Last updated: 5 November 2026
At Flagshoppen we take care of your personal data. This policy explains what information we collect, why we collect it, who we share it with and what rights you have.
Data controller
Flagshoppen ApS
Baldersbækvej 2, 2.
2635 Ishøj, Denmark
Company reg. no. (CVR): 42622079
Phone: +45 50 55 12 24
Email: info@flagshoppen.dk
If you have any questions about how we process your data, you are always welcome to contact us.
What information we collect
- When you place an order: name, address, email, phone number, and where relevant company name, VAT/CVR and EAN number, as well as what you bought and how you chose to pay and receive your order.
- When you contact us: the information you give us by email, phone or contact form.
- When you visit the website: technical information such as IP address, browser and device type, and which pages and products you view. Some of this is collected through cookies (see below).
We never receive your card details. Card payments are handled solely by our payment provider.
Why we use the information
- To process and deliver your order, send order and shipping confirmations, invoice you and handle returns and complaints. The legal basis is performance of our contract with you (GDPR Art. 6(1)(b)).
- To comply with the law, e.g. the Danish Bookkeeping Act. The legal basis is a legal obligation (Art. 6(1)(c)).
- To answer your enquiries and provide customer service. The legal basis is our legitimate interest in helping you (Art. 6(1)(f)).
- To run, secure and improve the website and measure the effect of our marketing. Statistics and marketing cookies are only used if you have given your consent (Art. 6(1)(a)).
Who we share the information with
We never sell your data. We only share what is necessary with partners who help us run the shop:
- Payment: Worldline/Bambora (ePay), which handles card and MobilePay payments. If you pay by EAN, the invoice is sent electronically to the public authority you have specified.
- Shipping: Shipmondo and the carriers PostNord and GLS, who receive your name, address, phone number and email so they can deliver your parcel and notify you about it.
- Website operation: our hosting and web agency, who operate and maintain the website and our email delivery.
- Statistics and marketing: Google (via Google Tag Manager) and Stape, which we use to measure traffic and the effect of our ads – only if you have consented to cookies.
- Public authorities, where we are required to do so by law.
Some of our partners, such as Google, may process data outside the EU/EEA. When this happens, it is done on a lawful basis, such as the European Commission’s Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.
Cookies
We use cookies to make the website work, for example to remember your shopping cart. These necessary cookies do not require consent. We only use statistics and marketing cookies if you accept them in our cookie banner. You can change or withdraw your consent at any time through the cookie settings on the website or by deleting cookies in your browser.
Links to other websites
The website contains links to, among others, Trustpilot, Facebook and Instagram. When you visit those sites, their own privacy policies apply.
How long we keep the information
- Order and accounting information is kept for 5 years from the end of the financial year it relates to, as required by the Danish Bookkeeping Act.
- Customer service enquiries are kept as long as needed to help you, and normally no longer than 2 years.
- Cookies are stored for the period stated in the cookie banner.
Your rights
You have the right to access the data we hold about you and to have incorrect data corrected. You can also ask us to delete your data, restrict processing, object to processing and receive your data in a common format (data portability). If you have given consent, you can withdraw it at any time.
Write to info@flagshoppen.dk if you want to exercise your rights. We will reply as soon as possible and no later than one month.
Complaints
If you are dissatisfied with how we process your data, you can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, www.datatilsynet.dk. We would, however, always like to hear from you first so we can try to resolve the issue.
