Privacy policy
1. Purpose of this policy
The purpose of the privacy policy is to inform you how BHJ A/S (“we”, “us”) process your personal data. With this policy, we wish to make you aware of the information we collect and process, and for how long we store it. This privacy policy regulates the processing of personal data by BHJ A/S in connection with trading, interaction, or other exchange of personal data with us.
2. Description of processing
BHJ A/S process your information for one or more specific purposes and in accordance with the data protection regulations. We process your information if you are a customer, collaborator, supplier, visit our website or our social media sites, or apply for a job. The information will generally come directly from you, and we will only process your information for as long as it is necessary for the purpose for which it was collected. However, the information can also be processed and stored longer in anonymised form.
Below you can read more about the types of processing we do.
2.1. Customer relationship
In connection with the sale of our products and services we process information about the contact person at our business customers to enter and fulfil an agreement with you (GDPR Article 6(1)(b)). This data includes contact information such as name, company name, country, email, address, and telephone number as well as information about the products you have bought or returned and shipping information.
We delete the information on an ongoing basis, according to the applicable legislation.
2.2. Cookies and website
In connection with the regular operation of our website, we collect personal data about you via cookies to improve the website's appearance and user experience, as well as to compile statistics. The information we collect via cookies includes your IP address, browser type, device (type, version, operating system, etc.) as well as user behaviour, including page views.
We only collect your personal data if you have given your consent hereto (GDPR Article 6(1)(a)). You can withdraw your consent at any time. Read more about this in our cookie policy here.
Our website also includes integrated plugins from social media platforms that may also collect data from you if you have given your consent hereto. In this connection, we have a joint data controllership with every media platform.
2.3. Social Media
We use certain social media, including Facebook, LinkedIn and YouTube, to get in touch with our customers and potential customers, as well as promote our marketing initiatives. If you have been to these sites and “liked” or “followed” our company page or have been in contact with us through these sites, we will process your personal data. We only process information about your name and email.
If you contact us via social medias, we process your information based on our interest in being able to contact you and respond to your inquiries (GDPR Article 6(1)(f)). The information will come from you and the social media through which you contact us.
We have a so-called joint controllership with the social medias that we use as we both use your data for our own purposes. You can read more about the social media´s processing of your personal data in the following:
- Facebook’s Privacy Policy and about Facebook’s joint controllership here.
- LinkedIn´s processing of your personal data in LinkedIn’s Privacy Policy and about LinkedIn’s joint controllership here.
- YouTube´s processing of your personal data here.
Information processed in connection with social media that involves direct communication via the social media is deleted immediately. Posting on, for example, Facebook pages or in public groups are not deleted as a post or comment on Facebook pages or in public groups is considered public spaces. You can read about public spaces here.
2.4. Job applications
If you apply for a job with us, we process your personal data to assess if you are qualified for an existing or future position. We process the data that you provide, including name, contact information, birthdate, work related and educational background information and references.
We process your information to enter into an employment agreement with you based on your request for our processing of the application (GDPR Article 6(1)(b)). We also process your data if we assess that our interests in processing your personal data outweigh your interests in them not being processed, e.g., information collected from social media published by you (GDPR Article 6(1)(f)).
We share your personal data with the employees involved in the recruitment process.
Applications are kept for 6 months after the recruitment process is completed. If we wish to store your information beyond the recruitment process, we will collect your consent hereto.
2.5. Suppliers and collaborators
When we enter into agreements with suppliers and collaborators, we process data on you as a contact person. This includes information regarding name, position, phone no., email and, if necessary, bank or payment information.
The information is processed either on a requirement to enter into an agreement with the specific supplier, or collaborator (GDPR Article 6(1)(b)) or if we as a part of the agreement have a legitimate interest in processing the specific contact person’s data (GDPR Article 6(1)(f)).
We store relevant contact information as part of our collaboration with you. Written correspondence is deleted continuously, and information required to comply with the Danish Bookkeeping Act is stored for the current accounting year plus 5 years.
3. Recipients of personal data
We process your personal data with confidentiality, and we generally do not disclose your information with third parties. However, we may further disclose your personal data if you have given your consent hereto or if we have a legitimate interest in the disclosure.
We may entrust your personal data to our system suppliers who process personal data on our behalf and according to our specific instructions in accordance with the data processing agreements we have entered.
In some cases we use data processors outside the EU/EEA in which a transfer to a third country occurs, e.g., in connection with the use of cloud services. In this case, we have made sure that a legal transfer basis has been prepared (either EU-U.S. Data Privacy Framework or EU Commission Standard Contractual Clauses). The transfer takes place only in compliance with the necessary security guarantees as required by applicable data protection legislation and an individual assessment is always made regarding the need for additional measures. You may contact us at mailbox@bhj.dk to get information on the specific legal transfer basis in this connection.
4. Your rights
When we collect information about you, you have several fundamental rights in the personal data regulations that you can use. Your rights include the right to request access to and rectification or erasure of your personal data, restriction and objection to our processing, and the right to receive your data in a structured, commonly used, and machine-readable format (data portability).
The above-mentioned rights may be associated with conditions and restrictions. Whether you as a data subject can request for example getting your personal data deleted will in any case depend on a concrete assessment.
If you have consented to our processing of your information, you have the right to revoke this consent at any time.
If you are dissatisfied with our processing of your personal data, you may file a complaint with the Danish Data Protection Agency via their website www.datatilsynet.dk/english or by calling at +45 33 19 32 00.
5. Our contact information
The company responsible for processing your personal data is:
BHJ A/S
Ulsnaes 33
DK-6300 Graasten
Att. Global Data Protection Office
mailbox@bhj.dk
Tel. +45 74 35 35 35
6. Revision
We reserve the right to revise and modify these privacy policy guidelines on the processing of personal data. In case of significant changes, we will contact you via email or via a visible notification on our website.
This privacy policy was last revised on February 24, 2024.