PRIVACY POLICY

Last updated: 21 September 2026

1. Controller

Clas ApS, Danish CVR no. 45240886
Registered address: Kaalundsvej 9, 7000 Fredericia, Denmark
info@clas.as · +45 30 30 69 82

Clas ApS is the controller where we determine the purposes and means of processing.

2. Data and sources

We process data you provide when ordering, contacting us, using a form, creating an account or exercising your rights. This may include name, billing and delivery address, email, telephone, order and return details, correspondence and information needed to handle payment. We also receive technical and usage data from your device, Shopify and activated services, such as IP address, browser/device data, cookie identifiers and consent choices. We do not receive or store your full card number.

3. Purposes and legal bases

• Orders, payment, delivery, returns and service: contract or pre-contractual steps (GDPR Art. 6(1)(b)).
• Bookkeeping, product safety and statutory duties: legal obligation (Art. 6(1)(c)).
• Security, fraud prevention, operation and legal claims: our legitimate interests in protecting the webshop and establishing, exercising or defending claims (Art. 6(1)(f)).
• Optional preferences, analytics and marketing: consent where required (Art. 6(1)(a)). You may withdraw consent for the future at any time.

4. Required information

Information marked as required during checkout is needed to complete and administer your purchase.

5. Recipients

We share only necessary information with Shopify, activated payment providers, NS A/S at Smedevejen 7, 5970 Ærøskøbing (warehouse/fulfilment), relevant carriers, Formful or another activated form provider, Microsoft/Outlook and other IT/email providers, professional advisers and public authorities where required. Some providers are independent controllers for parts of their processing.

6. Transfers outside the EEA

Where a supplier processes data outside the EEA, the transfer is based on an adequacy decision or appropriate safeguards, normally the European Commission's Standard Contractual Clauses, supplemented where necessary. Contact us for details.

7. Retention

Order and accounting records are normally retained for five years from the end of the relevant financial year. Customer service, return and withdrawal documentation is normally retained while the matter is active and for up to three years after closure, unless a claim or legal duty requires longer. Consent evidence may be retained for as long as needed to document consent. Cookie choices are normally stored for up to one year. Other data is deleted or anonymised when no longer needed.

8. Cookies

Necessary technologies support security, checkout and core functions. Optional technologies are used according to your choices where consent is required. Read our cookie policy and use the button on that page to change your choices.

9. Your rights

Subject to applicable conditions, you may request access, rectification, erasure, restriction or data portability, and object to processing based on legitimate interests. You may withdraw consent for the future. Contact info@clas.as; we may verify your identity.

10. Complaints

You may complain to the Danish Data Protection Agency, Carl Jacobsens Vej 35, 2500 Valby, Denmark, at datatilsynet.dk, or to your local EEA supervisory authority.

11. Automated decisions and children

CLAS does not make decisions with legal or similarly significant effects solely by automated means. Providers may use automated fraud signals under their own safeguards. The webshop is not directed at children, and we do not knowingly collect children's data for marketing.

12. Changes

We update this policy when processing or legal requirements change. The current version and date are published here.