Integritetspolicy

PRIVACY POLICY FOR CUSTOMERS

At NORDISK INNOVATION ApS ("Nordisk Innovation", "we", "us" or "our") we give high priority to confidentiality and data security. This privacy policy applies to our processing of personal data and establishes guidelines for the way Nordisk Innovation processes your personal data and provides you with the information that you are entitled to receive under applicable data protection laws. You should read the privacy policy before you hand over your personal data to Nordisk Innovation.

1. Data controller and contact information

The data controller of your personal data is:

NORDISK INNOVATION ApS

Address: Øster Kringelvej 22, 8250 Egå

CVR-no.: 29393044

2. If you visit the website https://www.nordisk-innovation.dk/

For us, the responsible handling of personal data collected as part of the operation of our business is essential to our business goals and reputation.

This Privacy and cookie policy explains how your personal data is collected and used when you are a customer of Nordisk Innovation, and how you can gain insight into your own personal data.

2.1. Cookies

Types of personal data

Nordisk Innovation uses cookies on the website https://www.nordisk-innovation.dk/ and in this connection processes your personal data. Nordisk Innovation may collect the following personal data about you, when you visit our website:

IP address
Browsing History
Information about your use of our website, including clickbehaviour

We use cookies to collect the abovementioned personal data. You can read more about the use of cookies in our cookie policy, which you can find via the following link: https://www.nordisk-innovation.dk/cookiepolitik

The purposes of the process

Your personal data may be processed for the following purposes:

Marketing in general
Product and service development
Statistics and analysis

Legal basis for processing

Nordisk Innovation processes your personal data on the following basis:

Legitimate interests: We base the processing of your personal data on our legitimate interests in, for example, conducting statistics, analyses, providing support, as well as improving and developing our products and services (Article 6(1)(f) of the General Data Protection Regulation).

When you visit our website, we ask for your informed consent to place cookies that are not functional cook-ies according to the cookie rules. You have the right to withdraw your consent at any time. You can read more about how you change your cookie settings in our cookie policy, which is available https://www.nordisk-innovation.dk/cookiepolitik.

Retention period

Cookies are deleted in accordance with our cookie policy, which is available https://www.nordisk-innovation.dk/cookiepolitik.

However, the information may be stored for a longer period in anonymised form.

2.2. If you use the contact form or chat function on the website, contact customer service or otherwise communicate with us

Types of personal data

When using the contact form or the chat feature on the website https://www.nordisk-innovation.dk/, contact customer service or otherwise communicate with Nordisk Innovation. Nordisk Innovation collects and processes your personal data. Nordisk Innovation collects, processes, and stores the following types of your personal data:

Name, e-mail address, phone number
What your inquiry is about
Date of your inquiry
Other information you provide in connection with your inquiry.
We encourage you not to provide sensitive personal data to us unless it is strictly necessary for the processing of your inquiry. In this context, the information should only be sent in a highly encrypted form if you send the information by e-mail.

The objectives of the process

Your personal data will be processed for the following purposes:

Handling of your inquiry

Legal basis for processing

Nordisk Innovation processes your personal data on the below-mentioned bases. The basis depends on the nature of your inquiry.

Legitimate interests: We may process your personal data on the basis of our legitimate interests in handling your inquiry, communicating with you, and developing our products and services (Article 6(1)(f) of the General Data Protection Regulation).
Contractual obligations: If your inquiry concerns a (potential) formation of contract, we process your data to implement measures before the formation of contract (Article 6(1)(b) of the General Data Protection Regulation).

Disclosure

We may disclose your personal data to external suppliers who, in agreement with us, make sure to provide the service you order. The disclosure is based on our legitimate interest in being able to provide the service you are requesting (Article 6(1)(f) of the General Data Protection Regulation).

Retention period

Your personal data will be stored as long as it is necesarry to fulfill the purposes to which it was collected. However, the data can be stored for a longer period in anonymised form.

If you are a customer or an employee of one of our customers, suppliers, or other business partners, we refer to the section below.

3. If you are a customer

This section contains the policy for Nordisk Innovation's processing of personal data of customers of Nordisk Innovation and users of our app NI Serviceapp.

Nordisk Innovation acts as a data processor for personal data registered by you in the NI Serviceapp con-cerning your customers. However, we act as a data controller for the information you provide to create a user profile in the NI Serviceapp.

Collection of personal data

Nordisk Innovation may collect, process, and store your personal data in the following cases:

When you, your company or the company you work at enters into an agreement with Nordisk Innovation to use our services.
When you create a user profile in the NI Serviceapp.

Types of personal data

Nordisk Innovation may collect, process, and store the following types of personal data about you:

Name, e-mail address, phone number, and corresponding contact information
Financial information such as payment terms, bank details

We may receive such information directly from you (primarily through e-mails and other correspondence with you) or from a third party such as your employer.

The purposes of the processing

Your personal data may be processed for the following purposes:

General planning, fulfilment, and the management of customer relations, including contracts.
Administration such as the processing of payments, rating evaluations, accounting, auditing, as well as providing support
Conducting inquiries from you

Legal basis for processing

Nordisk Innovation primarily processes your personal data on one or more of the following grounds:

Contractual obligations: In certain cases, the processing of your personal data is necessary to fulfil a contract (Article 6(1)(b) of the General Data Protection Regulation).
Legitimate interests: We may process your personal data on the basis of our legitimate interests in, for example, managing day-to-day operations in accordance with legitimate and fair business prac-tices, including planning, execution and management of the cooperation or our legitimate interest in, for example, performing credit ratings and provide support. The processing may also be neces-sary for our legitimate interest in preventing fraud or establishing, defending, or asserting legal claims (Article 6(1)(f) of the General Data Protection Regulation).
Legal obligation: The processing of your personal data will in some cases be necessary for compliance with legal obligations, such as our obligation to prevent illegal activities (Article 6(1)(c) of the General Data Protection Regulation).

Retention period

Your personal data will be stored for as long as it is necessary to fulfil the purposes to which it was collected.

Personal data is therefore stored until 5 years after a contract has been terminated in accordance tax and bookkeeping regulation or 3 years after a customer relation has been terminated if the 5 years have expired.

However, the information can be stored for a longer period in anonymised form.

4. If you sign up for our newsletter(s)

Types of personal data

Nordisk Innovation collects, processes, and stores your personal data for marketing purposes when you sign up for newsletter(s). Nordisk Innovation may collect, process, and store the following types of your personal data:

Name and e-mail address

The purposes of the processing

Your personal data may be processed for the following purposes:

Marketing
Analysis and statistics

Legal basis for processing

Nordisk Innovation processes your personal data on one or more of the following grounds:

Consent: Nordisk Innovation will only use your personal data for direct marketing, including for sending out newsletters, if you have given your prior and explicit consent to this (Article 6(1)(a) of the General Data Protection Regulation).
Legitimate interests: The processing of your personal data will, in connection with analysis and sta-tistics, be based on our legitimate interests in being able to improve and develop our service (Arti-cle 6(1)(f) of the General Data Protection Regulation).

Retention period

Your personal data will be stored as long as your consent to receive newsletters is active.

You can always withdraw your consent by clicking on the unsubscribe link at the bottom of each e-mail or by contacting us as described below. However, withdrawing your consent does not affect the legality of the processing that preceded the withdrawal.

Documentation of your marketing consent is kept for 2 years from the time you have withdrawn your con-sent to receive direct marketing material. The retention period is determined based on Nordisk Innovation's legitimate interest in being able to document that direct marketing has been carried out in accordance with the applicable legislation (Article 6(1)(f) of the General Data Protection Regulation).

In addition, the information can be stored for a longer period in anonymised form.

5. If you apply for a job

This section sets out the policy for Nordisk Innovation processing of personal data in relation to recruitment.

Types of personal data

Nordisk Innovation may collect, process, and store the following personal data:

Personal data which you have disclosed in your job application and CV as well as any attachments
Personal data you disclose during any job interviews
Information about you, including information regarding your previous jobs, activities, competencies, performance, as well as your general appearance, which is publicly available on the internet, in-cluding on social media
Results of personality tests etc.
References from your previous and/or current employers

Purposes of the processing

Your personal data will be processed for the purpose of assessing whether we can offer you a position at Nordisk Innovation.

Legal basis

Nordisk Innovation will mainly process your personal data based on the following legal bases:

Request to enter into an employment contract with us: We may process your personal data on the basis of your request to enter into an employment contract with Nordisk Innovation (Article 6 (1) (b) of the GDPR).
Legitimate interests: We may process your personal data on the basis of our legitimate interests in carrying out further assessments of whether we want to hire you, including on the basis of personality tests and publicly available information on the internet (Article 6 (1) (f) of the GDPR).

Retention period

If you are offered a position with Nordisk Innovation, your application and additional relevant personal data obtained during the recruitment procedure will be stored in your employee file.

If you are not offered a position, we will store your application and any additional personal data obtained during the recruitment procedure for a period of 6 months following our rejection, unless you have provided your consent to the storage hereof for a longer period.

6. If you are a supplier, collaborator etc.

This section contains the policy for Nordisk Innovation's processing of personal data of sole proprietorship owners or contacts of suppliers and other business partners working with Nordisk Innovation.

Collection of personal data

Nordisk Innovation may collect, process, and store your personal data in the following cases:

When your company or the company you work at enters into an agreement with Nordisk Innovation
When collaborating and communicating with Nordisk Innovation

Types of personal data

Nordisk Innovation may collect, process, and store the following types of personal data about you:

Name, e-mail address, phone number, and corresponding contact information
Financial information such as payment terms, bank details and credit ratings (in the case of a sole proprietorship)

We may receive such information directly from you (primarily through e-mails and other correspondence with you) or from a third party such as your employer.

The purposes of the processing

Your personal data may be processed for the following purposes:

General planning, fulfilment, and the management of collaborations, including contracts
Administration such as the processing of payments, rating evaluations, accounting, auditing, as well as providing support
Conducting inquiries from you

Legal basis for processing

Nordisk Innovation primarily processes your personal data on one or more of the following grounds:

Contractual obligations: In certain cases, the processing of your personal data is necessary to fulfil a contract (Article 6(1)(b) of the General Data Protection Regulation).
Legitimate interests: We may process your personal data on the basis of our legitimate interests in, for example, managing day-to-day operations in accordance with legitimate and fair business prac-tices, including planning, execution and management of the cooperation or our legitimate interest in, for example, performing credit ratings and provide support. The processing may also be neces-sary for our legitimate interest in preventing fraud or establishing, defending, or asserting legal claims (Article 6(1)(f) of the General Data Protection Regulation).]
Legal obligation: The processing of your personal data will in some cases be necessary for compli-ance with legal obligations, such as our obligation to prevent illegal activities (Article 6(1)(c) of the General Data Protection Regulation).

Retention period

Your personal data will be stored for as long as it is necesarry to fulfill the purposes to which it was collected.

However, the information can be stored for a longer period in anonymised form.

7. Transmission to other controllers and entrustment to data processors

To achieve the above purposes, we may give third parties access to your personal data, which, based on a contractual relationship with Nordisk Innovation, provides relevant services, this could be IT suppliers or other suppliers that process personal data for us. Such suppliers will only process personal data in accordance with our instructions according to the signed data processing agreements.

In the context of Nordisk Innovation's development, the corporate structure may change, e.g., by the total or partial sale of the company. In the case of a partial transfer of assets containing personal data, the pro-cessing basis for the related transfer of personal data is, as a rule, Article 6(1)(f) of the General Data Pro-tection Regulation, since Nordisk Innovation has an interest in transferring parts of its assets and making commercial/structural changes.

In addition to what is described above, your personal data is generally not disclosed to a third party without your consent. However, in certain circumstances and under the law, it may be necessary to disclose your personal data to e.g. public authorities, logistics companies, accountants and legal counsellors.

If your personal data are transferred to data processors or data controllers established in countries outside the EU/EEA that do not have an adequate level of protection, such a transfer will only take place once a transfer basis is secured. In addition, the transfer will be based on the EU Commission's standard contracts and/or EU-US Data Privacy Framework. If you have any questions about the basis for transfers to countries outside the EU/EEA please contact us at dsr@nordiskinnovation.com.

8. Your rights

You have the right to access the personal data we process about you
You have the right to object to our collection and further processing of your personal data
You have the right to rectification and deletion of your personal data, however there are certain statutory exceptions, including the Bookkeeping Act
You have the right to ask us to restrict the processing of your personal data
In certain circumstances, you may also request to receive a copy of your personal data and to transmit the personal data you have provided to us to another data controller (data portability)
You can withdraw any consents you may have given at any time. We will then delete your personal data unless we may continue the processing on another basis. You can cancel our newsletter by clicking on the link at the bottom of the newsletter

9. Questions and complaints

If you have any questions about this privacy policy or if you wish to complain about the way we process your personal data, please feel free to contact us:

NORDISK INNOVATION ApS

Address: Øster Kringelvej 22, 8250 Egå

If your complaint is not resolved by us and you want to proceed with the case, you can complain to the Dan-ish Data Protection Agency:

The Danish Data Protection Agency

Carl Jacobsens Vej 35

2500 Valby

Phone number: 33 19 32 00

E-mail: dt@datatilsynet.dk