the right to have all or some of your personal data deleted by orderstep. To the extent that continued processing of your information is necessary, e.g. due to compliance with legal obligations, or in order for a legal claim to be established, asserted or defended, orderstep is not obliged to delete your personal data.

6.2.4. The right to restriction of processing

In certain cases, you have the right to have the processing of your personal data limited to storage only, e.g. if you believe that the information being processed about you is incorrect or the processing in question is believed to be illegal.

6.2.5. The right to data portability (provision of data in a commonly used format)

In certain cases, you have the right to have personal data that you have provided yourself delivered in a structured, commonly used and machine-readable format and transferred to another data controller.

6.2.6. The right to object

You have the right to object to the processing of your personal data at any time.

You can make use of your rights, including objecting to the processing, by contacting the data controller at orderstep, who is currently Monica Damsted Thygesen at persondata@orderstep.dk or 4110 9090. Following your inquiry, we will investigate the conditions for your request has been fulfilled and then carry out the requested changes or deletion as soon as possible.

6.3. You can complain about the processing of your personal data to:
Data Protection Authority, Borgergade 28.5
1300 Copenhagen K
Tel.: 33 19 32 00
Fax: 33 19 32 18
Mail: dt@datatilsynet.dk

7. Cookies

7.1. Cookies are used to improve your experience on our website, assess the use of the individual elements on the website, and to improve the marketing of our products and services. How orderstep uses cookies depends on the pages you visit on the website.

7.2. Technical cookies

7.2.1. Technical cookies are used on the website with the aim of making the website work. The cookies used for technical reasons are necessary for the website to function and you cannot therefore use the website if you choose to reject the use of technical cookies. On the pages where videos are shown, technical cookies from the video hosting service Vimeo are set so that the playback of videos can work.

7.2.2. Technical cookies expire 30 minutes after you click away from the website. Your browser then deletes them itself according to its procedure for deleting outdated cookies.

7.2.3. Technical cookies are used on all the pages you visit on the orderstep.dk website.

7.3. Statistics cookies and marketing cookies

7.3.1. The website allows the web analytics tools Google Analytics to register cookies on your computer for tracking purposes. The tracking is used for analyzes that can optimize the design, usability and efficiency of the website.

7.3.2. The website also lets the advertising tools Google Analytics, LinkedIn and Facebook register cookies so that these can track what your computer does on the website. The tracking is done in order to be able to offer you relevant advertisements about our products and services on their media and on 3rd party networks where they have an agreement to show advertisements. The tracking does not enable orderstep to identify your name, contact details or other personal details.

7.3.3. The tracking is stored indefinitely and is not deleted automatically when you click away from the website.

7.3.4. The above-mentioned statistical cookies and marketing cookies used on www.orderstep.dk are intended to help with sales and customer care for customers and potential customers at orderstep.

7.3.5. The statistical cookies listed above are also used on the systems at secure.orderstep.dk. The purpose here is to see how many users use the system, at what times and which pages are used. This is done so that orderstep can ensure that the system runs stably at all times and can ensure better hardware if overload is detected during certain periods, etc.

7.4. Reject or delete cookies

7.4.1. If you do not want your computer to be tracked, you must configure your browser to reject cookies from 3rd party websites. Where you find the settings depends on which browser you use.
Cookies that you have previously accepted can subsequently be deleted. If you use several browsers, you must remember to delete cookies in all of them.

See how to delete cookies and configure your browser in the instructions http://minecookies.org/cookiehandtering/.

7.4.2. If you delete these cookies, you may find that the systems and the website will not function as intended. In this case, orderstep cannot help make the system work for you.

7.5. Warranties for Transfer of Information to the United States

7.5.1. Google Analytics, Vimeo, LinkedIn and Facebook are established in the USA. The necessary guarantees for the transfer of information to the USA are ensured through the data processor’s certification under the EU-U.S. Privacy Shield, cf. Article 45 of the EU Data Protection Regulation.