Flying Tiger Copenhagen
Privacy Notice

Last modified: September 4, 2024

Introduction

Welcome to Flying Tiger Copenhagen universe! At Flying Tiger Copenhagen, we want to make you smile when using our products and gifting them to somebody you care about. Making people feel good is deeply engrained in our values. These values are extended to how we process data about people, data about you.

This privacy notice is for visitors and consumers located in the EU/EEA. It explains how we collect, use, and protect your personal data in accordance with the EU General Data Protection Regulation (EU) 2016/679 (‘GDPR’) when you visit our Online Store www.flyingtiger.com (“the Online Store”), use our Flying Tiger Copenhagen Club, services, or shop in our physical stores across the EU/EEA. If you are a resident of the UK, please click on the tab "UK" in the top bar.

 

1. Who is responsible for your personal data?

When we say “Zebra”, “we”, “our”, “us”, etc., we are referring to our company Zebra A/S. Zebra is a variety store chain headquartered in Copenhagen, Denmark, with locations around the world. Flying Tiger Copenhagen is a brand owned by Zebra. Zebra also owns Digital Flying Tiger A/S, which is an affiliate that delivers digital services, so that you can shop with our Online Store, get your orders delivered, receive customer support and enjoy our Flying Tiger Copenhagen Club app.

However, it is Zebra who is the Data Controller and who is responsible for ensuring that your personal data is processed in accordance with applicable data protection laws. Personal data is information that we process about you for various purposes, which you can see in detail in section 2.

Our address is:

Zebra A/S

Strandgade 71-73

1401 Copenhagen, Denmark

CVR no.: 15690488

 

We do not employ a Data Protection Officer (DPO). However, if you want to talk to us about your personal data or this notice, you can reach our Data Protection Lead at privacy@flyingtiger.com. Please provide your name and the country your inquiry relates to.

 

2. How do we process your personal data?

We collect personal data about you to be able to provide our products, offers and services to you, and to ensure that you have a fun shopping experience in the spirit of Flying Tiger Copenhagen. We obtain most of your personal data directly from you.

We process your personal data for your shopping convenience, to manage and fulfil your orders, assist you with inquiries and claims, and to meet our legal obligations and security standards.

We also collect personal data about you to improve our products and services, to optimize your experience on our website mobile app and in our stores, when you engage with us via our social media accounts, and when you choose to receive personalized offers and other communication from us.

We only process your personal data, when the processing is in line with one of the lawful bases that are defined by the GDPR. Most often the lawful basis for processing your personal data by us will be:

  • Consent (Article 6(1)(a) GDPR) = we process personal data when you consent to it;

  • Performance of contract (Article 6(1)(b) GDPR) = we have to process your personal data to fulfil our contract with you, for example when delivering purchased items to you;

  • Compliance with legal obligations (Article 6(1)(c) GDPR) = we process your personal data when we have legal obligations to do so;

  • Legitimate interest (Article 6(1)(f) GDPR) = we process your personal data when it supports our business operations without infringing on your own rights and interest.

  • Below, you can learn more about the various purposes for processing your personal data in different situations, the lawful basis for processing your information, how long we store the personal data and who we share it with.

  •  

2.1.  When you create a Flying Tiger Copenhagen Customer Account

In our Online Store, you have the option to create a Flying Tiger Copenhagen customer account with us. By setting up your customer profile, you'll enhance your experience in our Online Store, allowing you to easily manage and streamline various aspects of your account for a more efficient and personalized shopping experience.

To establish and manage your account, we ask certain information from you. Creating a customer account is optional and not necessary to purchase products on our Online Store.

Purpose Personal data Lawful basis Retention

Creating a Flying Tiger Copenhagen account

Name, email address, password, user ID

Legitimate interest in providing you with a Flying Tiger Copenhagen account for a convenient shopping experience.

After 3 years from the end of the fiscal year in which you last interacted with your account, or within 30 days after requesting account deletion.

Please note: If you have placed an order, we are obliged to keep your information longer (please see below).

Choosing to store additional details for your own convenience(optional)

Postal address, shipping address(es), country, phone number, preferred payment method. In some cases, names of receivers of your orders, including company names.

Consent

Until you delete the information from your account, or 3 years from the end of the fiscal year in which you last interacted with your account, or within 30 days after requesting account deletion.

Please note: If you have placed an order, we are obliged to keep your information longer (please see below).

 

2.2.  When you buy a product from our Online Store

When you purchase a product from our Online Store, we strive to make the process as smooth and secure as possible. To fulfill your order, we require certain personal information from you, so we can fulfill your order. This allows us to process your purchase, arrange delivery, and keep you informed about the status of your order.

It is not necessary to create an account with us for shopping in our Online Store. However, when you make a purchase from your Flying Tiger Copenhagen customer account, you have the option to complete your profile with additional details and store information for faster check-out.

Rest assured, we handle your data with care, ensuring a seamless and personalized shopping experience while protecting your privacy.

Purpose Personal data Lawful basis Retention

Purchasing as a guest

User ID, name, contact data, billing and delivery address, order ID and details, payment details, technical data

  • Performance of contract,

  • Legal obligation to comply with local financial laws

  • Legitimate interest to ensure accurate transactions, fraud prevention, as well as for analytical and statistical purposes

5 years from the end of the fiscal year in which the purchase was made.

Please note: In specific situations, we may defer from our general retention periods (in case of, e.g., complaints, objections, local and European legal and financial requirements, or the European VAT One Stop Shop agreement.).

If you would like more information, please reach out to us.

Purchasing with a Flying Tiger Copenhagen account

Account ID and account information, contact data, billing and delivery address, order ID and details, payment details, technical data

  • Performance of contract,

  • Legal obligation to comply with local financial laws

  • Legitimate interest to ensure accurate transactions, fraud prevention, as well as for analytical and statistical purposes

5 years from the end of the fiscal year in which the purchase was made.

Please note: In specific situations, we may defer from our general retention periods (in case of, e.g., complaints, objections, local and European legal and financial requirements, or the European VAT One Stop Shop agreement.).

If you would like more information, please reach out to us.

General order delivery process (logistics & warehousing)

Order ID and details, contact data, delivery address, shipping method, last-mile delivery choice.

Performance of contract and legitimate interest in relation to investigation of failed delivery

6 months from order date

 

2.3.  When you visit our physical stores

When you shop in our physical stores, we use your personal data to ensure a smooth, secure, and efficient process for handling your purchases, payments, claims, returns, and refunds.

In some of our markets, we offer the opportunity to pay with a Scan&Go app when visiting selected stores. When you shop in these stores using the Scan&Go app, we collect some information on you and your purchase from the app provider. Below, you can read more on how we process your personal data in this regard. If you have given your consent to our marketing activities in the app, please refer to section 2.5 on marketing activities to see how we process your personal data in this regard. The app provider is data controller for their own processing of your personal data.

Purpose Personal data Lawful basis Retention

Processing purchases, payment transactions, refunds, returns and claims. If available, sending digital receipts.

Transaction data. E-mail address (optional, if you choose to receive a digital receipt). Name and signature, (for claims and refunds).

  • Performance of contract,

  • Legal obligation to comply with local financial laws

  • Legitimate interest to ensure accurate transactions, fraud prevention, as well as for analytical and statistical purposes

5 years from the end of the fiscal year in which the purchase was made.

Please note: In specific situations, we may defer from our general retention periods (in case of, e.g., complaints, objections, local and European legal and financial requirements, or the European VAT One Stop Shop agreement.).

Local accounting and bookkeeping legislation retention periods deviate from 5-10 years, depending on country. If you would like more information, please reach out to us.

Scanning items in the physical store, paying and receiving digital receipts via the scan-and-go app or email

Transaction data and payment details. E-mail address (optional, if you choose to receive a digital receipt)

  • Performance of contract,

  • Legal obligation to comply with local financial laws

  • Legitimate interest to ensure accurate transactions, fraud prevention, as well as for analytical and statistical purposes

5 years from the end of the fiscal year in which the purchase was made.

Please note: In specific situations, we may defer from our general retention periods (in case of, e.g., complaints, objections, local and European legal and financial requirements, or the European VAT One Stop Shop agreement.).

Local accounting and bookkeeping legislation retention periods deviate from 5-10 years, depending on country. If you would like more information, please reach out to us.

 

2.4.  When you contact our Customer Service

When you contact us via our Customer Service form, social media channels, or by email, we collect personal data related to your query, so we can support you with your request.

We will process the personal data you provide to assist with your query, whether it's about your order, delivery, returns, technical support, your Flying Tiger Copenhagen Club membership or any other issue or feedback. Furthermore, we will support you in exercising your data subject rights under the GDPR, working closely with our in-house Data Protection team to ensure your privacy is protected.

We may share your personal data with our trusted service providers who support us in our customer service activities and provide the technical platform to securely and effectively manage your inquiry. For more details, please see section 3.

If you reach out to us about an experience in one of our physical stores, we may forward your request to the local customer service team in the relevant country to provide you with direct support.

When you reach out to us on social media with an inquiry, your social media profile name, as well as all text and photographs, will be shared with us and the social media platform provider. You follow the platform's terms of use that you agreed to, and privacy policy of which you were informed about when you signed up. When we reply to you on social media, we may share personal data with the social media platform as part of the correspondence with you. For more details, please see section 3.

Purpose Personal data Lawful basis Retention

Managing and answering inquiries

Name, country, email address and potentially phone number, as well as any other information provided by you in the correspondence.

Legitimate interest in managing inquiries.

Information deriving from communications will be deleted 3 years from conclusion of the communication/resolving the issue.

Assisting with your order, shipment, invoice, returns and refunds.

Order ID, customer ID, address, shipping address, billing address, invoice (invoice number, date of purchase, product details), transaction details. If relevant, selected shipping carrier, in some cases updated shipping address, payment ID, bank details and expense date. Technical data.

Performance of contract

Information deriving from communications will be deleted 3 years from conclusion of the communication/resolving the issue.

Assisting with a defective item

Customer ID, order ID, purchase evidence, purchase date, sometimes photo or other evidence of defect item.

Compliance with a legal obligation (warranty)

Information deriving from communications will be deleted 3 years from conclusion of the communication/resolving the issue.

Managing chargeback disputes and claims

Customer ID, order ID, payment ID, original expense date, invoice (date of purchase, product amount, product names, transaction details), shipping information, bank details, technical data. If relevant customer account tracking information, customer’s email address on external payment platform, documentation about claim or dispute provided by the customer. All communication between Customer Service and the customer.

Legitimate interest

Information deriving from communications will be deleted 3 years from conclusion of the communication/resolving the issue.

Please note: processing of data on external payment platforms are regulated by that platform provider’s own privacy notice, incl. retention periods.

Assisting with queries related to your Flying Tiger Copenhagen Club membership

Loyalty ID, name, phone number and email address.

Legitimate interest in providing you with membership support

Information deriving from communications will be deleted 3 years from conclusion of the communication/resolving the issue.

Managing and responding to Data Subject Rights Requests (DSRRs)

Account ID, customer ID, email address, name, all personal data that is relevant for your request.

  • Compliance with a legal obligation

  • Legitimate interest in optimizing our internal processes.

12 months from conclusion of the DSRR.

 

2.5.  When you sign up for our newsletters and other communications or marketing activities

When you purchase a product in our Online Store, become a Flying Tiger Copenhagen Club member, or use our Scan&Go app, you have the option to sign up to receive communication from us, including marketing materials like our newsletter, contest invitations, or personalized offers.

If you have a customer account with us, we use your profile information to understand which of our products and offers may interest you, so we can provide you with relevant offers.

You can unsubscribe from receiving communication from us, including marketing materials, at any time by clicking the unsubscribe button at the bottom of our newsletter or by contacting our Customer Service at onlinesupport@flyingtiger.com.

Purpose Personal data Lawful basis Retention

Storing your marketing consent

For subscribers, we collect your marketing consent

Legal obligation

We process the information while the consent is active and up to 3 years after your last engagement with our newsletter in compliance with local marketing laws (e.g. the Danish Marketing Practice Act).

Distribution of our electronic newsletters

For subscribers on our website, Flying Tiger Copenhagen Club app and Scan&Go app we collect the email address.

Marketing consent

We store the information up to 3 years after your last engagement with our newsletter, or your account.

Segmentation of newsletter recipients in relation to newsletters

The newsletters are segmented to you based on your contact information (country), products you are interested in (visit- and search history), and previous purchases (purchase history) on our website and/or the Scan&Go app.

Legitimate interest in ensuring that you receive a newsletter in your local language.

To the extent you have consented to cookies, your consent.

We store the information up to 3 years after your last engagement with our newsletter, or your account.

Participation in marketing sweepstakes, and competitions

Full name, email address, and country. For delivering prices, we sometimes require shipping details.

In some cases, participation includes consent to storing your marketing consent (please see above).

For competitions on our social media platforms, your social media handle, likes, hashtags and comments may be collected and stored in joint controllership with the social media platform provider (see section 2.8 and 3 for more information)

Performance of a contract, which is our agreement with you about the terms of the sweepstake or competition.

Legitimate interest in relation to identifying participants, being able to send prize(s) to winner(s) and creating statistics based on aggregated data to provide us with insight into the competitions/ sweepstakes we offer.

We process the information for the duration of the game/competition and for 1 month hereafter.

Please note: If participation includes sign-up for marketing communication, the retention period of storing consent and receiving newsletters applies as outlined above.

Information provided to us through social media is deleted when the post is deleted or when you choose to withdraw your reaction to our post (like, comment, share, etc.)

 

Hosting events

For persons registering for an event, we collect contact information, including name, phone number, and email addresses.

Legitimate interest in relation to hosting events, including administrating registrations for the event.

The information is deleted within 1 month after the event is held.

Providing you with relevant and segmented marketing outside our own channels (such as social media, search engines, or third-party websites)

Information on what website you were visiting when clicking on our advertisement, including traffic on the page, time, what you clicked on, pages or content visited, browser type, IP address, information on your device type (computer, smartphone, etc.) and the features used.

Consent, including consent for the use of cookies and other tracking technologies.

We process the information for as long as your consent is in use.

Personal data obtained via cookies is deleted when the relevant cookie expires, or when you delete the cookie(s) or withdraw your consent.

 

2.6.  When you become a member of the Flying Tiger Copenhagen Club

In some of our local markets, we offer a Flying Tiger Copenhagen Club (“FTC Club”) through our Flying Tiger Copenhagen Club app (“Club App”).

Purpose Personal data Lawful basis Retention

Signing you up to the FTC Club, and providing you with FTC Club benefits and services

Phone number incl. country code, email address (unique identifier), information related to use of benefits, offers (e.g. voucher used, Club ID, store ID, timestamp for purchase using a voucher)

Performance of a contract

We process the information while the consent is active and up to 3 years after your last engagement with our newsletter in compliance with local marketing laws, unless you close your profile, or it is terminated pursuant to the FTC Club Terms (available in the FTC App).

Note: we may store and process your personal data beyond this period for prevention of fraud, dispute resolution and legal compliance to the extent permitted by law.

Ensuring continuous improvements, optimisation, analytics, and member segmentation for a better experience as well as relevant benefits and services in general pertaining to the FTC Club.

Birth date, zip code, country, information related to your use of benefits (e.g. voucher used, Club ID, store ID, timestamp for purchase using a voucher)

Legitimate interest in ensuring continuous improvements of the FTC Club as well as benefits and services, and better benefits, offers and experience in general.

We process the information while the consent is active and up to 3 years after your last engagement with our newsletter in compliance with local marketing laws, unless you close your profile, or it is terminated pursuant to the FTC Club Terms (available in the FTC App).

Note: we may store and process your personal data beyond this period for prevention of fraud, dispute resolution and legal compliance to the extent permitted by law.

 

2.7.   How we use your personal data to enhance your experience

We use your personal data to enhance your shopping experience at Flying Tiger Copenhagen, personalize our services, and develop products that matter to you. By analyzing your preferences and behaviors, we can tailor our offerings, improve our products, and make informed business decisions—all while ensuring your privacy and data security.

We collect data such as your browsing behavior, shopping preferences, and device information through cookies and similar tracking technologies on our website and external sites where we advertise. By consenting to cookies through our cookie notice or those on external websites, you allow us to collect and process this data to personalize your experience and enhance our services, while maintaining control over your privacy.

You can always manage or withdraw your cookie consent via the cookie banner at the bottom of our Online Store. For more information on cookie lifetimes, how to delete cookies, or withdraw consent, please refer to the cookie policy on the relevant website and our Cookie Notice. For additional details, please see section 2.9.

Purpose Personal data Lawful basis Retention

Analysis and reporting to enhance your experience, improve and develop our products, ensure compliance and security, and to make informed business decisions.

Contact information, demographic information, account details, purchase history, order details, payment information, social media interactions (based on your privacy settings with the social media platform), communication preferences and feedback. Based on cookie consent, there may also be shopping preferences, browsing behaviour, device and technical data processed.

  • Legitimate interest in improving our products and services

  • Consent provided when agreeing to cookies.

Until you close your customer profile, request deletion, your profile expires as outlined above, you unsubscribe from marketing communication or your marketing consent expires.

Personal data obtained via cookies is deleted when the relevant cookie expires, or when you delete the cookie(s) or withdraw your consent.

Please note: You can see the lifetime of different cookies and read more on how to delete cookies or withdraw your consent in the cookie policy on the website you visited, and in our Cookie Notice.

Analysis of interest in advertisements on websites or digital platforms other than our own.

Information on what website you were visiting when clicking on our advertisement, including traffic on the page, time, what you clicked on, pages or content visited, browser type, IP address, information on your device type (computer, smartphone, etc.) and the features used.

Consent to the processing of your personal data when accepting cookies

Personal data obtained via cookies is deleted when the relevant cookie expires, or when you delete the cookie(s) or withdraw your consent.

Please note: You can see the lifetime of different cookies and read more on how to delete cookies or withdraw your consent in the cookie policy on the website you visited, and in our Cookie Notice.

Analysis and statistics of our marketing material (pixels)

If you have interacted with our marketing material, we collect information on what products, news, etc., you click on in our marketing communications to you.

Marketing consent

We process the information for as long as the consent is in use.

All personal data used to create statistics and analyse reactions to our marketing communications is deleted within 24 months of collection.

 

2.8.  When you visit our social media profiles

When you visit our social media profiles or interact with us on our social media channels, the social media providers use cookies to collect and process personal data on your behaviour, in accordance with the consent you may have given to the social media provider. We will also receive statistics on e.g. demographics and geography from the social media providers. The statistics are gathered via plug-ins from the social media (e.g. "Page Insight" on Facebook). Below, you can read more about our processing of your personal data when you interact with us on our social media profiles.

Zebra has a joint controllership with the social media providers regarding personal data collected and processed when you interact with us on our social media accounts and when information collected via our website is shared with social media providers. You can read more about our joint controllership in section 4.

When you tag us in your social media post, for example on Instagram, we might send you a message and ask if we can publish your photo on our Online Store and in our marketing channels. With your permission, we will publish your photo and social media handle for example on our Online Store, where online visitors can click on it to see your post to the photo and can click through to your post on the social media platform.

Purpose Personal data Lawful basis Retention

Promoting our business and reaching you on social media to share updates, connect with our community, and provide relevant content.

Information you have made available through your social media settings, as well as your reactions, comments, shares, or when you tag or hashtag us in your posts.

Legitimate interest in promoting our business, engaging with our customers and responding to interactions on social media.

We have joint controllership with the suppliers of the social media platforms.

Information provided to us through social media is deleted when the post is deleted or when you choose to withdraw your reaction to our post (like, comment, share, etc.)

If you do not delete your post, comment, etc., the information will be deleted after 5 years.

Promoting our products and brand via customer engagement on our website and marketing channels.

Your photo, your social media username, your post, and any other information you provide us with.

We ask for your consent before using your photo or post.

Your photo will be removed from our Online Store or marketing channels 5 years after you have given your consent at the latest unless you have withdrawn your consent prior to that.

See section 5 on how to contact us to withdraw your consent in this regard.

 

2.9.  Use of Cookies

When you visit our Online Store or Club App, for example for searching for products, news or to contact our Customer Service, we collect personal data through cookies and similar technologies.

When you first visit our Online Store or Club App, we set the cookies that are necessary for you to use our website (necessary cookies). If you consent to additional cookies (statistical cookies, marketing cookies, functional cookies etc.), we will set these cookies to analyse and improve the use and performance of our website and products, to show you relevant marketing material, and to save your preferences on our website. You can manage your consent preferences to cookies by clicking on the cookie banner at the bottom of our Online Store.

For further information on type, purpose, and retention period for our use of cookies, please refer to the cookie banner at the bottom of our Online Store or to our Cookie Notice.

On our website, we have content, or plug-ins from third-party websites. This includes, e.g., posts from Instagram. When you interact with third-party content, information will be delivered directly from your device to the third party. The browser sends information that your device has visited our website, as well as information on your browser, your operating system, which URL you visit and your IP address. In these cases, you will be able to read more in the privacy policies of the third parties in question – see section 4.

If you interact with plug-ins from Facebook, Instagram, TikTok and LinkedIn on our website, the social media providers use cookies to collect and process personal data on in accordance with the consent you may have given to the social media provider.

 

3. Who do we share your personal data with?

We share your personal data internally within Zebra and with external parties primarily providing services on our behalf.

Sharing within the Flying Tiger Copenhagen Group:

We share your personal data within Zebra A/S and our affiliates (local markets) to support our business operations and ensure compliance with safety and legal requirements. This includes customer service and, in some cases, marketing activities, all under the control of Zebra A/S. Additionally, Flying Tiger Copenhagen Club membership data collected in local markets is processed by our headquarters in Denmark.

Sharing with warehousing, packaging, shipping and carrier partners:

When you make a purchase in our Online Store, we share information with these partners to ensure our products reach our business partners and our customers. This includes ensuring delivery of your purchased goods, delivering tracking information to you, to contact you if needed, and to answer your delivery related inquiries.

Sharing with our service providers:

We share personal data with our trusted service providers who support us in providing our services to you as well as our various business activities. These service providers are our data processors which means they only process personal data in accordance with the written instruction we give them.

Overall, these service providers support us in providing our Online Stores to you, support our Customer Service activities, manage orders, payment and fulfilment, data analytics and data insights activities, as well as managing our inventory. More specifically:

  • our service providers support us with a range of services, including IT services and technology solutions for our Online Stores and customer service activities, as well as cloud storage services for secure data storage.

  • our providers also assist in sending emails or SMS messages, primarily if you have signed up to marketing with us, but they also support us in conducting targeted marketing activities, such as promotions.

  • we also utilize solutions to conduct analytics and insights, organize competitions and events, both online and in our stores. Additionally, our providers support us in managing consent for activities such as cookie usage, the Scan&Go app, and internal communications.

Sharing with banks and payment providers:

We share data with these recipients to support us in ensuring a safe and efficient payment process both online and in our stores. We may also share data with your bank or payment provider in case of charge back and claims resolution.

Sharing with social media providers:

Zebra has a joint controllership with social media providers in relation to some of the services Zebra receives from these providers. You may exercise your rights under the GDPR towards us and the social media providers. You can find a more detailed description of the joint controllership here:

You can read about the social media providers' own processing of personal data in their privacy notices here:

Sharing with our professional advisers, incl. lawyers, bankers, auditors and insurers globally:

If necessary, e.g., in relation to any disputes (e.g. in relation to a product or purchase) or when we otherwise need professional advice, we may disclose information to these advisers, including e.g. auditors and lawyers. It depends on the situation what personal data may be disclosed.

Sharing with governmental agencies or law enforcement:

Zebra may disclose your personal data as we believe to be necessary and appropriate:

  • To governmental or regulatory agencies, or competent law enforcement to the extent we are required to do so, e.g. tax and customs authorities. This can e.g. be to comply with our legal obligations, or an order issued by the court or other competent legal body, or to cooperate with law enforcement;

  • be able to enforce this notice or any other of our terms, or to protect the rights, privacy, properties or safety of Zebra and the Flying Tiger Copenhagen Group, our employees, customers, or other individuals;

  • use, disclose or transfer personal data to a third party in the event of any reorganisation, merger, sale, joint venture or assignment.

Sharing for security reasons and fraud prevention:

Zebra may share personal data with other companies and organisations in relation to security and fraud prevention to ensure the security of your transactions and preventing fraud, identity theft and other malicious actions as well as reducing credit risk. This includes exchanging information with other companies and organisations with the aim of identifying and preventing fraud and other malicious activities.

 

4. International Data Transfers

Our customers’ personal data are primarily collected and processed within Denmark, other countries the European Union (EU) and the European Economic Area (EEA), where we offer our Online Store and deliver products, as well as the United Kingdom (UK).

Some of our service providers and external partners are located outside the EU/EEA (so-called ‘third countries’), and may have access to your personal data to support our business operations at described in section 2 and 3. These third countries include the UK, the US, Canada, Israel, Japan, Switzerland, New Zealand, Australia, Singapore, India and the Philippines.

We will only transfer your personal data to third countries under the following circumstances:

  • If the EU Commission has decided that the third country has an adequate level of data protection. This is currently the case for US companies certified under the EU-US Data Privacy Framework for the EU/EEA (and US companies covered by the UK Extension to the EU-US Data Privacy Framework for the UK), the UK, Israel, New Zealand, Switzerland, and Canada and Japan (the two latter under certain circumstances);

  • If Binding Corporate Rules (BCR) are in place (for transfers between companies within the same group (“inter-group transfers”);

  • If none of the above apply, we will rely on the EU Commission’s Standard Contractual Clauses (“EU model clauses”) (and to the extent relevant, the International Data Transfer Addendum to the European Commission's Standard Contractual Clauses issued by the UK Information Commissioner for transfers outside of the UK).

  • If an exception applies under special circumstances, e.g. to ensure we fulfill a contract with you, or you consent to the specific transfer.

For additional information about our transfer of personal data to third countries, including a copy of the above-mentioned Standard Contractual Clauses, please reach out to us.

 

5. What rights do you have in relation to your personal data?

The GDPR gives you specific rights regarding your personal data. We are happy to assist you with your data protection rights. You can make a rights request by writing to privacy@flyingtiger.com.

Under the GDPR, you have the following data protection rights:

Right to be Informed and have Access: You have the right to have confirmed whether collection or processing your personal data has taken place, and, if so, you have the right to request a copy of your personal data in a digital format.

Right to Data Rectification: You have the right to request that we correct any inaccurate personal data, and that we complete incomplete personal data.

Right to Erasure: In certain circumstances, you have the right to request that we erase personal data concerning you; for example, if processing is no longer necessary for the purposes in which the personal data was originally collected for.

Right to Restrict Processing: In certain circumstances, you have the right to request that we restrict the processing of your personal data, for example, if you believe that the personal data is not accurate or lawfully processed.

Right to Object to the processing: In certain circumstances, you have the right to request that we stop processing your personal data. You have a right to object to the processing of your personal data for direct marketing at any time. If you object, the personal data cannot be processed for the purpose of direct marketing.

Right to Data Portability: In certain circumstances, you have the right to receive the personal data you have provided us with in a structured, commonly used, machine readable format, and the right to have us transmit the data to another entity, where technically feasible.

Right to Withdraw Consent: You have the right to withdraw your consent to the processing of your personal data, where consent is the lawful basis. For example, if you wish to unsubscribe from our newsletter, you can withdraw your consent by clicking the unsubscribe button at the bottom of the newsletter or by contacting Customer Service via the link above. You can change your consent to our use of cookies, by clicking the cookie icon at the bottom of our website. You can also contact us for assistance.

If you withdraw your consent, the withdrawal will not affect the lawfulness of processing that has already been carried out based on your consent.

Right not to be subject to automated decision-making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. We do not carry out such automated decision making, including profiling.

There may be conditions or limitations on these rights. It is therefore not certain, for example, you have the right to data portability in the specific case - this depends on the specific circumstances of the processing activity.

 

6. Unhappy with how we process your personal data?

If you are unhappy with how we process your personal data, you are always welcome to reach out to us at privacy@flyingtiger.com. However, if you are a resident of the EU/EEA and want to lodge a complaint about how we process your personal data, the GDPR gives you the right to do so via the national supervisory authority of the country you reside in. You can find an overview of all European data protection authorities and their contact details here: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en.

Since our main office is in Copenhagen, Denmark, any complaints regarding our data processing will be managed by the Danish Data Protection Supervisory Authority:

Datatilsynet Denmark

Carl Jacobsen Vej 35

2500 Valby

Tel.:+45 33 1932 00

Email: dt@datatilsynet.dk

Website: http://www.datatilsynet.dk/

 

7. Changes to this Privacy Notice

This Privacy Notice was last updated September 2024.

We may update this Privacy Notice from time to time to reflect changes in our practices or legal requirements. We will notify you directly when substantial updates will be made. We may also notify you in other ways from time to time, including by an announcement on our website. We encourage you to review this notice and our website periodically for any updates. Thank you for trusting Zebra A/S with your personal data. We are committed to protecting your personal data and doing the right thing, so you can have a great experience and lots of fun with our products and services.

If you are a resident of the EU, please click on the tab "EU" in the top bar.

Last modified: October 7, 2024

Introduction

Welcome to Flying Tiger Copenhagen universe! At Flying Tiger Copenhagen, we want to make you smile when using our products and gifting them to somebody you care about. Making people feel good is deeply engrained in our values. These values are extended to how we process data about people, data about you.

This privacy notice is for visitors and consumers located in the EU/EEA and UK. It explains how we collect, use, and protect your personal data in accordance with the EU General Data Protection Regulation (EU) 2016/679 (‘EU GDPR’), and where relevant the UK GDPR (together the “GDPR”), when you visit our Online Store www.flyingtiger.com (“the Online Store”), use our Flying Tiger Copenhagen Club, services, or shop in our physical stores across EU/EEA and the UK.

 

1. Who is responsible for your personal data?

When we say “Zebra”, “we”, “our”, “us”, etc., we are referring to our company Zebra A/S. Zebra is a variety store chain headquartered in Copenhagen, Denmark, with locations around the world. Flying Tiger Copenhagen is a brand owned by Zebra. Zebra also owns Digital Flying Tiger A/S, which is an affiliate that delivers digital services, so that you can shop with our Online Store, get your orders delivered, receive customer support and enjoy our Flying Tiger Copenhagen Club app.

However, it is Zebra who is the Data Controller and who is responsible for ensuring that your personal data is processed in accordance with applicable data protection laws. Personal data is information that we process about you for various purposes, which you can see in detail in section 2.

Our address is:

Zebra A/S

Strandgade 71-73

1401 Copenhagen, Denmark

CVR no.: 15690488

 

We do not employ a Data Protection Officer (DPO). However, if you want to talk to us about your personal data or this notice, you can reach our Data Protection Lead at privacy@flyingtiger.com. Please provide your name and the country your inquiry relates to.

 

2. How do we process your personal data?

We collect personal data about you to be able to provide our products, offers and services to you, and to ensure that you have a fun shopping experience in the spirit of Flying Tiger Copenhagen. We obtain most of your personal data directly from you.

We process your personal data for your shopping convenience, to manage and fulfil your orders, assist you with inquiries and claims, and to meet our legal obligations and security standards.

We also collect personal data about you to improve our products and services, to optimize your experience on our website mobile app and in our stores, when you engage with us via our social media accounts, and when you choose to receive personalized offers and other communication from us.

We only process your personal data, when the processing is in line with one of the lawful bases that are defined by the GDPR. Most often the lawful basis for processing your personal data by us will be:

  • Consent (Article 6(1)(a) GDPR) = we process personal data when you consent to it;

  • Performance of contract (Article 6(1)(b) GDPR) = we have to process your personal data to fulfil our contract with you, for example when delivering purchased items to you;

  • Compliance with legal obligations (Article 6(1)(c) GDPR) = we process your personal data when we have legal obligations to do so;

  • Legitimate interest (Article 6(1)(f) GDPR) = we process your personal data when it supports our business operations without infringing on your own rights and interest.

  • Below, you can learn more about the various purposes for processing your personal data in different situations, the lawful basis for processing your information, how long we store the personal data and who we share it with.

  •  

2.1.  When you create a Flying Tiger Copenhagen Customer Account

In our Online Store, you have the option to create a Flying Tiger Copenhagen customer account with us. By setting up your customer profile, you'll enhance your experience in our Online Store, allowing you to easily manage and streamline various aspects of your account for a more efficient and personalized shopping experience.

To establish and manage your account, we ask certain information from you. Creating a customer account is optional and not necessary to purchase products on our Online Store.

Purpose Personal data Lawful basis Retention

Creating a Flying Tiger Copenhagen account

Name, email address, password, user ID

Legitimate interest in providing you with a Flying Tiger Copenhagen account for a convenient shopping experience.

After 3 years from the end of the fiscal year in which you last interacted with your account, or within 30 days after requesting account deletion.

Please note: If you have placed an order, we are obliged to keep your information longer (please see below).

Choosing to store additional details for your own convenience(optional)

Postal address, shipping address(es), country, phone number, preferred payment method. In some cases, names of receivers of your orders, including company names.

Consent

Until you delete the information from your account, or 3 years from the end of the fiscal year in which you last interacted with your account, or within 30 days after requesting account deletion.

Please note: If you have placed an order, we are obliged to keep your information longer (please see below).

 

2.2.  When you buy a product from our Online Store

When you purchase a product from our Online Store, we strive to make the process as smooth and secure as possible. To fulfill your order, we require certain personal information from you, so we can fulfill your order. This allows us to process your purchase, arrange delivery, and keep you informed about the status of your order.

It is not necessary to create an account with us for shopping in our Online Store. However, when you make a purchase from your Flying Tiger Copenhagen customer account, you have the option to complete your profile with additional details and store information for faster check-out.

Rest assured, we handle your data with care, ensuring a seamless and personalized shopping experience while protecting your privacy.

Purpose Personal data Lawful basis Retention

Purchasing as a guest

User ID, name, contact data, billing and delivery address, order ID and details, payment details, technical data

  • Performance of contract,

  • Legal obligation to comply with local financial laws

  • Legitimate interest to ensure accurate transactions, fraud prevention, as well as for analytical and statistical purposes

6 years from the end of the fiscal year in which the purchase was made.

Please note: In specific situations, we may defer from our general retention periods (in case of, e.g., complaints, objections, local and European and UK legal and financial requirements, or the European VAT One Stop Shop agreement.).

If you would like more information, please reach out to us.

Purchasing with a Flying Tiger Copenhagen account

Account ID and account information, contact data, billing and delivery address, order ID and details, payment details, technical data

  • Performance of contract,

  • Legal obligation to comply with local financial laws

  • Legitimate interest to ensure accurate transactions, fraud prevention, as well as for analytical and statistical purposes

6 years from the end of the fiscal year in which the purchase was made.

Please note: In specific situations, we may defer from our general retention periods (in case of, e.g., complaints, objections, local and European and UK legal and financial requirements, or the European VAT One Stop Shop agreement.).

If you would like more information, please reach out to us.

General order delivery process (logistics & warehousing)

Order ID and details, contact data, delivery address, shipping method, last-mile delivery choice.

Performance of contract and legitimate interest in relation to investigation of failed delivery

6 months from order date

 

2.3.  When you visit our physical stores

When you shop in our physical stores, we use your personal data to ensure a smooth, secure, and efficient process for handling your purchases, payments, claims, returns, and refunds.

In some of our markets, we offer the opportunity to pay with a Scan&Go app when visiting selected stores. When you shop in these stores using the Scan&Go app, we collect some information on you and your purchase from the app provider. Below, you can read more on how we process your personal data in this regard. If you have given your consent to our marketing activities in the app, please refer to section 2.5 on marketing activities to see how we process your personal data in this regard. The app provider is data controller for their own processing of your personal data.

Purpose Personal data Lawful basis Retention

Processing purchases, payment transactions, refunds, returns and claims. If available, sending digital receipts.

Transaction data. E-mail address (optional, if you choose to receive a digital receipt). Name and signature, (for claims and refunds).

  • Performance of contract,

  • Legal obligation to comply with local financial laws

  • Legitimate interest to ensure accurate transactions, fraud prevention, as well as for analytical and statistical purposes

6 years from the end of the fiscal year in which the purchase was made.

Please note: In specific situations, we may defer from our general retention periods (in case of, e.g., complaints, objections, local and European and UK legal and financial requirements, or the European VAT One Stop Shop agreement.).

Local accounting and bookkeeping legislation retention periods deviate from 5-10 years, depending on country. If you would like more information, please reach out to us.

Scanning items in the physical store, paying and receiving digital receipts via the scan-and-go app or email

Transaction data and payment details. E-mail address (optional, if you choose to receive a digital receipt)

  • Performance of contract,

  • Legal obligation to comply with local financial laws

  • Legitimate interest to ensure accurate transactions, fraud prevention, as well as for analytical and statistical purposes

6 years from the end of the fiscal year in which the purchase was made.

Please note: In specific situations, we may defer from our general retention periods (in case of, e.g., complaints, objections, local and European and UK legal and financial requirements, or the European VAT One Stop Shop agreement.).

Local accounting and bookkeeping legislation retention periods deviate from 5-10 years, depending on country. If you would like more information, please reach out to us.

 

2.4.  When you contact our Customer Service

When you contact us via our Customer Service form, social media channels, or by email, we collect personal data related to your query, so we can support you with your request.

We will process the personal data you provide to assist with your query, whether it's about your order, delivery, returns, technical support, your Flying Tiger Copenhagen Club membership or any other issue or feedback. Furthermore, we will support you in exercising your data subject rights under the GDPR, working closely with our in-house Data Protection team to ensure your privacy is protected.

We may share your personal data with our trusted service providers who support us in our customer service activities and provide the technical platform to securely and effectively manage your inquiry. For more details, please see section 3.

If you reach out to us about an experience in one of our physical stores, we may forward your request to the local customer service team in the relevant country to provide you with direct support.

When you reach out to us on social media with an inquiry, your social media profile name, as well as all text and photographs, will be shared with us and the social media platform provider. You follow the platform's terms of use that you agreed to, and privacy policy of which you were informed about when you signed up. When we reply to you on social media, we may share personal data with the social media platform as part of the correspondence with you. For more details, please see section 3.

Purpose Personal data Lawful basis Retention

Managing and answering inquiries

Name, country, email address and potentially phone number, as well as any other information provided by you in the correspondence.

Legitimate interest in managing inquiries.

Information deriving from communications will be deleted 3 years from conclusion of the communication/resolving the issue.

Assisting with your order, shipment, invoice, returns and refunds.

Order ID, customer ID, address, shipping address, billing address, invoice (invoice number, date of purchase, product details), transaction details. If relevant, selected shipping carrier, in some cases updated shipping address, payment ID, bank details and expense date. Technical data.

Performance of contract

Information deriving from communications will be deleted 3 years from conclusion of the communication/resolving the issue.

Assisting with a defective item

Customer ID, order ID, purchase evidence, purchase date, sometimes photo or other evidence of defect item.

Compliance with a legal obligation (warranty)

Information deriving from communications will be deleted 3 years from conclusion of the communication/resolving the issue.

Managing chargeback disputes and claims

Customer ID, order ID, payment ID, original expense date, invoice (date of purchase, product amount, product names, transaction details), shipping information, bank details, technical data. If relevant customer account tracking information, customer’s email address on external payment platform, documentation about claim or dispute provided by the customer. All communication between Customer Service and the customer.

Legitimate interest

Information deriving from communications will be deleted 3 years from conclusion of the communication/resolving the issue.

Please note: processing of data on external payment platforms are regulated by that platform provider’s own privacy notice, incl. retention periods.

Assisting with queries related to your Flying Tiger Copenhagen Club membership

Loyalty ID, name, phone number and email address.

Legitimate interest in providing you with membership support

Information deriving from communications will be deleted 3 years from conclusion of the communication/resolving the issue.

Managing and responding to Data Subject Rights Requests (DSRRs)

Account ID, customer ID, email address, name, all personal data that is relevant for your request.

  • Compliance with a legal obligation

  • Legitimate interest in optimizing our internal processes.

12 months from conclusion of the DSRR.

 

2.5.  When you sign up for our newsletters and other communications or marketing activities

When you purchase a product in our Online Store, become a Flying Tiger Copenhagen Club member, or use our Scan&Go app, you have the option to sign up to receive communication from us, including marketing materials like our newsletter, contest invitations, or personalized offers.

If you have a customer account with us, we use your profile information to understand which of our products and offers may interest you, so we can provide you with relevant offers.

You can unsubscribe from receiving communication from us, including marketing materials, at any time by clicking the unsubscribe button at the bottom of our newsletter or by contacting our Customer Service at onlinesupport@flyingtiger.com.

Purpose Personal data Lawful basis Retention

Storing your marketing consent

For subscribers, we collect your marketing consent

Legal obligation

We process the information while the consent is active and up to 3 years after your last engagement with our newsletter in compliance with local marketing laws (e.g. the Danish Marketing Practice Act).

Distribution of our electronic newsletters

For subscribers on our website, Flying Tiger Copenhagen Club app and Scan&Go app we collect the email address.

Marketing consent

We store the information up to 3 years after your last engagement with our newsletter, or your account.

Segmentation of newsletter recipients in relation to newsletters

The newsletters are segmented to you based on your contact information (country), products you are interested in (visit- and search history), and previous purchases (purchase history) on our website and/or the Scan&Go app.

Legitimate interest in ensuring that you receive a newsletter in your local language.

To the extent you have consented to cookies, your consent.

We store the information up to 3 years after your last engagement with our newsletter, or your account.

Participation in marketing sweepstakes, and competitions

Full name, email address, and country. For delivering prices, we sometimes require shipping details.

In some cases, participation includes consent to storing your marketing consent (please see above).

For competitions on our social media platforms, your social media handle, likes, hashtags and comments may be collected and stored in joint controllership with the social media platform provider (see section 2.8 and 3 for more information)

Performance of a contract, which is our agreement with you about the terms of the sweepstake or competition.

Legitimate interest in relation to identifying participants, being able to send prize(s) to winner(s) and creating statistics based on aggregated data to provide us with insight into the competitions/ sweepstakes we offer.

We process the information for the duration of the game/competition and for 1 month hereafter.

Please note: If participation includes sign-up for marketing communication, the retention period of storing consent and receiving newsletters applies as outlined above.

Information provided to us through social media is deleted when the post is deleted or when you choose to withdraw your reaction to our post (like, comment, share, etc.)

 

Hosting events

For persons registering for an event, we collect contact information, including name, phone number, and email addresses.

Legitimate interest in relation to hosting events, including administrating registrations for the event.

The information is deleted within 1 month after the event is held.

Providing you with relevant and segmented marketing outside our own channels (such as social media, search engines, or third-party websites)

Information on what website you were visiting when clicking on our advertisement, including traffic on the page, time, what you clicked on, pages or content visited, browser type, IP address, information on your device type (computer, smartphone, etc.) and the features used.

Consent, including consent for the use of cookies and other tracking technologies.

We process the information for as long as your consent is in use.

Personal data obtained via cookies is deleted when the relevant cookie expires, or when you delete the cookie(s) or withdraw your consent.

 

2.6.  When you become a member of the Flying Tiger Copenhagen Club

In some of our local markets, we offer a Flying Tiger Copenhagen Club (“FTC Club”) through our Flying Tiger Copenhagen Club app (“Club App”).

Purpose Personal data Lawful basis Retention

Signing you up to the FTC Club, and providing you with FTC Club benefits and services

Phone number incl. country code, email address (unique identifier), information related to use of benefits, offers (e.g. voucher used, Club ID, store ID, timestamp for purchase using a voucher)

Performance of a contract

We process the information while the consent is active and up to 3 years after your last engagement with our newsletter in compliance with local marketing laws, unless you close your profile, or it is terminated pursuant to the FTC Club Terms (available in the FTC App).

Note: we may store and process your personal data beyond this period for prevention of fraud, dispute resolution and legal compliance to the extent permitted by law.

Ensuring continuous improvements, optimisation, analytics, and member segmentation for a better experience as well as relevant benefits and services in general pertaining to the FTC Club.

Birth date, zip code, country, information related to your use of benefits (e.g. voucher used, Club ID, store ID, timestamp for purchase using a voucher)

Legitimate interest in ensuring continuous improvements of the FTC Club as well as benefits and services, and better benefits, offers and experience in general.

We process the information while the consent is active and up to 3 years after your last engagement with our newsletter in compliance with local marketing laws, unless you close your profile, or it is terminated pursuant to the FTC Club Terms (available in the FTC App).

Note: we may store and process your personal data beyond this period for prevention of fraud, dispute resolution and legal compliance to the extent permitted by law.

 

2.7.   How we use your personal data to enhance your experience

We use your personal data to enhance your shopping experience at Flying Tiger Copenhagen, personalize our services, and develop products that matter to you. By analyzing your preferences and behaviors, we can tailor our offerings, improve our products, and make informed business decisions—all while ensuring your privacy and data security.

We collect data such as your browsing behavior, shopping preferences, and device information through cookies and similar tracking technologies on our website and external sites where we advertise. By consenting to cookies through our cookie notice or those on external websites, you allow us to collect and process this data to personalize your experience and enhance our services, while maintaining control over your privacy.

You can always manage or withdraw your cookie consent via the cookie banner at the bottom of our Online Store. For more information on cookie lifetimes, how to delete cookies, or withdraw consent, please refer to the cookie policy on the relevant website and our Cookie Notice. For additional details, please see section 2.9.

Purpose Personal data Lawful basis Retention

Analysis and reporting to enhance your experience, improve and develop our products, ensure compliance and security, and to make informed business decisions.

Contact information, demographic information, account details, purchase history, order details, payment information, social media interactions (based on your privacy settings with the social media platform), communication preferences and feedback. Based on cookie consent, there may also be shopping preferences, browsing behaviour, device and technical data processed.

  • Legitimate interest in improving our products and services

  • Consent provided when agreeing to cookies.

Until you close your customer profile, request deletion, your profile expires as outlined above, you unsubscribe from marketing communication or your marketing consent expires.

Personal data obtained via cookies is deleted when the relevant cookie expires, or when you delete the cookie(s) or withdraw your consent.

Please note: You can see the lifetime of different cookies and read more on how to delete cookies or withdraw your consent in the cookie policy on the website you visited, and in our Cookie Notice.

Analysis of interest in advertisements on websites or digital platforms other than our own.

Information on what website you were visiting when clicking on our advertisement, including traffic on the page, time, what you clicked on, pages or content visited, browser type, IP address, information on your device type (computer, smartphone, etc.) and the features used.

Consent to the processing of your personal data when accepting cookies

Personal data obtained via cookies is deleted when the relevant cookie expires, or when you delete the cookie(s) or withdraw your consent.

Please note: You can see the lifetime of different cookies and read more on how to delete cookies or withdraw your consent in the cookie policy on the website you visited, and in our Cookie Notice.

Analysis and statistics of our marketing material (pixels)

If you have interacted with our marketing material, we collect information on what products, news, etc., you click on in our marketing communications to you.

Marketing consent

We process the information for as long as the consent is in use.

All personal data used to create statistics and analyse reactions to our marketing communications is deleted within 24 months of collection.

 

2.8.  When you visit our social media profiles

When you visit our social media profiles or interact with us on our social media channels, the social media providers use cookies to collect and process personal data on your behaviour, in accordance with the consent you may have given to the social media provider. We will also receive statistics on e.g. demographics and geography from the social media providers. The statistics are gathered via plug-ins from the social media (e.g. "Page Insight" on Facebook). Below, you can read more about our processing of your personal data when you interact with us on our social media profiles.

Zebra has a joint controllership with the social media providers regarding personal data collected and processed when you interact with us on our social media accounts and when information collected via our website is shared with social media providers. You can read more about our joint controllership in section 4.

When you tag us in your social media post, for example on Instagram, we might send you a message and ask if we can publish your photo on our Online Store and in our marketing channels. With your permission, we will publish your photo and social media handle for example on our Online Store, where online visitors can click on it to see your post to the photo and can click through to your post on the social media platform.

Purpose Personal data Lawful basis Retention

Promoting our business and reaching you on social media to share updates, connect with our community, and provide relevant content.

Information you have made available through your social media settings, as well as your reactions, comments, shares, or when you tag or hashtag us in your posts.

Legitimate interest in promoting our business, engaging with our customers and responding to interactions on social media.

We have joint controllership with the suppliers of the social media platforms.

Information provided to us through social media is deleted when the post is deleted or when you choose to withdraw your reaction to our post (like, comment, share, etc.)

If you do not delete your post, comment, etc., the information will be deleted after 5 years.

Promoting our products and brand via customer engagement on our website and marketing channels.

Your photo, your social media username, your post, and any other information you provide us with.

We ask for your consent before using your photo or post.

Your photo will be removed from our Online Store or marketing channels 5 years after you have given your consent at the latest unless you have withdrawn your consent prior to that.

See section 5 on how to contact us to withdraw your consent in this regard.

 

2.9.  Use of Cookies

When you visit our Online Store or Club App, for example for searching for products, news or to contact our Customer Service, we collect personal data through cookies and similar technologies.

When you first visit our Online Store or Club App, we set the cookies that are necessary for you to use our website (necessary cookies). If you consent to additional cookies (statistical cookies, marketing cookies, functional cookies etc.), we will set these cookies to analyse and improve the use and performance of our website and products, to show you relevant marketing material, and to save your preferences on our website. You can manage your consent preferences to cookies by clicking on the cookie banner at the bottom of our Online Store.

For further information on type, purpose, and retention period for our use of cookies, please refer to the cookie banner at the bottom of our Online Store or to our Cookie Notice.

On our website, we have content, or plug-ins from third-party websites. This includes, e.g., posts from Instagram. When you interact with third-party content, information will be delivered directly from your device to the third party. The browser sends information that your device has visited our website, as well as information on your browser, your operating system, which URL you visit and your IP address. In these cases, you will be able to read more in the privacy policies of the third parties in question – see section 4.

If you interact with plug-ins from Facebook, Instagram, TikTok and LinkedIn on our website, the social media providers use cookies to collect and process personal data on in accordance with the consent you may have given to the social media provider.

 

3. Who do we share your personal data with?

We share your personal data internally within Zebra and with external parties primarily providing services on our behalf.

Sharing within the Flying Tiger Copenhagen Group:

We share your personal data within Zebra A/S and our affiliates (local markets) to support our business operations and ensure compliance with safety and legal requirements. This includes customer service and, in some cases, marketing activities, all under the control of Zebra A/S. Additionally, Flying Tiger Copenhagen Club membership data collected in local markets is processed by our headquarters in Denmark.

Sharing with warehousing, packaging, shipping and carrier partners:

When you make a purchase in our Online Store, we share information with these partners to ensure our products reach our business partners and our customers. This includes ensuring delivery of your purchased goods, delivering tracking information to you, to contact you if needed, and to answer your delivery related inquiries.

Sharing with our service providers:

We share personal data with our trusted service providers who support us in providing our services to you as well as our various business activities. These service providers are our data processors which means they only process personal data in accordance with the written instruction we give them.

Overall, these service providers support us in providing our Online Stores to you, support our Customer Service activities, manage orders, payment and fulfilment, data analytics and data insights activities, as well as managing our inventory. More specifically:

  • our service providers support us with a range of services, including IT services and technology solutions for our Online Stores and customer service activities, as well as cloud storage services for secure data storage.

  • our providers also assist in sending emails or SMS messages, primarily if you have signed up to marketing with us, but they also support us in conducting targeted marketing activities, such as promotions.

  • we also utilize solutions to conduct analytics and insights, organize competitions and events, both online and in our stores. Additionally, our providers support us in managing consent for activities such as cookie usage, the Scan&Go app, and internal communications.

Sharing with banks and payment providers:

We share data with these recipients to support us in ensuring a safe and efficient payment process both online and in our stores. We may also share data with your bank or payment provider in case of charge back and claims resolution.

Sharing with social media providers:

Zebra has a joint controllership with social media providers in relation to some of the services Zebra receives from these providers. You may exercise your rights under the GDPR towards us and the social media providers. You can find a more detailed description of the joint controllership here:

You can read about the social media providers' own processing of personal data in their privacy notices here:

Sharing with our professional advisers, incl. lawyers, bankers, auditors and insurers globally:

If necessary, e.g., in relation to any disputes (e.g. in relation to a product or purchase) or when we otherwise need professional advice, we may disclose information to these advisers, including e.g. auditors and lawyers. It depends on the situation what personal data may be disclosed.

Sharing with governmental agencies or law enforcement:

Zebra may disclose your personal data as we believe to be necessary and appropriate:

  • To governmental or regulatory agencies, or competent law enforcement to the extent we are required to do so, e.g. tax and customs authorities. This can e.g. be to comply with our legal obligations, or an order issued by the court or other competent legal body, or to cooperate with law enforcement;

  • be able to enforce this notice or any other of our terms, or to protect the rights, privacy, properties or safety of Zebra and the Flying Tiger Copenhagen Group, our employees, customers, or other individuals;

  • use, disclose or transfer personal data to a third party in the event of any reorganisation, merger, sale, joint venture or assignment.

Sharing for security reasons and fraud prevention:

Zebra may share personal data with other companies and organisations in relation to security and fraud prevention to ensure the security of your transactions and preventing fraud, identity theft and other malicious actions as well as reducing credit risk. This includes exchanging information with other companies and organisations with the aim of identifying and preventing fraud and other malicious activities.

 

4. International Data Transfers

Our customers’ personal data are primarily collected and processed within Denmark, other countries the European Union (EU) and the European Economic Area (EEA), where we offer our Online Store and deliver products, as well as the United Kingdom (UK).

Some of our service providers and external partners are located outside the EU/EEA (so-called ‘third countries’), and may have access to your personal data to support our business operations at described in section 2 and 3. These third countries include the UK, the US, Canada, Israel, Japan, Switzerland, New Zealand, Australia, Singapore, India and the Philippines.

We will only transfer your personal data to third countries under the following circumstances:

  • If the EU Commission has decided that the third country has an adequate level of data protection. This is currently the case for US companies certified under the EU-US Data Privacy Framework for the EU/EEA (and US companies covered by the UK Extension to the EU-US Data Privacy Framework for the UK), the UK, Israel, New Zealand, Switzerland, and Canada and Japan (the two latter under certain circumstances);

  • If Binding Corporate Rules (BCR) are in place (for transfers between companies within the same group (“inter-group transfers”);

  • If none of the above apply, we will rely on the EU Commission’s Standard Contractual Clauses (“EU model clauses”) (and to the extent relevant, the International Data Transfer Addendum to the European Commission's Standard Contractual Clauses issued by the UK Information Commissioner for transfers outside of the UK).

  • If an exception applies under special circumstances, e.g. to ensure we fulfill a contract with you, or you consent to the specific transfer.

For additional information about our transfer of personal data to third countries, including a copy of the above-mentioned Standard Contractual Clauses, please reach out to us.

 

5. What rights do you have in relation to your personal data?

The GDPR gives you specific rights regarding your personal data. We are happy to assist you with your data protection rights. You can make a rights request by writing to privacy@flyingtiger.com.

Under the GDPR, you have the following data protection rights:

Right to be Informed and have Access: You have the right to have confirmed whether collection or processing your personal data has taken place, and, if so, you have the right to request a copy of your personal data in a digital format.

Right to Data Rectification: You have the right to request that we correct any inaccurate personal data, and that we complete incomplete personal data.

Right to Erasure: In certain circumstances, you have the right to request that we erase personal data concerning you; for example, if processing is no longer necessary for the purposes in which the personal data was originally collected for.

Right to Restrict Processing: In certain circumstances, you have the right to request that we restrict the processing of your personal data, for example, if you believe that the personal data is not accurate or lawfully processed.

Right to Object to the processing: In certain circumstances, you have the right to request that we stop processing your personal data. You have a right to object to the processing of your personal data for direct marketing at any time. If you object, the personal data cannot be processed for the purpose of direct marketing.

Right to Data Portability: In certain circumstances, you have the right to receive the personal data you have provided us with in a structured, commonly used, machine readable format, and the right to have us transmit the data to another entity, where technically feasible.

Right to Withdraw Consent: You have the right to withdraw your consent to the processing of your personal data, where consent is the lawful basis. For example, if you wish to unsubscribe from our newsletter, you can withdraw your consent by clicking the unsubscribe button at the bottom of the newsletter or by contacting Customer Service via the link above. You can change your consent to our use of cookies, by clicking the cookie icon at the bottom of our website. You can also contact us for assistance.

If you withdraw your consent, the withdrawal will not affect the lawfulness of processing that has already been carried out based on your consent.

Right not to be subject to automated decision-making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. We do not carry out such automated decision making, including profiling.

There may be conditions or limitations on these rights. It is therefore not certain, for example, you have the right to data portability in the specific case - this depends on the specific circumstances of the processing activity.

 

6. Unhappy with how we process your personal data?

If you are unhappy with how we process your personal data, you are always welcome to reach out to us at privacy@flyingtiger.com. However, if you are a resident of the EU/EEA/UK and want to lodge a complaint about how we process your personal data, the GDPR gives you the right to do so via the national supervisory authority of the country you reside in. As a resident of the UK, please contact the Information Commissioner’s Office at https://ico.org.uk/.

Since our main office is in Copenhagen, Denmark, any complaints regarding our data processing will be managed by the Danish Data Protection Supervisory Authority:

Datatilsynet Denmark

Carl Jacobsen Vej 35

2500 Valby

Tel.:+45 33 1932 00

Email: dt@datatilsynet.dk

Website: http://www.datatilsynet.dk/

You can find an overview of all European data protection authorities and their contact details here: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en.

 

7. Changes to this Privacy Notice

This Privacy Notice was last updated October 2024.

We may update this Privacy Notice from time to time to reflect changes in our practices or legal requirements. We will notify you directly when substantial updates will be made. We may also notify you in other ways from time to time, including by an announcement on our website. We encourage you to review this notice and our website periodically for any updates. Thank you for trusting Zebra A/S with your personal data. We are committed to protecting your personal data and doing the right thing, so you can have a great experience and lots of fun with our products and services.