VELUX Privacy Notice
All companies in the VELUX Group respect and protect your privacy. This VELUX Privacy Notice (‘Privacy Notice’) is meant to help you
understand why we collect personal data about you, the types of personal data we collect, how we collect it and for how long we keep
it, with whom we share it, as well as your rights. We also explain how we keep your data secure.
We, VELUX America LLC (Hereinafter ‘VELUX’), with its registered office at 104 Ben Casey Drive Fort Mill, SC 29708 USA, under
registration number 04-2559488, is the data controller for your personal data.
This section provides information for U.S. residents, as required under U.S. privacy laws. Under the U.S. privacy laws, “personal
information” is any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably
be linked, directly or indirectly, with a particular U.S. resident or household. Personal information does not include publicly available
information, deidentified information, aggregate consumer information or other exclusions under applicable law.
Why do we process personal data and the lawful bases for collection
The main reason we collect, use, and store your data is to allow us to provide our services to you. “Service”, “our service” and similar
descriptions mean conducting business with you/your organisation and assisting you with inquiries, sales processes, and claims.
We also process information about your use of the services for business development purposes, to inform you of our business
operations, products, and services through marketing, and to improve our services through any feedback you give us. We may also
process your personal data for contractual and recruitment purposes and to comply with legal obligations.
We process personal data based on different legal bases as listed below.
Performance of a contract, including a purchase:
• When we process personal data in relation to a contract, our legal basis is ‘performance of a contract’, including a purchase.
Consent:
• When we send out a newsletter about our products, we do this based on your consent if legally required. When the lawful basis
for processing is consent, you have the right to withdraw your consent at any time.
Legal obligation
• If we share your personal data with law enforcement agencies or other governmental bodies, we share this because we have a
legal obligation to do so.
Legitimate interest
• We have a legitimate business interest in processing your data, for example, when we assist you with enquires.
The types of personal data we process
Below please find the categories of personal information about U.S. residents that we collect, sell, and/or disclose to third parties or
service providers for a business purpose:
Activity Types of personal data we
collect
(for illustration purposes)
Purpose(s) Legal basis Do we sell and/or
disclose for business
purposes
General business
operations
Name, contact details,
identifiers (e.g. real name,
postal address, unique
identifiers, online identifier,
IP address and email
As part of general VELUX
business operations, we collect
personal data about
individuals, customers,
suppliers (including third-
Based on general
business operations
being a legitimate
interest and
necessary in
Do we disclose for
business purposes?
YES
Do we sell? No
address) and other
information necessary for
conducting business with
you or your organisation.
party service providers) and
other stakeholders. We may
also use your data for testing
systems.
ensuring business
handling throughout
VELUX, within what is
reasonably expected
by you.
Assisting with
enquiries
Name, email address, phone
numbers, conversations,
other contact details,
photos, floor plans of your
house when you provide this
to VELUX.
You may choose to provide us
with personal data, such as
contact details when you
contact us by phone, email,
post, our chatbot or by using
our digital platforms available.
This personal data enables us
to respond to requests for
information on such matters
as VELUX products, to arrange
a measure and quote for
installation of VELUX products,
or to arrange for a window to
be serviced, or to present
claims under the VELUX
guarantee.
The information may be
disclosed to VELUX A/S or
other VELUX sales companies
within the Group, relevant
independent installers or
dealers in order for us to assist
customers with their enquiry
Based on our
assistance with
enquiries and
contact being a
legitimate interest
and necessary in
ensuring
communication with
you and throughout
the organization,
within what is
reasonably expected
by you.
Do we disclose for
business purposes?
YES
Do we sell? No
or arrange for services or a
quote.
We record calls for training
purposes. We may also ask you
to provide your feedback
through surveys after the
interaction.
Sales (including
web sales) and
order fulfilment.
Name, contact details,
payment and credit card
details, credit information,
credit check and customer
records (paper and
electronic customer records
containing personal
information, such as name,
address, telephone number,
credit card number and
debit
card number) etc.
We may collect personal data
of customers and prospective
customers in order to conduct
business with you or your
organisation. We use your data
to analyse shopping trends
through your web shop
activity and purchase history
to provide you a personalised
browsing experience.
Furthermore, we use the data
for processing and fulfilling
web shop orders by facilitating
the delivery of product orders
and providing relevant
customer service, including
processing your returns.
We may disclose the
information to dealers or
independent installers and
Necessary for the
performance of a
contract to which
you or the
organisation you
work for is a party.
Do we disclose for
business purposes?
YES
Do we sell? No
logistic partners to process a
customer’s order, including
arranging delivery of VELUX
products to the customer or
assisting with enquiries such
as arranging consultation
between you and our product
advisors. We also share your
information with third parties
for credit check purposes.
Campaigns Name, contact details,
commercial information
(products
or services purchased,
obtained, or considered) etc.
Execution of various
campaigns (e.g., reward
programs, cashback
campaigns, sweepstakes).
Acceptance of terms and
conditions is collected before
entry to the activity.
Necessary for the
performance of a
contract to which
you or the
organisation you
work for is a party.
Do we disclose for
business purposes?
YES
Do we sell? Yes
Product claims Name, contact details, etc. Facilitate service of VELUX
products under the VELUX
guarantee or by paid service,
i.e., we solve claims by call,
email, and visits to building
sites. In this connection, we
may share your personal data
with VELUX partners to assist
you with a service.
We may ask you to provide
your feedback through surveys
after the interaction.
Necessary for the
performance of a
contract to which
you or the
organisation you
work for is a party.
Do we disclose for
business purposes?
YES
Do we sell? No
Business
development and
VELUX apps
Personal data, which is
collected at our digital
platforms and in VELUX apps
including audio/visual data
(audio, electronic, thermal,
visual information, such as
photos and videos).
The personal data you provide
to us, and personal data
collected at our digital
platforms will be used to
enhance our consumer
insights and drive relevant
communication and offers
across all touch points you
may have with VELUX. Personal
data will also be used for
product and service
development.
Based on our
business
development being a
legitimate interest
and necessary
ensuring the
improved
effectiveness of our
business operations,
within what is
reasonably expected
by you
Do we disclose for
business purposes?
YES
Do we sell? No
Marketing Contact information,
browsing history, sales and
subscription service
information, such as name,
address, email, phone
number, purchase history,
unique identifiers such as
cookie IDs or device IDs,
tracked browsing history
based on these IDs, etc.
Please be aware that this list
is not exhaustive as we may
process any personal
information collected in
connection with your
interactions with our parent
Based on your consent or
legitimate interest, when
applicable, we process your
personal data for the purpose
of informing you of VELUX
business operations, products,
and services.
For the above purposes, we
create marketing, tailored to
your preferences and profile,
e.g.:
- To optimise and tailor the
content and delivery of our
marketing communications
Based on your
informed consent
when legally
required for sending
you newsletters, or
based on this being a
legitimate interest
necessary in sending
you newsletters,
within what is
reasonably expected
by you.
The personalisation
of the marketing will
be based on a
legitimate interest in
profiling being
Do we disclose for
business purposes?
YES
Do we sell? Yes
company, VELUX A/S, our
websites, mobile
applications, products, and
services.
when you want to receive
them, and
- To give you tailored
marketing based on your
preferences and profile, both
when engaging with us on our
own channels as well as via
third party channels (e.g.,
social media, search sites,
marketplaces).
If you do not wish to receive
any further information, you
can easily and free of charge
unsubscribe from our
marketing communication
anytime. You will find ways to
unsubscribe in connection
with subscribing to or
receiving marketing
communication from us. You
can also contact us by email or
post to unsubscribe, see
Section 8.
For some marketing activities
we act as joint controller with
other VELUX companies and
have entered into joint
controller agreements dividing
necessary when
improving marketing
impact, within what
is reasonably
expected by you.
the roles and responsibilities
between the VELUX companies.
Your participation
in photos, video,
testimonial and
campaigns
If you have agreed to it and
sent a photo to us or if your
photo is taken by a
photographer hired by us.
We will use the photo,
testimonials etc. as described
in the contract signed by you.
Necessary for the
performance of a
contract with
compensation to
which you are a
party.
For our internal
marketing this will
be based on our
marketing being a
legitimate interest
and necessary in
using the photos etc.
in internal marketing
purposes, within
what is reasonably
expected by you.
Do we disclose for
business purposes?
YES
Do we sell? YES
Website visitors,
customer surveys
and market
research
Personal data from digital
platforms or customers as
part of surveys including
usage data (internet or other
electronic network activity
information, including, but
not
limited to, browsing history,
search history, and
information regarding a
To improve the products and
services we offer, we may
collect personal data from
digital platform visitors or
customers as part of surveys.
We will contact you with a
survey and process personal
data as part of surveys
Based on our surveys
and market research
being a legitimate
interest and
necessary when
improving products
and services, within
what is reasonably
expected by you.
Do we disclose for
business purposes?
YES
Do we sell? No
resident’s interaction with
an internet website,
application, or
advertisement).
through either consent or
legitimate interests.
Surveys processing personal
data for marketing purposes
will be used only with your
consent.
Recruitment and
employment
contracts
Name, contact details,
working history, educational
diplomas, relevant record
checks, information about
professional interests, etc.
When a person applies for a
job or enters into an
employment contract with us,
we may collect certain
information such as name,
contact details, information
about working history,
educational diplomas, relevant
record checks and information
about professional interests.
This may be collected from the
person directly, from a
recruitment consultant
including references and
publicly available sources.
This information is used to
inform or assist us in the
decision as to make the person
an offer of employment or
engage the person under a
contract.
Based on our
recruiting being a
legitimate interest
and necessary in
improving a
successful match
between our
company and you as
a candidate, within
what is reasonably
expected by you.
Do we disclose for
business purposes?
YES
Do we sell? No
For further information please
read our VELUX Recruitment
Notice in WorkDay.
Compliance
including anti-
corruption,
Whistleblower
hotline and
sanctions check
All types of personal
information.
We may collect personal data
to comply with the law, a court
or authority’s decision and/or
to disclose information to
relevant public authorities as
required or permitted by law.
Necessary for the
compliance with a
legal obligation to
which we are
subject.
Do we disclose for
business purposes?
YES
Do we sell? No
How do we collect your personal data
Directly from you
In most cases, personal data is collected directly from you or generated as part of the use of our services, products, and channels. We
collect personal data you provide to us, when you request products, services, or information from us, register with us, participate in
public forums, use a chatbot or other activities on our digital platforms and apps, respond to customer surveys, or otherwise interact
with us. We collect information through various technologies, e.g., cookies. For cookies, we refer to our website.
From our business partners
In some cases, we can collect your personal data from our business partners, when they need our assistance to provide you with the
best possible service.
From your public website
In some cases, we collect your personal data on your company websites, when we want to offer you our services.
Links to other websites
This website contains links to other websites (such as Facebook, Google+, YouTube, and Pinterest) to which this this Privacy Notice does
not apply. Please note that we do not endorse other websites and their content. We encourage you to read the privacy policies of each
website you visit.
How long do we keep your personal data
We will only keep your personal data for as long as it is necessary for the purposes described in this Privacy Notice. This means that the
retention periods will vary according to the type of the information and the reason that we have the information.
Examples of retention time:
• Call recordings will be stored for a period of 90 days.
• Contact details with contractual terms etc. will be stored while your account is active or for as long as needed to provide
services to you.
• We will store the photo and testimonials for as long is necessary and as described in a contract.
• Personal data are kept until the end of a recruitment process or from withdrawal of the consent (if consent is given for future
recruitments).
• For compliance with, e.g., anti-corruption regulations, we will keep the data accordingly to laws which we are obliged to comply
with.
We will also retain your personal data where this is advisable to safeguard or improve our legal position (for instance in relation to
statutes of limitations, security, litigation, or regulatory investigations).
Who do we share your personal data with
Our company is a part of the VELUX Group, which operates globally. We share your personal information within the VELUX Group, but
only if it is necessary to fulfil the purpose for which we are processing your personal data. All entities in the VELUX Group have entered
into an Intercompany Data Processing Agreement and/or joined agreement where everyone follows the same procedures when
processing personal data, ensuring that the same level of security is maintained throughout the Group; dividing the roles and
responsibilities between the VELUX companies. If two or more companies act as joint controllers, each of the joint controllers is obliged
to independently:
• Be the first contact for you.
• Fulfil the information obligations referred to in this Privacy Notice.
• Exercise your rights provided in this Privacy Notice.
• Deal with privacy breach Notices and privacy complaints.
We may also share your personal data with selected third parties, including but not limited to:
• Business partners, suppliers, and sub-contractors that we cooperate with to deliver you the best services during the support and
sales process, including, for example, logistic providers and outsourced customer services.
• Technology providers, for example, analytics, tracking technologies, targeting and re-targeting technologies, and search engine
providers that assist us in the improvement and optimisation of our platforms, as well as companies who provide us with
website support and hosting.
• Advertisers and advertising networks that use data to select and serve relevant adverts to you and others if you have given
your consent.
• Social networking sites such as Facebook, Instagram, and Google, if required, when processing for marketing purposes and
based on your consent.
• With other parties to ensure the safety and security of our customers, to protect our rights and property, to comply with legal
processes, or in other cases if we believe in good faith that disclosure is required by law.
• VELUX Group companies or third parties who operate digital platforms and tools on behalf of our company to provide services
connected with our activities (e.g., points collection programs, cashback campaigns, sweepstakes, and training).
When we cooperate with external service providers, we enter into a data processing agreement, if relevant. These service providers are
prohibited from using your personal data for purposes other than those requested by us or required by law.
Transfer to countries outside of the U.S.
As a global organisation with offices and operations throughout the world, we will transfer personal data collected by us on an
aggregated or individual level to various divisions, subsidiaries, joint ventures and affiliated companies of the VELUX Group around the
world located inside or outside the U.S. for the purposes stated above and in accordance with applicable laws, as well as to sub-
contractors to VELUX (data processors) for storage and service purposes. Your personal data will not be disclosed to anyone outside
the VELUX Group unless permitted or required under applicable legislation and where necessary subject to appropriate written
assurances from third parties who have access to your personal data, in which they must guarantee that they will protect the data
with security measures designed to provide an adequate level of protection.
Data security
The security, integrity, and confidentiality of your personal data is important to us. We have implemented technical, administrative, and
physical security measures that are designed to protect your personal data from unauthorised access, disclosure, use, and
modification. From time to time, we review our security procedures to consider appropriate recent technologies and methods. Please
be aware that despite our best efforts, no security measures are perfect or impenetrable.
Your privacy rights
Certain U.S. data privacy laws grant you as a U.S. citizen below rights. Please not that it will depend on state and federal data privacy
laws and the specific context.
Your rights Elaboration
Right to Opt-
Out
As a U.S. resident you have the right to opt-out of our sale of your personal information. Online opt-out rights
can be exercised by visiting our Cookie Policy for global privacy control options or by going directly to our
Cookie Settings page and deleting or preventing cookies from being used.
If you have any questions regarding the specific personal data we process or retain about you, or if you want to exercise your rights,
please contact vcustomer.service@velux.com
Your rights Elaboration
Right to Opt-In We do not sell personal information about residents who we know are younger than 16 years old without
verifiable parental consent.
Right of
deletion
As a U.S. resident you have the right to request deletion of your personal information that we have collected
about you, subject to certain exemptions, and to have such personal information deleted.
Right to know:
Right to a copy
As a U.S. resident you have the right to request a copy of the specific pieces of personal information that we
have collected about you in the prior 12 months and to have this delivered, free of charge, either (a) by mail or
(b) electronically in a portable and, to the extent technically feasible, readily useable format that allows the
individual to transmit this information to another entity without hindrance.
Right to know:
Information
As a U.S. resident you have the right to request that we provide certain information about how we have handled
your personal information in the prior 12 months, including the:
• categories of personal information collected;
• categories of sources of personal information;
• business and/or commercial purposes for collecting and selling their personal information;
• categories of third parties/with whom we have disclosed or shared your personal information;
• categories of personal information that we have disclosed or shared with a third party for a business
purpose;
• categories of personal information collected; and
• categories of third parties to whom your personal information has been sold and the specific categories
of personal information sold to each category of third party.
Right to non-
discrimination
We will not discriminate against residents who exercise their rights under U.S. privacy laws. Discrimination
may exist where a business denies or provides a different level or quality of goods or services, or charges (or
suggests that it will charge) different prices or rates or impose penalties on residents who exercise their
privacy rights, unless doing so is reasonably related to the value provided to the business by the residents’
data.
We will respond to your request to exercise any of your rights within ten business days.
If you consider that we have failed to resolve the complaint satisfactorily, you may file a complaint to The Federal Trade Commission or
your relevant state attorneys.
Changes to this VELUX Privacy Notice
From time to time, we may change this Privacy Notice to accommodate the latest technologies, industry practices, regulatory
requirements, or for other purposes. At all times, we will post the most recent version on our digital platforms. We advise you to read
the Privacy Notice regularly.
This Privacy Notice was last updated: 15 May 2024