Shopbox's personal data policy
Read below how Shopbox processes your data in relation to GDPR and subcontractors, so you can feel safe sharing information and data with us. We are compliant in all respects and have the necessary security measures in place, so you can start working with us without worries
1. Who is responsible for your information
Responsible for the processing of your personal information:
Shopbox ApS
Tranevej 16, 1st floor, right
2400 Copenhagen NV
VAT: 33964544
2. What your information is used for
We process your personal information for the following purposes:
- Delivery of agreed services, as described in the terms and conditions provided to you when you initially created your profile, including:
- Shopbox POS application
- My.shopbox (admin)
- Sending reports
- Personnel management
- Communication with you in connection with the provision of our services
- Marketing of new services to your store
- Research, statistics, and analyses to improve our products and services
- In connection with any legal claims that may arise
- Providing personal information may be necessary for the conclusion of a contract for the delivery of products or services. In these situations, we will not be able to offer you our products or services unless you provide the required information.
3. On what basis we process your personal information
Our processing of personal information is always based on a lawful basis.
We may process your personal information on the following basis:
A. Your explicit consent as a Shopbox customer.
B. Processing is necessary for the performance of a contract to which you are a party, or in order to take steps at your request prior to entering into a contract, for example, when you use our service.
C. Processing is necessary for compliance with a legal obligation to which Shopbox is subject, such as processing and storage of transaction details in accordance with accounting laws.
D. Processing is necessary for the purposes of the legitimate interests pursued by Shopbox or a third party, such as continuous improvement of products and services.
4. Who we share your information with
We share information about you with:
A. Our IT service providers (data processors) Read more here
B. Internally within relevant departments at Shopbox.
C. External auditors.
D. Public authorities, if required by law.
5. When we transfer personal data to countries outside the EU/EEA
Shopbox uses data processors located in the USA. The transfer is carried out under the Privacy Shield agreement and in accordance with Article 45 of the General Data Protection Regulation. You can read more about the Privacy Shield here: https://www.privacyshield.gov/EU-US-Framework
If your personal data is processed by a provider in another country, Shopbox ensures that the provider only processes your information in accordance with Shopbox instructions and that the information is otherwise processed under appropriate technical and organizational security measures. When we transfer personal data to a processor located outside the EU/EEA, the data is only processed for the purposes mentioned in point 2.
6. How long we store your information
As a Shopbox customer, Shopbox stores your data as long as you maintain your subscription. If you unsubscribe, we retain transaction information for 6 years due to the Accounting Act to allow you to retrieve transaction data. Your personal information is also stored. The information will then be deleted.
7. What rights you have
As a customer at Shopbox and as a registered individual, you have the right to exercise the following rights:
- Access and correction of your information at my.shopbox.com
- Deletion upon request (see below).
- Data portability, i.e., you can request to receive the data you have provided to Shopbox in a structured, commonly used, and machine-readable format.
- The possibility to withdraw your consent. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
- The possibility to object to profiling.
- The possibility to request a restriction of processing of personal data.
As a Shopbox customer, you have the right at any time to inspect and correct your information, as well as the possibility to withdraw your consent to the processing of personal data.
You can request at any time that your personal data at Shopbox be deleted. Your information will be deleted upon your request if one of the following criteria applies:
- You withdraw your consent (if consent was the basis for processing),
- The information turns out to be inaccurate, or
- Is no longer necessary for the purposes for which they were collected, or if
- The information is processed unlawfully.
The exercise of your rights may be subject to conditions and limitations and will often depend on the specific processing situation. If you believe that Shopbox is processing your personal data unlawfully, you have the right under Article 77 of the General Data Protection Regulation to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement.
You can file a complaint with the Danish Data Protection Agency by following this link: