Privacy policy

Last updated July 19th 2024

‍

This privacy policy for HejTop ApS (doing business as Drop By Collective ApS) ('we', 'us', or 'our'), describes how and why we might collect, store, use, and/or share ('process') your information when you use our services ('Services'), such as when you:

‍

  1. Download and use our mobile application (Drop By Collective), or any other application of ours that links to this privacy notice
  2. Engage with us in other related ways, including any sales, marketing, or events

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at adam@dropbycollective.dk.

‍

Summary of key points

‍

1. What information do we collect?

  1. Personal information you provide to us, including names, email addresses and passwords. This information is stored in Firebase on servers located in the EU.
  2. We do not process sensitive information.
  3. If you make a purchase, we will collect necessary data. All payment related information is handled and stored by Stripe (which we use to create and manage your membership subscription) including name, billing address, and card/payment information.
  4. If you use our Services, we may also collect additional information only if you choose to provide us with permission and access. This information is stored in Firebase on servers located in the EU. This provides us with:some text
    1. Geolocation information: We make use of maps and location data to help provide you with relevant information and services.
    2. Push notifications: We may request to send you push notifications regarding your account, certain features and more. You can opt out of these in the app or device’s settings.

All personal information you provide to us must be true, complete and accurate, and you must notify us of any changes to such personal information.

‍

2. How do we process your information?

  1. To facilitate account creation, authentication and user management - this means you can log in and keep your account in working order.
  2. If you request or make use of a specific service we offer, we may process your information if it’s necessary to deliver it to you.
  3. To request feedback from you about our Services.
  4. To send you marketing and promotional communications. This is in accordance with your marketing preferences, which you can agree to when signing up. You can opt in/out at any time by contacting us.
  5. We may process your information to keep our Services safe and secure, including fraud monitoring and prevention.
  6. To identify usage trends. We may process information about how you use our Services to better understand how we can improve them.
  7. To determine the effectiveness of marketing campaigns.
  8. To save or protect an individual’s vital interest, for example to prevent harm.

‍

3. What legal bases do we rely on to process your information?

We may rely on the following legal bases, according to GDPR, to process your personal information:

  1. Consent (Guests and Members). If you give us permission to use your information for a specific purpose, such as email marketing and push notifications, we may do that. You can withdraw consent at any time in App or by contacting us. 
  2. Legitimate interests (Guests and Members). If we believe it reasonably necessary to achieve our legitimate business interests, but that do not outweigh your interests and fundamental rights and freedoms, we may process your information to:some text
    1. Send information about special offers, discounts and promotions on our Services
    2. Analyze how our Services are used so we can improve them
    3. Support our marketing activities
    4. Diagnose problems and/or prevent fraudulent activities
  3. Performance of a Contract (Members). If we believe it necessary to fulfill our obligations to you (as a Member, for example managing your membership and payments) to provide our Services.
  4. Legal obligations (Members). If we need to process your information for any legal obligations, we will do so.

‍

4. When and with whom do we share your personal information?

  1. Business transfers. We may share or transfer information in connection with, during negotiations of, any merger, sale of company assets, financing or acquisition of all or a portion of our business.
  2. When we use Google Maps Platform APIs. We use these services to provide you with location specific features. You can revoke your consent by contacting us.

‍

5. Do we use cookies and other tracking technologies?

We do not currently use any cookies or tracking technologies as part of our Services.

‍

6. How long do we keep your information?

Guests have a non-personal, temporary account, in which we store a randomly generated ID and a creation date. We keep this information for as long as necessary to fulfill the purposes outlined in this privacy policy unless otherwise required by law.

‍

Members have a personal account, in which we store personal information that you provide such as name, email address and password when you register. We also create a customer account in Stripe, which we use to manage your membership subscription including the payment information you provide. After 12 months of an inactive subscription, no payments being made, we will delete your Stripe customer account. We will keep associated bills, invoices and receipts for as long as required by tax and accounting laws.

‍

You are always welcome to request your account and personal information to be deleted by contacting contact@dropbycollective.dk.

‍

7. How do we keep your information safe?

We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate and reasonable measures. You should only access the Services within a secure environment.

‍

8. Do we collect information from minors?

Our Terms of service does not permit anyone under the age of 18 to use our Services. If we learn that anyone under 18 is using our Services, we will deactivate and delete associated information.

‍

9. What are your privacy rights?

You have certain rights under applicable data protection laws, which may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure; (iii) to restrict the processing of your personal information; (iv) if applicable, to data portability; and (v) not to be subject to automated decision-making. In certain circumstances, you may also have the right to object to the processing of your personal information. You can make such a request by contacting us by using the contact details provided in this Privacy policy below.

‍

If you believe we are unlawfully processing your personal information, you also have the right to complain to Datatilsynet.

‍

Withdrawing your consent: If we are relying on your consent, then you have the right to withdraw your consent at any time. Contact us with the details provided in this Privacy policy below.

This will not affect the lawfulness of the processing before its withdrawal, nor will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

‍

Opting out of marketing and promotional communications: You can unsubscribe from our marketing and promotional communications at any time by clicking on the unsubscribe link in the emails that we send, Change your notification settings in app, or by contacting us using the details provided below. You will then be removed from the marketing lists. However, we may still communicate with you — for example, to send you service-related messages that are necessary for the administration and use of your account, to respond to service requests, or for other non-marketing purposes.

‍

Account information: You can review or change the information in your account, or terminate it, at any time by logging into your account settings in the app, or by contacting us.

Upon your request, we can delete your account and associated information. Please understand that we may retain some information to prevent fraud, troubleshoot problems and assist with any legal terms.

‍

10. Do we update this notice?

Yes, we will update the notice to keep it accurate and to stay compliant with relevant laws. You can tell when it’s updated by the “revised date” at the top of the document. We may also notify you by contacting you in some way.

‍

11. How can you contact us about this notice or for requests?

If you have questions, comments or need to make a request regarding your personal information, you can contact us by:

‍