Background

Welcome to Born Denmark’s Privacy Policy. This policy provides information about what data we collect about you, why we collect it, and how we use it. This is important information, so we hope you will take the time to read it. Below, you will find information on how Born Denmark ApS (hereafter referred to as Born Denmark or ‘we’, ‘us’, ‘our’, etc.) processes personal data about you when you visit our website, receive our newsletter, contact us, use our services, purchase our products, or are present at our premises.

We Are the Data Controller

How to Contact Us

Born Denmark A/S

Rosensgade 11

8000 Aarhus C

CVR no.: 38339087

Email: privacy@borndonorbank.dk

Born Denmark is responsible for the processing of personal data. If you have any questions regarding our processing of your personal data, you are always welcome to contact us at privacy@borndonorbank.dk.

Your Personal Data

We process your personal data in different ways depending on the form of contact, relationship, and purpose. Read more below about the different types of processing.

2. Visiting our website

Purpose

When visiting our website, we collect information about visitor behaviour to deliver tailored advertisements, optimise the website, and improve the user experience, if you provide your consent via the cookie banner. This information is primarily statistical. If no consent is given, your personal data will only be processed through cookies that are essential for the basic functions of the website (technically necessary).

Legal Basis for Processing

When we process collected personal data for marketing, statistical, or functional purposes, it is based on the consent provided via the cookie banner, cf. Article 6(1)(a) of the General Data Protection Regulation (GDPR). Certain cookies are essential for the website to function. Processing of personal data via such cookies is based on Born Denmark’s legitimate interest in delivering website content to you as a user, cf. Article 6(1)(f) of the GDPR.

Categories of Personal Data

The collected information includes aggregated website traffic, referral sources, visit duration, most visited pages, device, operating system, country, and browser. Additionally, IP addresses are collected in anonymised form to determine the number of unique visitors to the website.

Recipients of Personal Data

We share the information with our data processors, for example in connection with website hosting. In certain cases, your personal data may be disclosed to third-party providers through accepted cookies. You can read more about this processing by clicking the orange icon in the lower right corner of the website.

Storage of Personal Data

The collected information is stored solely for the purposes to which you have explicitly consented. You can read more about specific retention periods in our Cookie Policy.

Automated Decision-Making and Profiling

The collected information is not used for profiling or to make automated decisions.

3. Purchase of Products and Services

Purpose

The processing of personal data in connection with the purchase of products or services is intended to complete and manage the purchase process, including payment, delivery, and invoicing. In addition, a legally required “pregnancy slot form” must be completed and submitted as part of the purchase.

Legal Basis for Processing

The processing of personal data is based on the agreement between the company and the data subject, cf. Article 6(1)(b) of the General Data Protection Regulation (GDPR) (performance of a contract). Storage of transaction data is subsequently processed based on obligations under the Danish Bookkeeping Act regarding transaction traceability, cf. Article 6(1)(c) of the GDPR.

Categories of Personal Data

The collected data includes name, address, contact details, payment information, and any details related to the purchased product or service.

Recipients of Personal Data

Personal data may be shared with payment providers, shipping companies, and data processors necessary to fulfil the purchase.

Storage of Personal Data

Personal data is stored for a period necessary to fulfil the contract, including compliance with legal requirements such as the Bookkeeping Act, which may require storage for up to 5 years.

4. Inquiries via Email or Our Website Contact Form

Purpose

When contacting us via our contact forms or email, we collect and process personal data to respond to the inquiry.

Legal Basis for Processing

We process the collected personal data based on the company’s legitimate interest, cf. Article 6(1)(f) of the GDPR.

Categories of Personal Data

The collected data includes the information provided in the email or message. Only personal data voluntarily submitted by the individual is collected, including any additional information we may request for clarification.

Recipients of Personal Data

As a general rule, we do not disclose personal data to third parties, but we process it through our data processors. Disclosure may occur under specific circumstances to trusted partners, such as accountants or lawyers in connection with legal disputes. Additionally, disclosure to public authorities may occur if required by law.

Storage of Personal Data

The data is stored for as long as necessary for the specific case. In connection with ongoing customer relationships, communication may be stored for up to 30 years. Other inquiries are stored for up to 1 year.

5. Service Messages and Newsletter Subscription

Purpose

When you subscribe to our newsletter, we collect and process personal data to send emails with updates, new products and services, or other news you have consented to receive.

Legal Basis for Processing

We process the collected personal data based on your consent, cf. Article 6(1)(a) of the General Data Protection Regulation (GDPR). You may withdraw your consent at any time by contacting us or unsubscribing via the link at the bottom of the newsletter. If you withdraw your consent, documentation of the consent will be retained in accordance with Born Denmark’s obligation to document marketing consent, cf. Article 6(1)(c) of the GDPR.

We may also send you service messages relevant to you as a customer or partner. This processing is based on the performance of a contract, cf. Article 6(1)(b) of the GDPR.

Categories of Personal Data

The collected data includes contact information such as name and email address. Only personal data voluntarily provided by the individual is collected.

Recipients of Personal Data

When subscribing to our newsletter, we do not disclose personal data to third parties, but we process it through our data processors.

Storage of Personal Data

Data is deleted or anonymised 24 months after consent is withdrawn or after the last newsletter received. Data is also deleted after the same retention period if the consent has not been used within 12 months.

Automated Decision-Making and Profiling

The collected data is not used for profiling or automated decision-making.

6. Creation of User Profile / Website Login

Purpose

When creating a login on our website, we collect personal data to provide access to additional website features and ensure your user profile functions correctly.

Legal Basis for Processing

We process your personal data based on the agreement you enter into with us when creating an account, cf. Article 6(1)(b) of the GDPR (necessary for the performance of a contract).

Categories of Personal Data

The data collected during login creation includes name, email address, date of birth, phone number, address, username, and password. We may also collect your IP address and timestamps related to login activity.

Recipients of Personal Data

We do not disclose your personal data to third parties, but we share it with our data processors who help manage and host the login functionality on the website.

Storage of Personal Data

Your personal data is stored as long as your account is active. If you choose to delete your account, we retain your data for up to 6 months to handle any inquiries or disputes.

7. Marketing

Purpose

The purpose of processing personal data is to deliver targeted marketing, including sending relevant offers, newsletters, and information about products and services that may be of interest to the recipient.

Legal Basis for Processing

Processing of personal data for marketing purposes is based on your consent when we contact you via direct marketing or targeted advertising on other websites, cf. Article 6(1)(a) of the GDPR. Consent is given via the cookie banner, newsletter sign-up, or other consent text.

If we market similar products via direct marketing or use your data to improve our marketing efforts based on previous purchases, we rely on our legitimate interest in promoting our products and services, cf. Article 6(1)(f) of the GDPR.

Categories of Personal Data

Personal data processed may include contact details such as name, email, and phone number, behavioural patterns, preferences, purchase history, and interests relevant to our marketing efforts.

Recipients of Personal Data

Personal data may be shared with third-party providers assisting with marketing campaigns and analytics tools, including email platforms, social media platforms, and other digital advertising partners. See the privacy policies of third-party providers here:

• Facebook/Instagram: Meta’s Privacy Policy
• LinkedIn: LinkedIn’s Privacy Policy
• YouTube: Privacy Policy - Privacy & Terms - Google

Storage of Personal Data

Personal data is stored as long as necessary to fulfil the marketing purposes for which it was collected or until consent is withdrawn. Upon withdrawal of consent, data is deleted without undue delay unless retained as documentation of marketing consent. In such cases, data will be deleted 24 months after last use.

Automated Decision-Making and Profiling

We use profiling and segmentation to deliver more relevant and targeted marketing. This involves analysing your preferences and behaviour, such as previous purchases, to tailor our offers. No automated decisions are made that have legal effects or similarly significant impact on you.

8. Recruitment

Purpose

We process your personal data as part of the recruitment process to evaluate applicants for open positions in our company and to contact you during the recruitment process.

Legal Basis for Processing

Processing of your personal data is based on your application and Born Denmark’s legitimate interest in assessing and selecting candidates, which is also in the applicant’s interest, cf. Article 6(1)(f) of the GDPR. If you consent to the storage of your personal data for more than 6 months to be considered for future positions, processing will be based on Article 6(1)(a) of the GDPR.

Categories of Personal Data

The data we collect includes your contact details such as name, email address, and phone number. We also collect your application, CV, and any attached documents, such as diplomas, transcripts, certifications, etc.

Recipients of Personal Data

Your personal data will not be disclosed to third parties without your consent but may be shared with our data processors who assist in the recruitment process, such as recruitment platforms or HR systems.

Storage of Personal Data

Your data is stored for up to 6 months after the end of the recruitment process unless you have consented to longer storage for future job opportunities.

Transfers to Recipients in Third Countries

In certain cases, it may be necessary to transfer your personal data to recipients in countries outside the EU, including countries without equivalent data protection laws. These transfers will only take place when necessary for the purposes stated in this Privacy Policy or as required by applicable legislation. Transfers occur solely in connection with the use of our data processors to provide our services and products.

We take appropriate measures to ensure that your personal data is adequately protected during such transfers. Your data will primarily be processed in countries where the European Commission has determined that the level of protection is adequate. If your data is transferred to third countries without an adequacy decision, standard contractual clauses approved by the European Commission will be used. You may contact us at privacy@borndonorbank.dk to request a copy of these clauses.

Consent

If you wish to withdraw your consent or object to our processing of your personal data, please contact us at privacy@borndonorbank.dk.

Please note that withdrawal of your consent does not affect the legality of processing carried out before the withdrawal. It also does not affect the processing of your personal data based on other lawful grounds, such as compliance with legal obligations or the pursuit of legitimate interests.

Your Rights

Under the General Data Protection Regulation (GDPR), you have several rights regarding our processing of your personal data:

• Right of access: You have the right to access the personal data we process about you and to receive additional information.
• Right to rectification: You have the right to have inaccurate personal data corrected.
• Right to erasure: In certain cases, you have the right to have your personal data deleted before our general deletion period.
• Right to restriction of processing: In specific situations, you have the right to restrict the processing of your personal data. If processing is restricted, we may only process the data - apart from storage - with your consent, or for the establishment, exercise or defence of legal claims, or to protect a person or important public interests.
• Right to object: In certain cases, you have the right to object to our otherwise lawful processing of your personal data.

We are also obligated to inform any recipient to whom personal data has been disclosed of any rectification, erasure, or restriction of processing, unless this proves impossible or involves disproportionate effort. We will inform you of who has received a copy of your personal data if you request it.

If you wish to exercise any of these rights, please contact us. See contact details above.

Complaints

If you wish to file a complaint about our processing of personal data, please send an email with the details of your complaint to the email address provided in this privacy policy. We will process your complaint and respond to you.

You also have the right to lodge a complaint with the Danish Data Protection Agency regarding Born Denmark’s processing of your personal data.

For more information on how to file a complaint with the Danish Data Protection Agency, please visit their website: www.datatilsynet.dk