Privacy Policy

This privacy policy describes Bifodan’s general processing of personal data.

1. We are the data controller – this is how to contact us

Bifodan A/S
Bogbinderivej 6
3390 Hundested
Denmark

CVR: 11169732
T: +45 3163 7900
E: bifodan@bifodan.com

2. The purpose of processing your data and our legal authority?

We process personal data for the following reasons:

  • Costumer handling
  • Sales and Marketing
  • Recruitment of employees
  • Cooperation with relevant organisations and individuals

The legal authority for processing your personal data is found in

  • Article 6, Section 1, para. a (consent), b (contract/agreement), c (legal obligations) and f (for legitimate purposes) of the General Data Protection Regulation (“GDPR”).

As set out above our processing of your personal data is (partly) based on the balancing of interests described in Article 6, Section a of the GDPR. The legitimate interests on which we base our processing is direct marketing.

3. Categories of personal data

We process the following categories of personal data:

  • We only process general personal data (so-called Article 6 data), such as name, contact information, occupation, place of employment, etc.
4. Recipients or categories of recipients

We disclose or transfer your personal data to the following recipients:

  • Data processors, e.g. CRM, CMS, newsletters, etc.
5. Transfer to recipients in third countries, including international organisations

We use MailChimp and SalesForce to distribute newsletters both of which host data in the USA and both of which comply with the EU‑U.S. Privacy Shield Framework.

6. How do we obtain your personal data?

The personal data we have registered about you, you have either provided yourself e.g. in connection with subscription. However, in connection with sales/PR we may also collect data from open sources such as LinkedIn.

7. Storage of your personal data

We store your personal data for as long as it is relevant and according to relevant legislation.
We have set out a detailed erasure policy for the individual processing activities. If you have questions in this respect, please feel free to contact us.

8. The right to withdraw consent

If you have provided your consent when subscribing to our newsletter, you may always withdraw your consent. You can do this by contacting us at the contact details listed above, or in the newsletters you receive.

If you choose to withdraw your consent, this does not affect the lawfulness of our processing of your personal information based on your prior consent and until the date of withdrawal. If you withdraw your consent, this withdrawal will only take effect as of this time.

9. Your rights

According to the GDPR, you have a number of rights in relation to our processing of your personal data.

You must contact us if you want to make use of these rights.

The right to access data (right of access)
You have the right to access that of your personal data which we process as well as other information.

The right to rectification (correction)
You have the right to have inaccurate personal data rectified. Please contact us if relevant.

The right to erasure
In certain circumstances, you have the right to have your personal data erased earlier than the time of our ordinary general erasure.

Contact us if relevant.

Please note that we may not be able to immediately erase certain data if this is prohibited by current legislation.

The right to restrict processing
In certain circumstances, you can request that the processing of your personal data is restricted. If you have the right to exercise this restriction, we are henceforth only allowed to process your personal data – other than storing it – with your consent or for the purposes of establishing, exercising or defending a legal claim, or to protect a person or important social interests.

The right to object
In certain circumstances, you have the right to object to our otherwise lawful processing of your personal data. You may also object to the processing of your personal data for the purposes of direct marketing.

The right to transmit data (data portability)
In certain circumstances, you have the right to receive your personal data in a structured, commonly used and machine-readable format as well as to have this personal data transferred from one data controller to another without hindrance.

You can always read more about your rights on the website of the Danish Data Protection Agency/Datatilsynet (in Danish)

10. Complaining to the Danish Data Protection Agency/Datatilsynet

You have the right to file a complaint with the Danish Data Protection Agency if you are unhappy with the way we process your personal data. You find the contact information on their website.

Version 1.0/Feb19