In the Orifarm Group ("Orifarm" or “we”), data protection and confidentiality take high priority. This privacy policy describes how Orifarm processes your personal data in accordance with the General Data Protection Regulation (hereinafter referred to as “GDPR”) and national data protection requirements.
1. Processing of personal data
Below you can read more about the situations where Orifarm processes information about people outside the organisation:
1.1. Contact person at Orifarm's customer or supplier
When you are employed by a customer of or supplier to Orifarm, we process the personal data necessary for us to enter into the contract and fulfil its terms. In addition, we may continuously process the data which we have a legitimate interest in processing in order to manage the customer/supplier relationship. In this context, we process work-related information about employees, including name, e-mail address, telephone number and place of work.
If you are employed by a pharmacy that collaborates with Orifarm, we may exchange your work-related contact details with the provider of our CRM system, if you have given your consent to this. This concerns registration of information about e.g. your place of work, e-mail address, telephone number and your special area.
Our basis for processing is GDPR, Article 6(1)(b) and 6(1)(f). The data is erased on an ongoing basis when we no longer have a legitimate reason for processing it.
Provided that you have given your consent, we will also use your contact details to send marketing material to your company/place of work. In most cases, however, this will be post sent to the company address or marketing sent to a main e-mail address.
1.2. Reporting of adverse effects and claims
If you report an adverse effect or claim directly to Orifarm, we will process your contact details in order to respond to your enquiry, just as we will process the information you have provided in the report. Finally, we report adverse effects to public authorities when required, although this takes place an anonymous form.
In certain cases, Orifarm uses a qualified data processor (e.g. a call centre) to handle reports of adverse effects and claims.
Our basis for processing is GDPR Article 6(1)(c) and 9(2)(i), as we are legally obliged to monitor the safety of medical products. Orifarm retains the cases in person-identifiable form for documentation purposes for up to six months from the date of final processing of the report, after which they are anomynized.
1.3. Job applications
When you apply for a job at Orifarm, we process the information stated in your application, CV and any attachments in order to assess whether you are suitable for a current or future position at Orifarm. This will typically be general personal data, including name, contact details, date of birth, education, job experience and references. If you are asked to undertake a personal profile test and/or cognitive test in connection with recruitment, we will also process the results of these tests. Finally, we may collect information that you have published yourself, e.g. on LinkedIn.
We encourage you to only send us the information that is relevant for the specific position. It will very rarely be relevant for us to be informed of your civil registration number in connection with the recruitment process, so we urge that this is only provided if you are specifically requested to do so.
Orifarm’s basis for processing during the actual recruitment process is a balancing of the interests in GDPR, Article 6(1)(f), as we have a legitimate interest in being able to assess your suitability for a specific or future position at Orifarm based on the information we have received about you.
Some positions at Orifarm require documentation of a clean criminal record. We will only ask for a copy of the record to be presented and will therefore not retain it afterwards.
In principle, we will delete your application once we have made a decision on whether we can offer you a position at Orifarm. If we find it necessary to retain your job application, etc. for later use, we will obtain your consent for continued retention for six months after the recruitment period, cf. GDPR Article 6(1)(a).
1.4. Concerning physical visits to an Orifarm location
When you visit one of our addresses, for administrative and security reasons we register your name and the company you come from (unless you are attending a job interview with us), as well as the time and date of the visit and who you are visiting at Orifarm.
Our basis for processing is GDPR, Article 6(1)(f), as it is in our interest to register this information on security grounds. The information will be deleted no later than six years after your visit.
Video surveillance is installed in certain areas in or around Orifarm’s buildings. These areas are marked. Information obtained via video surveillance is used solely for crime prevention purposes and will therefore not be passed on to anyone other than the police. Recordings are only stored for 30 days, after which they are deleted automatically, unless they are used in the investigation of a criminal case.
1.5. Website
We use cookies to operate our websites, to improve the user's experience of the website and to prepare statistics, if you have given your consent to this. Read more in our cookie policy via the link at the bottom of the website.
If you use a contact form on our website, we will process information about your name, e-mail address, the country you come from and what your enquiry concerns. As a general rule, our basis for processing is GDPR, Article 6(1)(f), as we have a legitimate interest in responding to your enquiry. The basis for processing and retention period will then depend on what your enquiry concerns; see the relevant sections of this privacy policy.
2. Disclosure of your personal data
In principle, Orifarm will not disclose your personal data to other data controllers outside the Orifarm Group. In a few cases, however, we may have a legal obligation to disclose your information, including to public authorities, e.g. in connection with the reporting of adverse effects. However, this will usually concern data that has been anonymized. In certain cases, it may also be necessary to disclose your information in order to fulfil an agreement that we have entered into with you.
Orifarm may entrust the processing of your data to our IT suppliers (data processors). In such a case, such processing will only take place on Orifarm’s behalf and in accordance with our instructions, which will be governed by a written agreement between Orifarm and the IT supplier in question.
3. Your rights
As a data subject, you have a number of rights under the data protection regulations. Your rights include the right to request access to and rectification or erasure of your personal data, the right to restrict and object to our processing, as well as the right to receive your data in a structured, commonly used and machine-readable format (data portability). These rights may be subject to conditions and limitations. Whether we can accommodate your request will always depend on a specific assessment.
If you are dissatisfied with our processing of your personal data, you can file a complaint with the local data protection agency.
4. Orifarm contact data
You are always welcome to contact us if you have any questions about the processing of your personal data:
Orifarm Group A/S
Energivej 15 - POB 69
DK-5260 Odense S, Denmark
CVR: 27347282
Phone no.: +45 6395 2700
Fax: +45 6395 2701
E-mail: info@orifarm.com or dataprotection@orifarm.com
