Privacy Policy
We use your data responsibly
Core One A/S is the data controller for the personal data we process about you. This means that we are responsible for ensuring that your personal data is processed in accordance with applicable legislation, including the principles set out in Article 5 of the General Data Protection Regulation (GDPR).
As the data controller, we are also required to inform you about what personal data we process, why and how we process it, how long we retain it, how you can contact us regarding your personal data, and how you can exercise your rights in this regard.
This Privacy Policy covers all of the above in relation to a number of different situations. If your particular situation is not covered by this Privacy Policy, for example if you are employed by us, we have separate documents containing more detailed information, which we will make available to you.
Contact Information
If you wish to contact us regarding our processing of your personal data, you can reach us at:
Lene Haus Vej 9B
7430 Ikast
Denmark
+45 97 70 30 50
Processing of Personal Data
Personal data means any information that can, to some extent, be linked to or identify an individual, either directly or indirectly.
This Privacy Policy describes how we process your personal data from the point at which we collect it, through its storage and use, until it is deleted.
We only process personal data about you when it is necessary and serves a specific purpose. We always process your personal data confidentially.
We use your data responsibly
Core One A/S is the data controller for the personal data we process about you. This means that we are responsible for ensuring that your personal data is processed in accordance with applicable legislation, including the principles set out in Article 5 of the General Data Protection Regulation (GDPR).
Data Protection
It is our responsibility to protect all personal data in our possession against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unauthorised access. We have therefore implemented both technical and organisational measures to safeguard your personal data.
We also ensure that personal data is only processed when we are able to comply with all our obligations under applicable data protection legislation.
Keeping Your Personal Data Up to Date
As our services depend on your personal data being accurate and up to date, we ask you to inform us of any relevant changes. You can always use the contact details provided above to notify us of any changes. We will ensure that your information is updated accordingly.
We will, of course, correct minor errors that we identify ourselves, such as spelling errors in names or addresses, without requiring any action from you.
Where We Obtain Your Personal Data
We collect personal data about you in various ways, including, for example:
-
Through the use of cookies on our website.
-
When you provide information to us yourself, for example by sending us an email or contacting us by telephone.
-
When you comment on or follow us on social media platforms such as Facebook, Instagram and LinkedIn.
Whenever we process personal data, we do so for a specific purpose. You can read more about these purposes below.
For each type of processing, you can also find information about the applicable legal basis for the processing. The legal basis refers to the provision of law that permits us to process your personal data.
You will also find information about how long we retain your personal data. We have organised our processing activities under separate headings so that you can easily find the information relevant to your particular situation.
Company Services
Purchase of Our Products
When you purchase our products, we collect and process the following information about you:
-
Contact information: name, address, email address, telephone number, etc.
The purpose of processing your personal data is to receive and process your order.
Our legal basis for the processing is:
-
The processing is necessary for the performance of a contract with you (Article 6(1)(b) of the General Data Protection Regulation (GDPR)).
As a general rule, we delete the information five years after the end of the customer relationship.
Disclosure of Personal Data
We use external suppliers and business partners for the storage and processing of personal data. When we use a data processor, we enter into a data processing agreement with them. They therefore process personal data solely on our behalf and may not use it for their own purposes.
We prioritise suppliers located within the EU as well as suppliers located in third countries that the European Commission has recognised as providing an adequate level of protection for personal data, pursuant to Article 45 of the GDPR.
In certain cases, personal data is disclosed to independent data recipients, such as banks, shipping companies, public authorities, etc.
Third Countries Without an Adequacy Decision
We also use certain data processors and suppliers located in third countries that have not been recognised as providing an adequate level of data protection. Where the legislation of a third country does not provide the same level of protection as the EU, we are subject to additional obligations to protect your personal data.
Your personal data may be transferred to recipients in the United States based, for example, on the European Commission’s Standard Contractual Clauses (Article 46(2)(c) of the GDPR) or the EU-U.S. Data Privacy Framework (Article 45 of the GDPR).
If you would like further information, you are welcome to contact us. You may also request documentation regarding the appropriate safeguards in place.
Customer Service, Support and Sales
When you contact us by email, telephone, via the contact form on our website or by regular mail, we process the following information about you:
-
Your contact information and the content of your enquiry.
The purpose of processing your personal data is to provide you with good service and respond to your enquiry.
We process your personal data on the following legal bases:
-
We process your personal data in order to provide you with a service in connection with a contract (Article 6(1)(b) of the GDPR).
-
We process your personal data on the basis of our legitimate interest in responding to your questions and, where relevant, engaging in further dialogue in order to understand your needs (Article 6(1)(f) of the GDPR).
We delete your personal data when the purpose for retaining it no longer applies. We assess this based on each individual enquiry and its nature.
We process your personal data for as long as we are in correspondence with you. Once the correspondence has ended and its content does not require any further action, we delete your personal data.
When You Find Us Online
Our Website
Cookies
A cookie is a small text file that is stored on your computer, tablet or mobile phone. A cookie is not a program and cannot contain viruses or other harmful software.
Some cookies are necessary for websites to function. Cookies can also be used to compile statistics about users’ visits to a website and to analyse how the website is used. This makes it possible to optimise and adapt a website to specific needs and interests. Some websites use individual usage data to display content tailored to the individual user.
When you first visited our website, you were presented with a cookie banner containing information about the cookies we use. You were also given the option to reject all cookies that are not strictly necessary for the website to function.
Essential Cookies
If only strictly necessary cookies are active, we process only the following information:
-
Device ID and cookie consent status.
Our purposes for processing this information are:
-
To store your cookie preferences so that we can respect your decision to reject all optional cookies.
-
To administer our website with the necessary content, functionality and security.
Our legal bases for processing are:
-
Processing is necessary for our legitimate interest in respecting your decision to reject cookies (Article 6(1)(f) of the General Data Protection Regulation (GDPR)).
-
Processing is necessary for our legitimate interest in ensuring the stable and secure operation of our website (Article 6(1)(f) of the GDPR).
The personal data we process in connection with the use of essential cookies is deleted either when your visit to our website ends, when you close your browser (session cookies), or when we have anonymised the data for the purpose of analysing the website’s security measures.
Optional Cookies
If you have consented to one or more types of optional cookies, we also process the following information:
-
Information about your IP address, dynamic IP address and cookies.
Our purposes for processing this information can generally be divided into the following categories:
-
Optional functionality cookies: To enable us to provide website features beyond those that are strictly necessary, including saving your preferences when playing videos on the website, such as volume and video quality.
-
Optional statistics/analytics cookies: To enable us to use information about your visit to the website to compile anonymised statistics about the overall use of the website.
-
Advertising cookies: To enable us to exchange information with our partners about your tracked activity across websites, allowing us and our partners to use the information collected to provide marketing tailored to your interests.
Our legal basis for the above processing is:
-
The consent you have provided through our cookie banner (Article 6(1)(a) of the GDPR).
We delete personal data once it has fulfilled the purpose for which it was collected. This means that deletion will take place, as applicable:
-
At the end of your visit to the website or when you close your browser (session cookies).
-
Once the information has been anonymised for the preparation of statistics and analyses.
-
When you withdraw your consent.
-
When the consent you have provided expires – the retention period may vary for each individual cookie.
You can always read more about the cookies we use in our Cookie Policy here: https://www.coreone.dk/cookiepolicy
You can also revisit and adjust your cookie consent there.
Social Media
When you like and/or follow us on social media, we process the following information about you:
-
Your name, likes and comments.
-
Backend statistics from our platforms, compiled from your user interactions. We only have access to this information in pseudonymised form. This means that only the individual social media platforms are able to identify you based on this information. You can read more about how they process your personal data in the privacy policy of the relevant social media platform.
-
The content of any messages you may send to us.
The purpose of processing your personal data is to keep interested followers updated on, among other things, new products, relevant information and other updates.
We process personal data on the following legal basis:
-
Our legitimate interest in marketing our business and services (Article 6(1)(f) of the General Data Protection Regulation (GDPR)).
We are joint data controllers with LinkedIn for the personal data collected about you when you visit our LinkedIn page. This means that, together with LinkedIn, we allocate and determine responsibility for complying with applicable data protection legislation when processing your personal data.
You can find our joint controller agreement here: https://legal.linkedin.com/pages-joint-controller-addendum
If you do not have a LinkedIn profile, information may be collected about your device, location/geolocation and your activity on and outside LinkedIn, for example visits to websites.
If you have a LinkedIn profile, information that you have permitted LinkedIn to process in connection with the creation and use of your profile may also be collected, such as reactions, comments and shares made by you and others.
We only receive information that you provide directly to us through enquiries, likes or comments. In addition, we receive anonymous statistical information about users from LinkedIn through a feature called LinkedIn Page Analytics.
If you wish to delete your personal data held by LinkedIn, you must delete your profile. If you delete your profile, your posts, images and other information will also be deleted. If you have questions regarding LinkedIn Page Analytics, you should contact LinkedIn.
Facebook & Instagram (Meta Platforms)
We are joint data controllers with Meta for the personal data collected about you when you visit our pages on Facebook, Instagram or Threads. This means that, together with Meta, we allocate and determine responsibility for complying with applicable data protection legislation when processing your personal data.
You can find our joint controller agreement here: https://www.facebook.com/legal/controller_addendum
Meta uses Insights on Facebook and Instagram to collect statistical information about visitors' behaviour on the platforms, including age, gender, relationship status, employment, lifestyle, interests, purchasing information and geographical information. For this purpose, Meta places cookies on your device when you visit Facebook or Instagram. Each cookie contains a unique identification code and remains active for a period of two years unless deleted before the end of this period. Meta collects, stores and processes your personal data using these cookies. We only receive aggregated statistics based on this information.
You can read more about Facebook's and Instagram's use of cookies here: https://m.facebook.com/policies/cookies and https://help.instagram.com/1896641480634370
We do not disclose to third parties any information about you that we receive from Meta. However, Meta may disclose information about you to third parties. You can read more about this under the section concerning how information is shared in Meta's Privacy Policy.
If you wish to delete your cookies, you can find information on how to do so via our cookie banner, or you can contact Meta.
Meta may process information about you even if you do not have an account with them. You can read more about this in Meta's Privacy Policy:
https://www.facebook.com/privacy/policy
Use of Images
We may publish non-sensitive images online where they do not specifically focus on individual persons and where we assess that the image contributes positively to how we are perceived externally, whether as a workplace, business partner or in another context. We consider this processing to be based on our legitimate interests (Article 6(1)(f) of the GDPR).
If you are to actively participate in marketing, videos or other promotional activities in collaboration with us, we will ensure that this takes place on the basis of your consent (Article 6(1)(a) of the GDPR) or under a model contract (Article 6(1)(b) of the GDPR).
Images will be deleted if we determine that they no longer serve their intended purpose, if an agreement governing the use of the image has expired, or if you withdraw your consent. You also have the right to object to our use of images in which you appear.
Our Organisation
Suppliers and Business Partners
When we enter into agreements with suppliers or other business partners, it is necessary for us to process personal data relating to contact persons. We typically process the following types of information:
-
Name, email address, telephone number and job title.
The purpose of processing your personal data is to fulfil our obligations under the agreement and to facilitate effective communication.
We process this information on the following legal basis:
-
The performance of our contractual obligations (Article 6(1)(b) of the General Data Protection Regulation (GDPR)).
As a general rule, information collected in this connection will be deleted once the agreement has been fulfilled, unless there is a specific reason to retain the information for a longer period, for example during a warranty period or if a need arises to make or handle a claim.
We are required to retain accounting records for five years from the end of the financial year to which the purchase or sale relates. Such records may contain personal data, which will be deleted together with the accounting records.
Recruitment
If you apply for a position with us, we will process the information contained in your application, CV and any other documents you submit. If we obtain statements from any references you have provided, the information obtained will be processed together with your application. You do not need to include your Danish civil registration number (CPR number).
The purpose of processing your personal data during the recruitment process is to assess whether you are a qualified candidate for a vacant position with us.
We process your ordinary personal data on the following legal basis:
-
Our legitimate interest in assessing your qualifications and competencies in relation to the advertised position (Article 6(1)(f) of the GDPR).
If, in connection with recruitment, we process your CPR number or information relating to criminal offences, this is done on the following legal basis:
-
If you apply for a position that requires us to review your diplomas, certificates or other documents containing your CPR number, we process this information for the purpose of verifying the authenticity of your documents. We do so in order to establish, exercise or defend legal claims. The legal basis is Section 11(2)(4), cf. Section 7(1), of the Danish Data Protection Act, cf. Article 9(2)(f) of the GDPR.
If you provide sensitive personal data, we process such information on the following legal basis:
-
Our legitimate interest in assessing your potential future employment with us and in establishing or defending any legal claims relating to the recruitment process (Article 6(1)(f) and (c), respectively, and Article 9(2)(f) of the GDPR).
Your application and supporting documents may be retained for up to six months after the recruitment process has been completed, after which your personal data will be deleted. The purpose of retaining the information after the recruitment process has ended is to protect our interests in the event of any claims or objections relating to discrimination, unequal treatment or similar matters during the recruitment process.
If we wish to retain your application and supporting documents for possible future employment opportunities, we will do so on the basis of your consent (Article 6(1)(a) of the GDPR).
Unsolicited applications will be retained and deleted according to the same criteria as all other applications, as described above.
Under data protection legislation, you have the right to be informed whether the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract, whether you are obliged to provide the personal data, and of the possible consequences of failing to provide such information.
In this regard, we note that under the Danish Act on the Use of Health Information in the Labour Market (helbredsoplysningsloven), you are required, prior to employment, to inform us if you are aware that you have an illness or symptoms of an illness that could have a significant impact on your ability to perform the work in question. This means that you must inform us of such conditions or symptoms, either when requested or on your own initiative. Failure to do so may mean that you are unable to remain in the position.
Furthermore, if you are offered employment, we will need certain personal data about you in order to prepare your employment contract, including your name and address, in accordance with applicable Danish employment legislation. If you do not wish to provide the information that you are legally required to provide under the Danish Act on the Use of Health Information in the Labour Market, or the information necessary to prepare an employment contract, we will not be able to offer you employment.
Your Rights
By contacting us using the contact details provided at the top of this page, you may:
-
Request access to the personal data we hold about you.
-
Request correction of your personal data.
-
Request deletion of your personal data.
-
Request restriction of the processing of your personal data.
-
Request to receive your personal data for the purpose of transferring it to another data controller (data portability).
-
Object to the processing of your personal data. Whether we are able to uphold your objection will depend on an assessment of factors such as our legitimate interests (Article 6(1)(f) of the GDPR). You will receive an explanation of this assessment and its outcome.
In certain situations, our processing of your personal data is based on your specific consent (Article 6(1)(a) of the GDPR). If you provide us with your consent, it is given voluntarily, and there are no adverse consequences if you choose not to provide consent, provide consent only for certain purposes, or subsequently withdraw your consent.
You may withdraw your consent at any time by using the contact details provided above. If you choose to withdraw your consent, this will not affect the lawfulness of our processing of your personal data carried out on the basis of your consent before its withdrawal.
When you submit a request to exercise any of the rights described above, we will respond within one month. If we are unable to comply with your request, we will provide you with the reasons for our decision.
To exercise your rights, or if you have any questions regarding the above, please contact us. You can find our contact details at the top of this page.
If you are subsequently dissatisfied with the way in which we process your personal data, you have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet): http://www.datatilsynet.dk/
