Data privacy

At Milledeux®, we respect data privacy, and it is our top priority to protect data, prevent misuse and loss of data.

We respect the trust all our stakeholders have in our ability to handle their data in a secure and trustworthy way.

All data is handled in accordance with the European General Data Protection Regulation (EU GDPR) and other applicable data protection regulations.

We value the trust you show us, when entrusting your personal information to us, and we will only use your information in relation to the presented purposes and the consent given by you.

Furthermore, Milledeux® will only keep your data for the period it is legitimately reasonable to do so. Thereafter, the data collected by us or given to us by you will be deleted.

This Privacy Policy will provide a thorough overview of what type of information is collected, how data is used and if shared with any third-party relation.

Categories

Milledeux® processes personal data in the following categories:

• when you visit our websites e.g. when surfing the websites, filling in a form etc.,
• when you purchase items online at Milledeux.com;
• when you create a Milledeux® B2C or B2B customer account;
• when we process data for marketing purposes, including subscription to a newsletter and responding to customer surveys via e-mail or on our website,
• when you participate in an event, trade fair etc., and are in touch with Milledeux® before, during and after the event e.g. as part of queries or sales,
• when you send inquiries to Milledeux® in general e.g. contacting Milledeux® by e-mail, social media or the like.

Data types

Depending on which category you belong to (see the above); different data will be collected about you. The data types for each category are listed below:

1. Website visitor
   1. Queries sent via the website and response received by e-mail;
   2. Login information when creating an account on My Milledeux®.
2. Marketing
   1. Name, telephone number, e-mail address, postal address, job title and area of interest;
   2. Company or organisation of employment;
   3. Information about consent granted for marketing purposes;
   4. Tracking the processing of online marketing received e.g. whether the message was opened and which links were clicked on etc.
3. Events
   1. Name, job title, e-mail address and telephone number;
   2. Area of interest;
   3. Company or organisation of employment;
   4. Participation in trade fairs and events.
4. General inquiries
   1. Name, telephone number, e-mail address, postal address, job title and area of interest;
   2. Data protocols and similar detailed product information.

Purpose for collecting data

Depending on the category (see above), we collect information with the following purposes:

• To improve our website enabling us to serve you and present our services in the best possible way;
• to follow up on queries and correspondence by e-mail, telephone and online forms;
• to improve our level of service and optimize our marketing initiatives;
• to send direct marketing via e-mail, etc. as described in the consent form;
• to ensure compliance with applicable legislation e.g. EU GDPR, ePrivacy Directive and the Danish Marketing Practice Act;
• to be able to provide documentation of compliance with legislation;
• to ensure initiation and maintenance of technical and organizational security measures;
• to be able to process queries and complaints from people registered and others;
• to ensure that we can investigate any suspicion or knowledge of security breaches and report to the people registered and the authorities;
• to be able to deal with inspections and queries from supervisory authorities;
• to be able to manage disputes with people registered and third parties;
• to be able to perform statistical analysis.

The profiling enables us to deliver punctual and relevant communication based on submitted information, visitor history, visitor behavior on the website and tracking data form e-mails etc. The information is used for segmentation of the target group.

Source

Personal data is collected directly from you, including any queries made by you or the company you represent by telephone, e-mail, at trade fairs etc. Data is also received via the website e.g. through e-mail inserts and other tracking mechanisms.

Legal basis for collecting and processing personal data

The legal basis for the processing of data for the above purposes is as follows:

• consent for direct marketing e-mail, cf. the Danish Marketing Practice Act;
• website and the use of other tracking mechanisms in e-mails, cf. ePrivacy Directive;
• the provision on the balancing of interests in Article 6(1)(f), as it is in Milledeux’s legitimate interests to provide you and / or the company you represent a focused service and to be able to protect IT systems and data about the Milledeux®;
• our legal obligations as a data service provider e.g. in terms of IT security;
• necessary steps taken at your request prior to entering into a potential contract;
• necessary steps taken in order to provide in queries with any information requested by you.

Should a dispute arise between a third-party, e.g. your employer and us, the legal basis defines how we can determine, defend and plead our legal claim.

Withdrawal of consent

If the processing is based on consent, you have the right to withdraw your consent. This will not affect the processing of data handed over or done prior to the withdrawal of consent. Withdrawal of consent can happen if you contact us: info@milledeux.com.

Storage period

We keep your personal data on file in our CRM system during the period we are in contact with you, and the company you represent. It is possible that we will keep them longer, if this is required to manage documentation, contractual performance or legal requirements. Data concerning documentation of consent for receiving promotional material sent by e-mail (direct marketing only) is kept for three years after being sent (as per the rules on limitation of action). This is unless other data is included in the same communication that justifies a longer processing period for other purposes e.g. a legal requirement. In conformity with legal requirements, we process this data for as long as it is necessary to manage third party interests or our interests.

Obligation to provide information

You are not obligated to give us the information we request from you. However, please be informed that if you refrain from submitting the required information, you may not be entitled to use services offered.

Your rights

You have certain rights, under the restrictions stipulated in GDPR. The rights include:

• The right to access personal data;
• The right to edit incorrect information;
• The right to have information deleted;
• The right to restrict the processing of information;
• The right to data portability; and
• The righto object to the processing of personal data.

You also have the right to file a complaint with a competent authority, including the Danish Data Protection Agency.

Changes

We may change our Privacy Policy over time. The updated Privacy Policy applies to your continued use of the website and our use of personal data. We kindly ask you to review our Privacy Policy on a regular basis.

Contact

If you have any questions about the processing of your personal data or the exercising of your rights, please contact us at contact@milledeux.com.

Milledeux ApS, Vintervej 16, DK-2920 Charlottenlund.