Privacy policy

1. GENERAL INFORMATION

1.1 This Privacy Policy ("Personal Data Policy") describes how Grænn A/S or our brands hereinafter referred to as ("Graenn A/S", "us", "our", "we") collects and processes information about you. An overview of our brands can be found on www.graenn.com (section “Our brands”)

1.2 The personal data policy applies to personal data that you provide to us in connection with your contact with Graenn A/S as a customer or business partner. This could be, for example when you use Graenn A/S website, www.graenn.com, and when you are in dialogue with Graenn A/S head office. Our personal data policy is based in Denmark and is based on current Danish legislation.

1.3 Grænn A/S is responsible for the collection and storage of your personal data. All enquiries to us can be made via the contact details listed in section 7.

2. WHAT PERSONAL DATA WE COLLECT, FOR WHAT PURPOSES AND THE LEGAL BASIS FOR PROCESSING

2.1 When you visit graenn.com, we automatically collect information about you and your use of graenn.com. This information will typically be the type of browser you use, and the search terms you use on graenn.com. Graenn A/S' Cookie Policy also applies when you use graenn.com.

2.1.1 The purpose is to optimise the user experience and Graenn’s function, to generate usable and accurate statistics, based on the information we receive from you via your use of graenn.com, to carry out personalised marketing, including retargeting via Facebook and Google, for example. This processing of data is necessary for us to safeguard our interests in improving graenn.com and to bring you relevant offers.

2.1.2 The legal basis for the processing is your consent to our use of cookies and Article 6 (1) (a) of the General Data Protection Regulation, as well as our legitimate interest in improving our website and being as relevant in our marketing as possible, cf. GDPR's Article 6 (1) pt. f.

2.2 Once you have subscribed to a newsletter from us, we retain information about your name, email address and any mobile number.

2.2.1 The purpose is to safeguard our interest in being able to deliver newsletters to you.

2.2.2 The legal basis for processing is your consent to receive our newsletter and Article 6 (1) pt. a, of the General Data Protection Regulation.

2.3 When you visit one of our other locations (head office and warehouse), CCTV may be in operation. If so, a pictogram (with a picture of a camera) will be visible on the sign. The video recordings are reviewed by random sampling, concrete suspicion or other irregularities and passed on to the police if there is any suspicion of a criminal offence.

2.3.1 The purpose of TV surveillance is to enable Graenn A/S to prevent, detect and document offences relating to both customers and staff (theft and other unlawful access), irregularities in connection with cash transactions and the like, and to provide security and security for staff (robbery, assault and disputes regarding payment).

2.3.2 The legal basis for the processing is Article 6 (1) pt. f, of the General Data Protection Regulation, as Graenn A/S has a legitimate interest in preventing the types of crime mentioned in Section 2.5.1 at Graenn A/S' locations.

2.4 When you visit Graenn A/S or our brands’ social media such as Facebook, TikTok, Instagram and LinkedIn, Graenn A/S processes the information you have made available through settings on our social media platforms, your responses to our posts, and your sharing thereof, as well as any comments on our posts.

2.4.1 The purpose of Graenn A/S processing of your personal data is to market Graenn A/S or our brands, to respond to your enquiry, and/or to allow you to participate in our competitions and to contact you if you win. When META uses personal data collected on Graenn A/S Facebook pages, for example to improve their advertising system, META and Graenn or our brands can be regarded as joint controllers. In this regard, we refer to META’s Data Policy (read more here: https://www.facebook.com/privacy/policy/).

2.4.2 The legal basis for this processing is Graenn A/S legitimate interest in marketing Graenn or our brands, responding to your enquiry or participating in a competition and contacting you if you win, cf. Article 6 (1) pt. f, of the General Data Protection Regulation.

2.5 If you enter into a commercial relationship with us, either as a private individual or as an employee of a company with which we work, we will retain information about your name, e-mail address, telephone number, company or private address and any other information that you provide to us in connection with our relationship and your enquiry.

2.5.1 The purpose of this is to safeguard our cooperation and to be able to fulfil Graenn A/S or our brands’ obligations in this regard.

2.5.2 The legal basis for this processing will normally be the agreement entered into between you and/or the company you represent and Graenn A/S, cf. GDPR's Article 6 (1) pt. b. Depending on the nature of the cooperation, the legal basis may also be another, typically Graenn A/S legitimate interest in establishing and managing the relationship between you and/or the company you represent, cf. GDPR's Article 6 (1), pt. f.

3. RECIPIENTS OF PERSONAL DATA

3.1 Graenn A/S cannot access your IP address, but it is transferred to our partner Google Analytics, which processes it to generate statistics on the use of our website. Google Analytics acts solely on behalf of Graenn A/S, which is why they may not use the information for their own purposes. Graenn A/S also has META Pixels implemented on graenn.com or our brands’ websites to collect data for use in optimizing our META ads. In this connection, META receives information about your IP address as well as information about your device, the websites you visit, the purchases you make, the ads you see, and the way you use graenn.com, about your web browser and which pages you visit. When META uses personal data collected via META Pixels on graenn.com, e.g. to improve their advertising system, META and Graenn A/S can be considered to be joint data controllers. In this regard, we refer to META’s Data Policy (https://www.facebook.com/privacy/policy/).

3.2 Information that Graenn A/S processes about you as part of a cooperation relationship will not be disclosed to third parties unless this is necessary for the purpose of the relationship, or it is necessary for us to be able to pursue a legitimate interest, e.g. in connection with disputes where the information can be disclosed to authorities and legal bodies.

3.3 Data may be left to external partners who process the data on our behalf. We use external partners to operate systems and improve graenn.com, send newsletters, handle complaints and other customer enquiries and target marketing, including re-targeting marketing, as well as for your assessment of our company and products. These companies are data processors and subject to our instructions and process data for which we are data controllers. The data processors may not use the data for any other purpose than the fulfilment of the agreement with us and are subject to confidentiality. We have entered into written data processing agreements with all data processors that process personal data on our behalf.

3.4 Some of these data processors, such as Google Analytics by Google LLC, TokTok and META, are established outside the EU. The necessary guarantees for the transfer of data-to-data processors outside the EU are ensured by observing valid transfer guarantees.

4. YOUR RIGHTS

4.1 In order to create openness regarding the processing of your data, we, as the data controller, must inform you of your rights.

4.2 RIGHT OF ACCESS

4.2.1 You are entitled at any time to request information from us about information we have registered about you, the purpose of the registration, which categories of personal data and recipients of any information there may be, as well as information about where the information originates from.

4.2.2 You have the right to receive a copy of the personal data that we process about you. If you would like a copy of your personal data, please send a written request to 4) info@graenn.com. You will be asked to document that you are the person you agree to be.

4.3 RIGHT TO RECTIFICATION

4.3.1 You have the right to have incorrect personal data about you rectified by us. If you become aware that there are errors in the information that we have registered about you, you are encouraged to contact us in writing so that the information can be corrected. You will be asked to document that you are the person you purport to be.

4.4 RIGHT TO DELETION

4.4.1 In certain cases, you have the right to have all or some of your personal data deleted by us, e.g. if you withdraw your consent and we have no other legal basis for continuing the processing. To the extent that continued processing of your data is necessary, e.g. in order for us to comply with our legal obligations, or for legal claims to be established, invoked or defended, we are not obliged to delete your personal data. You will be asked to document that you are the person you purport to be.

4.5 RIGHT TO RESTRICT PROCESSING TO STORAGE

4.5.1 In certain cases, you have the right to restrict the processing of your personal data to storage only, e.g. if you believe that the data we process about you is incorrect.

4.6 RIGHT TO DATA PORTABILITY

4.6.1 In certain cases, you have the right to obtain personal data that you have provided to us yourself in a structured, commonly used and machine-readable format and have the right to transfer this data to another data controller.

4.7 RIGHT TO OBJECT

4.7.1 You have the right at any time to object to our processing of your personal data, with a view to direct marketing, including the profiling carried out in order to target our direct marketing, as this processing is carried out on the basis of your consent and/or our legitimate interests, cf. sections 2.1, 2.2, 2.4, 2.5 and 2.6. If you do not want us to use your personal data for direct marketing and profiling, you must also delete your cookies, as mentioned in section 5.1 below.

4.8 RIGHT TO WITHDRAW CONSENT

4.8.1 You have the right to withdraw any consent you have given us at any time for a given processing of personal data, including sending newsletters. If you wish to withdraw your consent, you must contact info@graenn.com.

4.9 RIGHT TO COMPLAIN

4.9.1 You have the right to lodge a complaint with the Danish Data Protection Agency about our processing of your personal data at any time. Complaints can be submitted by e-mail to dt@datatilsynet.dk or by telephone to +45 3319 3200.

5. DELETION OF PERSONAL DATA

5.1 Information collected about your use of graenn.com in accordance with section 2.1 will be deleted in accordance with the rules on Graenn A/S Cookie Policy. The cookies that Graenn A/S itself offers are deleted no later than one year after you last visited the site, while third-party cookies have varying expiry deadlines. The individual expiry deadlines are listed in Graenn A/S Cookie Policy, where you can also read more about how you can delete your cookies at any time.

5.2 Data collected in connection with your subscription to our newsletter, cf. Section 2.2, will be deleted when your consent to the newsletter is withdrawn, unless we have another basis for processing the data.

5.3 Information that originates from CCTV surveillance, cf. Section 2.3, will be deleted automatically no later than 30 days after the recording took place, unless the information is included in the investigation of a specific case. If your data is included in the investigation of a specific case, it will be deleted when the case is concluded and the purpose of the processing is no longer present.

5.4 Information you provide on Graenn A/S or our brands’ profiles on social media, cf. Section 2.4, will generally remain on these profiles as part of the page's history. You can always delete your data on Graenn A/S or our brands’ profiles on social media whenever you want. The information that Graenn A/S or our brands’ retains about you as a result of your participation in competitions, and which in this connection is copied to Graenn A/S or our brands’ own systems, will be deleted after 12 months.

5.5 Information that originates from a cooperative relationship, cf. Section 2.5, is stored for as long as it is relevant in relation to the existing or potential cooperative relationship and for a subsequent period, as long as it is necessary for Graenn A/S to be able to document the relationship.

6. SECURITY

6.1 We have implemented appropriate technical and organisational security measures to prevent the accidental or unlawful destruction, loss, alteration or deterioration of personal data and to prevent such data from being disclosed to unauthorised persons or misused.

6.2 Only employees who have a real need to access your personal data to perform their work have access to the information. These employees are instructed in how to handle personal data securely.

7. CONTACT DETAILS

7.1 Grænn A/S, CBR no.: 10305403 is the data controller of the personal data collected by Graenn A/S or our brands.

7.2 If you have any questions or comments about this Privacy Policy or if you wish to exercise one or more of your rights described in section 4, please contact Grænn A/S Hvedemarken 12 3520 Farum Tel. no.: +45 4495 8000 E-mail: info@graenn.com

8. CHANGES TO THE PERSONAL DATA POLICY

8.1 This Personal Data Policy is regularly updated. The current version is the one that can be found at any time on www.graenn.com

9. VERSIONS

9.1 This is version 1 of Graenn A/S personal data policy dated August 2024.