Privacy Policy


Pure Algae Denmark ApS - Privacy Policy

Pure Algae Denmark ApS ("Pure Algae") takes the processing of personal data very seriously. Pure Algae ensures reasonable and transparent processing of personal data following all applicable laws and local and international regulations, including the European Union’s General Data Protection Regulation ("GDPR"). Pure Algae protects personal data and the privacy of individuals within all areas of its business following the terms of this Privacy Policy of Pure Algae Denmark ApS (“Privacy Policy”).

1. PERSONAL DATA AND DATA SUBJECT

In this Privacy Policy, “personal data” means any information relating to an identified or identifiable natural person (a “data subject”). An identifiable natural person can be identified, directly or indirectly, e.g. by reference to a name, an identification number or online identifiers.

Personal Data is generally categorized as either “ordinary personal data” or “sensitive personal data”. 

Sensitive personal data is always confidential and includes racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic and biometric data, health, and sexual orientation. 

Ordinary personal data is partly confidential, includes information related to criminal offences and national identification numbers, information regarding a person's salary, pension, debt, application material, etc., and all other types of ordinary personal data, including name, customer number, (business) contact information such as email and telephone number, photos, IP-address, and other usage information collected via cookies.

This Privacy Policy applies to all personal data Pure Algae collects and processes about all individuals, including employees, visitors, customers, suppliers (including third-party service providers), other stakeholders and users of Pure Algae’s website and services.

2. PRINCIPLES OF PERSONAL DATA PROTECTION

Pure Algae complies with the following principles to ensure the protection of personal data following GDPR:

Purpose limitation
Pure Algae may only collect and process personal data, including sensitive data (if any), for specified, explicit and legitimate purposes relevant to the business of Pure Algae.

Lawfulness, fairness, and transparency ­ 
Personal data must be processed lawfully, fairly, and transparently concerning the data subject. Where legally required, Pure Algae will inform the individual about the purpose for processing their personal data, their rights to have their personal data rectified, deleted or blocked, and the identity of the company responsible for the collection and processing of their personal data.

Data minimization ­
Pure Algae may only collect and process personal data adequate, relevant and limited to what is necessary for the purposes they are processed.

Accuracy ­
To ensure that personal data processes are accurate, Pure Algae must review and update personal data at regular intervals, where appropriate.

Storage limitation ­
Personal data must only be stored for the time required to fulfil the purpose or as the law prescribes.  

Integrity and confidentiality ­ 
When processing personal data, such data must be safeguarded by adequate security measures to minimize risks, such as data loss, unauthorized access, destruction, and accidental disclosure. 

Cross-border transfer of data ­ 
Specific rules apply when Pure Algae transfers personal data from the EU/EEA to third countries or international organizations, as discussed in the data transfer section below.

Accountability ­
To ensure that personal data processing is performed following GDPR, Pure Algae has implemented appropriate technical and organizational measures, which are reviewed and updated as necessary.

3. OWNER AND DATA CONTROLLER

Pure Algae is the owner (“Owner”) and data controller (“Data Controller”) of the personal data covered by this Privacy Policy. 

Contact details:
Pure Algae Denmark ApS
CVR-number: 39807149
Grenaa Havn, Færgevej 2B, 8500 Grenaa 

Telephone: +45 60 535 642
Website: https://www.purealgae.dk/
For any questions related to this Privacy Policy and processing of personal data, please contact Pure Algae.

4. THE TYPES OF AND PURPOSE FOR THE COLLECTION OF PERSONAL DATA

Pure Algae collects and processes personal data, including sensitive data (if any), only for specified, explicit and legitimate purposes relevant to the business of Pure Algae. The purpose of the collection and processing of personal data also depends on the type of data subjects. Responsible employees with access to personal data must follow the legal requirements, the principles of this Privacy Policy and internal guidelines.

Employment. Pure Algae collects and processes personal data, including sensitive data (if any) of applicants, candidates and employees, for employment purposes and following legal requirements.

Visitors. Pure Algae collects and processes visitors' personal data, including name, title (if applicable) and contact details, for security reasons and registers such information in the visitor log before granting visitors access to the Pure Algae premises.  

Pure Algae’s website users. For marketing, advertising, and analytics purposes, and also for contacting the website users, managing contacts and sending messages, remarketing and behavioural targeting, Pure Algae collects by itself or through third parties personal data of website users, which may include: cookies, usage data, name, contact details, and company information, if applicable.

For operation and maintenance purposes, Pure Algae and any third-party service providers may collect files that record a user’s interaction with the website (“System logs”). Such personal data is obtained through consent by the website users in case of usage data and collected automatically on the Pure Algae website.  

Users are responsible for any third-party personal data obtained, published or shared through the website and confirm that they have the third party's consent to provide such personal data to Pure Algae. Users uncertain about which personal data is mandatory are welcome to contact the Pure Algae Team.

Cookies. Any use of cookies – or other tracking tools – by the website and/or by the owners of third-party services used by the website serves the purpose of providing the services required by the user, in addition to any other purposes described in this Privacy Policy and the Cookie Policy.

Pure Algae uses cookies to understand and save user preferences for future visits and compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future. Pure Algae may contract with third-party service providers to assist in better understanding Pure Algae website visitors. These service providers are not permitted to use the information collected on Pure Algae’s behalf except to help conduct and improve Pure Algae’s business.

Marketing. Pure Algae collects and processes personal data (including name and contact details) about current and new customers, business partners, and suppliers, including third-party service providers, distributors, leads and individuals, website users and individuals who have signed up for Pure Algae’ newsletters or other electronic marketing materials, as well as in some cases for the following purposes: analytics, contacting, managing contacts and sending messages, remarketing and behavioural targeting, advertising, conferences and exhibitions.

Such personal data is collected and processed under marketing consent. Pure Algae obtains valid consent through an online form. The marketing department and other departments must ensure that marketing consent is obtained before collecting and processing such personal data.

Pure Algae may use third parties as a service provider to send out marketing information on its behalf but only following applicable legal requirements.

For marketing purposes, Pure Algae may share personal data (including name and contact details) with third parties (e.g. distributors, business partners, and corporate affiliates). The list of other third parties can be provided upon request.

Contracts, purchase orders, and other transactional agreements. In connection with its sales and purchase transactions, Pure Algae collects and processes personal data, including the name, contact details, delivery details, correspondence, and payment details necessary for conducting business and complying with export compliance regulations and other legal, due diligence obligations.

Accounting and Finance.  Pure Algae collects personal data for accounting and financial purposes following applicable requirements. This information is provided to accounting by other internal departments or received directly from the individuals/companies and employees and includes information such as name, address, company name, registration number, payment details and bank details, delivery address and other mandatory information.

Legal action. In case of a dispute, Pure Algae may retain personal information necessary for its legitimate interest to ensure that Pure Algae can properly bring or defend legal claims in court or during the stages leading to possible legal action. Pure Algae may need to share this information with third parties, such as insurance and/or legal advisers. Pure Algae may also be required to reveal personal data upon request of public authorities.

Consent & withdrawal of consent. To the extent that our processing activities are based on your consent, you will have the right to withdraw your consent at any time. If you withdraw your consent, we will cease to process your personal data unless and to the extent that continued processing is permitted or required according to the applicable personal data legislation or other applicable law. If you withdraw your consent, it will not affect the lawfulness of the processing conducted before the withdrawal.

Where personal data is processed for a public interest, in the exercise of an official authority vested in Pure Algae or for the legitimate interests pursued by Pure Algae, an individual may object to such processing by providing a ground related to the individual’s particular situation to justify the objection. However, if personal data is processed for direct marketing purposes, an individual can object to such processing at any time without providing any justification by contacting Pure Algae.

5. LEGAL GROUNDS FOR PROCESSING OF PERSONAL DATA

Pure Algae may process personal data if one of the following options applies:

  • Individual/company has given prior consent to the processing of his/her/its personal data for one or more specific purposes. 

  • processing of data is necessary for the performance of a contract and/or for any pre-contractual obligations thereof;

  • processing is necessary for compliance with any legal obligations;

  • processing of your personal data is necessary to establish, exercise or defend any legal claims;

  • processing is related to a task that is carried out in the public interest or in the exercise of official authority vested in Pure Algae;

  • processing is necessary for the legitimate interests pursued by Pure Algae or by a third party if such interests are not considered to override individual/company interests or fundamental rights. Such legitimate interests may be Pure Algae’s interests in developing, marketing and selling the products and providing services, pursuing and maintaining business relationships with customers, suppliers, distributors, partners and other business relations.

Upon request, Pure Algae will provide information to clarify the specific legal basis that applies to the processing, mainly whether the provision of personal data is a statutory or contractual requirement or a requirement necessary to enter into a contract.

6. PLACE AND DATA TRANSFER

The personal data is processed at Pure Algae’s operating office and in any other places where the parties involved in the processing are located. 

7. RETENTION PERIOD

Personal data collected by Pure Algae shall be processed and stored for as long as required by the purpose for which the personal data has been collected.  Pure Algae may be allowed to retain personal data for a more extended period if Pure Algae has obtained valid consent to the processing activity as long as such consent is not withdrawn. Furthermore, Pure Algae may be obliged to retain the personal data for a more extended period whenever required to perform a legal obligation or to establish, exercise or defend a legal claim.

Once the retention period expires, personal data shall be deleted. Therefore, the right to access, the right to erasure, the right to rectification and the right to data portability cannot be accommodated after the expiration of the retention period.

8. DATA SECURITY AND DATA BREACH

Pure Algae takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of personal data. The data is processed using computers and/or IT-enabled tools, following organizational procedures and modes strictly related to the purposes indicated. To protect your personal data, we continuously assess the risks that may be associated with our processing of your personal data.  In particular, we pay attention to protecting your personal data against discrimination, identity theft, financial loss, loss of reputation and data confidentiality.  To avoid loss of personal data, we continuously back up our systems and use encryption or other security measures where necessary. Finally, we train our employees in handling personal data.

In case of a data breach that involves a high risk to your rights, we will notify you of the breach as soon as possible under the given circumstances. “A personal data breach” means a breach of security leading to accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data. In short, there will be a personal data breach whenever any personal data is lost, destroyed, corrupted, disclosed without proper authorization, or if the data is made unavailable. 

If you experience or suspect a personal data breach, please report it to Pure Algae immediately.   

9. INDIVIDUALS’ RIGHTS

Where legally required, Pure Algae shall inform individuals of the purpose of processing their personal data, rights to have their personal data rectified, deleted or blocked, and the identity of the company responsible for the collection and process of their personal data.  In all other cases, users may inquire with Pure Algae to find out which rights apply to them.

Individuals have the following rights:

  • Withdrawal of consent - the right at any time to withdraw previously given consent to the processing of his/her/its personal data.

  • Object to processing of personal data - the right to object to processing personal data if such processing is carried out on a legal basis other than consent. Further details are provided in the dedicated section of this Privacy Policy.

  • Access to personal data - the right to learn if Pure Algae are processing personal data, obtain disclosure regarding certain aspects of the processing and obtain a copy of the data undergoing processing.

  • Verify and seek rectification - the right to verify the accuracy of his/her/its personal data and ask for it to be updated or corrected.

  • Restrict the processing of personal data - the right, under certain circumstances, to restrict the processing of his/her/its personal data. In this case, Pure Algae will not process mentioned personal data for any purpose other than storing it.

  • Deleted personal data or otherwise removed - the right, under certain circumstances, to obtain the erasure of his/her/its personal data from Pure Algae.

  • Have personal data transferred to another data controller - the right, under certain circumstances, to have personal data transmitted to another controller without any hindrance.

  • Lodge a complaint - the right to bring a claim before his/her/its competent data protection authority.

10. TRAINING

Pure Algae organizes formalized GDPR training for its employees to prevent any violation of applicable laws, regulations, and corporate standards.  Training on personal data protection may be conducted via electronic communication, webinars, or in-person training. All employees are trained on basic GDPR requirements, and certain groups have more advanced training on personal data processing based on business needs.

11. ONGOING AUDIT & MONITORING

Through a combination of external and internal controls, ongoing audits and monitoring, Pure Algae seeks to maintain secure processing of data and prevent data loss. In audit findings, the responsible department must prepare a mitigation plan, including corrective and preventive actions to mitigate risks and bring procedures and policies in compliance with legal requirements, corporate standards and this Privacy Policy.

12. REPORTING SYSTEM AND CONTACT DETAILS

In case of questions and/or possible violations of this Privacy Policy, please contact Pure Algae at:

Pure Algae ApS
Grenaa Havn
Færgevej 2B
8500 Grenaa
Denmark

Telephone: +45 60 535 642
Website: https://www.purealgae.dk/
E-mail: contact@purealgae.dk

Any request can be exercised free of charge and addressed as soon as possible and always within one (1) month or sooner if applicable law requires.

13. CHANGES TO THIS PRIVACY POLICY

Pure Algae reserves the right to amend this Privacy Policy. The latest edition will always be available on our website.