External Privacy Notice
At NNE A/S ("NNE" "we" “us” or “our”) data protection and confidentiality is a high priority. This Privacy Notice explains how NNE as a data controller processes your personal data. Further, we explain how we use the personal data that you leave and/or provide when you visit our website and use the various services on the website. It also provides clear information about your rights and how you can exercise them.
We are very serious about the protection of your personal data. Personal data that we collect when you visit our website is processed in accordance with all Danish and EU data protection laws, and our employees are obliged to comply fully with data protection regulations.
This website is operated and owned by:
NNE A/S
CVR no: 13 24 60 09
Bredevej 2
DK-2830 Virum
Denmark
Use of personal data
We will use personal information only in ways that are compatible with the purposes for which it was collected or subsequently authorised by you. NNE will take reasonable steps to ensure that personal information is relevant to its intended use, accurate, complete, and current.
Website management and product analysis
NNE keeps statistics about which areas of the site our users visit and what the users prefer. This data does not contain personal data. Knowledge about the users’ use of the website is gained with help from the collected data. This information is used to improve the website. We do use data about how our users navigate, to better understand how our users use nne.com, and from that we try to improve the website. We are able to see where users come from or where users are going on the internet after they leave our site. Furthermore, we collect information about what content our users, as a unit, prefers. This information is also used to improve the website. We do not sell or otherwise disclose information about how our user navigate and use our website. Where possible, we use data for these analyses which do not identify individual users. Where personal data might be processed, the legal basis for this processing is our legitimate interest under GDPR Article 6(1)(f).
Requests
When you submit a request for NNE via our contact us form, we collect name, email, company name, phone number and the question and comments you send to us so that we can respond to your questions and comments. You may choose to provide additional information, as well. You provide the information voluntarily and the data will only be used for the purposes of which you as a visitor to the site have been informed
Online surveys and opinion polls
We may occasionally invite website visitors or participants to complete voluntary online surveys or opinion polls to help us understand preferences and improve our services. We do not keep any personal information about you in connection with your participation unless you specifically agree to provide that information. Participation is optional, and any personal data you provide (e.g. name or email address) will only be processed with your explicit consent under Article 6(1)(a) of the GDPR
Business contacts and clients
When you or your organization engage with us as a client, customer, supplier, or business partner, we process contact and identification data, correspondence, and contract information as necessary to manage the relationship, deliver services, and maintain records. Processing is based on Article 6(1)(b) (contract performance) and Article 6(1)(f) (legitimate interest in managing business relations and compliance obligations).
Security
When you use our website and digital services, we may process personal data such as IP address, device and browser information, timestamps, pages visited, and security events (e.g., login attempts, account lockouts) for our legitimate interest in ensuring security through access control, fraud prevention and incident management. Processing is based on GDPR Article 6(1) (f).
Video surveillance and visit to our buildings
NNE will process personal data about you, which is considered necessary for the administration of facility management and security, including for the purpose of prevention of crime as well as monitoring of premises sites to ensure safety and compliance with applicable requirements and other legal obligations.
As such, NNE has installed video surveillance in certain areas of its business premises in Virum and Kalundborg. The surveillance areas are clearly marked with signs in accordance with Section 3 of the Danish TV-Surveillance Act.
We will process personal data about you, including surveillance material, which includes your activities within the monitored areas.
We will process such personal data based on the GDPR, art. 6.1.f (necessary to pursue our legitimate interests in conducting facility management and ensuring the safety of employees). If such personal data includes personal data related to i.e. any criminal actions or violations, such processing will be based on Section 8.3 of the Danish Data Protection Act.
Recordings will only be accessed and reviewed in case of suspicion of criminal actions, violations of internal guidelines or internal/external audits. The recordings may be disclosed to the police in case of criminal actions or if the disclosure is otherwise required by law in accordance with Section 8.4 of the Danish Data Protection Act.
Recordings from video surveillance which has been conducted for the purposes of preventing crime are deleted or anonymised no later than 30 days after the recording has taken place, unless is it necessary for NNE to keep the recordings for the purpose of dealing with a specific dispute, e.g. due to criminal actions or violations
Information we share
We do not sell or otherwise disclose personal information about our website visitors, except as described here.
We may transfer the personal information we collect on this site to other NNE companies in countries where we do business, but we will do so only for the purposes described above. When we transfer your information to other countries, we will protect that information as described here unless otherwise required by applicable laws.
We may share information provided by our visitors to nne.com with service providers we have retained to perform services on our behalf and in accordance with the instructions of NNE. These service providers are contractually restricted from using or disclosing the information except as necessary to perform services on our behalf or to comply with legal requirements.
In addition, we may disclose information about you (a) if we are required to do so by law or legal process, (b) to law enforcement authorities or other government officials, or (c) when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss or in connection with an investigation of suspected or actual illegal activity.
In the case of a re-organization, full or partial sale of the company, any disclosure in such connection will be in accordance with current legislation for the processing of personal data.
Joint controllership when using social media
NNE has active corporate profiles on social media such as LinkedIn Ireland Unlimited Company (“LinkedIn”). To the extent that LinkedIn provides “Page Insights” or similar statistics, NNE and the platform are joint controllers for the initial collection and aggregation of visitor data on our company profile. The joint controllership relates solely to this collection/statistics on the profile and not to our own profile homepage on LinkedIn.
In certain cases, LinkedIn may itself transfer personal data to third countries outside the EU/EEA. It is our understanding that such transfers take place on the basis of the European Commission’s Standard Contractual Clauses. For more information about LinkedIn’s processing of personal data, please refer to LinkedIn’s Privacy Policy and Controller Addendum, which you can find here: LinkedIn Privacy Policy.
Transfer to third countries
If your personal data is transferred to data controllers or data processors which are located in countries outside the EU/EEA not ensuring an adequate level of data protection, such transfer will be adequately safeguarded by NNE via the EU Commission’s Standard Contractual Clauses.
Your personal data may be transferred to NNE companies that are located in countries outside EU/EEA. NNE is covered by Novo Nordisk’s Binding Corporate Rules which can be found on the following link.
Deletion of personal data
We will delete your personal data when we no longer need to process them in relation to one or more of the purposes set out above in section 3. However, the data may be processed and stored for a longer period in anonymized form or where continued processing is necessary for compliance with a legal obligation or for legal claims.
Cookies
We collect certain aggregate and non-personal information when you visit this website. Aggregate and non-personal information does not relate to a single identifiable visitor. It tells us such things as how many users visited our site and the pages accessed. By collecting this information, we learn how to best tailor our website to our visitors. We collect this information through “cookie” technology. The legal basis is GDPR Article 6(1)(f) and Section 4 of the Danish Cookie Executive Order for necessary cookies, and consent under GDPR Article 6(1)(a) and Section 3(1) of the Danish Cookie Executive Order for cookies used for statistics and marketing.
Read more about how we handle cookies in our Cookie Policy.
Security
We have implemented security measures to ensure that our internal procedures meet our high security policy standards. Accordingly, we strive to protect the quality and integrity of your personal data.
We maintain administrative, technical and physical safeguards to protect against unauthorised disclosure, use, alteration or destruction of the personal information you provide on this website.
Your rights
You have certain rights in relation to our processing of your personal data. These rights ensure transparency and control over how your personal data are processed by us. Below is an overview of your rights and how to exercise them:
1. Right of access: You have the right to obtain confirmation as to whether we process personal data concerning you, and, if so, to receive access to such data and information about the processing.
2. Right to rectification: You have the right to request that we correct or complete any inaccurate or incomplete personal data about you without undue delay.
3. Right to erasure: You have the right to request that we delete your personal data where, for example, the data are no longer necessary for the purposes for which they were collected, you withdraw consent (where applicable), or the data have been unlawfully processed.
Please note that this right may be limited where continued processing is necessary for compliance with a legal obligation or for legal claims.
4. Right to restriction of processing: You may request that we restrict the processing of your personal data in certain situations, e.g. if you contest the accuracy of the data, object to the processing, or believe the processing is unlawful but prefer restriction to erasure.
5. Right to data portability: Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit those data to another controller, where technically feasible.
6. Right to object: You have the right to object at any time, on grounds relating to your particular situation, to our processing of your personal data that is based on legitimate interests. If you object, we will cease processing unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or if the processing is necessary for legal claims. You also have the right to object at any time to the processing of your personal data for direct marketing purposes.
7. Right against automated decision making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. NNE does not carry out such automated decision-making. If this should change, we will inform you in advance and explain the logic involved, as well as the significance and possible consequences for you.
8. Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Be aware that withdrawal will not affect the lawfulness of processing based on consent before its withdrawal or the lawfulness of processing based on other legal bases.
9. Right to lodge a complaint: Please find information under section 11.
Certain limitations may apply to the rights described above.
Links to other websites etc.
We provide links to other websites for your convenience and information. These sites may have their own privacy statements in place, which we recommend you review if you visit any linked websites. We are not responsible for the content of linked sites or any use of the sites.
Updates to our privacy policy
This privacy notice may be updated periodically and without prior notice to you to reflect changes in our online information practices. We will post a prominent notice on this website to notify you of any significant changes to our privacy notice and indicate at the top of the policy when it was most recently updated.
How to contact us
If you have any questions or comments regarding this policy or the personal information NNE collects, uses and shares about you, or if you would like to update personal information about you in NNE databases in accordance with your rights under applicable law, please contact us by:
Emailing us via the Contact form
Calling us at +45 44 44 77 77 or
Writing to us at:
NNE A/S
Bredevej 2
DK-2830 Virum
Denmark
Complaints
If you wish to appeal against the processing of your personal data, please contact us by email, telephone or letter as indicated in section 12 above. You may also contact the Danish Data Protection Agency, Carl Jacobsens Vej 35, 2500 Valby or the supervisory authority in your jurisdiction.