Who is responsible
The data controller is Mazo ApS, trading as Lampkin, of Dronningens Tværgade 50, st., 1302 København K, Denmark. Contact us about anything on this page at support@mazodesign.shop or +45 31685249. We have not appointed a data protection officer; we are not required to, and the address above reaches the people who actually decide these things.
We process personal data under the General Data Protection Regulation (EU) 2016/679 and the Danish Databeskyttelsesloven.
What we collect, and why
| What | Why | Legal basis | Kept for |
|---|---|---|---|
| Name, email, phone, delivery address | To process, dispatch and deliver your order, and to reach you about it | Performance of a contract — Art. 6(1)(b) | 5 years from the end of the financial year, per Danish bookkeeping law |
| Order contents, price, moms, order reference | To fulfil the order and to keep the accounting records we are required to keep | Contract and legal obligation — Art. 6(1)(b) and (c) | 5 years from the end of the financial year |
| Payment reference returned by the payment provider | To match a payment to an order, and to issue refunds | Contract and legal obligation — Art. 6(1)(b) and (c) | 5 years from the end of the financial year |
| Messages you send us | To answer you, and to keep a record of what was agreed | Legitimate interest in answering enquiries — Art. 6(1)(f) | 2 years from the last message, unless it relates to an order |
| Lighting enquiry details — room size, ceiling height, use | To answer your question about a room | Legitimate interest / your request — Art. 6(1)(f) and (b) | 2 years from the last message |
| Email address, if you subscribe | To send the emails you asked for | Consent — Art. 6(1)(a) | Until you unsubscribe |
| Optional measurement cookies | To count which pages get read | Consent — Art. 6(1)(a) | See the cookie page |
What we never hold
What we do not do
- We do not sell personal data. Not to anyone, not in any form.
- We do not run advertising trackers, retargeting pixels or social media pixels.
- We do not build behavioural profiles or score customers.
- We do not take automated decisions with legal or similarly significant effects.
- We do not require an account to buy anything, so there is no password of yours for us to lose.
Who else processes it
A short list, each under a data processing agreement, each processing only what its job needs:
- Hosting and delivery of this site. Serves the pages and handles form submissions. Servers in the EU.
- Database. Stores orders and messages. Data held in the EU.
- Payment provider. Processes the card payment. Receives what a payment needs — amount, currency, and the details you type into their form. Certified to PCI DSS Level 1.
- Carriers. Receive the name, address and phone number required to deliver a parcel, and nothing else.
- Email. Sends order confirmations and answers to your messages.
We keep processing inside the EU/EEA wherever we can. Where a processor transfers data outside it, that transfer relies on an adequacy decision or on Standard Contractual Clauses. Ask us and we will tell you which applies to which processor.
Your rights
Under the GDPR you can ask us to do all of the following, free of charge, and we answer within one month:
- Access — a copy of everything we hold about you.
- Rectification — correct anything that is wrong.
- Erasure — delete it. We must keep order records for the bookkeeping period, and we will tell you exactly what we are keeping and why rather than refusing the whole request.
- Restriction — stop processing it while a dispute is resolved.
- Portability — receive it in a machine-readable format.
- Objection — object to processing based on legitimate interest.
- Withdraw consent — at any time, for anything based on consent. Withdrawal does not affect processing that already happened lawfully.
Email support@mazodesign.shop with what you want. We may ask a question to confirm you are who you say you are — that is a protection for you, not an obstacle.
Complaining to the supervisory authority
If you are not satisfied with how we handle your data or your request, you can complain to the Danish data protection authority:
Datatilsynet
Carl Jacobsens Vej 35, 2500 Valby, Denmark
Telephone: +45 33 19 32 00
www.datatilsynet.dk
You do not have to come to us first, though it is usually faster. If you live in another EU country you may complain to your own national authority instead.
Security
- Everything is served over HTTPS with TLS, including every form.
- Access to order data is limited to the people who need it to fulfil orders.
- Form submissions are validated on the server, not only in the browser.
- We collect the minimum a transaction needs. There is no field on this site asking for a date of birth, a gender, or an identification number, because a lamp order does not require any of them.
Children
This site is for adults. We do not knowingly collect data from anyone under 18, and orders may only be placed by someone with the legal capacity to enter into a contract. If you believe a child has given us data, tell us and we will delete it.
Changes
We will update this page when what we do changes. The date at the top says when it last changed. Where a change materially affects how we use data you have already given us, we will tell you directly rather than relying on you re-reading this page.
Questions about this page
Email support@mazodesign.shop or call +45 31685249. Monday–Friday, 09:00–16:00 CET. Email is answered within 1 business day.