At ARCEDI Biotech ApS (“ARCEDI”, “we”, “us” or “our”) we give high priority to confidentiality and data security. This privacy policy applies to our processing of personal data and establishes guidelines for the way ARCEDI processes your personal data and provides you with the information that you are entitled to receive under applicable data protection laws. You should read the privacy policy before you hand over your personal data to ARCEDI.

Data controller and contact information

The data controller of your personal data is:
ARCEDI Biotech ApS Address:
Tabletvej 1, 7100 Vejle
CVR-no.: 25577922
E-mail: kontakt@arcedi.com

Cookies

ARCEDI uses cookies on the websites www.arcedi.com and www.evitatest.com in this connection processes your personal data. ARCEDI may collect the following personal data about you, when you visit our website: 

• IP address
• MAC address
• Browsing history
• Information about your use of our website, including click-behaviour

We use cookies to collect the above-mentioned personal data. You can read more about the use of cookies in our cookie banner.   

Purposes of the processing
Your personal data may be processed for the following purposes:

• We use marketing cookies to promote our business
• We use statistical cookies for statistics and analysis
• We use necessary cookies which ensure that the website works as it should 

Legal basis of the processing
ARCEDI processes your personal data on the following basis:

• Legitimate interests: We base the processing of your personal data on our legitimate interests in understanding how our website is used, including to enable adjustments on the website and our legitimate interests in promoting our business and making the functionalities on our website available to you (Article 6(1)(f) of the General Data Protection Regulation).

When you visit our websites, we ask for your informed consent to place cookies that are not functional cookies according to the cookie rules. You have the right to withdraw your consent at any time. You can change your cookie settings in our cookie banner. 

You may find more information on the use of cookies in our cookie banner. 

Retention period
Personal data collected through the use of cookies are deleted in accordance with the deletion periods described in our cookie banner. However, the information may be stored for a longer period in anonymised form.

When you communicate with us

When using the contact form on our websites or contact us through the phone, ARCEDI collects and processes your personal data. ARCEDI collects, processes, and stores the following types of your personal data: 

• Name, e-mail address, phone number
• What your inquiry is about
• Date of your inquiry
• Other information you provide in connection with your inquiry. If you choose to provide us with sensitive personal data on your own initiative, e.g. health information, we assume that you have given your explicit consent to our processing of this information so that we can respond to your inquiry

The purposes of the processing
Your personal data will be processed for the following purposes:

• Handling of your inquiry
• General communication

Legal basis of the processing
ARCEDI processes your personal data on the below-mentioned basis. 

• Legitimate interests: We may process your personal data on the basis of our legitimate interests in handling your inquiry and communicating with you (Article 6(1)(f) of the General Data Protection Regulation).

• Consent: If you choose to provide us with sensitive personal data, we base the processing of this data on your explicit consent to our processing (Article 6(1)(a) and Article 9(2)(a) of the General Data Protection Regulation).

Retention period
Your personal data will be stored for a maximum of 1,5 year. However, the data can be stored for a longer period in anonymised form.

When you use the search functionality to find a clinic near you

When you use the search functionality on www.evitatest.com to find a clinic offering EVITA TEST near you, you type in your city or address. This information will be processed by ARCEDI.   

The information will be processed with the purpose of making our search functionality available to you, thereby enabling you to easily find a clinic near you.    

ARCEDI processes the information on the following grounds:

• Legitimate interests: We may process your personal data based on our legitimate interests in making our search functionality available to you, thereby enabling you to easily find a clinic near you (Article 6(1)(f) of the General Data Protection Regulation).

ARCEDI does not store the personal data you enter in our search functionality in order to find your nearest clinic.

If you sign up for our newsletter(s)

ARCEDI collects, processes, and stores your personal data for marketing purposes when you sign up for newsletter(s). ARCEDI may collect, process, and store the following types of your personal data:

• Name and e-mail address
• Your consent    

The purposes of the processing
Your personal data may be processed for the following purposes:

• Marketing

Legal basis for processing
ARCEDI processes your personal data on the following grounds:

• Consent: ARCEDI will only use your personal data for direct marketing, including for sending out newsletters, if you have given your prior and explicit consent to this (Article 6(1)(a) of the General Data Protection Regulation).

Retention period
Your personal data will be stored as long as your consent to receive newsletters is active.  

You can always withdraw your consent by clicking on the unsubscribe link at the bottom of each e-mail or by contacting us as described below. However, withdrawing your consent does not affect the legality of the processing that preceded the withdrawal.  

Documentation of your marketing consent is kept for 2 years from the time you have withdrawn your consent to receive direct marketing material. The retention period is determined based on ARCEDI’s legitimate interest in being able to document that direct marketing has been carried out in accordance with the applicable legislation (Article 6(1)(f) of the General Data Protection Regulation). In addition, the information can be stored for a longer period in anonymised form.

If you visit our social media profiles

This section contains the policy for ARCEDI’s processing of personal data collected through ARCEDI’s profiles and pages on social media.          

ARCEDI has a profile or page on the following social media platforms:

• Facebook (Meta Platforms Ireland Ltd.)
  • Facebook’s privacy policy is available here
  • You can customise your privacy settings on Facebook here
• LinkedIn Ireland Unlimited Company
  • LinkedIn’s privacy policy is available here
  • You can customise your privacy settings on LinkedIn here
• Instagram (Meta Platforms Ireland Ltd.)
  • Instagram’s privacy policy is available here
  • You can customise your privacy settings on Instagram here
• YouTube (Google Ireland Ltd.)
  • Google’s privacy policy is available here
  • You can customise your privacy settings on YouTube here

For Facebook, Instagram, and LinkedIn ARCEDI and the social media providers are jointly responsible for the processing of personal data collected in connection with your interactions with ARCEDI’s profiles or pages on the individual social media platform, including the profiles’ posts.  

ARCEDI and the providers of Facebook, Instagram, and LinkedIn have concluded an agreement on the delegation of data protection tasks. According to these agreements, ARCEDI and the social media providers are each responsible for the tasks associated with the processing we each perform. However, it is agreed between ARCEDI and the provider of Facebook and Instagram that the provider is responsible for enabling you to exercise your rights as described in the section ‘Your rights’ below, and that ARCEDI is responsible for providing you with the information described below. In addition, it is agreed between ARCEDI and the provider of LinkedIn that the provider is responsible for responding to requests from you regarding the rights described in the section ‘Your Rights’ below. 

ARCEDI also uses the provider of YouTube as a data processor in connection with ARCEDI’s use of YouTube, and we also share certain information about your interactions, interests, etc. with the provider of YouTube. This is based on our and Google’s legitimate interest in optimising marketing and the service, including our videos on YouTube (Article 6(1)(f) of the General Data Protection Regulation). 

Collection of personal data
When you visit or interact with our social media profiles, ARCEDI and the social media providers may collect, process, and store the following types of personal data about you:

• Information available on your profile, including your name, gender, civil status, workplace, interests, image, and your city.
• Whether you “like” or have applied other reactions to our profile
• Comments you leave on our posts
• That you have visited our profile
• Your IP address

The purposes of the processing
ARCEDI processes your personal data for the following purposes:

• Improving our products and services, including our social media profiles and pages
• Statistics and analysis
• To be able to communicate with you if you comment on a post, make a review, or send us a message.
• Marketing in general

The social media providers process your personal data for the following purposes:

• Improving their ad system 
• To provide ARCEDI with statistics which the social media providers produce based on your visit to our profiles and pages.
• Advertising and customising the activities on the page 

Legal basis for processing
 The processing of your personal data is based on the following basis: 

• Legitimate interests: ARCEDI bases the processing of your personal data on our legitimate interests in being able to communicate with and market us to you on our social media profiles, as well as our legitimate interest in improving our products and services (Article 6(1)(f) of the General Data Protection Regulation).
  
  The social media providers base the processing of your personal data on their legitimate interests, including their interest in improving their ad system and providing statistics to ARCEDI, which the social media provider, for example, prepares based on your visit to ARCEDI’s profile or social media page. In addition, the social media providers have a legitimate interest in providing an innovative, individually adapted, secure and profitable service (Article 6(1)(f) of the General Data Protection Regulation). 

• Consent: The social media provider process some of your personal data in accordance with your consent, which you can withdraw at any time through your social media privacy settings (Article 6(1)(a) of the General Data Protection Regulation).

Retention period
We encourage you to delete any posts, comments or other interactions on our profile if you no longer wish for these to be accessible on our social media profile. Your direct messages to ARCEDI will be kept in according with section 2 above.  

Please refer to the privacy policy of the provider for each of the social media platforms for information on how long they store your personal data.

If you are a business partner

This section contains the policy for ARCEDI’s processing of personal data of sole proprietorship owners or contacts of suppliers and other business partners working with ARCEDI.     

Collection of personal data
ARCEDI may collect, process, and store your personal data in the following cases:

• When your company or the company you work at enters into an agreement with ARCEDI
• When you have shown interest in ARCEDI’s products and services, e.g., by providing ARCEDI with your business card
• When collaborating and communicating with ARCEDI

Types of personal data
ARCEDI may collect, process, and store the following types of personal data about you:

• Name, e-mail address, phone number, and corresponding contact information
• Organisational information such as the name and address of the company, job title, employment area, primarily place and country of work
• Contractual information such as orders, invoices, contracts, and other agreements between your company (or your employer) and ARCEDI that may contain e.g., your contact information
• Financial information such as bank details (in the case of a sole proprietorship)

We may receive such information directly from you (primarily through e-mails and other correspondence with you) or from a third party such as your employer. 

The purposes of the processing
Your personal data may be processed for the following purposes:

• General planning, fulfilment, and the management of collaborations, including contracts
• Administration such as the processing of payments, accounting and auditing
• Marketing communication
• General communication
• Statistics and analysis
• Compliance with applicable laws and regulations
• Handling conflicts

Legal basis for processing
ARCEDI processes your personal data on one or more of the following grounds:

• Legitimate interests: We may process your personal data on the basis of our legitimate interests in managing day-to-day operations of our business, including planning, execution and management of the cooperation or our legitimate interest in statistics, analyses and marketing activities (where consent is not required). The processing may also be necessary for our legitimate interest in establishing, defending, or asserting legal claims (Article 6(1)(f) of the General Data Protection Regulation).

• Legal obligation: The processing of your personal data will in some cases be necessary for compliance with legal obligations, such as our obligations under the Danish Bookkeeping Act (Article 6(1)(c) of the General Data Protection Regulation).

• Contractual obligations: In certain cases, the processing of your personal data is necessary to fulfil a contract (Article 6(1)(b) of the General Data Protection Regulation). This will primarily be the case if you are a sole proprietorship owner.

Retention period
Your personal data will be stored for 2 years after the end of the business relationship. Personal data which form part of bookkeeping material is, however, kept for 5 years from the end of the current financial year to ensure compliance with the Danish Bookkeeping Act. However, the information can be stored for a longer period in anonymised form.

Transmission to other controllers and entrustment to data processors

To achieve the above purposes, we may give third parties access to your personal data, which, based on a contractual relationship with ARCEDI, provides relevant services, this could be IT suppliers or other suppliers that process personal data for us. Such suppliers will only process personal data in accordance with our instructions according to the signed data processing agreements. 

In the context of ARCEDI’s development, the corporate structure may change, e.g., by the total or partial sale of the company. In the case of a partial transfer of assets containing personal data, the processing basis for the related transfer of personal data is, as a rule, Article 6(1)(f) of the General Data Protection Regulation, since ARCEDI has an interest in transferring parts of its assets and making commercial/structural changes. 

We use Google Analytics on our website and will, while doing so, share personal data collected through the use of cookies as described in section 1 above with Google Ireland Limited. Such sharing takes place for the purpose of improving Google’s services to us, thereby optimizing our possibilities in relation to statistics and analytics on our website. The legal basis for sharing the personal data with Google is our legitimate interests in improving our analytics tool and our website (Article 6 (1) (f) of the General Data Protection Regulation). You may disable the sharing of your personal data with Google by choosing not to accept statistical cookies on the website. 

In addition to what is described above, your personal data is generally not disclosed to a third party without your consent. However, in certain circumstances and under the law, it may be necessary to disclose your personal data to:

• The police
• Lawyers
• Accountants
• Courts
• Public authorities
• Potential buyers
• Group-linked companies

If your personal data are transferred to data processors or data controllers established in countries outside the EU/EEA that do not have an adequate level of protection, such a transfer will only take place once a transfer basis is secured. In addition, the transfer will be based on the EU-U.S Data Privacy Framework and/or the EU Commission’s standard contracts which you may obtain a copy of by contacting us as stated below.

Your rights

• You have the right to access the personal data we process about you
• You have the right to object to our collection and further processing of your personal data
• You have the right to rectification and deletion of your personal data, however there are certain statutory exceptions, including the Bookkeeping Act
• You have the right to ask us to restrict the processing of your personal data
• In certain circumstances, you may also request to receive a copy of your personal data and to transmit the personal data you have provided to us to another data controller (data portability)
• You can withdraw any consents you may have given at any time. We will then delete your personal data unless we may continue the processing on another basis. 

Questions and complaints

If you have any questions about this privacy policy or if you wish to complain about the way we process your personal data, please feel free to contact us: 

ARCEDI Biotech ApS Address:
Tabletvej 1, 7100 Vejle
E-mail: kontakt@arcedi.com  

If your complaint is not resolved by us and you want to proceed with the case, you can complain to the Danish Data Protection Agency:  

The Danish Data Protection Agency
Carl Jacobsens Vej 35 2500 Valby
Phone number: 33 19 32 00
E-mail: dt@datatilsynet.dk

Changes to the privacy policy

We reserve the right to make changes in this privacy policy from time to time. In case of changes, the date in the bottom of the privacy policy will be changed. The privacy in effect will be accessible on our websites.  

25-09-2023