Purpose of privacy policy

The purpose of this privacy policy is to make you aware of how VETNORDIC A/S ("we", "us") process your personal data. With this policy, we want to make you aware of what information is collected and processed and how long it is stored. The Privacy Policy covers the processing of personal data at VETNORDIC A/S when you enter into agreements, interact or otherwise exchange personal data with us.

Description of the processing operations

VETNORDIC A/S processes your data for one or more specific purposes and in accordance with data protection rules. We process your data if you are a customer of ours via our webshop, a business partner, a supplier, visit our website or social media pages, contact us via our contact form, sign up for our newsletter or apply for a job with us. The data will generally come directly from you, and we will only process your data for as long as it is necessary for the purpose for which it was collected. However, the data may also be processed and stored for a longer period of time in anonymised form. Below you can get an overview of the different types of processing we carry out.

Customer relations

In connection with the sale of our products within the veterinary industry, we process data about you as a contact person for our business customers and/or public authorities. We process your data in connection with the sale of our products in order to enter into and fulfil an agreement, cf. GDPR article 6(1)(b). This information includes contact information such as name of contact person, job title, company name, address, email, phone number, login information, purchases via webshop, and payment information. We delete the information on an ongoing basis, but no later than 5 years after the last invoice, cf. section 10(1) of the Danish Bookkeeping Act. In some cases, we may supplement our information about you with the information you provide us with on an ongoing basis, e.g. information about your hobbies, so that we can make our marketing as relevant to you as possible. This is done on the basis of our legitimate interest, cf. GDPR art. 6(1)(f), as we consider that our interest in offering you the best service outweighs your interest in not processing such general data that you provide us with. Of course, you always have the right to access such data and have it deleted. You can read more about your rights in section 5 below.

Cookies and website

In connection with the general operation of our website, we collect personal data about you via cookies to improve the website's output and user experience and to compile statistics. The information we collect via cookies includes your IP address, browser type, device (type, version, operating system, etc.) and user behaviour, including page views. We only collect your data if you have given your consent, cf. GDPR art. 6(1)(a). You can withdraw your consent at any time. On our website, we also have integrated social media plugins that can collect data about you if you have given your consent. In this regard, we have a joint data responsibility with each media. We use integrated plugins from Facebook, Instagram, LinkedIn and YouTube. On our website, you have the option to contact us via our contact form. In this context, we also process your personal data. The information we process is your name, company name, telephone number and email address. It is also possible to enter your details in a free text field, but we advise against entering personal data in this field unless it is relevant to the enquiry. The legal basis for this processing is GDPR article 6(1)(a). The data we process via our contact form is deleted on an ongoing basis and no later than 3 years after the last contact.

Social Media * We use certain social media platforms such as Facebook, Instagram, LinkedIn and YouTube to connect with our customers and potential customers and to promote our marketing. If you have "liked" our fan page on the social media or have been in contact with us through this, we will inevitably process your personal data. For this purpose, we only process information about your name and email. * If you contact us via social media, we process your personal data based on our interest in being able to contact you and respond to your enquiries, cf. GDPR art. 6(1)(f). The data will originate from you and the social media through which you contact us. * We have a so-called joint data responsibility with the social media we use, as we both process your personal data for our own purposes. You can read more about the social media's processing of your personal data in the following: * Facebook and Instagram's (Meta's) processing of your personal data here, and about the joint data responsibility here. * LinkedIn's processing of your personal data here and about joint data responsibility here. * YouTube's (Google's) processing of your personal data here.

Data processed in the context of social media that relates to direct communication via social media is deleted immediately. Posts on e.g. Facebook pages or in public groups are not deleted, as a post or comment on Facebook pages or in public groups is considered public areas. You can read more about public areas here. Marketing activities We only process your personal data for marketing purposes if you have given your consent in accordance with GDPR Art. 6(1)(a), e.g. to receive newsletters about events, invitations and offers. The scope of our processing is stated in the specific consent. If you have consented to receive marketing from us, we generally process information about the name of the contact person, company name, telephone number and e-mail. It is also possible to write in a free text field, but we advise against writing personal data in this field unless it is relevant to the enquiry. You have the right to withdraw your consent at any time by using the "unsubscribe" link in the newsletters you receive and by sending an email to jesper@vetnordic.com or calling +45 61 70 85 57. We store the documentation of your consent as long as you receive marketing or participate in our marketing and for 2 years after you have withdrawn your consent if it is necessary for the establishment, exercise or defence of legal claims.

Job applicants

If you apply for a job with us, we process your personal data for the purpose of assessing whether you are qualified for an existing or future position with us. We process the information you provide us with, including name, contact details (including phone number, email and address), criminal record, application, CV, personal image, information about skills, education and previous employment and reference. We process your data in order to enter into an employment agreement with you based on your request for our processing of the application, cf. GDPR article 6(1)(b). We also process data in cases where we consider that our interests in processing your personal data outweigh your interests in not processing it, e.g. data collected from social media published by you or data obtained through the completion of a personality and aptitude test, cf. GDPR art. 6(1)(f). We share your personal data with the employees involved in the recruitment process and disclose your personal data with the companies conducting the personality and aptitude test and any recruitment company. Data is stored for up to 3 years after the end of the recruitment period for applicants who were not offered the position.

Suppliers and business partners

When we enter into agreements with suppliers and business partners, we process information about their contact persons. This includes information about the name of the contact person, company name, job title, address, telephone number, e-mail and, if necessary, payment and/or bank details. The data is processed either because it is necessary for the fulfilment of the agreement with the supplier or business partner in question, cf. GDPR Art. 6(1)(b), or because we have a legitimate interest in processing the contact data of the person in question as part of the agreement, cf. GDPR Art. 6(1)(f). We retain relevant contact information throughout our collaboration, which is deleted no later than 5 years after the end of the contract. Written correspondence is deleted on an ongoing basis, and information necessary to fulfil our obligations under the Danish Bookkeeping Act is stored for 5 years plus the current financial year. Recipients of personal data We treat your personal data confidentially, and we do not generally disclose the data to third parties. However, we may disclose your personal data if you have given your consent, if we have a legitimate interest in the disclosure or if we have a legal obligation. We may disclose personal data to our system suppliers who process personal data on our behalf and according to our specific instructions in accordance with the data processing agreement entered into. In some cases, we use data processors outside the EU/EEA, whereby personal data may be transferred to third countries, e.g. in connection with our use of cloud solutions. For this purpose, we use a valid transfer basis (possibly including Standard Contractual Clauses) before we transfer the personal data. The transfer only takes place in compliance with the necessary security safeguards as required by applicable data protection legislation and an individual assessment is always made regarding the need for additional measures. You can contact jesper@vetnordic.com for information about the specific basis for processing in this context.

Your rights

When we collect information about you, you have a number of basic rights under data protection law that you can exercise. Your rights include the right to request access to and rectification or erasure of your personal data, restriction of and objection to our processing, and the right to receive your data in a structured, commonly used and machine-readable format (data portability). The above-mentioned rights may be subject to conditions and restrictions. Whether you as a data subject can request, for example, to have your personal data erased, will in all cases depend on a concrete assessment. If you have given your consent to our processing of your data, you have the right to withdraw this consent at any time. If you are dissatisfied with our processing of your personal data, you can file a complaint with the Danish Data Protection Agency via their website www.datatilsynet.dk or by calling +45 33 19 32 00.

Contact information

The company responsible for the processing of your personal data is: VETNORDIC A/S CVR no.: 43145975 Nyvang 15, 1. sal 5500 Middelfart E-mail: jesper@vetnordic.com Phone: +45 61 70 85 57

We have appointed Jesper Smith as our internal personal data coordinator. If you have any questions regarding our processing of your personal data, please contact Jesper Smith at jesper@vetnordic.com or by phone +45 61 70 85 57

Changes to your personal data We reserve the right to update and change these guidelines for the processing of personal data. In the event of significant changes, we will contact you in the form of an email or visible notice on our website. This privacy policy was last amended on 17.03.2023