Purpose and Legal Basis for Processing Personal Data

Our processing of personal data is always based on a lawful basis. We may process your personal data on the following grounds:

• Your explicit and specific consent.
• Performance of a contract to which you are a party, or steps taken at your request before entering into a contract.
• Compliance with a legal obligation (e.g., processing and storing transaction data).
• Legitimate interests pursued by Dansk Arkitektur Center, such as improving products and services, targeted marketing, communications, press activities, and managing business relationships.

We use your personal data to provide the best possible experience on www.dac.dk and in our app.

Examples of processing:

• Your basic information (name, address, phone, email) is used to process and deliver orders. Only your name and address are shared with carriers for physical delivery.
• When making a purchase, your card details are processed by our payment provider (Adyen) and ticketing partner (Veevart). We never store full card details; if you save a card, we store only the last four digits.
• Purchase history, product composition, and delivery information help us identify preferences and recommend relevant products, services, and messages.
• We may collect technical information (e.g., device type, IP address, location, and page clicks) and, with your consent, process additional details (e.g., name, contact details, payment information).
• Your order history and enquiries are stored securely in the EU, accessible only to trusted employees.
• Your email, postal code, and behavioural data may be stored in Google Cloud (EU) for aggregated analysis and personalised recommendations.
• Behaviour on www.dac.dk and in the app is analysed via Google Analytics. Logged-in user events are linked to your customer ID, but Google cannot identify you personally.
• We use third-party processors only within the EU or in countries offering adequate data protection.
• We may process anonymised data for advertising, market analysis, or fraud prevention.
• If you have consented to receive marketing or newsletters, we use your email for relevant updates approximately every three weeks. You may withdraw consent at any time via the unsubscribe link.

Image processing:

• Always in accordance with applicable data protection laws.
• Prior consent is obtained when required.
• Situational images from public events may be used under legitimate interest if they do not portray or infringe upon individuals.
• Professional images may be covered by contracts with photographers or agencies.