GDPR - Protection of personal data

Protection of personal data

At OX-ON, we process personal data about visitors/customers to our websites/web shops and other persons who exchange personal data with us. In this connection, we inform you in this policy about how we process your personal data so that you are aware of this.

Please note that we regularly update this privacy policy.

1. We process your personal data

OX-ON A/S CVR-nr. 72265718 (OX-ON) is the data controller for the processing of your personal data. We want to ensure that all persons whose personal data is processed by OX-ON can always be sure that their privacy is respected and that their personal data is duly taken into account.

2. Purpose, categories of personal data and legal basis

Depending on your relationship with OX-ON, the processing of your personal data may be for the following purposes:

respond to questions or requests that you have sent to OX-ON;
provide customer service in relation to your order;
perform our obligations in connection with contracts you have signed with us, including ensuring the proper delivery of your products;
anticipate and resolve issues with goods or services that we provide to you, including processing returned products or dealing with complaints;
send you our newsletter if you have given your previous consent;
comply with current legal requirements OX-ON is subject to as part of our business.

We may also process your personal data in connection with direct marketing. We will only process your personal data for this purpose when you are aware of it and, if necessary, we will ask for your consent before processing your personal data for direct marketing purposes. In addition, if at any time you would like us to stop using your information for any or all of the above purposes, you may contact us. We will stop processing your information as soon as reasonably possible.

We may process a variety of personal data so that we can provide you with the necessary services or information you request from OX-ON. Most of it is general information, and some may be sensitive information:

Common information can be e.g. name, address, e-mail, phone number, payment terms and IP address.

Sensitive personal data may include health conditions in relation to the product you purchase from OX-ON. OX-ON does not process health data or other sensitive data without obtaining prior explicit consent, or in accordance with data processing agreements entered into with other data controller partners.

We do not ask you to provide sensitive personal data to OX-ON. If we become aware that such data has been registered, OX-ON will delete it, unless we have the necessary purpose and basis for processing it.

OX-ON's processing of your personal data may take place on one or more of the following legal bases:

· consent cf. GDPR Article 6(1)(a) and Article 9(2)(a);

· performance of a contract in connection with purchases on our webshop, cf. GDPR art. 6 (1) (b);

· compliance with current legal requirements imposed on OX-ON cf. GDPR Art. 6(1)(c);

· OX-ON's legitimate interest pursuant to Article 6(1)(f) GDPR when providing customer service, in order to be able to respond to any legal claims, to send you direct marketing or to be able to provide functional websites that require the processing of your IP address.

3. Where does the information come from

We process the personal data you have voluntarily provided to us in connection with your contact with OX-ON and our websites. We do not collect your personal data from third parties.

4. Recipients of your personal data

OX-ON uses data processors for the processing and storage of personal data about private customers. OX-ON only uses data processors that can ensure OX-ON's security requirements. We use external partners for, among other things, technical operation and improvements of our digital services, customer service, subscriptions, sending out newsletters, safeguarding our legal interests, as well as targeted marketing, including retargeting, as well as for your assessment of our company and products.

These companies are data processors and under our instructions and process data for which we are the data controller. The data processors may not use the information for any other purpose than the fulfilment of the agreement with us, and are subject to confidentiality regarding these. We have entered into written data processing agreements with all data processors who process personal data on our behalf.

OX-ON also discloses your personal data to third parties such as a partner or distributor of our products in order to fulfil the purpose for which it was collected, such as delivery. These third parties are not allowed to process your personal data for any other purposes than those we have agreed with them. OX-ON requires such third parties to put in place an adequate level of protection of your personal data.

5. Deletion

Personal data is only stored for as long as it is required to fulfil the specific purpose for which the data was collected. OX-ON generally stores the information about you for up to five years, unless OX-ON has a legal or regulatory obligation to store the information longer, or if the information is to be used to meet legal claims.

6. Your rights

According to the GDPR, you have a number of rights in relation to our processing of your personal data. These are described below:

Right of access: You have the right to ask if we process personal data about you and, if so, request information about what personal data we process. We also need to respond to requests such as why we process personal data, details of what data we hold and to whom we have given access to the data. However, this is not an unconditional right and the interests of individuals may limit access rights.

Right to rectification: We shall, upon request, correct inaccurate personal data or complete incomplete personal data.

Right to deletion (right to be forgotten): Under certain circumstances, you have the right to have your personal data held by us deleted.

Right to restriction of processing: We shall, in certain circumstances, restrict the processing of your personal data at your request. In such cases, we may only use the information for certain limited, legally required purposes.

Right to data portability: Under certain circumstances, you may have the right to receive the personal data we process about you in a structured, commonly used and machine-readable format, and then have it transferred to a third party.

Right to object: In certain cases, you can object to our processing of your personal data. We may then be obliged to stop processing your personal data.

Objection and right of appeal: Requests for access, rectification, limitations, deletion, data portability or objection to the processing of data, and in the event that you do not agree with the way in which OX-ON processes your personal data, must be made to gdpr@abena.com.

If you want to complain about our processing of your personal data, you also have the option of contacting your national Data Protection Agency. You can read more about this at this link: https://www.datatilsynet.dk/english

OX-ON A/S respects the personal data of anyone who visits our sites or otherwise exchanges personal data with OX-ON. Therefore, we would like to inform you about how we use your personal data. We recommend that you read this policy so that you know our approach to the processing of your personal data.

USING OUR WEBSITES,
EXCHANGING INFORMATION WITH OX-ON, or
PURCHASING PRODUCTS FROM OX-ON YOU ACKNOWLEDGE THAT YOU ARE AWARE THAT INFORMATION ABOUT YOU IS COLLECTED AND PROCESSED AS DESCRIBED IN THIS PERSONAL DATA PROTECTION POLICY.

YOU ACKNOWLEDGE THAT YOU ARE AWARE THAT OX-ON A/S MAY CHANGE THIS POLICY WITHOUT NOTICE.

1. Personal data processing policy

The purpose of this personal data protection policy is to inform you how we process and use the personal data that is collected about you when you visit one of our sites, write to us, or purchase goods from us. OX-ON A/S, Kometvej 36, DK-6230 Roedekro, Denmark, Business Reg. No. 72265718 (OX-ON) wants to ensure that all persons whose personal information is processed by OX-ON can always be confident that their privacy is respected and that their personal data is duly taken into account. OX-ON complies with applicable Danish legislation, including the Data Protection Act, which regulates the collection and use of data concerning individuals ("Personal Data").

2. The purpose

We collect and process personal data (including name, address, telephone number and email) so that we can better provide you with the necessary services or information. We will use your personal data in order to:

answer any questions or requests you have sent
process orders you have placed
fulfill or otherwise meet our obligations in connection with any agreements that you have made with us
anticipate and resolve issues with goods or services that we provide you with, including dispatching returned products or handling complaints
develop products or services that can meet your needs.

In order to optimize the services we offer, we may wish to process your personal information for direct marketing purposes. Out of respect for you, we will only process your personal data for this purpose when you are aware of it and, if necessary, we will ask for your consent before processing your personal data for direct marketing purposes. In addition, if at some point you would like us to stop using your data for any or all of the above purposes, please contact us. We will stop processing your data as soon as reasonably possible.

3. Where does the data come from

We process personal data that you have given us voluntarily. We do not collect data from third parties.

4. Who is responsible

OX-ON A/S, Kometvej 36, DK-6230 Roedekro, Denmark, Business Reg. No. 72265718 is the data controller for the processing of your personal data.

5. Data processors

OX-ON uses external data processors to process and store personal information about private customers. Among the most important data processors are:

- Abena Data ApS, Egelund 2, 6200 Aabenraa, hosting of servers; and

OX-ON does not use data processors located outside the EU/EEA. If, in the future, OX-ON chooses to use servers or data processors located outside the EU/EEA, these third parties will not process your personal information for any purposes other than those OX-ON has agreed with them. OX-ON will require that such third parties provide sufficient protection to protect your personal data.

6. Disclosure

OX-ON discloses your personal data to third parties such as a partner or a distributor of our products to fulfill the purpose for which the data was collected, e.g. delivery. These third parties will not process your personal data for any purposes other than those we have agreed with them. OX-ON requires that such third parties provide sufficient protection to protect your personal data.

7. Categories of personal data

In order to be able to fulfill your customer requirements regarding ordering and delivery of goods, OX-ON processes a set of personal data. The data OX-ON processes is general data, OX-ON does not process sensitive data about customers and stakeholders.

General data comprises, for example: Name, address, telephone number and payment terms.

Sensitive data comprises, for example : Health conditions, data about religious or political beliefs. OX-ON does not process health data or other sensitive data without obtaining prior explicit consent or under data processing agreements entered into with other data controllers.

Therefore, we also ask that you do not enter or upload sensitive personal data. If we become aware that such data has been registered, OX-ON will delete it unless we have the requisite purpose and basis for processing it.

8. Categories of recipients of personal data

Your personal data will be available to relevant OX-ON employees who need it for work purposes.

9. Deletion

Personal data is only kept for as long as it is required to fulfill the specific Purposes for which the data was collected. In principle, OX-ON keeps the data about you for up to five years, unless OX-ON has a legal or regulatory obligation to keep the information longer or if the information is used to meet legal requirements. .

10. Your rights

As a registered person, you have various rights. These are described below:

Access: You may, at any time, in accordance with the rules of the Data Protection Act, request access to the information OX-ON processes about you.

Correction, restrictions and deletion: If you become aware that OX-ON is processing false or inaccurate information about you, you may request that the information be deleted, restricted or corrected.

Objection and right of appeal: For enquiries concerning access to, correction, restriction or deletion of information, or if you do not agree with the way in which OX-ON processes your personal data, please contact: OX-ON A / S, Att.: Økonomi, Egelund 23, 6200 Aabenraa, Denmark

If you still disagree with the processing after discussing the matter with OX-ON, you may complain to: The Danish Data Protection Agency, Borgergade 28, 5th floor, 1300 Copenhagen K.

11. Data Controller

OX-ON has selected one or more persons (data controllers) at our global headquarters (in Aabenraa, Denmark) and at our subsidiaries who are responsible for the personal data we receive and for ensuring that we are in compliance with applicable legislation.

12. Collection by subscription

When you sign up for OX-ON's newsletter, the e-mail address you provide is registered. The information is used to automatically send you OX-ON's newsletter and is registered at OX-ON's sister company, Abena Data ApS (data processor).

A few OX-ON employees have access to a list of subscribers. Using this information, OX-ON keeps up-to-date on the scope and nature of subscriptions. The details of the individual subscriptions are not disclosed and the data is deleted immediately if you cancel your subscription.

13. Cookies

In addition to the information you enter yourself in connection with purchases, newsletter sign-ups and other services, OX-ON's websites use cookies for visits to our websites.

We do this to make our website work as well as possible, which is why we sometimes put small data files, so-called cookies, on your computer.

What are cookies?

A cookie is a small text file that a website stores on your computer or mobile device when you visit the site. That way, the site can remember your actions and settings (such as login, language, font size, and other display settings) for a certain period of time, so you don't have to adjust the settings every time you go to the site or move from one page to another.

How do we use cookies? A number of our sites use cookies to remember:

your display settings, such as contrasting color or font size
whether you have already looked at a pop-up box, whether or not you have accepted our use of cookies on the site.

It is not strictly necessary to accept cookies for the site to work, but it will give you a better experience when you use the site. You can delete or block cookies, but some features of the site may not work properly. The information collected with cookies is not used to identify you personally and we have full control over the data patterns. Our cookies are not used for purposes other than those described here.

How do you control cookies?

You can control and/or delete cookies if you wish – read more at aboutcookies.org. You can delete all cookies already on your computer and set most browsers to prevent them from being placed on your computer. However, if you do this, you may need to manually adjust your settings each time you visit a site, and some services and features may not work.