Privacy policy

1. Who is responsible for your data

By Schorling is the data controller for the personal data described here.

Company

By Schorling, a sole proprietorship owned by Frederik Hagenborg Schorling

CVR

44224682

Address

Vilhelm Thomsens Allé 40, st. th., 2500 Valby, Denmark

Email

piano@schorling.dk

2. What we collect

When you send an enquiry through the contact form, we receive your name, your email address and, if you write one, your message.

When you email us directly, we receive your email address and whatever you include in your email.

We don’t ask for sensitive personal data, such as health information. Please don’t include it in your message.

When you visit the website, our hosting provider, GitHub Pages, automatically logs your IP address and stores it for security purposes. This is needed to deliver the site and keep it secure. GitHub decides how long these logs are kept, as described in GitHub’s privacy statement (opens in a new tab).

3. Why we use it, and our legal basis

• To reply to your enquiry and talk with you about a piano. Legal basis: GDPR Article 6(1)(b), taking steps at your request before entering into a contract, and Article 6(1)(f), our legitimate interest in answering questions sent to us.
• To run and secure the website (server logs). Legal basis: GDPR Article 6(1)(f), our legitimate interest in a working, secure website.

We don’t use your data for marketing, newsletters or profiling, and we never sell it.

4. Who we share it with

We only share your data with service providers (data processors) that help us run the website and handle enquiries on our behalf:

• Formspark, run by Trampoline Software SRL (Belgium), receives contact form submissions and forwards them to us by email. It stores them in Ireland and Germany. See Formspark’s privacy policy (opens in a new tab).
• Google Ireland Limited hosts our email inbox through Google Workspace. See Google’s privacy policy (opens in a new tab).
• GitHub, Inc. (USA) hosts the website through GitHub Pages. See GitHub’s privacy statement (opens in a new tab).

We share personal data with anyone else only when the law requires us to.

5. Transfers outside the EU/EEA

Contact form submissions are stored within the EU/EEA by Formspark.

GitHub is based in the United States, so website server logs are processed there. Google may also process our email outside the EU/EEA. GitHub and Google are certified under the EU–US Data Privacy Framework, which the European Commission has found to give an adequate level of protection.

6. How long we keep it

We keep enquiries and the related correspondence for 12 months after our last contact with you, and then delete them. If an enquiry leads to a purchase, we keep the records needed for bookkeeping for as long as the Danish Bookkeeping Act requires.

Formspark also stores submissions in its dashboard. We delete them there once they’ve been delivered to our inbox, and at least every 30 days.

7. Cookies and tracking

This website doesn’t set cookies and doesn’t use analytics or tracking tools. Fonts, images and icons are served from our own website, so visiting it doesn’t send your data to third parties such as Google. That’s also why there’s no cookie banner.

8. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you
• have inaccurate data corrected
• have your data deleted
• restrict how we use your data
• object to processing based on our legitimate interests
• receive your data in a portable format (data portability)

To use any of these rights, email piano@schorling.dk. We’ll reply within one month.

9. Complaints

If you think we handle your data incorrectly, you can complain to the Danish Data Protection Agency, Datatilsynet (opens in a new tab). We’d appreciate the chance to sort it out with you first, so please feel free to contact us.

10. Changes to this policy

If the way we handle personal data changes, we’ll update this page. The date at the top shows when it was last updated.