Privacy policy

Privacy Policy

This privacy policy describes how KARSERIEK LLC (doing business as "Opditch", registered office: 728 Rosetree Ln, Seaford, DE 19973, USA) — hereinafter referred to as "we", "us", or "our" — collects, processes, and protects your personal data as the data controller when you visit our website opditch.com or shop with us.

1. Information We Collect

Contact information: name, email address, phone number, delivery address
Order information: order history, encrypted payment information
Device information: IP address, browser type, operating system
Usage data: pages visited, click behavior, referring URLs
Cookies (see section 4)

2. Purposes of Processing

Processing and delivery of orders
Customer communication and support
Fraud prevention and security
Improving our website and services
Marketing communications (only with your express consent)

3. Disclosure to Third Parties

Information is shared only with the following categories of recipients, to the extent necessary to fulfill the contract:

Payment providers: Stripe, PayPal, Apple Pay, Google Pay, Shop Pay
Shipping partners: PostNord, GLS, DHL, USPS, UPS, Royal Mail, and other cooperating courier services
Hosting services: Shopify Inc. (platform and data storage)
Analytics services: Google Analytics (anonymized, IP anonymization active)

All third parties are contractually obligated to comply with applicable data protection legislation.

4. Cookies and Consent

We use cookies. On your first visit to our website, a cookie banner (provided by Pandectes GDPR Compliance) is displayed, allowing you to give or refuse consent per category. You can adjust or withdraw your consent at any time via the "Cookie Settings" link in the footer.

We use cookies in the following four categories:

Strictly necessary cookies: Required for proper store operation (shopping cart, session, security). These cookies cannot be disabled — no consent is required.
Functional cookies: Enable enhanced functionality and personalization (e.g., saved language preferences). Only with your consent.
Performance cookies: Anonymous usage statistics to improve our website (e.g., Google Analytics with active IP anonymization, Microsoft Clarity). Only with your consent.
Targeting cookies: Set by advertising partners to display personalized ads on other websites. Only with your consent.

Your consent choice is stored for 365 days. A detailed cookie overview listing all cookies and their purposes can be found in our cookie policy.

5. Data Retention

We retain personal data in accordance with applicable legislation and delete it once the purpose has been fulfilled. Specific retention periods:

Order and transaction data (accounting records): 5 years from the end of the financial year in which the transaction took place, pursuant to the Danish Bookkeeping Act.
Account data: For as long as the account is active, and thereafter for 2 years after the date of your last activity, after which the data is deleted.
Analytics data (e.g., Google Analytics): A maximum of 26 months, in accordance with the Danish Data Protection Agency's guidance on web analytics.
Marketing consent/email: Retained until you withdraw your consent. You can unsubscribe at any time via the link in our emails or by contacting us directly.

6. Your Rights Under the GDPR (EU 2016/679)

Under the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679), you have the following rights:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure ("right to be forgotten", Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)
Right to withdraw consent you have given (Art. 7(3) GDPR)
Right to lodge a complaint with a data protection authority (Art. 77 GDPR)

Legal bases for processing (Art. 6 GDPR):

Art. 6(1)(b) – Performance of a contract (order processing)
Art. 6(1)(f) – Legitimate interest (fraud prevention, security)
Art. 6(1)(a) – Consent (marketing cookies, promotional emails)

International data transfers: For transfers of personal data to the USA (e.g., Shopify, Google Analytics), we rely on the European Commission's approved Standard Contractual Clauses (SCCs, Art. 46 GDPR) as well as the EU-U.S. Data Privacy Framework.

Competent supervisory authority (Denmark): Datatilsynet (the Danish Data Protection Agency), Carl Jacobsens Vej 35, 2500 Valby — datatilsynet.dk

Additional Rights for Customers in the USA

If you are a resident of the USA, you may have additional rights under applicable state data protection laws (e.g., the California Consumer Privacy Act / CPRA and similar laws in other states), including the right to access, correct, and delete your personal information, as well as the right to opt out of the "sale" or "sharing" of personal information. We do not sell your personal information. You can manage your choices on the Your Privacy Choices page or contact us at kontakt@opditch.com. We do not discriminate against customers who exercise their privacy rights.

7. Data Security

Our website uses SSL/TLS encryption for all data transfers (HTTPS protocol). We conduct regular security reviews and apply industry-standard safeguards.

8. Contact Regarding Data Protection

To exercise your rights or if you have questions about data protection, please contact:

Email: kontakt@opditch.com
Phone: +44 7735 301328
Mail: KARSERIEK LLC (Opditch), 33 Lychgate Lane, Broxburn, EH52 5NQ, United Kingdom
Business hours: Mon–Fri 09:00–17:30 | Sat–Sun 10:00–15:00 (CET/GMT+1)

We respond to your inquiries within 30 days.