Privacy policy

Data Controller
Nocla A/S
Tingvej 2, 8382 Hinnerup
Phone: +45 29876163
Email: hello@nocla.bio

At Nocla A/S, we are committed to protecting the personal data you provide to us. In this privacy policy, you can read about which information we collect, what we use it for, how we protect it, and what rights you have as a result of our processing.

When Do We Collect and Process Your Personal Data?

  • When entering into an agreement and delivering your order.
  • When responding to general inquiries via email, social media, etc.
  • When you contact our customer service (e.g., for complaints).
  • When you sign up for our newsletter.
  • When we engage in direct marketing via email.
  • When you visit our website and cookies are placed on your device.

Which Personal Data Do We Collect, For What Purpose, and Based on Which Legal Grounds?

Agreement and Order Fulfillment
We collect general personal information such as name, address, email, phone number, and order specifications. If acting on behalf of a company, we may also collect job title, company name, and CVR number (only considered personal data if it relates to a sole proprietorship and includes identifying info).
Legal basis: GDPR Article 6(1)(b) – necessary for contract performance.

General Inquiries (Email, Website, Social Media)
We process your name, email, message content, and other provided details. If you enter and win a competition, we process necessary data for your participation and prize delivery.
Legal basis: GDPR Article 6(1)(f) (legitimate interest), and Article 6(1)(b) for competitions.

Customer Service Contact
We process name, address, purchase details, etc., to manage your rights regarding returns or complaints.
Legal basis: GDPR Article 6(1)(b).

Direct Marketing (Email)
We use your name, email, purchase history, and possibly browsing behavior to tailor product recommendations and offers.
Legal basis: GDPR Article 6(1)(a) – based on your consent, which you can withdraw at any time via the email or by contacting us.

Website Visits and Cookies
We collect IP address, browser type, OS, visited pages, etc., for analytical and improvement purposes. Marketing/analytical cookies are only used with your consent. See our cookie policy for more info.

Which Third Parties Do We Share Data With?

  • External providers of IT systems (email, support, marketing, CRM, website operations).
  • If you consent to marketing/analytics cookies, we may share data with platforms such as social media.
  • Transport companies handling your deliveries (name, address, email, order number).
  • Product manufacturers (in case your item is not in stock with us).
  • External parties such as advisors, accountants, and public authorities (e.g., SKAT).

Some third parties are data processors under GDPR Article 4(8), and we have signed Data Processing Agreements (DPAs) with them to ensure secure and lawful processing.

If data processors transfer your data to third countries, safeguards such as EU Standard Contractual Clauses (GDPR Article 46(2)(c)) or transfers to countries deemed safe by the EU (GDPR Article 45) are in place.

How Long Do We Store the Data?
We delete your data when it’s no longer needed. Contract-related data (agreements, invoices, payments, etc.) is retained for the current year + 5 years in accordance with Danish bookkeeping laws.

Cookie-collected data is stored for the duration specified in our cookie policy.

Your Rights
You have the right to:

  • Access the personal data Nocla A/S holds about you.
  • Request deletion of your personal data.
  • Request correction of inaccurate data.
  • Object to our data processing.
  • Request restriction of data processing.
  • Receive your data in a structured, commonly used, and machine-readable format.

You may file a complaint with the Danish Data Protection Agency (Datatilsynet) regarding our processing of your personal data:

Address: Carl Jacobsens Vej 35, 2500 Copenhagen
Email: dt@datatilsynet.dk
Phone: +45 3319 3200