Privacy Policy

Data Controller:
Culti ApS
CVR no.: 43812009
Address: Kystvejen 41, 4600 Køge
Email: info@cultiplantsystems.com


Personal Data We Collect

When you shop with us, we collect the following information:

  • Name
  • Address
  • Phone number (only if necessary for delivery or support)
  • Payment card information
  • Email address
  • Details of your purchases, including price
  • Date of order placement
  • Date of order dispatch
  • IP address
  • Data about your use of our website
 


Purpose and Legal Basis for Data Processing

We process and share personal data to fulfill agreements with you (Article 6.1.b of GDPR) and/or pursue legitimate interests (Article 6.1.f of GDPR), including:

  • Delivering the services you request.
  • Improving our website and services.
  • Facilitating targeted marketing (with explicit consent where required).



Payment and Order Accounting

Your name and payment card details are shared with QuickPay to process payments. Additionally:

  • Your name, address, phone number, and email are shared with Storebuddy and E-conomic for efficient bookkeeping.
  • All data is collected directly from you when you place your order.
  • Basis for processing: GDPR Article 6.1.b (contract fulfillment) and Article 6.1.f (legitimate interest).
 

Order Shipment

To fulfill delivery, we share your name, address, phone number (if necessary), and email with:

  • DAO (Dansk Avisomdeling A/S)
  • GLS Denmark A/S
    Additionally, this information is shared with Shipmondo.com, which facilitates courier bookings and generates digital shipping labels.
  • Basis for processing: GDPR Article 6.1.b (contract fulfillment).
 

Webshop System Data

We record your name, address, phone number, IP address, email address, purchase details, and order dates in our webshop system. This is essential for order processing, fraud prevention, and customer service.

  • Basis for processing: GDPR Article 6.1.b (contract fulfillment).
 

CRM System Data

Your name, address, phone number, email, and purchase history are stored in our CRM (Customer Relationship Management) system. This data is shared with Klaviyo for service improvements and only for targeted marketing if you have explicitly consented.

  • Basis for processing: GDPR Article 6.1.a (explicit consent for marketing) and Article 6.1.f (legitimate interest for service improvement).
 

Newsletter and Marketing

When you subscribe to our newsletter, your name, email, purchase history, and website activity are processed and shared with MailChimp, our email marketing provider.

  • We only send newsletters and marketing emails if you have explicitly consented by ticking the subscription box during signup or at checkout.
  • Basis for processing: GDPR Article 6.1.a (explicit consent).
 

Website Use Data

We collect your IP address and usage data during visits to our website to improve the user experience, analyze traffic, and target marketing (see our Cookie Policy for details).

  • Basis for processing: GDPR Article 6.1.f (legitimate interest).
 

Data Transfers Outside the EU/EEA

We only share data with processors outside the EU/EEA when adequate protections are in place. These include Standard Contractual Clauses (SCCs), approved under GDPR.

Processors include:

  • QuickPay: Payment services (EU/EEA).
  • MailChimp: Email marketing (USA – using SCCs).
  • Google: Analytics (Ireland – SCCs in place if data is transferred to the USA).
  • Facebook: Ad targeting (Ireland – SCCs in place).
 

We continually monitor that all non-EU partners comply with GDPR standards.

 

Data Minimization

We only collect and process the personal data strictly necessary for the specific purpose.

  • Phone numbers: Required only for order shipment or customer support.
  • Payment details: Processed securely by QuickPay and not stored by us.
 

Data Retention

Personal data is stored for five years, in compliance with bookkeeping laws. After this period, data is deleted.

 

Your Rights

You have the right to:

  • Access the personal data we process about you.
  • Request corrections to inaccurate data.
  • Withdraw consent for marketing (unsubscribe via a link in emails or contact us).
  • Request data deletion when no longer necessary for its purpose.
 

For inquiries or complaints, contact us at support@cultiplantsystems.com

 

This Privacy Policy was last updated on January 26, 2025.