Privacy policy

We protect your privacy – your information is in safe hands with us.

At Onyx Cookware, we greatly value your trust. When you shop with us, subscribe to our newsletter or contact our customer service, you share personal information with us.

We treat this information confidentially and in accordance with applicable data protection legislation. We collect only the information necessary to deliver our products and services to you, improve your experience and fulfil our legal obligations.

For more information about how we process your personal data and what rights you have, you can read our full privacy policy below.

This is version 11, last updated on 2.9.2026 09:30.

1. Introduction

1.1 This privacy policy (the “Policy”) describes how Onyx Cookware ApS (“us”, “we” or “our”), in its role as data controller, collects and processes your personal data in connection with the purchase of services, membership, products or general use of our website.

1.2 The Policy has been formulated and made available to comply with the General Data Protection Regulation (2016/679 of 27. April 2016) (“GDPR”) and its rules on the obligation to provide information.

2. Collection of information using cookies

2.1 When you visit our website, personal data collected using cookies will be processed. Information about this processing can be found here: Cookie policy

2.2 By accepting the use of Marketing and Statistics cookies, you also activate Klaviyo’s anonymous visitor activity backfill feature, which allows us to collect and store data about your behaviour on the site – even before you are identified as a user.

When you later subscribe to our newsletter or click a link in an email from us, Klaviyo will automatically match your previous visits and actions with your profile. This means that we gain a more complete picture of your journey with us and can offer you more relevant and personalised recommendations and reminders – for example, if you have viewed a product without purchasing it.

All data is stored locally in your browser and is only transferred to Klaviyo when you are identified. We use this feature neither to identify you prematurely nor to collect sensitive information.

You can opt out of Marketing and Statistics cookies at any time via our cookie policy.

3. Types of personal data processed

3.1 We process personal data about you when this is relevant and in accordance with applicable legislation. Depending on the specific circumstances, the personal data processed may include the following types of personal data:

• a) Name
• b) Address
• c) Telephone number
• d) Email
• e) Purchase history
• f) Invoicing and bookkeeping documents
• g) Customer number
• h) IP address
• i) Publicly available and relevant information from social media
• j) Shipment tracking information (for example, tracking number)

3.2 We also collect and process the following ordinary personal data:

Online identifiers, such as cookie IDs and similar technologies that can be used to recognise or identify a user across sessions and platforms.

Segmentation data, including information such as geographical location, time zone, city, region, customer ID and any customer tags.

User behaviour data, including click behaviour, page views, page views and session information.

3.3 If we need to collect and process personal data beyond that specified above, we will provide information about this at the time of collection. Such information may also be provided by updating this Policy.

4. Purposes of processing personal data

4.1 We only process your personal data if we have a legitimate purpose, and in that case in accordance with the rules of the GDPR. Depending on the circumstances, personal data may be processed for the following purposes:

• a) To deliver or offer services or products to users, customers or members.
• b) To retain personal data to the extent required by applicable legislation, for example, the retention of accounting and bookkeeping documents.
• c) To improve our products, services or website.
• d) To send direct marketing to users, customers or members (such as emails, MMS, direct messages on social media, etc.).
• e) To send newsletters by email.
• f) To provide support and service notifications, including answering questions or complaints and sending updates about our products and services.
• g) To profile users, customers or members by analysing and predicting their preferences and/or behaviour.

5. Legal basis for processing personal data

5.1 We only process your personal data when we have a lawful basis for processing in accordance with the GDPR. Depending on the specific circumstances, personal data is processed on the following legal bases:

• a) The processing is necessary for the performance of a contract with the data subject, cf. GDPR, Article 6, paragraph 1, point b, first part.
• b) The processing is necessary for the pursuit of a legitimate interest that is not overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, cf. GDPR, Article 6, paragraph 1, point f.
• c) The processing is necessary in order to take steps at the request of the data subject prior to entering into a contract, cf. GDPR, Article 6, paragraph 1, point b, last part.
• d) The basis for processing the specific personal data is your consent, cf. GDPR, Article 6, paragraph 1, point a. You may withdraw your consent at any time by contacting us using the contact details provided at the bottom of this Policy. If you withdraw your consent, the personal data processed on the basis of that consent will be deleted, unless it may or must be processed, for example, to comply with a legal obligation.
• e) The processing is necessary to comply with applicable legislation, cf. GDPR, Article 6, paragraph 1, point c.

5.2 If we send you direct marketing, including by email, we will request your prior consent in accordance with the applicable rules of the Marketing Practices Act.

6. Disclosure and transfer of personal data

6.1 We only disclose personal data to others when permitted or required by law, including where relevant and upon any specific request from you and/or the data controller.

6.2 We disclose personal data to the following recipients from the EU/EEA:

• a) Data processors
• b) Suppliers

6.3 We generally use various external and professional organisations as suppliers and partners to deliver or assist us in delivering our services and products. The external organisations will not receive or process personal data unless the law permits its transfer and processing. If the external organisations or partners act as data processors for us, their processing of personal data always takes place under a data processing agreement that meets the legal requirements for this. If the external organisations or partners are independent data controllers, their processing of personal data takes place in accordance with their own privacy, data protection or personal data policy, to which the external organisations will draw attention, unless otherwise prescribed by law.

6.4 We transfer personal data to countries or international organisations outside the EU/EEA. We transfer personal data to the following countries on the basis of adequacy decisions by the European Commission: USA (DPF-certified recipient). The country thus generally ensures an adequate level of data protection through legislation and/or other measures.

6.5 We can be contacted for more information, including with questions about our use of data processors, cooperation with other data controllers, including subsidiaries, or disclosure of personal data to third countries, and to receive a copy of documentation of the basis for transfer.

7. Deletion and retention of personal data

7.1 We ensure that personal data is deleted when it is no longer relevant to our processing purposes as described above. We always retain personal data for the period required by applicable legislation, including for documenting compliance with, among other things, the provisions of the Bookkeeping Act. If you have questions about the retention and processing of personal data, you are welcome to contact us at the email address found in the last section of this Policy.

8. Your rights

8.1 As a data subject, you have a number of rights:

• 8.1.1 You have the right to request access to the personal data we process about you, the purpose of the processing and whether we disclose the personal data to others.

• 8.1.2 You have the right to have inaccurate personal data about you rectified.

• 8.1.3 In certain cases, you have the right to have certain personal data about you deleted.

• 8.1.4 In certain cases, you have the right to have the processing of your personal data restricted so that we only store your personal data for a given period.

• 8.1.5 In certain cases, you have the right to object to our processing of your personal data on grounds and circumstances relating to your particular situation. An objection may be based on the processing of personal data for direct marketing purposes.

• 8.1.6 You have the right not to be subject to an automated decision without human intervention, unless the decision is necessary for your employment with us, or the making of the decision is authorised by law or your explicit consent.

• 8.1.7 If we have obtained your consent for part of our processing of your personal data, you have the right to withdraw your consent at any time. If you choose to withdraw your consent, this does not affect the lawfulness of processing based on consent before its withdrawal.

• 8.1.8 In certain cases, you have the right to so-called data portability of the personal data you have provided to us.

• 8.1.9 You may always lodge a complaint with the Danish Data Protection Agency.

8.2 These rights may be subject to conditions or restrictions. It is therefore not certain that, for example, you have the right to data portability in a specific case – this depends on the specific circumstances of the processing activities.

8.3 You can find more information about your rights as a data subject on the Danish Data Protection Agency’s website.

8.4 Please use the contact details below if you wish to exercise your rights.

8.5 We endeavour to meet your wishes regarding our processing of personal data, but you may always submit a complaint to the Danish Data Protection Agency.

9. Changes to this policy

9.1 We reserve the right to update and amend this Policy. If we amend the Policy, we will change the date and version at the top of the document. In the event of significant changes, we will announce this by means of a visible notice in our email or by using other means of communication.

10. Contact information

10.1 You are welcome to contact us at the contact email provided below if you:

• a) disagree with our processing or believe that our processing of your personal data violates the law
• b) have questions or any other comments about this Policy, or
• c) wish to exercise one or more of your rights as a data subject.

For questions or comments about this policy, or to exercise one or more rights, we can be contacted at GDPR@raasdal.com.