This privacy policy explains how we handle your personal data at GOURMET ENGROS.

Data Controller
The company responsible for processing your personal data is:
GOURMET ENGROS
Lanciavej 12H, 7100 Vejle, Denmark
CVR: 34099928
Email: info@gourmetengros.com
Phone: +45 4747 4729

Description of the Process
Since the new General Data Protection Regulation (GDPR) came into effect on May 25, 2018, we at GOURMET ENGROS would like to inform you about how we store information in order to better serve you and our other customers.

This data may include emails, addresses, phone numbers, and IP addresses associated with your email, as well as data that can identify a person (such as cookies).

We do not sell or disclose your data to other companies unless it is used as part of our customer service, such as for newsletters, in which case only the necessary data is shared. Below you will find more information:

Accounting
In connection with our payroll, accounts receivable, and accounts payable bookkeeping, we store personal data as required by the Danish Accounting Act. The law requires data to be stored for at least 5 years, which means the right to be forgotten cannot be enforced in this case.

Newsletters
We use the US-based service “MailChimp” to send our newsletters and therefore share email addresses, contact names, and company names. We send newsletters approximately six times a year to inform our customers about holidays, trade fairs, and new product launches.

MailChimp states:
“What is MailChimp doing to prepare? We’ve been researching the GDPR and modifying many of our internal practices and policies over the last year, because we are committed to achieving compliance with the GDPR in 2018. For example, we’re in the process of updating our Data Processing Agreement and third-party vendor contracts to meet the GDPR’s requirements. We’re also assessing the impact of the GDPR on MailChimp’s tools to see if we can make them more practical for users who are subject to the GDPR. As further guidance is released and our research progresses, we’ll continue to look for ways we can help our users around the world get ready for the GDPR.”
(If you would like a Danish translation, please contact us.)

Data Stored in Our ERP System
We use Microsoft Dynamics NAV to manage orders. Data stored in Navision is for internal use only and is stored on a Microsoft SQL Server.

Microsoft states:
“The new General Data Protection Regulation (GDPR) is the most significant change to European Union (EU) privacy law in two decades. The GDPR requires that organizations respect and protect personal data – no matter where it is sent, processed or stored. Complying with the GDPR will not be easy. To simplify your path to compliance, Microsoft is committing to be GDPR compliant across our cloud services when enforcement begins on May 25, 2018.”
(If you would like a Danish translation, please contact us.)

Data Stored in Our CRM System
As a commercial company, we maintain a database of customers and prospects. This is for internal use only. All data is stored on Microsoft 365 OneDrive.

Microsoft states:
“The new General Data Protection Regulation (GDPR) is the most significant change to European Union (EU) privacy law in two decades. The GDPR requires that organizations respect and protect personal data – no matter where it is sent, processed or stored. Complying with the GDPR will not be easy. To simplify your path to compliance, Microsoft is committing to be GDPR compliant across our cloud services when enforcement begins on May 25, 2018.”
(If you would like a Danish translation, please contact us.)

Your Rights

• You have the right to request access to, correction of, or deletion of your personal data.
• You also have the right to object to the processing of your personal data and to request restriction of processing.
• In particular, you have the unconditional right to object to the processing of your personal data for direct marketing purposes.
• If the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time. However, this will not affect the lawfulness of processing carried out prior to your withdrawal.
• You have the right to receive the personal data you have provided in a structured, commonly used, and machine-readable format (data portability).

If you need guidance, we refer you to the Danish Data Protection Agency (Datatilsynet).

You can exercise your rights by sending an email to info@gourmetengros.com.

There may be conditions or limitations to these rights. Therefore, it is not certain that you, for example, have the right to data portability in every case, as this depends on the specific circumstances of the processing activities.