Privacy Policy

Right of Access

You have the right to obtain access to the personal information we process about you.

Right to Rectification 

You have the right to have personal information that we hold about you rectified.

Right to Erasure

In special circumstances, you have the right to have personal information about you erased, before the time for our ordinary erasure.  

Right to Restriction of Processing

In certain cases, you have the right to have the processing of your personal information restricted. If the right applies, we may then only process the personal information – except for retention – with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another person or for reasons of important public interest.

Right to Data Portability

In certain cases, you have the right to receive a copy of the personal information you have provided in a structure commonly used and machine-readable format.

Right to Object

You have the right to object to our processing of your personal information for marketing purposes or on grounds relating to your particular situation. If you do so, we will cease the processing, unless we can justify that our legitimate interests override your interests, rights and freedoms, even after duly taking your particular situation into consideration, or the processing can be based on an alternative legal basis.

• Information about the hardware and software (browser) you use to access the website
• Your IP address
• Stored preferences (e.g. preferred language)
• Information on your use of the website, including information on which links you click and how often you visit them.

You can read more about the specific cookies we use, including the purpose of each cookie and how long it stays on your equipment in our Cookie Declaration at the bottom of this page.

Legal basis

Our legal basis for the processing of information for this purpose is GDPR article 6(1)(f), as the processing is necessary for us to pursue our legitimate interest in providing a secure, relevant and well-functioning website.

This personal information may – depending on the specific circumstances – include:

• Your name
• Your online usernames or other account identifiers
• Your email address
• Any media or information you choose to share with us or that you tag us in

We operate on the following social media networks:

• Facebook: facebook.com or mobile app by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA or Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland, please refer to privacy notice: https://www.facebook.com/policy.php,  opt-out: https://www.facebook.com/ads/preferences,  or https://www.facebook.com/settings;
• Instagram: instagram.com or mobile app by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland, please refer to privacy notice http://instagram.com/about/legal/privacy/; opt-out: https://www.instagram.com/accounts/privacy_and_security/
• Twitter: twitter.com or mobile app by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA, please also refer to privacy notice: https://twitter.com/en/privacy, opt-out: https://twitter.com/personalization;
• YouTube: YouTube: youtube.com or mobile app by Google LLC 1600, Amphitheatre Pkwy, Mountain View, CA 94043, USA, Google Ireland Ltd., Gordon House Barrow St Dublin 4 Ireland, please also refer to privacy notice: https://policies.google.com/privacy, settings: https://www.youtube.com/account, https://policies.google.com/privacy#infochoices;
• TikTok: tiktok.com or mobile app by TikTok Pte. Ltd., 201 Henderson Road, #06-22, Apex@Henderson, Singapore 159545, Singapore, please also refer to privacy notice: https://www.tiktok.com/legal/privacy-policy
• LinkedIn: linkedin.com or linkedin mobile app by LinkedIn Corporation, Legal Department – Privacy, 1000 W. Maude Ave, Sunnyvale, CA 94085, USA / LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, please also refer to https://www.linkedin.com/legal/privacy-policy / https://www.linkedin.com/psettings/privacy 

In some situations, we will be joint data controllers with the social media platforms Facebook and Instagram (click on link for further information on the joint controller arrangement and their processing of personal information). The other social media platforms are considered independent data controllers within the meaning of GDPR.

If you participate in competitions or other events, where you win a prize, we will publish your name and your contribution to the competition or event on our relevant social media pages.  

Legal basis

Our legal basis for processing your personal information is GDPR article 6(1)(f), as the processing is necessary for us to pursue our legitimate interest in interacting with customers and other parties interested in our business through social media platforms.

Deletion

We retain the information for one (1) year from the end of the relevant competition or event.

Handling of queries, including customer service

For the purpose of handling incoming queries, including customer service requests, we may process the following categories of personal information about you:

• Name and contact information, including email address, telephone number, delivery address and billing address
• Sales Order information and order history
• Any other information provided in the context of a specific query
• Possibly bank account (if the query leads to MATE making payments/refunds to the customer)

Legal basis

The legal basis for processing is GDPR article 6(1)(f), as the processing is necessary in order for us to pursue our legitimate interest in providing appropriate customer service and effectively handling queries.

Deletion

Customer service requests are retained for five (5) years from the end of the year, where our handling of the request was completed. Other queries are retained for two (2) years from the end of the year, where our handling of the query was completed.

If a query leads to financial transactions, such transactions are stored for five (5) years from the end of the year, the transaction relates, and the underlying query.

Newsletters and marketing

When you have signed up for our newsletter and other marketing, or if we have obtained your email address in connection with your purchase of one of our products, we will process personal information about you for the purpose of providing you with relevant information and offers. To pursue this purpose, we process the following categories of personal information about you:

• Name
• E-mail address
• Possibly your mobile telephone number
• Your consent to receive direct marketing (if relevant)
• Your indication of interest in specific products (if any)
• Information on products purchased (if any)
• Date and time when you subscribed or signed up, including sign-up for special (SMS) campaigns, as well as information on when you unsubscribed or opted-out.
• History on newsletters and other marketing messages we have sent to you, as well as information on whether or not you have opened the messages

Legal basis

The legal basis for processing this information is GDPR article 6(1)(f), as the processing is necessary in order for us to pursue our legitimate interest in optimizing our marketing efforts and sending you information that is relevant in relation to your interests.

Deletion

We retain the information for two (2) years from the end of the year where the first of the following occurs:

• You opt out or withdraw your consent to receive further marketing
• We have not used your email address to send direct marketing for a period of twelve (12) consecutive months

We will cease the active use of your information for sending marketing material immediately after either of the two situations above has occurred but will keep your information as described above in order for us to be able to document that we could lawfully send marketing material to you, when we did so.

Camera surveillance (CCTV)

Purpose

For the purpose of preventing crime, we have camera surveillance in our stores and offices. Therefore, we may capture images of you, if you visit us.

Legal basis

The legal basis for this processing is GDPR article 6(1)(f), as the processing is necessary in order for us to pursue our legitimate interest in creating a safe environment for our employees, customers and other visitors. In the event that the recordings include information on criminal offences, the legal basis for processing this information is section 8(3) of the Danish Data Protection Act.

Deletion

Sales to consumers 

When you buy a bike or another product from us as a consumer, including repair of your bike, we process personal information about you for the purpose of completing the sales transaction in order for us to be able to provide ongoing support and services, including repairs and replacements under the warranty for your bike.

If you make your purchase and collect at one of our physical stores, we process the following categories of personal information:

• Your name and telephone number
• Information about your purchase (date, time, items and quantity)
• If you bring in your bike for repair, we also process information on the problems you report

If you make your purchase online, we furthermore process the following categories of personal information

• Your email address
• Delivery address / Billing address
• Transaction information, including method of payment
• Purchase history

Legal basis

The legal basis for the processing is

• GDPR article 6(1)(b), as the processing is necessary for the conclusion or performance of a contract with you
• GDPR article 6(1)(c), as the processing is necessary for us to comply with legal obligations, specifically obligations pursuant to the Danish Bookkeeping Act.
• GDPR article 6(1)(f), as the processing is necessary for us to pursue our legitimate interest in understanding the buying patterns of our customers and giving you a good service experience.

Deletion

Transaction data is retained for five (5) years from the end of the year in which the transaction took place; other information for five (5) years from the end of the year of the latest transaction.

• Name and contact information, including company address, working email and telephone number

• Company details, including VAT number
• Trading history
• Outstanding invoices/current balance
• Account type and terms with MATE
• Correspondence and other notes

Legal basis

• GDPR article 6(1)(b), as the processing is necessary for the conclusion or performance of a contract with you
• GDPR article 6(1)(c), as the processing is necessary for us to comply with legal obligations, specifically obligations pursuant to the Danish Bookkeeping Act.
• GDPR article 6(1)(f), as the processing is necessary for us to pursue our legitimate interest in effectively managing our business relationship with you as well as effectively managing the related risks.

Deletion

Registration of your MATE

• Name
• Email address
• Identification number of your bike

Legal basis

The legal basis for this processing is GDPR article 6(1)(b), as the processing is necessary for us to fulfil a contract with you for the specific service.

Deletion

General business administration

Depending on the nature of the relationship or specific reason for getting in touch with us, we may process the following categories of personal information:

• Name and contact information such as address, email address and telephone number (for vendors and business partners typically business contact information)
• Information on the nature of the relationship between you or the company you represent and MATE
• Correspondence and trading history, including agreed terms
• Other information that may be relevant for the specific relation or situation

Legal basis

Depending on the reason for you to be in contact with us, the legal basis for the processing may be:

• GDPR article 6(1)(b) if the processing is necessary to enter into or fulfill a contract between MATE and you or the business, you represent, or
• GDPR article 6(1)(f), as the processing is necessary in order for us to be able to effectively manage the relationship and communicate with our stakeholders.

Furthermore, where the relationship leads to financial transactions between the parties, GDPR article 6(1)(c) will also apply as legal basis, as the processing is necessary for us to comply with legal obligations, specifically obligations pursuant to the Danish Bookkeeping Act.

Deletion

If you are a vendor or business partner, or the contact with you involves financial transactions, we will retain information on transactions for five (5) years from the end of the year that the individual transaction relates to, and we will retain related master data for five (5) years from the end of the year that the latest transaction with you or the business you represent took place.

For other relations and situations, we will retain the information for two (2) years from the end of the year when we last communicated with you.