Private Policy

PharmaGroup ApS Privacy Policy

Last Updated: Sep 27, 2024

This Privacy Policy describes how PharmaGroup ApS (“PharmaGroup”, “we”, “us”, “our”) collects and processes personal data related to your use of our website and the services we provide.

We take your data protection seriously and process your personal data in compliance with applicable legislation, including the EU’s General Data Protection Regulation (GDPR) and the Danish Data Protection Act.

Data Controller

The legal entity responsible for the processing of your personal data is:

PharmaGroup ApS

CVR no. (Central Business Register): 43324667

Address: George Marshalls Vej 27 2 4, 2450 København SV

Email: info@pharma-group.dk

Phone: 28433852

If you have any questions regarding our processing of your data, you are always welcome to contact us.

What Personal Data Do We Collect and Why? (Purposes and Legal Basis)

We process your personal data for specific purposes and only when we have a lawful basis to do so. Below, you can see what data we process, for what purposes, and on what legal basis.

1. a) Visiting Our Website

When you visit our website, we automatically collect information about you and your use of the site.

• Data: Your IP address, browser type, operating system, device information, and information about the pages you visit.
• Purpose: To optimize the user experience and the website’s functionality, as well as to compile statistics on the use of our website.
• Legal Basis: Our legitimate interest in maintaining and improving our website (GDPR Art. 6(1)(f)). For data collection via non-essential cookies, we base the processing on your consent (see section on cookies).

1. b) Communication and Inquiries (e.g., via contact form or email)

When you contact us with questions or inquiries.

• Data: Name, email address, phone number, company name, and the content of your inquiry.
• Purpose: To respond to your inquiries and provide the service you request.
• Legal Basis: Our legitimate interest in communicating with potential and existing clients (GDPR Art. 6(1)(f)). If your inquiry leads to an agreement, the legal basis will be the performance of a contract (GDPR Art. 6(1)(b)).

1. c) Newsletter Subscription

If you subscribe to our newsletter.

• Data: Name and email address.
• Purpose: To send you news, information about our services, and other marketing materials.
• Legal Basis: Your explicit consent (GDPR Art. 6(1)(a)). You can withdraw your consent at any time via the unsubscribe link at the bottom of each newsletter.

1. d) Provision of Our Consulting Services

When you are a client of ours.

• Data: Name, contact information (email, phone, address), CVR number, payment details, and information related to the specific project.
• Purpose: To manage our client relationship and deliver the agreed-upon services.
• Legal Basis: Necessary for the performance of the contract we have entered into with you or your company (GDPR Art. 6(1)(b)).

Use of Cookies

We use cookies on our website. A cookie is a small text file stored on your device. We use cookies to improve your experience, remember your preferences, and for statistics and marketing.

We obtain your consent before placing cookies that are not strictly necessary for the website’s functionality. Users can set their browser to reject cookies altogether, to reject our cookies in particular, or to delete cookies. However, this may cause some or all of our Services not to function on such user’s computer or device.

Who Do We Share Your Data With? (Recipients of Personal Data)

We only disclose your personal data to others when it is necessary and lawful. We may disclose your data to the following categories of recipients:

• Data Processors: We use external suppliers (data processors) for services such as IT hosting, newsletter distribution, and accounting systems. These suppliers only process data on our behalf and according to our instructions. We have entered into data processing agreements with all our data processors to ensure the protection of your data.
• Public Authorities: We may disclose information to public authorities (e.g., the tax authorities) if required by law.
• Advisors: Our professional advisors, such as auditors and lawyers.

Transfer of Data to Countries Outside the EU/EEA

As a rule, we store your data within the EU/EEA.

If, in special cases, we transfer your personal data to data processors in countries outside the EU/EEA (third countries), we will ensure that a valid and legal basis for the transfer is in place. This will typically be through the use of the European Commission’s Standard Contractual Clauses (SCCs), in combination with any necessary supplementary measures to ensure a level of protection equivalent to that in the EU.

You can obtain further information about the basis for any transfers by contacting us.

For How Long Do We Store Your Data? (Retention Periods)

We only store your personal data for as long as necessary to fulfill the purposes for which it was collected. We have established the following general retention periods:

• Inquiries: Information submitted via contact form or email is deleted no later than 2 years after the end of the correspondence, unless it is part of an active client case.
• Newsletters: Your email address is removed from our list as soon as you withdraw your consent. Documentation of the consent is stored for 2 years after withdrawal to account for the statute of limitations.
• Client Data: Information related to client relationships is stored as long as the relationship exists. Accounting material (e.g., invoices) is stored for 5 years plus the current financial year, in accordance with the Danish Bookkeeping Act.

Your Rights as a Data Subject

Under the data protection legislation, you have a number of rights regarding our processing of your information.

• Right of Access: You have the right to access the information we process about you.
• Right to Rectification: You have the right to have incorrect information about yourself corrected.
• Right to Erasure: In special cases, you have the right to have information about you deleted before our general retention period expires.
• Right to Restriction of Processing: In certain cases, you have the right to have the processing of your personal data restricted.
• Right to Object: In certain cases, you have the right to object to our otherwise lawful processing of your personal data, for instance, in relation to direct marketing.
• Right to Data Portability: In certain cases, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.

If you wish to exercise your rights, please contact us at info@pharma-group.dk.

Security

We have implemented appropriate technical and organizational security measures to protect your personal data from accidental or unlawful destruction, loss, alteration, and from unauthorized disclosure or misuse. Only employees with a real need have access to your personal data to perform their work.

Changes to this Privacy Policy

We reserve the right to change this Privacy Policy. The most recently updated version will always be available on our website. In the event of significant changes, you will be notified via email or a visible notice on our website.

Right to Lodge a Complaint

If you disagree with the way we process your personal data, you are welcome to contact us. You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet), which is the independent authority that supervises compliance with data protection rules in Denmark.

The Danish Data Protection Agency (Datatilsynet)

Address: Carl Jacobsens Vej 35, 2500 Valby, Denmark

Email: dt@datatilsynet.dk

Phone: +45 33 19 32 00

Website: www.datatilsynet.dk