1. Data controller

Vending Machine (inva.store), CVR no. 44207540, Toppen 48, 4000 Roskilde, Denmark. E-mail: info@inva.store.

2. Data we process

About contact persons: name, work e-mail, phone and job title. About the customer: name of the company or institution, CVR and EAN number, delivery and invoice address and order history. Technical data from the website, e.g. IP address and browser type, via cookies.

3. Purpose and legal basis

Processing of orders and delivery (GDPR Art. 6(1)(b)). Invoicing and bookkeeping (Art. 6(1)(c), Danish Bookkeeping Act). Customer service and ongoing cooperation (Art. 6(1)(f), legitimate interest). Newsletters are only sent with consent (Art. 6(1)(a)).

4. Recipients

Data is only shared when necessary: with carriers, payment providers, e-invoicing providers (NemHandel), our accountant and the website host. We do not sell data.

5. Storage

Accounting records are kept for 5 years from the end of the financial year, as required by the Danish Bookkeeping Act. Other data is kept as long as necessary for the purpose.

6. Your rights

You have the right of access, rectification, erasure, restriction, objection and data portability. Consent can be withdrawn at any time. Write to info@inva.store.

7. Complaints

You can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, www.datatilsynet.dk.

8. Cookies

We use necessary cookies so that the basket and log-in work. Cookies for statistics and marketing are only used with your consent, and you can change your choice at any time.