Privacy policy for customer and supplier relations, etc.

Please see the Privacy Policy for United Kingdom here. 

This privacy policy comprises Vilofoss A/S, Central Business Register (CVR) no. 82776214, Ballesvej 2, DK-7000 Fredericia, Denmark, which is part of the DLG Group, hereinafter referred to as “Vilofoss”.

In connection with the sale, purchase and marketing of our products and services, Vilofoss, in its capacity as data controller, collects and processes various personal data about customers, suppliers and contact persons at these customers and suppliers, users of our websites, apps and social media.

This privacy policy describes the main aspects of our processing, including the use and disclosure of personal data in this context.

Categories of data and the purposes

We collect and process the following types of personal data about you as a customer:

• Personal and work contact details (including name, address, phone number, e-mail address), customer no. and DLG member no., gender, date of birth, company reg. no., (and VAT no.), CHR no., location of herds, photo, profession and title, bank details, credit rating information, newsletter consent, order history, user name, fax number, role, language and interests (in relation to newsletter subscribers), possibly recorded phone calls and civil reg. no.

We collect and process the following types of personal data about you as a supplier or as a contact person at either a customer or a supplier:

• Work contact details (including name, address, phone number, e-mail address), customer no., profession and title, possibly username and possibly recorded phone calls.

We generally collect and process the following types of personal data about you as a user of our website, the DLG customer portal, apps or social media:

• IP address, history from online analysis tools (via Vilofoss' website), information about the movements on our websites, possibly username/customer no., CVR no., role, area of interest and location.

We collect and process the following types of personal data about you as a visitor at our locations:

• Name, phone number, e-mail address, municipality of residence, company, time of visit and video recording, if applicable.

The purposes for which we collect and process the information are for:

• handling of customer relations, including setting up customers and management of the ongoing customer relationship, handling of orders, delivery of goods/products, fulfilment and conclusion of contracts (including invoicing and debt collection, if applicable), credit rating, perfection of security interests, marketing and analysis of our products.
• handling of supplier relations, including creation of suppliers in our systems, handling of orders, invoices, etc.
• optimisation of customer and supplier service through targeted training of employees based on recorded phone calls.
• providing you with the functionalities of our website, responding to any inquiries you make via our website, compiling statistics about your movements on our website and being able to optimise the layout and marketing of our website.
• pursuing a legitimate interest in improving security and preventing crime related to the movement of external persons near and within our buildings.
• complying with applicable laws (e.g. the EU General Data Protection Regulation, the Danish Data Protection Act, the Danish Bookkeeping Act, etc.) and other legitimate interests, including:
  • obligation to provide documentary evidence.
  • implementation and maintenance of technical and organisational security measures.
  • handling inquiries and complaints from data subjects and others.
  • handling inspections and requests from regulatory authorities.
  • handling disputes with data subjects and third parties.

The purpose and legal basis for the disclosure of personal data are as follows:

• The data subject has given consent in accordance with Article 6(1)(a) of the General Data Protection Regulation.
• The disclosure is necessary for the performance and conclusion of a contract to which the data subject is a party, cf. Article 6(1)(b) of the General Data Protection Regulation.
• The disclosure is necessary for the pursuit of legitimate interests, cf. Article 6(1)(f) of the General Data Protection Regulation.
• Civil registration numbers are disclosed in cases where disclosure is a natural part of the normal operation of companies etc. of the type in question and where disclosure is essential to ensure a clear identification of the data subject, cf. section 11(2), no. 3, of the Danish Data Protection Act.
• Civil registration numbers are disclosed in cases where the disclosure is necessary for the establishment, exercise or defence of legal claims, cf. section 11(2), no. 4, of the Danish Data Protection Act, cf. Article 9(1)(f) of the General Data Protection Regulation.
• The disclosure is necessary to comply with a legal obligation imposed on the data controller, cf. Article 6(1)(c) of the General Data Protection Regulation

Consent as authority to collect, process and disclose personal data

Where the processing of personal data is based on your consent, you have the right to withdraw the consent without negative consequences for you. However, this does not affect the processing or disclosure of personal data prior to the withdrawal of consent.

Transfer of personal data to data processors

We transfer your personal data to those of our suppliers who store and process the personal data.

To the extent necessary, we also transfer certain personal data to data processors in connection with marketing, etc.; including

• Various partners in connection with marketing (in accordance with the Danish Marketing Practices Act).
• Other suppliers that are part of our business activities, such as suppliers that perform control functions for Vilofoss.

Transfer of personal data to recipients outside the EU/EEA

We transfer certain common personal data to recipients in countries outside the EU/EEA in cases where this is necessary for the purposes listed above. This only happens when we have assessed that the transfer entails a low personal risk in terms of personal data law. In these cases, we ensure an appropriate transfer basis, including primarily the EU's current standard contracts for transfer to third-country data processors. You can contact us at any time to request a copy of the basis for the transfer.

Storage period

We store your personal data for as long as it is necessary to fulfil the purposes mentioned above and to document our legal basis for the processing of personal data as well as other legislation (see above), including e.g. the Danish Limitation Act, the Danish Bookkeeping Act, etc., and for as long as necessary to handle any legal claims. We do not normally store the personal data for longer than five years after the end of the contractual relationship unless a specific assessment in accordance with the Limitation Act or other legislation provides a basis for longer storage. Video recordings are deleted after 30 days at the latest. Recordings of telephone conversations for use in training are deleted after six months.

Other rights that you have

Subject to the limitations of the law, you have various rights, including the right to access personal data, the right to have incorrect data corrected, the right to have data erased, the right to restriction of data and the right to data portability.

Objections

In various cases, you have the right to object to our otherwise lawful processing of the personal data, including in relation to the processing of your data for marketing purposes.
Of course, you can also complain to a competent regulatory authority, including the Danish Data Protection Agency.

Contact

If you have any questions regarding the processing of your personal data or which rights you can exercise, please contact us at persondata@dlg.dk. When contacting us, please state that you are contacting us as a data subject of Vilofoss A/S.

Last revised on 25.08.2023.