Privacy Policy
At KUNSTNERNES KOOPERATIVE ApS (“we”, “us” or “our”) confidentiality and data protection is a high priority. This privacy policy sets out the guidelines for KUNSTNERNES KOOPERATIVE ApS’ processing of your personal data and provides you with the information you have the right to receive according to applicable data protection law. You must read the privacy policy before submitting your personal data to KUNSTNERNES KOOPERATIVE ApS.
Kyoto Tango is a brand name and website operated by KUNSTNERNES KOOPERATIVE ApS.
Data controller and contact information
The data controller for your personal data is: KUNSTNERNES KOOPERATIVE ApS, Kochsgade 31 D, 2. sal, 5000 Odense C, Denmark. Company registration no. DK13278989.
1. If you visit our website
This section sets out the policy of KUNSTNERNES KOOPERATIVE ApS’ processing of personal data regarding users of our website www.kyototango.com.
1.1 Cookies
We use cookies on our website and applications. We may collect, process and store the following personal data about you via cookies when you visit our website or applications:
IP address
Hardware, software and internet browser used to access our website
Date and time of your access to our website or applications
Time zone
Preferences and click behaviour
Browsing history
We use cookies to collect the personal data stated above. You can find more information regarding our use of cookies in our cookie information banner on our website.
Purposes of the processing
Your personal data may be processed for the following purposes:
Promotional marketing in general
Product and service development
Statistics and analysis
Legal basis
We will mainly process your personal data based on the following legal basis:
Legitimate interests: The processing of your personal data will be based on our legitimate interest in, for instance, conducting statistics, analysis, marketing activities (where consent is not required), as well as improving and developing our products and services (Article 6 (1) (f) of the GDPR).
Consent: In some cases, we need your consent, e.g. in order for us to place cookies on your devices (Article 6 (1)(a) of the GDPR).
Retention period
Your personal data will be deleted when it is no longer needed for one or more of the purposes mentioned above. Please refer to our cookie information banner on our website for information about the expiry of cookies placed on your device.
The personal data may, however, be processed and stored for a longer period of time if anonymized.
1.2 Chat, booking of private appointments and other inquiries
Types of personal data
When you use the chat window, the form for booking of private appointments or other contact forms on our website or otherwise contact or communicate with us, we collect, process and store the following personal data about you:
Name, email address, phone number
What your inquiry or the communication concerns
Date and time of your inquiry
Other personal data you submit as part of your inquiry or communication with us
We recommend that you do not submit sensitive personal data, unless it is strictly necessary in relation to your inquiry. If you submit sensitive or otherwise confidential personal data by email, we recommend that you use encryption.
Purposes of the processing
Your personal data may be processed for the following purposes:
Handling of your inquiry
General communication with you
Marketing in general
Customer service
Statistics and analysis
Legal basis
We will mainly process your personal data based on one or more of the following legal bases:
Legitimate interests: The processing of your personal data will be based on our legitimate interest in, for instance, conducting statistics, analysis and developing our products and services as well as our legitimate interest in promoting our brand and sending marketing material (where consent is not required) (Article 6 (1) (f) of the GDPR).
Retention period
Your personal data will be kept for 2 years from your last inquiry.
Anonymized personal data may, however, be kept for a longer period of time.
If you are a customer or employed with one of our business partners, we refer to section 2 and 5 below.
2. Customers
Types of personal data
When you purchase an item from us, we collect, process and store the following personal data about you:
Contact information such as name, email address, address and phone number
Billing address and shipping address
Payment information (including credit card information)
Order number
Time and date of your purchase
Information about your order, such as which items you have purchased or any special remarks you have submitted in relation to your order (e.g. a personal card or engraving)
Delivery information, such as when your purchased items were delivered
Order/purchase history
Whether you return purchased items and, if so, when you return them
Complaints or notices of defects
Purposes of the processing
Your personal data may be processed for the following purposes:
Fulfillment of orders
Customer service
Marketing in general
Statistics and analytics
Legal basis
We will mainly process your personal data based on one or more of the following legal bases:
Legitimate interests: The processing of your personal data will be based on our legitimate interest in providing customer service, conducting statistics and analysis for developing our products and services as well as our legitimate interest in promoting our brand and sending marketing material (where consent is not required) (Article 6 (1) (f) of the GDPR).
Contractual obligation: We process your personal data to fulfill the order you have placed with us (Article 6 (1) (b) of the GDPR).
Retention period
Your personal data will be kept for 3 years from your last purchase.
Any personal data included in bookkeeping records will be stored for 5 years as from expiry of the financial year at which time the data will be deleted. The storage period has been determined on the basis of the storage requirements laid down in s. 10 of the Danish Bookkeeping Act and, consequently, with a view to complying with applicable law.
Anonymized personal data may, however, be kept for a longer period of time.
3. If you subscribe to our newsletter or other marketing material
This section sets out the policy for our processing of personal data when you have subscribed to our newsletter or other marketing material.
Types of personal data
When you subscribe to our newsletter or other marketing material, we collect, process and store the following personal data about you:
Name and email address
Your consent
Your click behaviour in relation to marketing material we have sent you
IP address
Which items you may have abandoned in the webshop basket
Purposes of the processing
Your personal data may be processed for the following purposes:
Promotional marketing
Statistics and analysis
Legal basis
We will process your personal data based on one or more of the following legal bases:
Consent: We will only use your personal data in order to send you product information, newsletters and other marketing material if you have provided your prior and explicit consent hereto (Article 6 (1) (a) of the GDPR).
Legitimate interests: The processing of your personal data for statistics and analysis will be based on our legitimate interest in improving and developing our products and services (Article 6 (1) (f) of the GDPR).
Retention period
Your personal data will be retained for as long as your consent to receive newsletters is active.
You may revoke your consent by clicking the unsubscribe link in the bottom of each e-mail or by contacting us as described below. The revocation of your consent does not affect the legality of the processing prior to the withdrawal.
The documentation for your marketing consent will be kept for two years after revocation. This retention period is based on our legitimate interest in being able to document that direct marketing activities have been carried out in compliance with applicable legislation (Article 6 (1) (f) of the GDPR).
Anonymized personal data may be kept for a longer period of time.
4. Private Client Relations
This privacy policy applies for our processing of personal data in relation to private client relations marketing.
Types of personal data
We collect, process, and store your personal data for marketing purposes when you sign up for our private client relations marketing material. We may collect, process, and store the following types of your personal data:
Name, phone number and email address
Age and gender
Purchase history
Private appointment history
Ring size(s)
Preferences and wish list (favorites)
Special occasions such as birthdays and anniversaries
Your consent
Your click behaviour in relation to published material
IP address
We will obtain information from your order history, your interaction with our marketing material, our correspondence and during private appointments.
Purposes of the processing
Your personal data may be processed for the following purposes:
Marketing and personal service in regard to care and maintenance of your purchases, guidance on styling and purchases, wish lists and sizes
Analytics and statistics
Documentation of your consent
Legal basis
We process your personal data on one or more of the following grounds:
Consent: We process your personal data for direct marketing and profiling, including for sending out newsletters, if you have given your prior and explicit consent to this (Article 6(1)(a) of the GDPR).
Legitimate interests: The processing of your personal data will, in connection with documentation of your consent and analysis and statistics, be based on our legitimate interests in being able to improve and develop our service (Article 6(1)(f) of the GDPR).
Retention period
Your personal data will be stored as long as your consent to receive newsletters is active.
You can always withdraw your consent by clicking on the unsubscribe link at the bottom of each email or by contacting us as described below. However, withdrawing your consent does not affect the legality of the processing that preceded the withdrawal.
Documentation of your marketing consent is kept for 2 years from the time you have withdrawn your consent to receive direct marketing material. The retention period is determined based on our legitimate interest in being able to document that direct marketing has been carried out in accordance with applicable legislation (Article 6(1)(f) of the GDPR).
In addition, the information can be stored for a longer period in anonymised form.
Profiling
If you have provided your consent to receiving customized marketing material as described in this privacy policy, we may make use of profiling, meaning that we may organise marketing material for you to consider preferences and interests that you have indicated, e.g. on the basis of information on click behaviour, previous purchases, age, gender and special occasions such as birthdays and anniversaries.
The profiling will affect the marketing material you receive, as the purpose of such profiling is to target you and your interests and needs in the best possible way.
5. Contact persons at suppliers and other business partners
This section sets out the policy for our processing of personal data collected from owners of sole proprietorships or contact persons at suppliers and other business partners who collaborate with us.
Collection of personal data
We may collect, process and store personal data about you in the following instances:
When your company or the company you are employed with enters into an agreement with us
When you have shown an interest in us, e.g., by providing your business card
When you collaborate and communicate with us
Types of personal data
We may collect, process and store the following personal data:
Name, email address, telephone number and similar identification data
Individual data, such as preferred language and home country
Organizational data, such as company name, company address, job position, business area, primary work location and country
Contractual data, such as purchase orders, invoices, contracts and other agreements between your company (or your employer) and us, that may include e.g., your contact information
Any feedback you provide if you participate in surveys or similar
Financial data, such as payment terms and bank account details
Such information may be provided directly by you (primarily via emails and other correspondence) or by a third party such as your employer.
Purposes of the processing
Your personal data may be processed for the following purposes:
Generally, to plan, perform and manage the business relationship, including any contracts
Administration, such as processing payments, evaluation of credit ratings, performing accounting, auditing, and billing
Completion of requests received from you
General communication
Statistics and analytics
Marketing
Market research
Dispute handling
Legal basis
We will mainly process your personal data based on the following legal bases:
Contractual obligation: The processing of your personal data will in some cases be necessary for the performance of a contract (Article 6 (1) (b) of the GDPR).
Legitimate interests: We may process your personal data pursuant to our legitimate interest in managing daily operations according to lawful and fair business practices, including planning, performing and managing the business relationship or our legitimate interest in e.g. statistics, analysis, marketing activities (where consent is not required), providing support as well as improving and developing our products and services. The processing may also be necessary for our legitimate interests in preventing fraud or establish, exercise, or defend legal claims (Article 6 (1) (f) of the GDPR).
Legal obligation: The processing of your personal data will in some cases be necessary to comply with legal obligations (Article 6 (1) (c) of the GDPR).
Retention period
Your personal data will be retained for 3 years from the end of the business relationship.
Any personal data included in bookkeeping records will be stored for 5 years as from expiry of the financial year at which time the data will be deleted, in accordance with applicable law.
Anonymized personal data may be kept for a longer period of time.
6. If you apply for a job
This section sets out the policy for our processing of personal data in relation to recruitment.
Types of personal data
We may collect, process, and store the following personal data:
Personal data which you have disclosed in your job application and CV as well as any attachments
Personal data you disclose during any job interviews
Information about you, including information regarding your previous jobs, activities, competencies, performance, as well as your general appearance, which is publicly available on the internet, including on social media
Results of personality tests etc.
Criminal records
References from your previous and/or current employers
Credit information and rating if the position you have applied for involves financial responsibilities (e.g., bookkeeping or accounting)
Health information if the position you have applied for demands special requirements for your health
Purposes of the processing
Your personal data will be processed for the purpose of assessing whether we can offer you a position.
Legal basis
We will mainly process your personal data based on the following legal bases:
Request to enter into an employment contract with us: We may process your personal data on the basis of your request to enter into an employment contract (Article 6 (1) (b) of the GDPR).
Legitimate interests: We may process your personal data on the basis of our legitimate interests in carrying out further assessments of whether we want to hire you, including on the basis of personality tests and publicly available information on the internet and – if the position entails financial responsibility – credit information and rating (Article 6 (1) (f) of the GDPR).
Consent: In exceptional cases and only when no other legal basis can be applied, we may ask separately for your consent to process your personal data (Article 6 (1) (a) and Article 9 (2) (a) of the GDPR and s. 8 (3) of the Danish Data Protection Act). We will, for instance, only take references from your previous and/or current employers or collect your health information or criminal records if you have consented to this.
Retention period
If you are offered a position with us, your application and additional relevant personal data obtained during the recruitment procedure will be stored in your employee file.
If you are not offered a position, we will store your application and any additional personal data obtained during the recruitment procedure for a period of 6 months following our rejection, unless you have provided your consent to the storage hereof for a longer period.
If we have collected your criminal records, we will delete them immediately after we have received and reviewed them.
7. If you visit our profiles or fan pages on social media
This section sets out the policy for our processing of personal data collected via our profiles or fan pages on social media.
We and the providers of social media may be joint data controllers for the processing of your personal data collected when you visit our profiles or fan pages on social media. We attempt to ensure that you receive information on the processing of your personal data when you visit our profiles or fan pages, including through information provided by the relevant platform.
Our profiles/fan pages may include (depending on what we use from time to time):
Facebook and/or Instagram
YouTube
Vimeo
Other similar platforms
Collection of personal data
Depending on your conduct on the social media, we and the provider of the social media in question may retrieve the following personal data about you:
Your “likes” or other reactions expressed on our profile or fan page
Comments left by you on our profile or fan page
Your visits to our profile or fan page
Age, gender, relationship status, place of work, lifestyle, geographical information and fields of interest (as made available to page owners via platform insights)
Purpose of the processing
We may process your personal data for the following purposes:
To communicate with you if you comment on our posts or send us a direct message
Improve our products and services, including our profiles and fan pages on social media
Statistics and analytics
Legal basis
We will mainly process your personal data based on the following legal bases:
Legitimate interests: We may process your personal data on the basis of our legitimate interests in being able to improve our products and services (Article 6 (1) (f) of the GDPR).
The providers of social media may process your personal data to improve their advertisement systems and to provide us with statistics/insights, often on the basis of your visit to our profile or fan page, with a view to advertising and customising activities on the profile or fan page. The providers of social media process your personal data as a consequence of their legitimate interests (Article 6 (1) (f) of the GDPR) and/or your consent (Article 6 (1) (a) of the GDPR), depending on the platform and your settings.
Retention period
Your personal data will be retained by us for two years from your interaction with us on social media. We do not delete reviews, comments, likes or other interactions you leave publicly on our profiles and fan pages. You may delete such expressions or interactions by removing them from the platform.
Please refer to the privacy policy of the relevant platform for information on their retention of your personal data.
Anonymized personal data may be kept for a longer period of time.
8. Disclosure to other data controllers and sharing with data processors
To fulfil the purposes described above we may provide access to your personal data to third parties who, on the basis of a contractual relationship with us, provide relevant services, e.g. IT providers, e-mail providers and marketing providers. Such service providers will only process personal data in accordance with our instructions pursuant to data processor agreements.
In connection with business development, the company structure may change, e.g. through a full or partial sale/transfer. In case of a partial handover of assets containing personal data, the legal basis for the related disclosure of personal data is, as a general rule, Article 6 (1) (f) of the GDPR, as we have a legitimate interest in transferring part of our assets and making commercial changes.
Aside from the above, it is a general rule that your personal data is not disclosed to a third party without your permission. However, under certain circumstances and in accordance with applicable law, we may need to disclose your personal data to:
Police
Lawyers
Auditors
Courts
Public authorities
Prospective buyers
Affiliated companies
If your personal data is transferred to data processors or data controllers established in countries outside the EU/EEA which do not have an adequate level of protection, such transfer will be based on the EU Commission’s standard contractual clauses or other valid transfer mechanisms.
9. Your rights
You have the right to:
Access the personal data we process about you
Object to our collection and further processing of your personal data
Have your personal data rectified and deleted, with certain statutory exceptions, including the Bookkeeping Act
Request us to restrict the processing of your personal data
Under certain circumstances request to receive a copy of your personal data as well as the transmission of your personal data which you have provided us with to another data controller (data portability)
Withdraw any consent you may have given at any time. We will then delete your personal data, unless we can continue the processing on another basis. Our newsletter can be unsubscribed by clicking the link at the bottom of the newsletter
10. Questions or complaints
If you have any questions in relation to this privacy policy or if you wish to make a complaint in connection to our processing of your personal data, please contact us:
KUNSTNERNES KOOPERATIVE ApS Kochsgade 31 D, 2. sal, 5000 Odense C, Denmark. Email: hello@kyototango.com
If your complaint is not resolved by us and you wish to proceed with the case, you can send your complaint to the supervisory authority in your country. In Denmark, the supervisory authority is Datatilsynet. A list of European supervisory authorities is available via the European Data Protection Board.
11. Changes to the privacy policy
We reserve the right to make changes to this privacy policy from time to time. When updated, the date at the bottom of the privacy policy will be updated accordingly. The, at all times, applicable privacy policy will be available at our website www.kyototango.com.
Last updated: 1 April 2026