Privacy Notice
This privacy notice describes how Danish Crown (”Danish Crown” or “we”) collects and uses the personal data which you either leave through footprints and/or provide when you visit our website, www.danishcrown.com, and use the various services and activities we offer.
1. Data controller
Danish Crown is the data controller and our contact information is as follow:
Danish Crown A/S
Danish Crown Vej 1
DK-8940 Randers
Denmark
CVR nr. 26121264
Telephone. +45 8919 1919
E-mail: dc@danishcrown.com
2. Purposes, categories and legal basis
When you use our website or services, personal data is collected and used for the following purposes
a) Sign up for newsletters or SMS services
If you choose to sign up for our newsletters, we will register the personal data that you provide to us (name, e-mail address) in order to send you relevant and targeted marketing messages. The processing is based on your consent (GDPR article 6(1)(a). Remember that you can, at any time, withdraw your consent, if you no longer wish to receive our newsletters.
b) Contacting our customer service
If you contact us, we will register the personal data that you provide to us (e.g. name, email address, request details, etc.). Our customer service team has access to this data so we can help you with your request in the best way possible (GDPR article 6(1)(f)). The processing may also be necessary for compliance with a legal obligation that is incumbent upon the data controller e.g. handling a claim (GDPR article 6(1)(c)).
c) Sign up for competitions, events and the like
If you choose to participate in competitions or events arranged by Danish Crown, we will process the personal data you provide (name, email address, competition input, including answers to questions, etc.) in order to manage the competition or event, chose and contact the winner. Depending on the specific competition and event, we may share your name, contact details and answer with our prize vendors and carriers. If required under the legislation, we will share your name and prize details with the tax authorities (GDPR article 6(1)(c)).
d) Social Media
Danish Crown and Facebook Ireland Ltd., hereunder the apps Facebook and Instagram (hereinafter collectively referred to as “Facebook”) are joint controllers in relation to personal data, which for statistical purposes are being processed on Danish Crown’s Facebook and Instagram pages. In relation to visitors on Danish Crown’s Facebook and Instagram pages, Danish Crown can influence what type of statistics that are being generated by Facebook about the visitors, but Danish Crown only receives such statistics in an aggregated and anonymized form. Therefore, Danish Crown does not store or receive any personal data about you in that regard. The statistic information which is being generated by Facebook is processed by Danish Crown with the purpose of gaining a better understanding of how the Danish Crown Facebook and Instagram pages are being used by visitors. The processing of your personal data is initiated on the basis of Danish Crown’s legitimate interest in pursuing such purpose (GDPR Article 6, subparagraph 1, point (f)) as described above.
We recommend that you contact Facebook directly if you want to know more about how Facebook processes your personal data, or you wish to exercise your rights as described in section 7 towards Facebook. You can read more about this in Facebooks Data Policy by clicking here.
e) Apply for a job
If you apply for at job at Danish Crown, you can always read our privacy notice to job applicants here.
f) Suppliers, customers and business partners
In connection with your cooperation with Danish Crown, we will process the personal data, which we receive in connection with any orders and deliveries to control the payment and services (name, contact details, title, company name, etc.). Further we will use the data to maintain the business relationship with the company that you represent, or to administer any activities that you engage in. The basis of our processing of your personal data is our legitimate interest in holding your data in order to perform any contracts with the company that you represent, and to build the business relations with that company (GDPR article 6(1)(f)).
g) Cookies
We use cookies on our website. You can learn more about our use of cookies by clicking here.
Please note that some personal data is necessary to collect in order for you to use the functions of the website. Each of the relevant formulas will indicate whether it is mandatory or optional for you to provide the personal data. If providing the personal data is mandatory, the relevant field will be marked by a star (*). If you decide not to provide the personal data in question, you may not be able to use the function. For instance, you must provide your contact information in order for us to reply to a request from you.
If you provide personal data on other persons than yourself, you must ensure that you collect consent to provide us the personal data from the relevant persons.
3. Consent
When you use our website we sometimes collect and process your personal data based on your consent ((GDPR article 6(1)(a)). Please note that you may withdraw your consent at any time. Please contact us if you wish to withdraw your consent. You can withdraw your consent by contacting Danish Crown. Withdrawal of your consent will not affect the lawfulness of the processing prior to the withdrawal. If you withdraw your consent you may not be able to use the functions offered on our website in full.
4. Storage
Danish Crown will delete your personal data when we no longer need your personal data in order to fulfil the purposes. However, we may process your personal data for longer in an anonymised form or if we are obliged or entitled to do so pursuant to the legislation.
a) Newsletters or SMS services
We store your personal data for as long as you are signed up for marketing material from us, and we will delete the information if it has been maximum 2 year since you last read the received marketing material from us.
b) Contacting our customer service
We have a general deletion policy whereby employees must delete or anonymise personal data when there is no longer a purpose for retention. The retention period may depend on the nature of the request, including whether the information is stored as part of a claim, the use of a product warranty, or on another legal or contractual basis.
c) Competitions, event and the like
We store your personal data collected in connection with competitions and events as long as there is a purpose for the storage. For example, the storage period for a competition typically lasts until the winner is announced, and for events, until the event is completed.
d) SoMe
We store your personal data in the form of posts, messages, photos and the like via our SoMe websites or via one of our postings, until you choose to delete these. Private messages are kept as long as there is a purpose to do so e.g. in connection with customer service. In relation to our obtaining of behavioural information about your use of our Facebook and Instagram pages via cookies. Please read our cookie policy here in order to see the specific storage periods.
e) Applying for a job
If you apply for at job at Danish Crown, you can always read our privacy notice to job applicants here.
f) Suppliers, customers, and business partners
We will store personal data for as long as our business relationship exits. If you or your company choose to terminate the cooperation with us, we will store your personal data for the following five years.
g) Cookies
Please read our cookie policy here in order to see the specific storage periods.
5. Security
Danish Crown has implemented technical and organizational measures to ensure our processing of personal data against accidental or illegal destruction, loss alteration and unauthorized disclosure or publication. We also require that trusted third parties who process your personal information on our behalf, have implemented such measures as well.
Danish Crown's employees are instructed in how they may process personal data, and internal guidelines have been adopted for what to do in the event of a breach of personal data security.”
6. Recipients
We may share or disclose your personal data with the below categories of third parties:
a) entities in the Danish Crown group
b) data processors e.g. hosting provider and security companies which are assisting with our business activities
c) public authorities and the police
d) other third parties with your consent or if they are involved in a merger, demerger or a sale which involves all or part of our business or assets
Danish Crown may engage third party service providers that will have access to and process your personal data. If such third-party services providers process your personal data outside of the EU/EEA, such transfer of personal data will be subject to the European Commission’s standard contractual clauses.
7. Your rights
Subject to certain exemptions set out in Regulation (EU) 2016/679 (General Data Protection Regulation), you have the following rights in respect of your personal data:
- the right to obtain a copy of the personal data collected about you and to transmit said copy to another data controller
- the right to update or amend the personal data collected about you if it is inaccurate or incomplete
- the right to erase, or restrict the processing of, the personal data collected about you
- the right to object to the processing of the personal data collected about you, including in respect of any data processed for direct marketing purposes
- the right to withdraw any consent you have provided in respect of our processing of your personal data
- the right to lodge a complaint with the competent supervisory authority
If you would like to exercise any of the above rights, please contact use the following link https://www.danishcrown.com/global/contact/other-enquiries/how-to-exercise-your-data-privacy-rights/
8. Links to other websites
Our website may contain links to other websites. We are not responsible for the content of other websites (third party websites) or for the procedures of such third parties for collecting and processing personal data. If you visit a website of a third party, you should read the privacy policy and other relevant policies of the owner of the website.
9. Amendments of this privacy policy
We reserve the right to amend this privacy policy based on substantial changes in the legislation, new technical solutions, new or improved functions and to improve the website.
Version 3, September 2021