About our data protection policy
With the introduction of the EU's new data protection regulation, we have updated our data processing policy. Below you can read how we treat information about you and what rights you have.
Who do we collect and process information on?
We collect and process information about existing customers, and by e-mail and website correspondence. All information about you is protected by us and may not be disclosed unjustified.
1. Processing personal and customer information
1.1 Collecting personal and customer information
We collect information for the operation of our company. The information can generally be divided into the following categories:
- Identification information
- Contact information
- Financial and economic information
- Information concerning data traffic on our digital platforms
- Information required by legislation
This data is required for us to process inquiries, orders and receive payments.
We collect information from publicly available sources and registers, such as the CVR registry or virk.dk when relevant.
1.2 Storage of personal and customer information
We keep your information as long as they are necessary for the purposes that are the reason for collecting, processing and / or storing your data. Following the money laundering legislation, information, documents and registrations are kept for at least five years after the end of the business relationship or the completion of each transaction.
1.3 Data traffic
We process data that concerns the use of biosa.dk, biosa.info and our other digital platforms.
2. Basis for processing personal and customer information
In order to be a customer of us, you are required to provide us with a number of information as a result of the law or the contractual relationship. The legal basis for our treatment is various legislation, including:
- Book-keeping regulations
- Payment Act
- Data protection regulations
In addition, processing may occur if necessary as a result of an agreement you have concluded or are considering entering into. There may also be treatment if you have given your consent, cf. Article 6 (1) of the Data Protection Regulation. 1, subparagraphs a and b. The same may happen if one of the other processing rules in Article 6 (1) of the Data Protection Regulation. Paragraphs 1 and 9 shall apply. We also process your information when it is necessary to handle a legitimate interest to us.
3. Transmission and transfer of personal and customer information
In order to fulfill agreements with you, for example, if you have sent us a question or wish to enter a cooperation agreement, we disclose the information about you that is necessary to identify and implement this.
In normal operation, we do not disclose information about you to public authorities or third parties. This is only done to the extent that we are required to do so by law, or where sharing is required for the purpose of accommodating a request.
4. Your rights
4.1 Insight into our processing of information
You are entitled to insight regarding what information we process about you, from where they originate and what we use them for. You can also be informed who receives information about you to the extent they are disclosable.
Your access to insights may, however, be limited by law, the consideration of other people's privacy, and the consideration of our business and business practices, as well as our know-how, business-related knowledge as well as internal reviews and material may be excluded from the right of access.
4.2 Opposition to direct marketing
You can object at any time to the processing of information about you to direct marketing and promotion in connection with marketing.
4.3 Correction or deleting of information
If the information is incorrect, incomplete or irrelevant, you have the right to have the information corrected or deleted within the limitations provided by the law.
4.4 Limitation of treatment
If you contest the accuracy of the information we have registered about you or you have objected to the processing that the information is subject to pursuant to Article 21 of the Data Protection Regulation, you may require that we limit the processing of this information to storage.
The processing is limited to storage only until the accuracy of the information is determined, or it can be checked whether our legitimate interests are in advance of your interests.
If you are requesting deletion of information, you may request that processing of this information be restricted to storage. If the processing of the information is necessary only to make a legal claim, you may also require that other processing of this information be restricted to storage. We may take other actions if necessary to make a legal claim or you have given your consent.
4.5 Withdrawal of consent
Permission for disclosure of information that requires your consent may be terminated at any time by revoking your consent. You can always contact us if you wish to revoke your consent (see item 7).
4.6 Data portability
If we process the information based on your consent or as a result of an agreement and the processing is done automatically, you are entitled to obtain the information you have provided to us in an electronic format.
5. Modification of data processing policy
Our data processing policy is valid from May 25, 2018 and may be modified by us with one month's notice. The notice is given on our website. Changes in favor of the customer can be made without notice.
6. Complaints about our processing of information
Complaints should primarily be sent to us, but if you wish to complain about our processing of your personal information, it may be done at: Datatilsynet, Borgergade 28, 5., 1300 København K
7. Contact information and data controllers
Biosa ApS is the data controller for the processing of personal data, cf. the Data Protection Regulation and the Data Protection Act.
Contact information Biosa ApS:
Address: Biosa ApS, Sonnerupvej 41, 3300 Frederiksværk
Telephone: 47 77 22 70 Email: firstname.lastname@example.org