Updated July 3rd, 2020
We only collect personal data in cases where this should be relevant to us, and we will only collect personal data if it is relevant to your activity at Munk Productions. When collecting, processing and using your personal data, we always comply with all relevant legal provisions, in the EU: GDPR and the EU VAT Directive. We will only retain your personal data as long as we are either legally required to do so or as long as it is relevant to the purpose for which they were collected.
Who we are
Munk Productions is owned and operated by Christian Munk with intermediate freelance assistants. Our website is https://www.munkprod.dk.
Carl Langes Vej 70
Tel.: +45 5132 7939
We produce audio in a number of areas such as music, podcasts, promotions, Ambisonic ambiences, radio, and more.
Information we collect and why
If you want to buy and receive a downloadable product from our shop, we need to collect certain personal data in order to complete the transaction and to offer you our services.
Munk Productions collects and processes your personal data when you do the following:
- Log in or attempt to log in to our website
- Complete a purchase of our products
- Create an account
- Sign up for our newsletter
- Send us questions, complaints or feedback
When logging in to our website, we collect the following information: Username, IP address. Purpose: Username to identify your account, IP address to monitor for unauthorised log in attempts and help secure the site
When creating an account, we collect the following information: Username, name, email address. Purpose: To identify you and your account and be able to send you purchase receipts and download links
When purchasing a product, we collect the following information: Name, email address, postal address, IP address, payment information (credit card number, name on card, expiry date, CVC), VAT amount & rate. Purpose: Name and addresses and payment information: To complete payment with Stripe. IP address and VAT information to comply with EU VAT Directive
When signing up for our newsletter, we collect the following information: Email address, name (optional). Purpose: To be able to send our newsletter to your email address; name is optional and just for personalisation.
When contacting us via our contact form, we collect the following information: Name (optional), email address, your message. Purpose: To read your message and be able to send you a reply. Name is optional and just for personalisation.
You can read more about how we protect your data below.
In addition to personal data, we use Koko Analytics and Google Analytics to collect non-personal information on how many unique visitors have visited our site, which pages have been viewed, and which actions have been taken. As stated, this information is not personal – it is anonymous (IP address is anonymised) and cannot be linked to any one individual. The purpose for this is to evaluate site usage with the aim of improving or optimising it, and for marketing purposes.
How long we keep your data: Retention time
Under normal circumstances, we keep the information collected for as long as it’s reasonable we may need it in our communication with you, or by the laws governing the EU and/or Denmark. These are the specific retention times:
- Log in attempt data: 90 days
- Contact form data: 90 days
- Emails: 90 days
- Purchase data: 10 years (as mandated by EU VAT Directive)
- Account data: As long as you keep your account at www.munkprod.dk – but we monitor for dormant accounts and ask you to verify it after 2 years of inactivity
- Newsletter data: Until you unsubscribe
- Anonymous site usage data: 5 years
As you can read below, you may request to have your personal data erased – which at the same time deletes your account (if you have one), product access, and newsletter access.
How we protect your data: Security
Your data, along with the rest of the site’s data, is kept in an encrypted database on One.com’s servers.
To ensure that your data is kept safe, we have implemented a number of security measures:
- SiteLock: The website’s code and it’s database is monitored by SiteLock. This is to detect attempts to hack into the site and change its code, install malicious software or in any other way compromise site integrity and security. SiteLock knows about a large number of attacks and can recognise them, if any unauthorised attempt is made at installing them.
- The database is encrypted and strong password protected.
- We have activated daily, protected backup at One.com to ensure against loss of data.
- Only HTTPS access with a secure connection between browser and server is possible when visiting the site.
- Log in to the site is limited to 4 attempts in 12 hours, and repeated, failed attempts are monitored.
- Users are forced to use strong passwords to sign up for an account – and passwords on the “bad passwords list” are not allowed.
- Improved user password encryption is in effect.
- Plus a number of further protections against common site attack methods are activated.
- Access to site code base is only possible with a secure, strong password protected connection.
- Our office and studio computers are encrypted and strong password protected.
- All computers used to access site data are protected by anti-virus and anti-malware systems
- Any accounting data are encrypted
- Company computer backups are encrypted
The data controller
The data controller for the collection, processing and use of your personal data on www.munkprod.dk is Munk Productions, Carl Langes Vej 70, 2500 Valby, Denmark, CVR no DK14261400
Basis of treatment and purpose – and overview of what & why
We collect your regular contact information such as name and address in order to deliver the product or service you have purchased from us. We collect your e-mail address in order to send you an order confirmation.
When you pay for your product or service, we collect your name, card data and IP address. The information collected in connection with the payment transaction is used and stored only for payment settlement and fulfilment of the contract entered into. When making payments, some of your data will be transferred to Stripe or PayPal, including information necessary to complete or support the payment, such as the total purchase amount and billing information.
If you have given us your consent to this during the registration process or on our website, we will use your e-mail address to send a newsletter. You can subscribe and unsubscribe at any time. All newsletters, and the signup forms on this website, also include a link to unsubscribe. If processing of personal data is based on your consent, you have the right to revoke the consent at any time.
If you do not wish to provide the personal data required to complete a purchase of a product, you will unfortunately not be able to purchase products from us on our website.
Your information (except your email address, if you have consented to its processing for the purpose of receiving offers) will be deleted 10 years after you receive your item or service. This is the mandatory retention time set forth by EU VAT regulations. You may request erasure of personal data beforehand, see the “Your rights” section below.
Other recipients of personal data
We do not sell your personal data to third parties.
We have our website at One.com, the payment systems through Stripe and PayPal, our newsletter service via MailChimp, and our site analytics via Google. They act as our data processors. These data processors are based in a third country, namely the United States. The relevant, collected data are therefore transferred to the US – and our data processors are compliant with, among others, the GDPR, see below.
All personal data that you provide on our website, except credit card information, will be stored in One.com data centers. In addition, our data processors store the following information:
Stripe: Name, email address, postal address, credit card data, IP address
PayPal: Name, email address, postal address, IP address
MailChimp: Name (if given), email address
Google: IP address (which is immediately anonymised when arriving at Google, before any storage takes place)
We use these external companies as suppliers to deliver our services in the best possible way. Our data processors only process personal data according to our instructions and in accordance with the data processing requirements of the GDPR, as well as the Data Processing Agreement we have entered into with each.
The Data Processing Agreements with our data processors are our guarantee that they comply with applicable rules regarding the protection of your personal data, including, but not limited to, the rules of the GDPR.
As the registered person, you have a number of rights that we must ensure at all times. You have the right to request the following:
- To access and correct / change your personal data
- To receive a copy of your personal data
- To erase personal data (and hence delete your account)
These procedures are available directly on this website from the Your Account page when you are logged in. Otherwise, if for example you haven’t created an account, you may use the contact form on the Contact page to send a request, or use the email address listed below with the subject line “Personal data erasure request”.
If you wish to request erasure of your personal data or delete your account, and you send us your request via one of the above mentioned methods, Munk Productions will remove your personal data from our records including our mailing list (you will be unsubscribed and deleted at MailChimp), as well as requesting erasure of your personal data at Stripe. We cannot process PayPal related personal data, as these are a matter between you and PayPal, with whom you have entered into an agreement. Please contact PayPal yourself, if you wish to erase personal information from them. Note that this procedure will effectively delete your account along with download access and newsletter access.
About account deletion
If you have your account deleted, it’s gone – it cannot be accessed or revived, and all data linking you to the actions taken (purchases etc.) and anonymous purchase data remaining, are removed. Technically, in our system, the legally required, anonymous purchase data (if any) remain. You are permanently disconnected in every way from the account, it is dead, and no-one can ever log into it again.
In addition to the above, you have the right to protest the processing of your personal data and you have the right to file a complaint with a data protection authority.
Our email address, to which you can send your request, is: firstname.lastname@example.org.