Privacy & cookie policy

1. Data controller

Miko Cooperation, Frederikssund, Denmark, is the data controller responsible for the processing of the personal data we collect about you. If you have questions about this policy or wish to exercise your rights, you can contact us at hey@heybox.dk.

2. What information we collect

When you place an order, we collect the information you provide yourself: name, email, phone number and delivery and collection address. This information is necessary in order to complete your order.

When you visit our website, we also collect technical information via cookies, if you have consented to it (see section 5).

3. Purpose and legal basis

We process your information in order to provide our service (performance of a contract, cf. Article 6(1)(b) of the General Data Protection Regulation) and to communicate with you about your order.

Marketing cookies and ad measurement (see section 5) are processed solely on the basis of your consent, cf. Article 6(1)(a). You can withdraw your consent at any time.

4. Disclosure and data processors

We never sell your information. We use a number of data processors that process information on our behalf, including providers of hosting, database and email (sending booking confirmations).

If you have consented to marketing cookies, we also share certain information with Meta Platforms (Facebook and Instagram) for the purpose of measuring and targeting ads (see section 5).

5. Cookies and Meta (Facebook/Instagram)

We use Meta Pixel and Meta's Conversions API to measure the effect of our ads on Facebook and Instagram and to show relevant ads to people who resemble our customers. These tools are activated only if you actively accept marketing cookies in our cookie banner.

Once you have given consent, information about your behaviour on the site may be shared with Meta - for example which steps of the order you have completed, as well as an encrypted (hashed) version of your email and phone number upon a completed order. Email and phone number are hashed before they leave our server, so Meta does not receive them in plain text.

You can change or withdraw your consent at any time by clearing cookies in your browser or contacting us. Processing that has already taken place on the basis of your consent is not affected.

6. Storage

We store your personal data for as long as it is necessary to complete and document your customer relationship, and in accordance with applicable law, including the rules of the Danish Bookkeeping Act. After that, the data is deleted or anonymised.

7. Your rights

You have the right to access, rectify, erase or restrict the processing of your personal data, the right to data portability, and the right to object to the processing. You can exercise your rights by contacting us at hey@heybox.dk.

You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) if you are dissatisfied with our processing of your personal data. You can find contact details at datatilsynet.dk.

8. Contact

If you have questions about our processing of your personal data, you are always welcome to contact us at hey@heybox.dk.