Privacy Policy

OutletSpot.net ("we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you visit our website at outletspot.net (the "Website"), in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable European data protection legislation.

Please read this policy carefully to understand our practices regarding your personal data and how we will treat it. By using our Website, you acknowledge that you have read and understood this Privacy Policy.

1. Data Controller

The data controller responsible for your personal data is:

If you have any questions about this Privacy Policy or our data practices, please contact our Data Protection Officer at the email address above.

2. What Data We Collect

We collect and process the following categories of personal data:

2.1 Newsletter Subscription Data

When you subscribe to our newsletter, we collect:

• Email address

This data is submitted voluntarily through our subscription form, which is processed via Netlify Forms.

2.2 Business Submission Data

When you submit a business listing (outlet store, factory store, or warehouse sale), we collect:

• Business contact name
• Email address
• Outlet/business name
• Business address and location details
• Business description and category information
• Opening hours and other operational details
• Website URL (if provided)

This data is collected via Netlify Forms and stored in our Netlify Database for directory listing purposes.

2.3 Contact Form Data

When you contact us via our contact form, we collect:

• Name
• Email address
• Message content

2.4 Community Tips Data

When you submit a community tip or outlet suggestion through our community feature, we collect:

• Name or nickname (displayed publicly alongside your tip)
• Tip or suggestion content (displayed publicly after admin approval)
• Selected category tags
• IP address (stored temporarily for spam protection and rate limiting)

Your name/nickname and tip content will be publicly visible on OutletSpot.net after approval by an administrator. IP addresses are stored on the basis of legitimate interest (Article 6(1)(f) GDPR) to prevent spam and abuse. IP addresses are not shared with third parties and are periodically purged.

2.5 Technical and Analytics Data

When you visit our Website, we may automatically collect:

• IP address (anonymised where possible)
• Browser type and version
• Operating system
• Referring website
• Pages visited and time spent on pages
• Date and time of access
• Device type and screen resolution

This data is collected through server logs provided by our hosting provider, Netlify. We do not use third-party analytics tracking scripts on our Website.

2.6 Cookie Preference Data

We store your cookie consent preferences locally on your device to remember your choices. For full details, see our Cookie Policy.

2.7 Advertising Data

When you consent to marketing cookies, our advertising partner Google AdSense may collect:

• Cookies and device identifiers for ad personalisation
• Browsing activity and interaction data related to ads
• IP address (for geographic ad targeting)

This data is only collected when you have given explicit consent to marketing cookies through our cookie consent mechanism. You can withdraw consent at any time via our Cookie Settings.

3. Legal Basis for Processing

Under the GDPR, we must have a lawful basis for processing your personal data. The legal bases we rely on are:

Data / Activity	Legal Basis	GDPR Article
Newsletter subscription	Consent — You actively opt in by submitting your email address and providing explicit consent.	Art. 6(1)(a)
Business listing submissions	Contract — Processing is necessary for the performance of the listing agreement between you and OutletSpot.net.	Art. 6(1)(b)
Contact form enquiries	Legitimate Interest — It is in our legitimate interest to respond to your enquiries and provide customer support.	Art. 6(1)(f)
Technical / server logs	Legitimate Interest — Necessary for website security, performance monitoring, and functionality.	Art. 6(1)(f)
Cookie preferences	Consent — You choose your cookie preferences through our consent mechanism.	Art. 6(1)(a)
Advertising (Google AdSense)	Consent — Advertising cookies are only placed after you explicitly consent to marketing cookies via our cookie preferences.	Art. 6(1)(a)

Where we rely on legitimate interest, we have conducted a balancing test to ensure that our interests do not override your fundamental rights and freedoms. You have the right to object to processing based on legitimate interest at any time.

4. How We Use Your Data

We use the personal data we collect for the following purposes:

• Newsletter emails: To send you updates about new outlet openings, warehouse sales, seasonal deals, and relevant content you have opted in to receive.
• Business submissions: To create, manage, and display outlet directory listings on our Website; to communicate with listing owners about their entries; and to verify listing accuracy.
• Contact form enquiries: To respond to your questions, feedback, or support requests.
• Community tips: To display user-contributed tips and outlet suggestions on the Website, and to moderate content for quality. IP addresses are used solely for spam protection and rate limiting.
• Technical data: To ensure the security and proper functioning of the Website, to diagnose technical issues, and to understand general usage patterns for improving our service.
• Cookie preferences: To remember and respect your cookie consent choices across visits.
• Advertising: When you consent to marketing cookies, we display advertisements through Google AdSense. Google may use data to show you relevant ads based on your interests and browsing activity.

We do not use your data for automated decision-making or profiling.

5. Data Retention

We retain personal data only for as long as necessary for the purposes outlined in this policy. Our specific retention periods are:

Data Type	Retention Period
Newsletter email addresses	Until you unsubscribe. Upon unsubscription, your email is deleted within 30 days.
Business listing data	For the duration of the active listing. Data is deleted within 90 days after a listing is removed or the business requests deletion.
Contact form submissions	Up to 12 months from the date of submission, or until the enquiry is resolved, whichever is later.
Server / technical logs	Up to 30 days, as managed by Netlify's infrastructure.
Cookie preferences	Stored locally on your device; expires after 12 months or when you clear your browser data.

When the retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with you.

6. Third-Party Processors

We share your data with the following third-party service providers who process data on our behalf. Each processor is bound by data processing agreements and appropriate safeguards:

6.1 Netlify, Inc.

• Services: Website hosting, form handling (Netlify Forms), database storage (Netlify Database)
• Data processed: All form submission data, server logs, technical data
• Location: United States (with EU data processing safeguards)
• Privacy policy: netlify.com/privacy

6.2 Google Fonts (Google LLC)

• Services: Web font delivery (Inter typeface)
• Data processed: IP address, browser user agent (transmitted when fonts are loaded from Google's servers)
• Location: United States (with EU data processing safeguards)
• Privacy policy: policies.google.com/privacy

6.3 Unsplash, Inc.

• Services: Stock photography / imagery used on the Website
• Data processed: IP address, browser user agent (transmitted when images are loaded from Unsplash servers, if applicable)
• Location: United States / Canada
• Privacy policy: unsplash.com/privacy

6.4 Google AdSense (Google LLC)

• Services: Display advertising on our Website
• Data processed: Cookies, device identifiers, IP address, browsing behaviour, ad interaction data
• Condition: Only activated when you consent to marketing cookies
• Location: United States (with EU data processing safeguards)
• Privacy policy: policies.google.com/privacy
• Ad personalisation settings: adssettings.google.com

We do not sell, rent, or trade your personal data to any third parties for marketing purposes.

7. International Data Transfers

As some of our third-party processors are based outside the European Economic Area (EEA), your personal data may be transferred to and processed in countries outside the EEA, including the United States.

When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, including:

• EU-U.S. Data Privacy Framework: Where the recipient is certified under the EU-U.S. Data Privacy Framework.
• Standard Contractual Clauses (SCCs): EU Commission-approved standard contractual clauses that provide adequate protection for your data.
• Adequacy decisions: Transfers to countries that the European Commission has determined provide an adequate level of data protection.

You may request a copy of the safeguards in place by contacting us at outletspot@nordsol.dk.

8. Your Rights Under GDPR

Under the General Data Protection Regulation, you have the following rights regarding your personal data:

• Right of Access (Art. 15): You have the right to request a copy of the personal data we hold about you, along with information about how it is processed.
• Right to Rectification (Art. 16): You have the right to request correction of inaccurate or incomplete personal data we hold about you.
• Right to Erasure (Art. 17): You have the right to request deletion of your personal data where there is no compelling reason for its continued processing ("right to be forgotten").
• Right to Restriction of Processing (Art. 18): You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
• Right to Data Portability (Art. 20): You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
• Right to Object (Art. 21): You have the right to object to the processing of your personal data where we rely on legitimate interest as our legal basis. We will cease processing unless we demonstrate compelling legitimate grounds.
• Right to Withdraw Consent (Art. 7(3)): Where we process data based on your consent (e.g., newsletter), you may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority (data protection authority) in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.

9. How to Exercise Your Rights

To exercise any of the rights described above, please contact us:

When making a request, please provide:

1. Your full name and email address associated with your data
2. A clear description of the right you wish to exercise
3. Any relevant details to help us locate your data (e.g., newsletter subscription, business listing name)

We will respond to your request within 30 days of receipt, as required by the GDPR. In complex cases, this period may be extended by an additional 60 days, and we will notify you of any such extension within the initial 30-day period.

We will not charge a fee for processing your request unless the request is manifestly unfounded or excessive. We may request additional information to verify your identity before processing a request.

Unsubscribing from the Newsletter

You can unsubscribe from our newsletter at any time by clicking the "Unsubscribe" link included in every newsletter email, or by emailing outletspot@nordsol.dk with the subject line "Unsubscribe".

10. Cookies

Our Website uses cookies and similar technologies to ensure proper functionality and to remember your preferences. We use a cookie consent mechanism that allows you to manage your cookie preferences.

For comprehensive information about the cookies we use, their purposes, and how to manage them, please refer to our dedicated Cookie Policy.

You can update your cookie preferences at any time by clicking the "Cookie Settings" link in the footer of any page on our Website.

11. Children's Privacy

Our Website is not directed at children under the age of 16. We do not knowingly collect or process personal data from children under 16 years of age. If we become aware that we have inadvertently collected personal data from a child under 16, we will take steps to delete that data as quickly as possible.

If you are a parent or guardian and believe your child has provided us with personal data, please contact us at outletspot@nordsol.dk so we can take appropriate action.

12. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and our Website
• Secure hosting infrastructure provided by Netlify with enterprise-grade security
• Access controls limiting who can access personal data
• Regular review of our data processing practices

While we strive to protect your personal data, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security but are committed to maintaining the highest practicable standards.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Post a notice on our Website if the changes are significant
• Where required by law, seek your renewed consent

We encourage you to review this page periodically to stay informed about how we protect your data. Your continued use of our Website after any changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

If you are not satisfied with our response to a data protection concern, you have the right to lodge a complaint with your local data protection supervisory authority. A list of EU data protection authorities can be found on the European Data Protection Board website.