Cookie and privacy policy

‍

Privacy and cookie policy for members and partners

This Privacy Policy is established by GS1 Denmark (collectively, "GS1", "we", "us" or "our" in this Privacy Policy) and applies to the business of GS1 Denmark.

‍

(1) About GS1

GS1 is a standardisation organisation that works for its Danish and foreign member companies. GS1 disseminates standards and services that support all actors in creating a safer and more efficient supply chain, e.g. when exchanging master data, orders and invoices, barcoding and tracking products and shipments. GS1 is a neutral, not-for-profit membership organisation and NGO.

In connection with the operation of GS1, GS1 collects and processes personal data for the purposes described in this Privacy Policy. GS1 is the data controller in relation to the processing of the personal data for these purposes.

If you have any questions about this Privacy Policy or GS1's processing of personal data in the course of operating our business, please contact us here:

GS1 Denmark
Vesterbrogade 149
1620 Copenhagen V

CVR no. 10629845
E-mail: info@gs1.dk

‍

(2) Data security is important to us

For us, responsible handling of personal data collected as part of our operations is essential to our business goals and reputation. This Privacy Policy explains how your personal data is collected and used when you are a member or partner of GS1 and how you can gain insight into your own personal data.

‍

(3) What is personal data?

Personal data is any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number or one or more factors specific to the identity of a particular person.

(4) What type of personal data do we process about you and why?

The information we collect about you will be used for various purposes in connection with your membership, the cooperation with you and the operation of GS1. The information collected may vary depending on whether you are a member, supplier or business partner, but in general it will be information regarding member administration, supplier administration and information regarding GS1's rights and obligations.

Failure on your part to provide personal data may mean that GS1 will be unable to fulfill its obligations in connection with your customer or supplier relationship.

GS1 only collects and processes general personal data in connection with your membership or supplier relationship with GS1.

‍

GS1 will typically collect the following information:

Information about our members:

Information that you provide us with when you become a member of GS1, including contact information, name, email address and phone number, your preferences in relation to marketing or communication, as well as information that you provide us with if you contact us with a question to report a problem or when you otherwise contact us as part of your membership relationship with GS1.

Information about our suppliers and business partners:

Information that you provide us in connection with entering into a supply or cooperation agreement, including contact information (work, job title, first name, middle name(s), last name, address, telephone number and e-mail address), information that you provide us about your preferences in relation to marketing or communication, as well as information that you provide us if you contact us with a question, to report a problem or when you otherwise contact us as part of our cooperation.

Information we collect and process when you visit our website

When you visit our website, personal data about you may be collected and processed via cookies and similar technologies. The data may consist of information about the way you navigate within and between our website and the resources you access information about your computer, device and browser, including in some cases your IP address, browser type and other hardware and software information. If you access our website from a mobile device, we may also collect a unique identification number assigned to your device.

The data is collected for the purpose of improving the user experience on our online platforms and targeting marketing, just as the processing of the data is a prerequisite for offering you certain services from third parties, such as videos from YouTube or similar. If you click on links to social media such as Facebook and YouTube, please note that we may have joint data responsibility with the providers of these media and cannot be held responsible for their possible use of your personal data.

You can choose to allow the use of cookies at any time. You can read more about our use of cookies further down in our cookie policy.

GS1 processes the following personal data about you when you sign up for GS1's newsletters:

- First and last name

- Title

- Company name

- Mail

(5) Use of your personal data

GS1 processes your personal data for the purposes set out below. Please note that not all of the listed purposes, categories of data, recipients of data or types of data processing apply to you in all cases.

GS1 will only process your personal data to the extent necessary in connection with your membership, supplier or cooperation relationship (taking into account any interests in each case) or in accordance with applicable law.

Administration of membership - GS1 processes your personal data in connection with the creation and administration of your membership with GS1, including invoicing, debt collection, marketing, statistics, etc. Most statistics and analyses are prepared in anonymized format and therefore in most cases do not contain information that can be directly attributed to you as a person.

GS1 may also, in connection with membership administration, process information about our contact persons at our members.

Administration of supplier and business relationships - GS1 processes your personal data in connection with the administration of supplier and/or business relationships where you are a supplier or business partner or are a contact person at a supplier or business partner that GS1 works with as part of the operation of our business.

Operation and maintenance of our websites - GS1 processes your personal data in connection with the provision of our online services on our website, including to support the ongoing evaluation and improvement of our website.

Compliance with applicable laws and regulations - GS1 processes your personal data in connection with compliance with laws and regulations to which GS1 is subject in the course of its operations or to fulfill various reporting or disclosure obligations under applicable laws and regulations to which GS1 is subject.

GS1 does not use your personal data to make decisions based solely on automated processing, including profiling.

GS1 strives to ensure that all personal data we process is accurate and up to date.

We therefore ask you to always notify us of any changes in your circumstances (e.g. change of address, payment information or contact person) so that we can ensure that the information is always correct and up to date.

(6) Legal basis for processing your personal data

GS1 behandler som udgangspunkt oplysningerne om dig på et af følgende grundlag: (1) Du har givet dit samtykke til behandling af dine personoplysninger til et eller flere specifikke formål (GDPR art. 6, stk. 1, litra a), (2) indgåelse eller opfyldelse af din medlemsaftale med GS1 (GDPR art. 6(1)(b)), (3) the legitimate interests of GS1, i.e. inter alia the purposes described above (GDPR Art. 6(1)(f)), and/or (4) compliance with a legal obligation to which GS1 is subject (GDPR Art. 6(1)(c)). In addition, there may be situations where we process your personal data for the legitimate interests of third parties in relation to the purposes described above, unless your interests are overridden (GDPR Art. 6(1)(f)).

You can withdraw your consent to the processing of consent at any time, and consent as a basis for processing is only used in cases where there is no other lawful basis for processing.

GS1 uses (data processor) HubSpot for logging data when creating consent for the newsletter. The purpose of obtaining consent is that you allow GS1 to send marketing via the newsletter.

In addition, GS1 (data processor) uses Comply Cloud to log other contractual agreements with you or your company.

(7) Sharing of personal data

GS1 only discloses information to the extent necessary for the operation of GS1.

GS1 may also disclose and/or transfer your personal data to other suppliers and/or service providers in connection with the ordinary operation, e.g. in connection with external administration of our IT systems, analysis tasks, marketing tasks, debt collection, credit assessment, auditing, legal assistance, etc.

In addition, your company name (for sole proprietorships) may be used for marketing and social media posts, in particular for social media tagging.

GS1 strives to limit, to the extent possible, the disclosure of personal data in personally identifiable format in order to limit the instances where information that can be attributed to you personally is disclosed.

GS1 will not disclose your personal data unless it is necessary to carry out our business or fulfill your needs.

Your personal data may be transferred to countries both inside and outside the European Economic Area (EEA).

When we transfer your data to third countries, we have ensured that appropriate safeguards are implemented to protect your personal data and that the transfer of your personal data is in accordance with the requirements and obligations under applicable data protection laws.

(8) Data integrity and security

Personal data is not stored longer than necessary to fulfill the purpose for which it was collected, unless the storage is necessary to comply with national legal requirements, including statutory retention periods, bookkeeping, etc.

It is GS1's policy to protect personal data by taking adequate technical and organizational security measures. When your personal data is no longer needed, we will ensure that it is deleted in a secure manner.

(9) Your rights

You have the right to exercise your rights at any time in accordance with the applicable data protection legislation. You may, among other things, request access to the personal data held by GS1 and object to the processing of the data. Furthermore, you can request rectification or erasure of any incorrect information about yourself, withdraw consent to the processing of your personal data and exercise your right to data portability.

If you wish to exercise one or more of your rights, please contact us at info@gs1.dk. Your request will be processed in accordance with the applicable data protection legislation.

Complaints about GS1's processing of your personal data can be made via the Danish Data Protection Agency's website: www.datatilsynet.dk.

‍

(10) Updates

GS1 continuously evaluates and updates this Privacy Policy. You should therefore regularly check this Privacy Policy for any changes that may affect the processing of your personal data.

‍

(11) Events

When you register for events at GS1, we register your name, job title, company/organization and e-mail address for the purpose of organizing and communicating about the event. In addition, you will receive information about GS1 Denmark via e-mail in the form of a newsletter, which you can unsubscribe from at any time.

The data is also used to compile lists of participants, which are distributed to speakers and participants at events. The data can be stored for up to two years.

Some events are live streamed and the recordings are subsequently published on our website.

‍

‍