Privacy policy

This privacy policy contains information about how we process your personal information when you contact us as a Business partner, customer, website user or job applicant.

1. Who are we?

PipeBio ApS, business reg. no. 41043288, Plantagen 66, 8700 Horsens, Denmark (”PipeBio”, ”we” or ”us”) is the data controller responsible for the processing of your personal data as described in this privacy policy.

If you have any questions regarding this privacy policy or our processing of your personal data in general, you may contact us at privacy@pipebio.com.

2. We process your personal data

We process personal data for various purposes, which you can read more about in this privacy policy. 

We only disclose your personal data when necessary to comply with the purposes for which the personal data was collected, or if it is necessary to comply with our legal obligations. 

2.1 Business partner and customer contact persons

As part of the company’s day-to-day business operations, we process the following categories of personal data regarding business partners and customer contact persons. The processing activities are related to sales, handling of ongoing customer relationships, service, support, events, etc.

  • Ordinary personal data, including name, contact information, employer, position and CRM related personal data in accordance with article 6(1)(f) and (c) of the GDPR.

To the extent necessary, we disclose your personal data to business partners, suppliers, etc., including subcontractors, intra-group companies, freight companies, accountants and attorneys.

We store the above-mentioned personal data for as long as the business or customer relationship exists, or until the relevant contact person is no longer employed by our business partner, customer, etc. Personal data registered in connection with sales, delivery, invoicing, etc., is stored for five (5) years after the end of the relevant financial year.

2.2 Users of our website

We process personal data about you if you consent to cookies. The purpose for the processing is to be able to manage our website and marketing. Learn more about cookies in our cookie policy. Depending on which cookie categories you consent to, we may process the following categories of personal data about you:

  • Ordinary personal data including IP address, or which pages you visit on our or other websites in accordance with article 6(1)(a) of the GDPR. 

If you consent to third party cookies, we may share information about your visit to our website with third party services for statistical purposes, to improve our website, measure our marketing efficiency and to target marketing. 

If you consent to third party cookies, we may share information about your visit to our website with social media providers such as Facebook, Twitter, LinkedIn, and YouTube for statistical purposes, to improve our website, measure our marketing efficiency and to target marketing. In connection with these processing activities, we are joint data controllers with the social media providers in accordance with article 26 of the GDPR. 

Learn more about cookies in our cookie policy. The retention period for our processing of your personal data depends on which cookie categories you consent to. 

2.3 Applicants

 If you have sent us an application, we process the following categories of personal data about you: 

  • Ordinary personal data that we receive in connection with your application, including name, contact information, employment history, education, competences, photo etc. in accordance with article 6(1)(b) and article 6(1)(f) of the GDPR. 
  • Ordinary personal data that we may collect from public online media, including Facebook, LinkedIn etc. in accordance with article 6(1)(b) and article 6(1)(f) of the GDPR.
  • Ordinary personal data that we may collect from your references or public authorities based on your consent, cf. article 6(1)(a) and article 8(2)(1) of the Danish Data Protection Act.
  • Ordinary personal data that we may collect in connection with personality tests or similar tests based on your consent, cf. article 6(1)(a). 

Depending on the type of data you have provided in your application material, we may also process personal data about you within the below categories:

  • Sensitive personal data
  • Confidential personal data, including Danish civil registration number (CPR)

If we process such personal data about you because you have provided such information in your application material without being asked to do so, we regard your submission of the application material as your consent to the processing of this information in connection with the recruitment process, cf. article 9(2)(a) and article 11(2)(2) of the Danish Data Protection Act. 

We only disclose your personal data when necessary to process your application, or if it follows from a legal obligation incumbent on us as data controller.

In connection with the recruitment process, we may be required to disclose your personal data to the following general categories of suppliers, business partners and data processors:

  • Associated companies, recruitment partners and test providers
  • Operations and software suppliers and other data processors  

If your application leads to employment with us, we will generally store your personal data in accordance with our privacy policy for employees, after which the data is stored up to five (5) years after termination of the employment.

If your application does not lead to employment with us, we will normally store your personal data until the recruitment process is complete, after which your personal data will be deleted/depersonalized.

There may be specific instances where we store your personal data for a longer period of time in order to be able to defend ourselves against any potential legal claims, cf. article 6(1)(c) of the GDPR. If so, we store your personal data in accordance with the applicable rules of limitation. 

In special cases, we may request your consent to store your application for 12 months with a view to a possible subsequent employment. If so, we will request you consent to do so, cf. article 6(1)(a) of the GDPR. 

If you have submitted an unsolicited job application, we will store it until we have assessed the application and whether it is appropriate to store it with a view to possible subsequent employment. If we find that we have a purpose for storing your application, we will request your consent to store your application for 12 months, depending on the position you are applying for, cf. article 6(1)(a) of the GDPR. Otherwise, we will delete your application when we have made the above assessment. 

2.4 Direct marketing

We process the following categories of personal data about you to keep you updated with relevant news (marketing):

  • Ordinary personal data such as your name and contact information, if you have consented to direct marketing in accordance with article 6(1)(a) of the GDPR and section 10 of the Danish Marketing Act.

To the extent necessary, we disclose your personal data to our software providers and business partners.  

As a starting point, we process your personal data until you unsubscribe from our marketing service. You can unsubscribe from our marketing service by clicking ”unsubscribe” in our newsletters or by contacting us as described above under clause 1.

If you unsubscribe from marketing, we retain your personal data for 12 months to be able to document your consent in accordance with article 6(1)(f) of the GDPR. 

3. Withdrawal of consent

If we process your personal data based on your consent, you can withdraw your consent at any time by contacting us as outlined above under clause 1 or follow the instructions on our website, in newsletters etc. 

If you withdraw your consent, it will not affect the legality of our processing of your personal data until the time you withdraw the consent. In special cases we may be entitled to continue our processing of your personal data, e.g. to defend ourselves against a potential legal claim. 

4. Transfer of personal data to third countries

To the extent necessary to comply with the purposes of the processing of your personal data, we may transfer personal data to international organizations or companies established in countries outside the EU/EEA. We only perform such transfers if we have a sufficient legal basis for this, including e.g.:

  • If the European Commission has assessed that the security in the relevant third country is adequate in accordance with the nature of article 45 of the GDPR, 
  • If other appropriate safeguards can be provided, including, e.g. the conclusion of the EU Commission’s standard contracts in accordance with the nature of article 46 of the GDPR, or
  • If one or more of the exceptions in article 49 of the GDPR apply. 

5. Security measures

Your personal data security is a high priority to us, and our focus is therefore on processing your personal data in compliance with applicable data protection law.

To best protect your personal data, we continuously assess the risks that may be associated with our processing of your personal data. We pay particular attention to protecting your personal data against discrimination, identity theft, financial loss, loss of reputation and confidentiality.

In the event of a data breach that involves high risk to your rights, we will notify you of the breach as soon as possible under the given circumstances.

6. Your rights

When we process your personal data, you have several rights. If you request to make use of your rights, you can contact us as described above under clause 1. 

  • Right of access. You are entitled to access and receive copies of the personal data we process about you.
  • Right of rectification. If we process incorrect personal data about you, you are to same extent entitled to rectification of any such incorrect personal data.
  • Deletion. In specific cases, you have the right to have the personal data we process about you deleted.
  • Restriction of processing. In specific cases you have the right to request that our processing of your personal data shall be limited to storage.
  • Objection. In specific cases, you are entitled to object to our processing of your personal data. 
  • Data portability. In specific cases, you are entitled to receive your personal data in a structured, commonly used, and machine-readable format and to have such personal data readily transferred from one data controller to another.

Learn more about your rights at the Danish Data Protection Agency’s website: www.datatilsynet.dk.

7. Avenues of complaint

You have the right to file a complaint to the Danish Data Protection Agency if you are dissatisfied with the way in which we process your personal data. However, we obviously hope that you will reach out to us first to find a solution.

The Danish Data Protection Agency’s contact information and information on complaints can be found at www.datatilsynet.dk.