Privacy Policy

Contact Information

If you wish to contact us regarding our processing of personal data, you can do so by Email: GD**@*****es.dk 

For queries specifically regarding data transfer to unsafe third countries, you can contact: GD**@*****es.dk

The purposes and legal basis for the processing of your personal data

As a customer:

We collect the following personal data: Name, Contact details.

We process your personal data in order to process your purchase and supply our services, and in order to administer your relationship with us.

The processing of your personal data is based on CONSENT Article 6 (1) (a) + LEGAL OBLIGATION Article 6 (1) (c) of the Data Protection Regulation.

If you have sent us sensitive information, it will be processed in accordance with Article 9 (2) (f) of the Data Protection Regulation.

The purpose of processing your personal data in the Internal Market Information System (IMI) is to support the administrative cooperation amongst European data protection authorities in accordance with Article 13 of the IMI regulation, cf. Articles 56, 60-66 and 70 (1) of the Data Protection Regulation.

As a supplier and business partner:

We collect the following personal data: Name, Contact details.

We process your personal data in order to process your purchase and supply our services, and in order to administer your relationship with us.

The processing of your personal data is based on CONSENT Article 6 (1) (a) + LEGAL OBLIGATION Article 6 (1) (c) of the Data Protection Regulation.

If you have sent us sensitive information, it will be processed in accordance with Article 9 (2) (f) of the Data Protection Regulation.

When you use our website:

We collect and process different kinds of information.

We process your personal data in connection with your use of our website for various purposes.

We process data to improve our website, optimize the user experience, and ensure its technical functionality. We collect technical data such as a unique ID, IP address, geographical location, and which pages you visit. The processing is based on our legitimate interest in being able to operate and improve our online presence, in accordance with GDPR Article 6(1)(f). This information is retained for a period necessary to fulfill the purpose.

Processing of Images: We process images of employees and customers on our website and on social media platforms like LinkedIn.

• Purpose: Our purpose for processing these images is to present our team, create an impression of our company culture, and use images for marketing purposes.
• Types of Data: Images that can identify a person.
• Legal Basis:
  • Portrait photos of employees: The processing is based on our legitimate interest in presenting our team, in accordance with GDPR Article 6(1)(f).
  • Atmospheric photos: If the photos show a group of employees, the processing is also based on our legitimate interest.
  • Images of customers or the use of images for marketing on LinkedIn: The processing is based on your explicit consent, in accordance with GDPR Article 6(1)(a).
• Retention: Images are retained until they no longer serve the specified purpose or until any given consent is withdrawn.

If you have sent us sensitive information, it will be processed in accordance with Article 9 (2) (f) of the Data Protection Regulation.

For details on cookie usage, please see our Cookie Policy.

Recruitment Policy

Your application and CV are stored in our recruitment system until the recruitment process has been completed, and a suitable candidate has been hired. Applicant data will only be deleted after six (6) months if you do not wish for us to continue storing your data or if the recruitment project has not been finalized.

If you provide your consent, we may retain your application and CV in our CV database for up to six (6) months for potential future recruitment opportunities. Every six (6) months, you will receive an email from us requesting confirmation of whether you wish to remain registered in HR-ON. If you wish to continue, you must actively renew your consent; otherwise, your data will be deleted.

Please note that providing consent is not a requirement for applying for a position with us. Consent is a voluntary, clear, and unambiguous action, and you may withdraw your consent at any time by contacting us to request the deletion of your data.

Purpose of Data Processing

Personal data about customers is collected for the following purposes:

• Processing your purchase and supplying our services.
• Administration of your relationship with us.

Personal data about suppliers and business partners is collected for the following purposes:

• Processing purchases/services.
• Administration of your relationship with us.

Data collected on our website is used to:

• Identify you as a user.
• Optimize our service and content.
• Improve our products and services.

Data Minimization

We only collect, process, and store the personal data necessary to fulfill our stated purposes. Furthermore, it may be determined by law what type of data it is necessary to collect and store in connection with our business practices. The type and extent of the personal data we process can be determined by the need to comply with a contract or any other legal obligation.

Data Accuracy

 Since our service depends on your data being correct and up-to-date, we ask you to inform us about relevant changes in your personal data. You can use the contact information provided above to inform us about your changes, and we will ensure your data is updated. If we notice that any data is incorrect, we will update the data and inform you about this.

Data Storage Period

We store your personal data only for as long as it is necessary to fulfill the purposes for which it was collected. We have established specific criteria for determining retention periods for different categories of data, which are based on legal obligations, operational needs, and the nature of the data.

Your data is stored for the time span allowed according to the legislation, and we will delete it when it is no longer necessary. The specific retention periods are determined based on the following criteria:

• Customer, Supplier, and Business Partner Data: This privacy statement does not cover information not mentioned elsewhere. For further inquiries, please contact in**@*****es.dk.
• Website Usage Data: Data collected from our website is stored for as long as necessary for the purpose of identifying you, optimizing our services, and improving our products, as outlined in our Cookie Policy. For detailed retention periods for cookies, please refer to our Cookie Policy.
• Job Applicant Data: As stated in our Recruitment Policy, applications and CVs are stored until the recruitment project has been completed and a suitable candidate has been hired. Applicant data will only be deleted after six (6) months if you do not wish for us to continue storing your data or if the recruitment project has not been finalized.

If you have provided your explicit consent, we may retain your application and CV in our CV database for up to six (6) months for potential future recruitment opportunities. Every six (6) months, you will receive an email asking you to confirm whether you wish to remain registered in HR-ON. If you wish to continue, you must actively renew your consent; otherwise, your data will be deleted.

If you have any questions about our processing of your personal data, you are welcome to contact us at: Email: GD**@*****es.dk

Security

We have taken the necessary technical and organizational measures to prevent your data from accidentally or illegally being deleted, released, lost, impaired, or coming to the knowledge of any unauthorized persons, being abused, or in any way processed against the legislation.

Consent

Newsletter: Your consent to receiving our newsletter is voluntary, and you can withdraw it by contacting us at any time. Use the contact information above if you want further information or wish to withdraw consent. By submitting this permission, you consent to Envases using your name and contact information, for the purpose of sending you newsletters and news regarding related products and services through communication channels such as email marketing, social media and/or direct messaging.

• The processing of your personal data is based on CONSENT Article 6 (1) (a) of the Data Protection Regulation.
• Your data will be stored for as long as you wish to receive our newsletter. You can withdraw your consent at any time by using the “unsubscribe” link at the bottom of our emails or by contacting us using the contact information in section 2.

SMS Messaging Terms: By interacting with our main number, you agree to allow Envases Group to send you text messages where consent is given through interaction initiated by the customer. Frequency may vary. Message & data rates may apply. Reply STOP to opt out of further messaging or reply HELP for more information. View our terms and privacy policy on our website. No mobile or messaging consent information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Passing on Data (Data Disclosure and Transfer)

We use a number of third parties for the storage and processing of data, including IT suppliers. These parties, known as data processors, only process data on our behalf and are contractually obligated not to use it for their own purposes. In relevant cases, we may also disclose your data to other data controllers, such as banks for payment processing, debt collection agencies, and transport companies for delivery of goods.

Data Transfer to Third Countries: Your data may be transferred to a third country outside the EU/EEA. Such transfers will only occur where appropriate safeguards have been put in place to ensure your data receives a level of protection equivalent to that in the EU. These safeguards include the use of Standard Contractual Clauses (SCCs) approved by the European Commission, which provide contractual obligations for the data recipient to protect the data. In cases where the European Commission has issued an adequacy decision for a country, confirming that it provides an adequate level of data protection, we may rely on that decision for the transfer. If you wish to contact us regarding our transfers to such third countries, you can do so at: in**@*****es.dk.

We only pass on data, such as your name and email, for other purposes if you provide your explicit consent.

Website Usage Data: Data concerning your website use is passed on to third-party partners for purposes such as analytics, optimization, and targeted advertising. The specific third parties involved, the types of data transferred, and the purposes for processing are detailed in our Cookie Policy. This data is used to improve our services and to provide you with more relevant advertising.

Social Media

LinkedIn:

We use the social media platform LinkedIn for our business activities. For certain processing activities on the platform, such as visitor analytics on our company page, we act as joint controllers with the platform provider. This means that we and the platform provider are jointly responsible for the purpose and processing of personal information.

We use the platform to share news, post job openings, and interact with our network. The processing is based on our legitimate interest in conducting our business and expanding our online presence, in accordance with GDPR Article 6(1)(f).

We process data to understand how users interact with our company page and to improve our content. This is also based on our legitimate interest, as it is necessary for us to optimize our business communication.

If we publish a customer’s testimonial, review, or image, the legal basis for this processing is your explicit consent, in accordance with GDPR Article 6(1)(a).

Data Retention: We do not directly control the retention periods for data processed by LinkedIn. Data collected through the platform is stored in accordance with LinkedIn’s own privacy policy. We do not store personal data from LinkedIn for longer than is necessary to achieve the stated purposes.

As we are joint controllers with LinkedIn, you can exercise your data protection rights (such as the right to access, rectify, or erase your data) by contacting either us or LinkedIn directly.

To manage your data on LinkedIn: You can manage your privacy settings and exercise your rights directly with LinkedIn. You can find more information about how LinkedIn processes your data in their privacy policy and their Joint Controller Addendum.

To withdraw your consent: If you have given us consent to publish a testimonial or image, you can withdraw it at any time by contacting us at GD**@*****es.dk. We will then remove the content.

Your Rights

You have the following rights concerning your personal data:

• Right to be Informed: At any time, you have the right to be informed of what data we process concerning you, from where we have collected it, and what we use it for. You may also be informed about how long we store your data, and who receives data concerning you, to the extent that we pass on data in Denmark and to foreign countries.
• Right of Access: If you request, we can inform you about what data we process concerning you. Access might be limited with respect to privacy protection, business secrets, and immaterial rights.
• Right to Rectification: If you think that the personal data we process concerning you is imprecise, you have the right to have it corrected. You must contact us and inform us what the imprecision is and how it can be corrected.
• Right to Erasure (‘Right to be Forgotten’): In some cases, we will have an obligation to delete your personal data. This is, for instance, the case if you withdraw your consent. If you think that your data is no longer necessary for the purpose we collected it for, you can request it to be deleted. You can also contact us if you believe that your data is processed in contravention of the law or other legal obligations.
• Right to Object: You have the right to object to the processing of your personal data. You can also object to our processing of your data for marketing purposes. You can use the contact information at the top to object. If your objection is justified, we will make sure to stop the processing of your personal data.
• Right to Data Portability: You can make use of data portability if you want your data transferred to another data controller or data processor.

To exercise your rights, please contact us using the contact information at the top of this policy.

When you contact us with a request to have your personal data corrected or deleted, we will examine whether the requirements are fulfilled, and if that is the case, we will make the changes or delete the data as soon as possible.

On our own initiative, we delete your personal data when it is no longer needed for the purpose we collected it for.

Complaints

You can also lodge a complaint with a supervisory authority if you are unsatisfied with our processing of your personal data.

Website Owner

This website is owned by:

• Envases Europe A/S
• Hedenstedvej 14
• 8723 Løsning
• Denmark
• VAT: DK 67287118