Privacy Policy

Thank you for your interest in this Privacy Policy! This Privacy Policy applies to operated by Carla Design, Langåsen 4, 3250 Gilleleje, Denmark (“Denmark”,”we”, “us”, or “our”).

This Privacy Policy governs the Personal Data we collect from our customers, our website and other online visitors ("you or "your"). For information we automatically collect from your online visits through cookies, please refer to our Cookie Policy.

Terms Used

For the purposes of this Privacy Policy,

“Personal Data” means information that may directly or indirectly identify/identify you, such as your name, telephone number, email address, IP (Internet Protocol) address and location data.

“Processing” means any operation or set of operations which is performed upon Personal Data, whether or not by automatic means. The term is broad and covers virtually any handling of data.

General Information

Our use of your Personal Data is subject to both the Danish Data Protection Act (Act. no. 502 “Databeskyttelsesloven”) (“DPA”) and the EU's General Data Protection Regulation (“GDPR”), and of course we process your Personal Data accordingly.

Denmark is the responsible party within the meaning of the DPA and the GDPR. If you have any questions about this policy or our data protection practices, please contact us using, call +45 22 60 88 08 or write to us at the above address.

Data we collect

We may ask you to provide us with Personal Data:

  • When you use our websites.
  • When you request offers, services, support, or information.
  • When you place orders for services or register for a membership.
  • When you participate in our promotional activities.
  • When you subscribe to advertising and promotional emails or other materials.
  • When you interact with us on third party social networks (subject to that third party's terms of use and privacy policies).
  • When you contact us.

The categories of Personal Data we collect may include name, password, email address, telephone numbers. They may also include information about your work such as your agency name and other business or corporate information.

In order to provide you with a more consistent and personalized experience in your interactions with us, information collected through one source may be combined with information we receive from other sources. This may include information that allows us to recognize you across multiple devices through which you access our website.

We may also supplement the information we collect with information we receive from other parties, including our Business Partners and other third parties.

Information we collect automatically

We may automatically collect behavioral and usage information about your visits to our website, including the pages you view, the links you click, and other actions you take in connection with our website and our services. We may also collect certain information from the browser you use to access our website, such as your IP address, device ID, location data, browser type and language, access times.

We integrate the fonts of the provider Google LLC, and Font Awesome of Fonticons Inc, whereby the user's data is used solely for the purpose of displaying the fonts in the user's browser. The integration is based on my legitimate interest in a technically secure, maintenance-free and efficient use of fonts, their uniform display and taking into account possible licensing restrictions for their integration. The legal basis for this processing is our legitimate interest.

For the simplified booking of appointments, we use the service of Calendly, Inc. By using this service, the data you submit including your Name, Email address and IP Address is transferred to Calendly. The processing of the data entered via Calendly is thus exclusively based on a legitimate interest of simplified appointment arrangement and the initiation of a contract. The data entered by you remains with us until you request us to delete it or the purpose for storing the data no longer applies.

We use so-called cookies on our website. Cookies are pieces of information that are transmitted from our web server or third-party web servers to your web browser and stored there for later retrieval. Cookies may be small files or other types of information storage.

There are different types of cookies:

  • Essential Cookies. Essential cookies are cookies to provide a correct and user-friendly website; and
  • Non-essential Cookies. Non-essential Cookies are any cookies that do not fall within the definition of essential cookies, such as cookies used to analyze your behavior on a website (“analytical” cookies).

As set out in Denmark’s Marketing Practices Act (Act No. 426) as amended, and the Act on Electronic Communications and Network Services (Act No. 128) as amended, and the EU`s Privacy and Electronic Communications Directive (“PECD”), we need to obtain consent for the use of Non-essential Cookies. For further information on the cookies we use, please refer to our Cookie Policy. The legal basis for processing is our legitimate interest and your consent. For further information on the cookies we use, please refer to our Cookie Policy.

How we use Personal Data

We may use your Personal Data for the following purposes:

  • Providing our services and support or carrying out the works you have requested.
  • Sending communications to you, including information and the stages of your transactions with us.
  • Facilitating your use of our website and online chat and communication tools and services.
  • Help via online chat and communication tools and services to answer your queries.
  • Customize, analyze and improve our services (including content and our advertising campaigns), technologies, communications and relationship with you.
  • Better understanding of our customers and website users, including their interests and interactions with our site.
  • Preventing Fraud and Other Prohibited or Illegal Activities.
  • Protecting the security or integrity of our websites, our businesses, and our services.
  • Perform other functions or serve other purposes as communicated to you at the point of collection, or as required or permitted by law.
Legal Basis for Processing

Our legal basis for collecting and using your Personal Data as described in this Privacy Policy will depend on the Personal Data involved and the specific context in which we collect it. In general, we collect and process your Personal Data based on one or more of the following:

  • Your consent, for example where we have obtained your consent to process your Personal Data for specific activities (such as the use of cookies for online tracking and analysis).

    You have the right to withdraw your consent at any time by contacting us at any time. If you withdraw your consent, this will not affect the lawfulness of any processing based on your consent prior to its withdrawal. Where applicable, we may ask for your consent for processing at the point of providing your Personal Data.
  • To comply with a contractual obligation. We will inform you at the time of collection whether the provision of your Personal Data is mandatory and the possible consequences if you do not provide us with your data.
  • To comply with our legal obligations where other laws require us to process your Personal Data (for example, health and safety, tax and other applicable laws and regulations).
  • In our legitimate interest which include providing this website and/or related services, and/or conducting marketing and advertising activities, provided always that our legitimate interests do not override any reservation or prejudice your rights and freedoms.

If you have questions or need more information about the legal basis under which we collect your Personal Data, please contact us.

Retention of your data

We will retain your Personal Data as necessary, in connection with the purposes described in this Privacy Policy, for as long as your account is active, and in accordance with our data retention policies and applicable law.

International transfers

We may transfer your Personal Data to other companies as necessary for the purposes described in this Privacy Policy. In order to provide adequate protection for your Personal Data when it is transferred, we have contractual arrangements regarding such transfers. We take all reasonable technical and organizational measures to protect the Personal Data we transfer.

How we may share your Personal Data

We may share your Personal Data with our Business Partners for the purposes described in this Privacy Policy, including (but not limited to) conducting the services you request, or customizing our business to better meet your needs.

We share your Personal Data only with Business Partners who agree to protect and use your Personal Data solely for the purposes specified by us.

We may also disclose your Personal Data for any purpose with your consent or for law enforcement, fraud prevention or other legal actions as required by law or regulation, or if we reasonably believe that we must protect us, our customers or other business interests.

Except as described above of which you will be informed in advance, we will not disclose your Personal Data.

Privacy rights

Under the DPA and the GDPR, you can exercise the following rights:

  • Right to information
  • Right to rectification
  • Right to deletion
  • Right to data portability
  • Right of objection
  • Right to withdraw consent
  • Right to complain to a supervisory authority
  • Right not to be subject to a decision based solely on automated processing.

If you have any questions about the nature of the Personal Data we hold about you, or if you wish to exercise any of your rights, please contact us.

Updating your information

If you believe that the information we hold about you is inaccurate or that we are no longer entitled to use it and want to request its rectification, deletion, or object to its processing, please do so by contacting us.

Withdrawing your consent

You can revoke consents you have given at any time by contacting us. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Access Request

In the event that you wish to make a Data Subject Access Request, you may inform us in writing of the same. We will respond to requests regarding access and correction as soon as reasonably possible. Should we not be able to respond to your request within thirty (30) days, we will tell you why and when we will be able to respond to your request. If we are unable to provide you with any Personal Data or to make a correction requested by you, we will tell you why.

Complaint to a supervisory authority

You have the right to lodge a complaint about our processing of personal data with a supervisory authority responsible for data protection. The Data Protection Agency (“Datatilsynet”) located at Carl Jacobsens Vej 35, DK-2500 Valby, Denmark, is the Data Protection Authority for Denmark. However, we would appreciate the opportunity to address your concerns before you contact Datatilsynet.

How we secure your Personal Data

We take all reasonable steps to protect your Personal Data from misuse, interference and loss, and from unauthorized access, modification or disclosure. The ways we achieve this are:

  • The use of encryption when collecting or transferring Personal Data.
  • The existence of technical and organizational measures designed to ensure the continued integrity, availability and resilience of processing systems and services.
  • Limiting physical access to our offices.
  • Limiting access to the information we collect about you.
  • Ensuring that we and our Business Partners have appropriate security measures in place to protect your Personal Data.
  • Where required by law, destroying or de-identifying your Personal Data.
Collection and Use of Children's Personal Data

We take children's privacy seriously. We do not knowingly collect Personal Data from children through our websites. If you are a child, as defined by the laws of your country, do not submit Personal Data through our websites without the express consent and participation of your parent or guardian.

Validity and questions

This Privacy Policy was last updated on Wednesday, 30 August 2023 and is the current and valid version. However, we want to point out that from time to time due to actual or legal changes a revision to this policy may be necessary. If you have any questions or if you wish to exercise your rights, please feel free to contact us using or call +45 22 60 88 08.