PRIVACY POLICY
Introduction
Welcome to LACTOSAN A/S, where we prioritize your privacy and the protection of your personal
data. Our Privacy Policy outlines how we handle your personal data and explains how we use the
data you provide when using our website and services.
In this Policy, we define Personal Data as any information that, either alone or when combined with
other available information, can identify an individual.
It's essential to be aware that this Policy does not extend to third-party applications, websites,
products, services, or platforms that may be accessed through links provided by us. These external
sites operate independently from LACTOSAN A/S and have their own distinct privacy and data
collection practices. When providing personal data to these websites, their respective third-party
privacy policies will govern the handling of such information. We cannot assume responsibility for
the actions, policies, content, or privacy practices of these independent sites.
Data Controller
LACTOSAN A/S (hereinafter referred to as "we," "us," or "our"), with registered address at Nordbakken 2, 5750 Ringe (Denmark), and CVR no.: 15960205, is the data controller responsible for the processing of your personal data as described in this privacy policy.
If you have any questions regarding this policy or the processing of your personal data, please feel
free to contact us at GDPR@thornicoit.com.
Collection of Personal Data
We only process your personal data when it is necessary to comply with the purposes for which the
personal data was collected, or if it is necessary to comply with our legal obligations.
The information we collect may include your name, email address, and other identifying details, as
well as data about your navigation on our website. When submitting your data, we will clearly
indicate whether it is voluntary or necessary to fulfill your intended action.
Your personal data may be collected under one or several of the following circumstances:
If you use your email address in more than one of the above cases, your personal data will only be
collected and registered in one place. This way you will not receive the same marketing material
from LACTOSAN A/S more than once.
Purpose and Legal Basis
At LACTOSAN, we process personal data for various purposes, as highlighted below, while ensuring
the appropriate legal basis for each processing activity.
Cookies
Our website uses cookies to enhance your user experience and provide you with personalized
services. Cookies are small text files stored on your device when you visit our website. These files
collect certain personal data, such as your IP address, browser type, device information, and
interactions with the website. We process this personal data to improve our services, analyze traffic,
and deliver relevant advertisements.
The processing for marketing purposes is carried out based on GDPR Article 6(1)(a). The processing
for other purposes such as statistics, optimizing functionality, and similar objectives, is based on
GDPR Article 6(1)(f). LACTOSAN’s legitimate interest is to develop and maintain a relevant website
that functions optimally.
We also utilize cookies to remember your preferences and settings, making your future visits more
convenient and tailored to your needs. For more information on how we use cookies and process
your personal data, please refer to our Cookie Policy.
Social media
We use social media platforms, including Instagram and LinkedIn, to engage with both our existing
and potential customers while promoting our marketing initiatives. If you have visited and "liked"
our fan page or have interacted with us on these platforms, we inevitably process some of your
personal data. This processing includes information such as your name, email, and any other data
obtained through cookies from these social media channels.
When you contact us through social media, we process your personal data based on our legitimate
interest to establish communication and respond to your inquiries (GDPR Article 6(1)(f)). The
information is collected both from you as a data subject and from the social media platform through
which you reached out to us.
For further information on how social media platforms process your personal data, you can explore
the links provided below:
Video players
At our website, we incorporate YouTube and Vimeo video players to elevate your video viewing
experience. As part of this, we process your personal data under our legitimate interest, aiming to
enrich the content with captivating videos, enhance visual communication, and employ video
marketing strategies to engage and retain our visitors (GDPR Article 6(1)(f)).
While using these video players, specific personal data may be collected, including your IP address,
browser type, device information, and occasionally cookies and similar technologies.
Additionally, when you interact with these video players, both YouTube and Vimeo might gather
specific technical information related to your device and usage.
For more detailed insights into how YouTube and Vimeo handle your personal data, feel free to
explore the links provided below:
Newsletter
When you sign up for our newsletter, we process your personal data (name, company and email)
based on your consent to direct marketing in accordance with GDPR Article 6(1)(a) and section 10 of
the Danish Marketing Act. The purpose of the processing is to give you news and trends from
LACTOSAN.
We process your personal data until you unsubscribe from our newsletter.
Job applications
We process personal data provided in job applications or unsolicited applications. The processed
information may include your name, contact details (phone number, email, address), birthdate,
photograph, application, CV, work history, educational background, and references, depending on
the data you've provided.
The purpose of this data processing is to evaluate your application and potentially establish an
employment relationship. This processing is carried out based on your explicit request for us to
assess your application. In certain cases, we may also process information about you when we
determine that our legitimate interests outweigh any potential impact on your rights and interests,
as stated in GDPR Article 6(1)(f). This may involve using publicly available information from your
social media profiles or conducting personality and skills assessments.
If we plan to retain your personal data beyond the recruitment period, we will seek your consent, as
required by GDPR Article 6(1)(a).
Contact form
When you contact us through the contact form on our website, we collect and process certain
personal data. This data processing is based on the legal basis of GDPR Article 6(1)(f).
The primary purpose of processing your personal data is to address and respond to your inquiry or
request for information. The information we gather through the contact form may encompass
details such as your name, email address, phone number, and any additional information you
provide in your message.
Chat feature
When you engage with the chat function at our website, we collect and process personal data in
accordance with GDPR Article 6(1)(f). The main objective of processing your personal data is to
provide efficient customer support and respond to your inquiries effectively.
The data we may collect through the chat function includes your name, email address, phone
number, company, and any other information you voluntarily share during the chat session.
External login portal
In the course of conducting wholesale operations, LACTOSAN A/S processes personal data related to
business customers' contacts, which is necessary to pursue the company's legitimate interests in
daily operations, as allowed under GDPR Article 6(1)(f). This data includes essential contact
information such as names and company email addresses.
The main objective behind processing this data is to provide authorized access to the login portal,
facilitating seamless document sharing and communication between LACTOSAN A/S and its business
customers.
Data Security
We have implemented robust technical and organizational measures to ensure the security and confidentiality of your personal data. These measures include encryption, firewalls, access controls,
and regular system monitoring. We strive to maintain the integrity and confidentiality of your
information, protecting it against unauthorized access, alteration, or disclosure.
Transfer to other Data Controllers
We do not transfer your personal data to a third party without your consent. Under specific
circumstances and with reference to legislation, it might be necessary to transfer information to
public authorities or the police. For example, information may be disclosed to the police in case of
suspicion of credit card fraud.
Disclosure to Data Processors
We may share your personal information with trusted third-party service providers who assist us in
delivering our services and maintaining our website's functionality. These providers are contractually
obligated to handle your personal data with the same level of confidentiality and security as we do.
We will never sell or disclose your personal information to third parties for their marketing purposes
without obtaining your explicit consent.
We may also disclose your personal data to external third parties if required by law or as part of the
services we provide you.
Transfer of Personal Data to Third Countries
We may transfer your personal data to international organizations or companies established in
countries outside the EU/EEA, to the extent necessary for the processing purposes. Such transfers
are made only when we have a solid legal basis, which may include scenarios where the European
Commission has evaluated that the security measures in the relevant third country align with the
requirements of Article 45 of the GDPR. Additionally, we may make transfers if there are other
security guarantees in place, such as the adoption of EU Commission's standard contractual clauses
as outlined in Article 46 of the GDPR.
Deletion of Personal Data
We will delete your personal data when we no longer need to process them in relation to one or
more of the purposes listed above.
Should you desire additional information regarding the specific retention periods for particular
processing activities, please do not hesitate to reach out to us via email at GDPR@thornicoit.com.
Your Rights
According to legislation, you have certain rights in relation to our processing of personal data about
you.
The right to see data (right of access): You have the right to access the data we process about you
and a range of other data.
The right to rectification (change): You have the right to have inaccurate information about yourself
corrected.
The right to erasure: In exceptional cases, you have the right to have the data processed about you
erased before the date of the general erasure (see above under “Duration of storage of recorded
data”).
The right to restrict the processing: In certain cases, you have the right to have the processing of
your personal data restricted to storage only.
The right to object: In certain cases, you have the right to object to the otherwise lawful processing
of your personal data by the organization.
Read more about your rights here: Data protection and online privacy - Your Europe (europa.eu)
You assert these rights by contacting GDPR@thornicoit.com.
There may be limitations to your rights, and it is therefore not certain that you have the right to have
your personal data deleted in the specific case as it will depend on the specific circumstances of the
processing.
Withdrawal of Consent
If we process your personal data based on your consent, you have the right to withdraw that
consent at any time by contacting us at lactosan@lactosan.com.
Please note that withdrawing your consent will not affect the lawfulness of any processing that was
done prior to the withdrawal.
We respect your rights under GDPR, and your decision to withdraw consent will be promptly
acknowledged and respected.
Questions and Complaints
If you have any questions regarding the processing of your personal data, please contact us by email
at GDPR@thornicoit.com.
If you have any complaints about LACTOSAN’s processing of your personal data, you have the right
to file a complaint to the competent supervisory authority.
You can download a list of European Supervisory Authorities here: Our Members | European Data
Protection Board (europa.eu).
Last revised 01.08.2023
