Privacy Policy

At KUNSTNERNES KOOPERATIVE ApS (“we”, “us” or “our”) confidentiality and data protection is a high priority. This privacy policy sets out how KUNSTNERNES KOOPERATIVE ApS processes your personal data and provides you with the information you have the right to receive under applicable data protection law. Please read the privacy policy before submitting your personal data to us.

KYOTO TANGO is a brand name and website operated by KUNSTNERNES KOOPERATIVE ApS.

Data controller and contact information

The data controller for your personal data is: KUNSTNERNES KOOPERATIVE ApS, Kochsgade 31 D, 2. sal, 5000 Odense C, Denmark. Company registration no. DK13278989. Email: hello@kyototango.com

1. If you visit our website

This section sets out how we process personal data about users of our website www.kyototango.com.

1.1 Cookies

We use cookies on our website. We may collect, process and store the following personal data about you via cookies when you visit our website:

• IP address
• Hardware, software and internet browser used to access our website
• Date and time of your visit
• Time zone
• Preferences and click behaviour
• Browsing history

You can find more information about our use of cookies in the cookie banner on our website.

Purposes of the processing

• Marketing in general
• Product and service development
• Statistics and analysis

Legal basis

• Consent: we need your consent to place cookies that are not strictly necessary on your device (Article 6(1)(a) GDPR).
• Legitimate interests: statistics, analysis, marketing (where consent is not required) and improving our products and services (Article 6(1)(f) GDPR).

Retention period

Your personal data is deleted when it is no longer needed for the purposes above. See our cookie banner for the expiry of each cookie. Anonymised data may be kept for longer.

1.2 Chat and other inquiries

When you use the chat, our contact forms, or otherwise contact us, we collect, process and store the following personal data:

• Name, email address, phone number
• What your inquiry concerns
• Date and time of your inquiry
• Other personal data you include in your inquiry

Please do not send sensitive personal data unless it is strictly necessary for your inquiry.

Purposes of the processing

• Handling your inquiry
• General communication with you
• Customer service
• Statistics and analysis

Legal basis

Legitimate interests: handling your inquiry, customer service, statistics and developing our products and services (Article 6(1)(f) GDPR). Where your inquiry concerns a cancellation or a complaint, we process your data to comply with our legal obligations (Article 6(1)(c) GDPR).

Retention period

Your personal data is kept for 2 years from your last inquiry. Anonymised data may be kept for longer. If you are a customer or a business partner, see sections 2 and 4.

2. Customers

Types of personal data

When you buy from us, we collect, process and store the following personal data:

• Contact information such as name, email address, address and phone number
• Billing and shipping address
• Payment information (processed by our payment providers; we do not have access to your full card details)
• Order number, date and time of purchase
• Information about your order, including any notes you add
• Delivery information
• Order history
• Returns, cancellations, complaints and repair requests

Purposes of the processing

• Fulfilling your order and delivering it
• Handling returns, cancellations, complaints, repairs and warranty claims
• Customer service
• Statistics and analysis

Legal basis

• Contract: to fulfil the order you have placed with us (Article 6(1)(b) GDPR).
• Legal obligation: bookkeeping and consumer law obligations (Article 6(1)(c) GDPR).
• Legitimate interests: customer service, statistics and developing our products and services (Article 6(1)(f) GDPR).

Retention period

Your personal data is kept for 3 years from your last purchase. Personal data in bookkeeping records is kept for 5 years from the end of the financial year, as required by the Danish Bookkeeping Act. Anonymised data may be kept for longer.

3. Newsletter and marketing

Types of personal data

When you sign up for our newsletter, we collect, process and store:

• Name and email address
• Your consent
• Your interaction with the emails we send you
• IP address
• Items you may have left in your basket
• Purchase history and the preferences you share with us, if you have agreed to receive personalised marketing

Purposes of the processing

• Sending newsletters and marketing
• Personalising the marketing you receive
• Statistics and analysis

Legal basis

• Consent: we only send you newsletters and marketing if you have given your prior and explicit consent (Article 6(1)(a) GDPR).
• Legitimate interests: statistics, analysis and documenting your consent (Article 6(1)(f) GDPR).

Profiling

If you have agreed to receive personalised marketing, we may tailor it to your interests, for example based on your click behaviour and previous purchases.

Retention period

Your data is kept for as long as your consent is active. You can withdraw your consent at any time by clicking the unsubscribe link in each email or by contacting us. Withdrawal does not affect processing carried out before. Documentation of your consent is kept for 2 years after withdrawal, so that we can show that our marketing complied with the law. Anonymised data may be kept for longer.

4. Suppliers, retailers and other business partners

This section covers personal data about contact persons at suppliers, retailers and other business partners.

Types of personal data

• Name, email address, phone number
• Company name, address, job title and country
• Contracts, purchase orders and invoices
• Payment terms and bank details

Purposes of the processing

• Planning and managing the business relationship
• Administration, payments, accounting and auditing
• General communication
• Handling disputes

Legal basis

• Contract (Article 6(1)(b) GDPR).
• Legitimate interests in managing our business relationships (Article 6(1)(f) GDPR).
• Legal obligation (Article 6(1)(c) GDPR).

Retention period

Your data is kept for 3 years from the end of the business relationship. Data in bookkeeping records is kept for 5 years from the end of the financial year.

5. Job applications

If you apply for a job with us, we process the information in your application and CV and what you tell us during interviews, in order to assess your application. The legal basis is your request to enter into an employment contract (Article 6(1)(b) GDPR) and our legitimate interest in assessing applicants (Article 6(1)(f) GDPR). If you are not offered a position, we delete your application 6 months after our rejection, unless you agree that we keep it for longer.

6. Social media

When you visit our profiles on social media (such as Instagram, Facebook, Pinterest or LinkedIn), we and the platform may be joint data controllers. We may process your likes, comments, messages and visits to communicate with you, improve our profiles, and for statistics. The legal basis is our legitimate interest (Article 6(1)(f) GDPR). We keep this data for 2 years from your interaction with us. Please see the platform’s own privacy policy for how it processes your data.

7. Who we share your data with

We share personal data with service providers who help us run our business, for example our webshop platform (Shopify), payment providers, shipping companies, email and marketing services (such as Klaviyo) and IT providers. They process the data only on our instructions under data processing agreements.

We may also disclose personal data to public authorities, lawyers, auditors or courts where the law requires it, or in connection with a sale or transfer of the business.

If personal data is transferred to countries outside the EU/EEA that do not have an adequate level of protection, the transfer is based on the European Commission’s standard contractual clauses or another valid transfer mechanism.

8. Your rights

You have the right to:

• Access the personal data we process about you
• Have your personal data corrected or deleted, subject to legal exceptions such as the Bookkeeping Act
• Restrict our processing of your personal data
• Object to our processing, including for direct marketing
• Receive the personal data you have provided to us and have it transferred to another data controller (data portability)
• Withdraw your consent at any time

9. Questions or complaints

If you have any questions about this privacy policy, or wish to make a complaint, please contact us: KUNSTNERNES KOOPERATIVE ApS, Kochsgade 31 D, 2. sal, 5000 Odense C, Denmark. Email: hello@kyototango.com

You can also complain to a data protection authority. In Denmark this is Datatilsynet (www.datatilsynet.dk). If you live in France, you can complain to the CNIL (www.cnil.fr).

10. Changes to this privacy policy

We may update this privacy policy from time to time. The current version is always available at www.kyototango.com.

Last updated: 29 October 2026