Privacy Policy

This Privacy Policy describes how Bil & Mand, trading under the brand jopoc, handles personal data when you visit our online store, place an order, contact us or otherwise use our products and services.

We process personal data in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, or “GDPR”), the Danish Data Protection Act and other applicable privacy and electronic-communications legislation in Denmark, Germany and the European Union or European Economic Area.

Please review this Policy before using our website or submitting personal information to us.

1. Business and Data Controller Details

Business name and data controller:
Bil & Mand

Brand:
jopoc

CVR number:
17550543

Owner:
Brian Nielsen

Registered address:
Søndergade 43, 2.
4900 Nakskov
Denmark

Business activity:
Automotive repair

Email:
philipjicinrdrsei@gmail.com

Bil & Mand is responsible for deciding why and how personal data is processed in connection with https://www.jopoc.shop/.

2. Who and What This Policy Covers

This Policy applies whenever you:

• Browse or use the jopoc website

• Register or manage a customer account

• Place, pay for, track or manage an order

• Choose Cash on Delivery, where offered

• Contact customer service

• Submit a complaint or request a return, exchange or refund

• Subscribe to promotional messages

• Take part in a survey, campaign or promotion

• Post a rating, review, image, comment or other content

• Interact with any other feature, product or service we provide

The website, online shop, products, support channels and related functions are referred to collectively as the “Services.”

3. Personal Data We May Collect

The information collected depends on how you interact with the Services and may include the categories below.

3.1 Identification and Contact Details

We may collect your name, customer or account identifier, billing and delivery addresses, postal code, city, country, email address, telephone number and communication preferences. Where required by law, we may also request age, date of birth or suitable identity-verification information.

We do not normally ask for identification details that are unnecessary to fulfil an order or provide a requested service.

3.2 Account Details

If customer accounts are available, we may process your login email, encrypted password, account name, saved addresses, settings, preferences and purchase history.

Passwords are protected using appropriate security measures and should not be available in readable form to unauthorized persons.

3.3 Orders and Transactions

We may process details such as:

• Ordered products, quantities and specifications

• Order and transaction numbers

• Prices, discounts and promotional codes

• Billing information

• Delivery, fulfilment and tracking status

• Cash on Delivery status, where relevant

• Payment confirmation

• Returns, exchanges and refunds

• Messages relating to a transaction

3.4 Payment Details

Depending on the payment option selected, we may receive the payment method, status, card type, masked card information, billing details, transaction identifiers and fraud-prevention or verification results.

Full card details are generally collected directly by an authorized payment provider. When a provider processes those details independently, Bil & Mand neither needs nor intends to store the complete card number.

3.5 Customer-Service Records

When you contact us, we may retain your contact details, order number, product information, messages, complaint details, return or refund reason, supporting photographs or videos and records of our response.

Questions about orders, returns and refunds should normally be submitted online or by email.

3.6 Device and Website-Use Data

When you access the website, certain technical information may be recorded automatically. This can include:

• IP address and approximate location derived from it

• Browser, language, operating system and device type

• Device or cookie identifiers

• Pages visited, links clicked and navigation activity

• Referring page, access time and session duration

• Network, security, error and performance data

3.7 Marketing, Preferences and Submitted Content

We may process product interests, language and communication preferences, previous purchases or viewed products, advertising interactions, campaign participation, survey answers and customer-satisfaction information.

We may also receive content you choose to submit, such as questions, reviews, ratings, comments, photographs and videos. Please do not include sensitive or irrelevant personal information in public reviews or support requests.

4. How We Obtain Personal Data

We receive information:

• Directly from you when you complete a form, create an account, place an order, provide delivery or payment details, contact us, submit a request, join a promotion or post content

• Automatically through cookies, server logs, analytics tools, local or session storage, device identifiers and security technologies

• From providers that help us operate the Services, including payment companies, banks, couriers, fulfilment partners, hosting and cloud providers, fraud-prevention services, analytics and advertising platforms, support systems, email providers and IT-security suppliers

Where the law requires consent, non-essential cookies and comparable tracking tools will not be activated before valid consent is provided.

5. Why We Use Personal Data

We may use personal data to:

• Operate, maintain and secure the jopoc website

• Create and administer accounts

• Receive, verify, process and fulfil orders

• Process or confirm payments and Cash on Delivery orders

• Arrange shipping and provide tracking updates

• Communicate about an order or requested service

• Answer questions and resolve complaints

• Manage cancellations, returns, exchanges and refunds

• Detect and prevent fraud, abuse and unauthorized transactions

• Maintain accounting, tax and transaction records

• Improve products, website performance and customer support

• Analyse how the Services are used

• Remember settings and personalize relevant content

• Conduct surveys and develop new products or services

• Send operational messages

• Send marketing and measure campaigns where legally allowed

• Administer promotions

• Apply our contractual terms

• Meet legal, regulatory, tax and product-safety obligations

• Establish, exercise or defend legal claims

• Protect Bil & Mand, its customers and other persons

We will not use personal data for an incompatible new purpose unless the processing is permitted by law.

6. Legal Grounds for Processing

Under the GDPR, each processing activity must have a valid legal basis. Depending on the circumstances, we rely on:

6.1 Contract

Processing is necessary to take requested steps before a purchase or to perform our contract with you. This covers activities such as managing accounts, accepting orders, collecting payment, delivering products, providing order support and handling returns or refunds.

Without the required information, we may be unable to complete an order, deliver a product or respond properly to a request.

6.2 Legal Obligation

We process information when required by applicable accounting, bookkeeping, tax, consumer-protection, product-safety, fraud-prevention or other laws, as well as valid court, government or regulatory demands.

6.3 Legitimate Interests

We may use information where reasonably necessary for legitimate interests such as protecting the website and customer accounts, preventing fraud, operating and improving the business, analysing performance, answering enquiries, keeping appropriate records and protecting or defending legal rights.

Before relying on this ground, we consider the impact on your interests, rights and freedoms.

6.4 Consent

We request consent where necessary, including for certain marketing messages, non-essential cookies, advertising technologies or optional uses of information.

You may withdraw consent at any time. Withdrawal does not make earlier processing unlawful.

In exceptional cases, we may rely on another basis allowed by law, including the protection of a person’s vital interests.

7. Sharing Personal Data

We disclose personal data only when reasonably required to provide the Services, protect legitimate interests or comply with the law. Recipients may include:

• Payment processors, banks, card issuers and payment networks

• Couriers, postal operators, warehouses and fulfilment partners

• Website hosts, cloud providers and IT or security suppliers

• Customer-support and email-service platforms

• Analytics, advertising and fraud-prevention providers

• Accountants, lawyers, tax advisers, insurers and other professional advisers

• Courts, law-enforcement bodies, public authorities, regulators and data-protection authorities

Information may also be shared with your permission, during a merger, restructuring, acquisition or asset transfer, or where necessary to investigate fraud, protect safety or pursue a legal claim.

Service providers are expected to use personal data only for authorized purposes and in line with applicable confidentiality, security, contractual and legal requirements.

We do not sell customer personal data to third-party advertisers.

8. Shipping and Delivery

To fulfil an order, we may provide a courier or logistics partner with the recipient’s name, address, postal code, city, country, telephone number, email address, order reference, parcel details, delivery instructions and any applicable Cash on Delivery amount.

The delivery provider may contact you to confirm details, schedule or update delivery, collect a Cash on Delivery payment, resolve a failed attempt or verify the recipient where required. A provider may also process information under its own privacy policy and legal responsibilities.

9. Payments

Online payments may be handled by independent payment providers in accordance with their own privacy notices, security standards and legal duties. You should review the relevant provider’s information before completing payment.

For Cash on Delivery orders, necessary payment and order details may be supplied to the courier collecting the amount.

Where a payment provider processes full card information directly, Bil & Mand does not require access to those complete details.

10. Cookies and Related Technologies

We may use cookies and similar technologies to:

• Enable essential website, cart, login and checkout features

• Remember language, country and other selections

• Maintain security and identify suspicious activity

• Understand traffic and improve site performance

• Personalize content

• Support advertising and evaluate campaigns

Cookies may be strictly necessary, functional, analytical or advertising-related. Essential cookies may be used without consent where needed to deliver a service you specifically request. Other cookies are used only after consent where required.

You can manage available choices through the website’s consent tool, browser settings, device settings or relevant opt-out mechanisms. Blocking essential cookies can prevent login, checkout, payment, saved settings or security functions from operating correctly.

Consent choices may be changed or withdrawn at any time through the available settings.

11. Marketing Messages

We send promotional emails or similar communications only when valid consent exists or another applicable rule permits them. Messages may relate to products, offers, discounts, surveys, campaigns, new services or, where lawful, an abandoned cart.

You can unsubscribe through the link in a marketing email, update available account or consent settings, or write to philipjicinrdrsei@gmail.com. Objections to direct marketing will be processed without unnecessary delay.

Operational communications about orders, payments, security, delivery, accounts, returns or refunds are not advertising and may still be sent when necessary.

12. Transfers Outside the EU or EEA

Some providers may process data outside Denmark, Germany or the EU/EEA. When personal data is transferred internationally, we use safeguards required by applicable law.

Depending on the destination and provider, these may include a European Commission adequacy decision, approved Standard Contractual Clauses, Binding Corporate Rules, supplementary technical or organizational controls, encryption, pseudonymization or another lawful GDPR transfer mechanism.

You may contact us for more information about safeguards relevant to your data.

13. How Long We Keep Data

Personal data is kept only as long as needed for the relevant purpose or legal requirement. The appropriate period depends on factors such as:

• The customer relationship and account activity

• Order fulfilment, returns, refunds and warranties

• Accounting, bookkeeping and tax rules

• Fraud prevention and security

• Legal limitation periods and disputes

• Regulatory duties and legal claims

For example, account details may remain while an account is active; transaction records may be kept for statutory accounting and tax periods; support correspondence may remain until a matter is resolved and for a suitable period afterwards; and marketing data may be retained until consent is withdrawn, an objection is made or the information is no longer needed.

Cookie lifetimes are described in the relevant consent settings or cookie notice.

Once information is no longer required, it may be securely deleted, anonymized, aggregated, restricted or archived where the law still requires retention.

14. Data Security

We apply reasonable administrative, technical and organizational safeguards intended to prevent unauthorized access, loss, alteration, disclosure, destruction, misuse, fraud or other unlawful processing.

Measures may include access controls, authentication, password protection, secure servers, encrypted transmission where appropriate, payment-security controls, monitoring, backups, confidentiality duties, restricted staff or contractor access and supplier-security requirements.

Access should be limited to people who need the information for a legitimate business reason. However, no internet transmission, website or electronic-storage method can be guaranteed to be entirely secure, and customers should also take reasonable precautions online.

15. Personal Data Breaches

If a breach occurs, we will investigate its nature and likely consequences, take reasonable containment and remedial steps and document it as required.

Where applicable law requires it, we will notify the competent supervisory authority and inform affected individuals if the breach is likely to create a high risk to their rights and freedoms.

If you believe your information or account may have been compromised, email philipjicinrdrsei@gmail.com.

16. Your Responsibilities

Please provide accurate and current details, protect your password, avoid sharing login credentials, use secure devices and connections where possible, sign out on shared devices and notify us if you suspect unauthorized account use.

Delivery information must be complete and correct, and unnecessary sensitive information should not be included in messages or reviews.

Except where the law states otherwise, Bil & Mand is not responsible for issues caused by incorrect information supplied by a customer or a failure to safeguard account credentials.

17. Children and Minors

The Services are not specifically intended for children. A customer must have the legal capacity to enter into a purchase agreement under the law that applies to them.

A minor who cannot contract independently must obtain permission from a parent or legal guardian before using the Services, registering an account, placing an order, paying or submitting personal data.

If we learn that a minor’s data was provided without appropriate authorization, we may delete or restrict it as required. A parent or guardian may contact philipjicinrdrsei@gmail.com with concerns.

18. Your Data-Protection Rights

Subject to the GDPR, applicable national law and the circumstances of the processing, you may have the right to:

• Access: ask whether we process your data and obtain a copy

• Rectification: correct inaccurate or incomplete information

• Erasure: request deletion when the legal conditions are met

• Restriction: limit processing in circumstances provided by law

• Object: challenge processing based on legitimate interests

• Reject direct marketing: object to marketing-related processing at any time

• Data portability: receive eligible data in a structured, commonly used, machine-readable format and, where feasible, have it transferred to another controller

• Withdraw consent: cancel consent at any time for future processing

• Challenge certain automated decisions: request safeguards where a decision based solely on automated processing produces legal or similarly significant effects

• Complain: submit a complaint to a competent supervisory authority

Bil & Mand does not intend to make significant customer decisions solely through automated processing unless this is clearly disclosed and legally allowed.

Some rights are subject to exceptions. For example, we may need to retain information to complete a transaction, comply with tax or legal duties, prevent fraud, protect another person’s rights, resolve a dispute or establish or defend a legal claim.

19. Making a Privacy Request

To exercise a data-protection right, email:

philipjicinrdrsei@gmail.com

Please include your full name, the email used for the order or account, the relevant order number if available, a clear description of your request and enough information for us to locate the records.

We may ask for reasonable additional information to confirm your identity before disclosing, changing, transferring or deleting data.

We aim to respond without undue delay and generally within one month of receiving a valid request. If the law permits extra time because a request is complex or numerous, we will explain the extension.

A request may be restricted or refused where identity cannot reasonably be verified, another person’s rights would be harmed, retention is legally required, the request is manifestly unfounded or excessive, fraud-prevention work would be compromised, legal privilege applies or another lawful exception exists. A reasonable fee may be charged where the law allows it for manifestly unfounded, excessive or repetitive requests.

20. Complaints and Supervisory Authorities

We encourage you to contact Bil & Mand first so we can investigate your concern:

philipjicinrdrsei@gmail.com

You also have the right to complain to the supervisory authority in the EU or EEA country where you normally live, work or believe an infringement occurred.

Because Bil & Mand is established in Denmark, you may also contact:

The Danish Data Protection Agency (Datatilsynet)
Carl Jacobsens Vej 35
2500 Valby
Denmark

Telephone: +45 33 19 32 00
Email: dt@datatilsynet.dk

21. External Websites and Services

Our website may link to payment services, social networks or other independent third-party websites. Their handling of personal data is governed by their own policies, not this one.

Please review a third party’s privacy and cookie notices before supplying information. Bil & Mand is not responsible for an independent provider’s content, privacy or security practices except where liability cannot lawfully be excluded.

22. Updates to This Policy

We may revise this Policy to reflect changes in law, regulatory guidance, our Services, business operations, providers, payment or delivery systems, security practices or the categories of data processed.

The current version will be published at https://www.jopoc.shop/. Significant changes may also be communicated through the website, account notices or email where appropriate.

If a new processing activity requires consent, it will not begin until valid consent has been obtained. Continued use of the Services after an update does not remove any rights granted by applicable data-protection law.

23. Contact Details

For questions about this Privacy Policy or the way personal data is handled, contact:

Bil & Mand
Brand: jopoc
CVR number: 17550543
Owner: Brian Nielsen
Søndergade 43, 2.
4900 Nakskov
Denmark
Business activity: Automotive repair
Email: philipjicinrdrsei@gmail.com