Privacy Policy – Biofuel Express
1 Introduction
Here, you can read about how Biofuel Express A/S (hereinafter "Biofuel," "we," "us," and "our") collects, processes, and stores your personal information as part of our operations and the activities described in section 3 below.
Responsible handling of this personal information is crucial to our business goals and reputation. This privacy policy describes how and why we collect personal information about you, how the information is used, when it is deleted, and how you can gain insight into your personal information.
2 Data Controller
Biofuel is the data controller for the processing activities described in this privacy policy unless otherwise specified in the activities in section 3 below.
If you have any questions about this privacy policy or our processing of your personal information as described in section 3 below, feel free to contact us at:
Biofuel Express A/S
CVR no.: 30914171
Alsvej 21, 8940 Randers
Phone: +45 70 26 41 22
3 How do we process personal information as part of our activities?
Biofuel collects and processes personal information in various situations, and the purpose of the collection, the use of personal information, and when it is deleted vary for each situation. The individual activities where Biofuel (as the data controller) may collect personal information about you are therefore described separately below.
When you visit our website (
https://biofuel-express.com), we process your personal information in different situations. The website contains links to other companies' websites, and we are not responsible for the content of these websites or their own processing of your personal information for their own purposes. We encourage you to read the privacy policies of these websites, which describe how they process your personal information.
3.1 Cookies
When you visit our website, we use cookies, and in doing so, we process your personal information. We may collect personal information from third parties, such as social media, websites, and publicly available sources.
You can learn more about the cookies we use and related information in our cookie policy, which you can find here: [insert link to cookie policy].
In connection with cookies, we combine and supplement the data we have collected or received, and we use profiling and automated decision-making processes. This may involve, for example, combining your product searches or use of certain features with data from our marketing systems or with data related to your Biofuel Express Insights account, enabling us to tailor content to you and supplement data with information from third parties or AI/machine learning.
3.1.1 What information is processed, and where does it come from?
We process the following personal information about you:
• Electronic identification data (IP address, cookies, location data, etc.)
• Device data, such as operating system, language, etc.
• User behavior on the website and visit history, such as the number of clicks, time spent on the website, searches, etc.
3.1.2 Why is the information processed?
We process your personal information for the following purposes:
• To improve the website's user-friendliness and personalize the website for you
• To analyze the usage of our website and gather statistics about website visitors
• For the administration, maintenance, and development of the website
• To target advertising campaigns and marketing from us and third parties
• For other marketing purposes, such as customizing our marketing materials, including newsletters.
3.1.3 What is the legal basis for processing?
Our processing of regular personal information is based on the following legal grounds:
• We base the processing of your personal information on your consent to provide features on the website, as well as statistics and promotion for marketing purposes. We seek your informed consent during your initial visit to the website to place cookies that are not functional cookies, in accordance with cookie regulations. You have the right to withdraw your consent at any time. This legal basis is found in Article 6(1)(a) of the General Data Protection Regulation. You can withdraw your consent at any time by contacting us (see section 2 above).
• Pursuing our or a third party's legitimate interests, which outweigh the interests of protecting your fundamental rights and freedoms. This legal basis is found in Article 6(1)(f) of the General Data Protection Regulation. The legitimate interests in question include our interests in operating the website and its features, including compiling statistics, conducting anal-yses, and further developing our products and services. You can object to this processing at any time by contacting us (see section 2 above).
3.1.4 Who are the information shared with?
The information is shared with our IT suppliers (data processors) who store and process the information on our behalf and according to our instructions. We may also share your personal information with our affiliated companies.
In the course of processing, personal information may be transferred to countries outside the EU/EEA (third countries). We ensure that your rights are protected, and the level of protection is maintained in such data transfers, for example, through the use of EU Commission adequacy deci-sions and standard contractual clauses ("SCCs") approved by the EU Commission under Article 46(2)(c). You can obtain a copy of these standard contracts by contacting us (see section 2 above).
3.1.5 How long are the information stored?
Cookies are deleted in accordance with the storage periods outlined in our cookie banner and policy, which are displayed on the front page when you visit our website for the first time. Here, you can also read about the storage period for each cookie provider.
The information may be stored for a longer period in anonymised form.
You can always change your cookie settings, including your consent, by deleting cookies from your browser or by clicking on the cookie icon on our website, where you have the option to access cookie settings.
3.2 When you subscribe to our newsletter, participate in competitions, or receive other forms of marketing
We collect and process your personal information for marketing purposes when you subscribe to our newsletter, participate in competitions, or receive similar marketing materials.
What information is processed, and where does it come from?
We process the following personal information about you:
• Contact information, including name, email address, and phone number
• Your consent and consent data
• User behavior via pixels, such as clicks, time spent on ads, interests, consumption, etc.
3.2.1 Why are the information processed?
We process your personal information for the following purposes:
• To target marketing from us and third parties
• To analyze the usage of our website and collect statistics to improve our products and services.
3.2.2 What is the legal basis for processing?
Our processing of regular personal information has the following legal basis:
• We base the processing of your personal information for direct marketing purposes on your consent. We seek your informed consent in connection with newsletters, competitions, surveys, etc. This legal basis is found in Article 6(1)(a) of the General Data Protection Regulation. You can withdraw your consent at any time by contacting us (see section 2 above).
• Pursuing our or a third party's legitimate interests, which outweigh the interests of protecting your fundamental rights and freedoms. This legal basis is found in Article 6(1)(f) of the General Data Protection Regulation. The legitimate interests in question include our interests in operating and developing our marketing efforts, including compiling statistics, conducting analyses, and further developing our products and services. You can object to this processing at any time by contacting us (see section 2 above).
We use profiling (automated analyses and segmentation based on your behavior) and automated decision-making processes to provide you with more valuable and tailored content in our marketing. This may include personalized offers, advertisements, and other marketing materials that we believe will have greater value to you than generic marketing materials. It may also be to optimize your user experience, such as determining when to contact you with relevant material, enhancing your website experience, or personalizing your Biofuel Express Insights account. This means that we use data from our internal systems, along with information about purchase history, app or other product usage, service history, website searches, social media activity, etc., to gain a more complete picture of your behavior and needs.
You have the right to object to the processing of your personal information for direct marketing purposes, including profiling in connection with such direct marketing, and you may also have the right to object under other circumstances.
3.2.3 Who are the information shared with?
The information is shared with our IT suppliers (data processors), who store the information for us and process it according to our instructions. We may also share your personal information with our affiliated companies.
In connection with processing, the personal information may be transferred to countries outside the EU/EEA (third countries). We ensure that your rights are protected, and the level of protection is maintained in such data transfers, for example, through the use of EU Commission adequacy decisions and standard contractual clauses ("SCCs"), approved by the EU Commission under Article 46(2)(c). You can obtain a copy of these standard contracts by contacting us (see section 2 above).
3.2.4 How long are the information retained?
We retain your personal information for as long as your consent for marketing is active. We then store your consent for 2 years after withdrawal, in accordance with the practices of the Consumer Ombudsman and for documentation and validity purposes.
The information may be retained for a longer period if required by law, a specific dispute, or if the personal information is anonymized.
3.3 When you contact us, fill out our contact form, or otherwise communicate with us
3.3.1 What personal information is processed, and where does it come from?
We process the following personal information about you:
• Contact information, including name, email address, phone number
• Professional information, including title and area of work
• Information about the subject of your inquiry and the date of the inquiry
• Other information you provide in connection with your inquiry.
We recommend that you refrain from providing sensitive or confidential personal information to us unless absolutely necessary for your inquiry. If so, you should use a secure connection and send the information to us in encrypted form, for example, using secure email.
3.3.2 Why are the personal information processed?
We process your personal information for the following purposes:
• Handling and responding to your inquiry or request
• Entering into a possible agreement with you and sending you offers
• General communication with you
• Other purposes depending on the content of the inquiry.
3.3.3 What is the legal basis for processing??
Our processing of regular personal information has the following legal basis:
• Entering into a contract with you or fulfilling a contract entered into with you. This legal basis is found in Article 6(1)(b) of the General Data Protection Regulation.
• Pursuing our or a third party's legitimate interests, which outweigh the interests of protecting your fundamental rights and freedoms. This legal basis is found in Article 6(1)(f) of the General Data Protection Regulation. The legitimate interests in question include our legitimate interest in handling your inquiry, providing support and communication with you, and developing our products and services. You can object to this processing at any time by contacting us (see section 2 above).
3.3.4 Who are the personal information shared with?
Depending on the nature of the inquiry, your personal information may be shared with our suppliers, including data processors, if we need to forward your inquiry to assist you further.
We may also share your personal information with our affiliated companies.
In connection with processing, the personal information may be transferred to countries outside the EU/EEA (third countries). We ensure that your rights are protected, and the level of protection is maintained in such data transfers, for example, through the use of EU Commission adequacy deci-sions and standard contractual clauses ("SCCs"), approved by the EU Commission under Article 46(2)(c). You can obtain a copy of these standard contracts by contacting us (see section 2 above).
3.3.5 How long are the personal information retained?
Your personal information is deleted when we no longer need to process it for the fulfillment of one or more of the above purposes. This means that in most cases, we delete your inquiry once we have responded to it.
Depending on the nature of the inquiry, we may retain your personal information for a longer period after responding to your inquiry for documentation purposes and with reference to the statute of limitations rules regarding ordinary monetary claims, if the inquiry warrants it.
However, the information may be processed and retained for a longer period in anonymized form or if we are required to do so by law.
3.4 When you are a customer at Biofuel
When you are a customer at Biofuel, you are covered by this section, which describes how we process your personal information as the data controller.
We typically process your personal information in the following cases:
• When you enter into an agreement with us for the delivery and purchase of Biofuel products
• When you communicate with us and when you visit our office
• When you require support and other advice
• When you use the Biofuel Express Insights customer portal
• When you are an account holder for our Biofuel Express Card or fuel app
• When we send you relevant news and marketing about our products and company
3.4.1 What personal information is processed, and where does it come from?
You provide the personal information to us yourself, and as a starting point, you decide which personal information you want to provide. In addition, we expect to collect the following personal information about you:
• Contact information, including name, address, email address, and phone number
• Financial information, including payment details and purchase history of products and services
• Contractual information, including invoices, shipping information, orders, and agreements
• User information related to Biofuel Express Insights
• Information collected via application forms for the Biofuel Express fuel card
• Other personal information relevant to the cooperation
3.4.2 Why are the information processed?
We process your personal information for the following purposes:
• General administration of the cooperation, including planning, fulfilment, and handling of the contractual relationship
• Financial purposes, including payment administration, accounting, auditing, etc.
• Fulfillment of orders, including the sale of our products
• General communication, including responding to specific inquiries or issuing press releases, including service messages and marketing
• Compliance with applicable laws, such as fulfilling our obligations to prevent unlawful activities
• Statistics and analysis
• Handling of any conflicts and disputes.
3.4.3 What is the legal basis for the processing?
Our processing of ordinary personal data has the following legal bases:
• Entering into a contract with you or fulfilling a contract that has been entered into with you. This legal basis is found in Article 6(1)(b) of the General Data Protection Regulation (GDPR).
• Fulfillment of a legal obligation incumbent upon us. This legal basis is found in Article 6(1)(c) of the GDPR. The legal obligations in question include, among others, obligations in accounting law, anti-money laundering legislation, and tax legislation.
• Pursuing our or a third party's legitimate interests, which are deemed to be more significant than your fundamental rights and freedoms. This legal basis is found in Article 6(1)(f) of the GDPR. The legitimate interests involved include our legitimate interests in managing the customer relationship, including planning, execution, and administration of the cooperation, issuing service messages, or our legitimate interests in, for example, conducting statistics, analyses, marketing activities (where consent is not required), providing support, as well as general business development. Processing may also be necessary for our legitimate interest in preventing fraud or asserting, defending, or enforcing legal claims. You have the right to object to this processing at any time by contacting us (see section 2 above).
3.4.4 Who are the personal information shared with?
The information may be shared with our IT suppliers (data processors) who process and store the personal information for us in accordance with our instructions and based on a concluded data processing agreement.
We may disclose your contact information to our partners to provide you with the best service and products. In that case, the receiving partner becomes an independent data controller for the processing of your personal information. The personal information may also be disclosed to public authorities as required by law. Additionally, we may share your personal information with our affiliated companies.
In connection with the processing, the personal information may be transferred to countries outside the EU/EEA (third countries). We ensure that your rights are protected, and the level of protection is maintained in such data transfers, for example, through the use of EU Commission adequacy decisions and standard contractual clauses ("SCCs"), which are approved by the EU Commission in accordance with Article 46(2)(c). You can obtain a copy of these standard contracts by contacting us (see section 2 above).
3.4.5 How long are the personal data retained?
The personal data are retained throughout the customer relationship and for five years from the end of the year in which the customer relationship is terminated, either because the customer relationship has been specifically terminated or because there have been no further transactions in the customer relationship.
For potential customers, we retain the personal data for as long as we deem it relevant. However, we delete the information no later than three years after our last communication with you, unless you become an active customer in the meantime - in which case, the information is retained as customer information as per the above. However, we may retain information for a longer period if necessary to comply with a legal obligation, or to establish, defend, or enforce a legal claim.
Accounting records, including personal data, which we are required to retain under the Accounting Act, are deleted five years after the end of the financial year to which the personal data relate.
The information may be retained for a longer period in anonymised form.
3.5 When you use Biofuel Express Cards
When you use our Biofuel Express cards, you are covered by this section, which describes how we process your personal data. The agreement on the use of Biofuel Express Cards is entered into between us and your employer. For further information about our Biofuel Express Cards, please refer to our card terms.
3.5.1 What personal data are processed and where do they come from?
We process the following personal data about you when you are a cardholder:
• Name of the cardholder
• Consumption information related to the Biofuel Express Card, including account purchases and the number of refuelings.
3.5.2 Why are the data processed?
We process your personal data for the following purposes:
• Financial purposes, including payment administration, accounting, auditing, etc.
• Security considerations to be able to block any lost cards, stop misuse/fraud, or approve transactions.
• Compliance with applicable legislation, e.g., fulfilling our obligations to prevent illegal activities.
• Statistics and analysis for calculating tank volume and general product development.
• Direct marketing, if we have obtained your consent.
3.5.3 What is the legal basis for the processing?
Our processing of ordinary personal data has the following legal bases:
• We obtain your consent in connection with surveys, contests, and direct marketing. If we cannot offer you employment, we may obtain your consent to retain your application for future use. This legal basis is found in Article 6(1)(a) of the GDPR. You can withdraw your consent at any time by contacting us (see section 2 above).
• Fulfillment of a legal obligation incumbent upon us. This legal basis is found in Article 6(1)(c) of the GDPR.
• Pursuing our or a third party's legitimate interests, which are deemed to be more significant than your fundamental rights and freedoms. This legal basis is found in Article 6(1)(f) of the GDPR. The legitimate interests involved include our legitimate interests in conducting statistics and analyses, marketing activities (where consent is not required), providing support, as well as general business development. Processing may also be necessary for our legitimate interest in preventing fraud or asserting, defending, or enforcing legal claims. You have the right to object to this processing at any time by contacting us (see section 2 above).
3.5.4 Who are the personal data shared with?
The information may be shared with our IT suppliers (data processors), who process and store the personal data on our behalf and according to our instructions and based on entered data processing agreements.
We may disclose your contact information to our business partners to offer you the best service and products. In such cases, the receiving partner becomes an independent data controller for the processing of your personal data. The personal data may also be disclosed to public authorities if required by law. Additionally, we may share your personal data with our affiliated companies.
In connection with the processing, the personal data may be transferred to countries outside the EU/EEA (third countries). We ensure that your rights are protected and that the level of protection is maintained in connection with such data transfers, for example, through the use of EU Commission adequacy decisions and standard provisions ("SCCs"), approved by the EU Commission in accordance with Article 46(2)(c). You can obtain a copy of these standard contracts by contacting us (see section 2 above).
3.5.5 How long are the personal data retained?
The personal data are retained throughout the customer relationship and until your employer terminates the agreement on the use of Biofuel Express Cards. Your personal data are deleted five years from the end of the year in which the customer relationship is terminated.
Accounting records, including personal data, which we are obliged to retain under the Accounting Act, are deleted five years after the end of the financial year to which the personal data relate.
The information may be retained for a longer period in anonymised form.
3.6 When you visit our office
3.6.1 What personal data are processed and where do they come from?
We process the following personal data about you:
• Contact information, including name, address, email address, and telephone number
• Visit history, including time, date, and purpose of the visit
• CCTV footage from outdoor and indoor cameras
• Information provided in connection with guest registration
3.6.2 Why are the personal data processed?
We process your personal data for the following purposes:
• To provide you access to our office facilities
• To manage your visit to us (guest registration)
• To ensure the safety of our employees and to prevent and investigate crime on our office premises.
3.6.3 What is the legal basis for the processing?
Our processing of ordinary personal data is based on the following legal basis:
• Pursuit of our or third parties' legitimate interests, which outweigh your fundamental rights and freedoms. This legal basis is found in Article 6(1)(f) of the General Data Protection Regulation (GDPR). The legitimate interests at stake are our legitimate interests in providing you access to our office and protecting our employees. You may object to this processing at any time by contacting us (see section 2 above).
Our processing of information about criminal offenses and punishable acts collected via CCTV surveillance is based on the following legal basis:
• Information collected for crime prevention and investigation purposes is based on our legitimate interests in detecting punishable acts. This legal basis is found in § 8(3) of the Data Protection Act.
3.6.4 How long are the personal data retained?
Your personal data are deleted when we no longer have a need to process them for one or more of the aforementioned purposes, for example, if we are considering entering into a collaboration with you or if we need to have follow-up meetings.
The information may be processed for a longer period in anonymised form or if we are obliged to do so by law.
CCTV footage is deleted no later than 30 days after the recordings are made.
3.6.5 Who are the personal data shared with?
The information may be shared with our IT suppliers (data processors), who process and store the personal data on our behalf, following our instructions and based on concluded data processing agreements.
CCTV footage may be disclosed to the Police in accordance with Section 4c(1), No. 3 of the CCTV Act.
3.7 For you as a supplier, collaborator, etc.
When you are a contact person or an employee of our collaborators or one of our suppliers, including external consultants, sole proprietorships, etc., who collaborate with us, you are covered by this section, which describes how we process your personal data as the data controller.
We typically process your personal data in the following cases:
• When you, or the company you are employed by, enter into an agreement with us
• When you collaborate and communicate with us, and when you visit our office
• If you have shown interest in Biofuel, for example, by inquiry, quotation, etc.
3.7.1 What personal data are processed and where do they come from?
We process the following personal data about you:
• Contact information, including name, email address, and telephone number
• Financial information, including bank and payment details
• Contractual information, including invoices, orders, and agreements
• Position, profession, and information about your workplace, including workplace, area of work, and skills
• Other personal data relevant to the collaboration.
3.7.2 Why are the personal data processed?
We process your personal data for the following purposes:
• General administration of the collaboration, including planning, fulfillment, and handling of the contractual relationship
• Financial purposes, including payment administration, accounting, auditing, etc.
• Execution of orders, including purchase and sale of goods/services
• General communication, including responding to specific inquiries or sending press releases, including service announcements
• Statistics and analysis
• Compliance with applicable legislation, including fulfilling our obligations to prevent illegal activities and handling any conflicts and disputes.
3.7.3 What is the legal basis for the processing?
Our processing of ordinary personal data has the following legal basis:
• Entering into a contract with you or fulfilling a contract that has been entered into with you. This legal basis is found in Article 6(1)(b) of the Data Protection Regulation.
• Fulfillment of a legal obligation incumbent upon us. This legal basis is found in Article 6(1)(c) of the Data Protection Regulation. The legal obligations in question include, among others, those found in the Bookkeeping Act and tax legislation.
• Safeguarding our or a third party's legitimate interests, which are more weighty than consid-eration for your fundamental rights and freedoms. This legal basis is found in Article 6(1)(f) of the Data Protection Regulation. The legitimate interests in question include our legitimate interests in managing customer and supplier relationships, including planning, execution, and administration of the collaboration, sending service announcements, or our legitimate interests in, for example, conducting statistics, analyses, marketing activities (where consent is not required), providing support as well as general business development. Processing may also be necessary for our legitimate interest in preventing fraud or establishing, defending, and enforcing legal claims. You can object to this processing at any time by contacting us (see section 2 above).
3.7.4 Who are the personal data shared with?
The information may be shared with our IT vendors (data processors), who process and store the personal data on our behalf and in accordance with our instructions and based on a data processing agreement. Personal data may also be disclosed to public authorities if required by law.
We may also share your personal data with our affiliated companies.
In the course of processing, the personal data may be transferred to countries outside the EU/EEA (third countries). We ensure that your rights are protected and that the level of protection is maintained in connection with such data transfers, for example, by using EU Commission adequacy decisions and standard contractual clauses ("SCCs"), which are approved by the EU Commission in accordance with Article 46(2)(c). You can obtain a copy of these standard contracts by contacting us (see section 2 above).
3.7.5 How long are the personal data stored?
Your personal data is stored for as long as the collaboration lasts and for 5 years from the end of the year in which we last contacted the respective supplier or business partner.
However, we may retain information for a longer period if necessary to comply with a legal obligation, or to establish, defend, or enforce a legal claim.
Accounting material, including personal data, which we are obliged to keep in accordance with the Bookkeeping Act, is deleted 5 years after the end of the accounting year to which the personal data relates.
The information may be stored for a longer period in anonymised form.
3.8 For those applying for a job at Biofuel
When you apply for a job with us, we process a range of your personal data in connection with the recruitment process.
We recommend that you refrain from providing sensitive and confidential personal information, such as CPR number, information about trade union affiliation, sexuality, and ethnic background.
3.8.1 What information is processed and where does it come from?
You provide the personal information to us yourself, and as a starting point, you decide which personal information you want to provide. In addition, we expect to collect the following information about you:
• Contact details, including name, email address, telephone number, and address
• Application, CV, education, and possibly your photo
• Publicly available information, for example, on social media, including skills, achievements, and hobbies
• Current position, profession, and employer
• Information about work performance, education, and training
• Result of personality tests and other tests you are asked to complete and notes from job interviews
• References from previous and current employers, for which you have consented for us to contact
• Any information about criminal offenses (criminal record, etc.), if necessary for the particular position
• Any health information, if the position you have applied for requires it, or if there are specific health conditions that affect your work and are relevant for us to know, such as allergies
• Other information you provide during the recruitment process
This personal information comes from publicly available sources (including the internet), your previous employers, and headhunters.
3.8.2 Why are the personal data processed?
We process your personal data for the following purposes:
• Our assessment of whether we can offer you employment with us.
3.8.3 What is the legal basis for the processing?
Our processing of ordinary personal data has the following legal basis:
• We obtain your consent if we request references from previous/current employers. If we cannot offer you employment, we may seek your consent to retain your application for future use. This legal basis is found in Article 6(1)(a) of the Data Protection Regulation. You may withdraw your consent at any time by contacting us (see section 2 above).
• If you are offered employment with us, the processing of your personal data will be based on an employment contract with you. This legal basis is found in Article 6(1)(b) of the Data Protection Regulation.
• Pursuance of our or a third party's legitimate interests, which are more significant than your fundamental rights and freedoms. This legal basis is found in Article 6(1)(f) of the Data Protection Regulation. The legitimate interests involved are our legitimate interests in assessing whether we can offer you employment based on the personal data you have provided to us in the recruitment process. If it is a position of trust, such as in accounting or auditing, we may, after a specific assessment, obtain a credit check. You may object to this processing at any time by contacting us (see section 2 above).
Our processing of information about criminal offenses and punishable acts has the following legal basis:
• Your consent. This legal basis is found in Section 8(3) of the Data Protection Act. You may withdraw your consent at any time by contacting us (see section 2 above).
Our processing of sensitive personal data is based on the following legal basis:
• Your explicit consent. This legal basis is found in Article 9(1)(a) of the Data Protection Regulation. You may withdraw your consent at any time by contacting us (see section 2 above).
3.8.4 Who are the personal data shared with?
The information may be shared with our IT suppliers (data processors) and recruitment agencies who store the information for us and process it according to our instructions.
We may also share your personal data with our affiliated companies.
In connection with the processing, the personal data may be transferred to countries outside the EU/EEA (third countries). We ensure that your rights are protected and that the level of protection is maintained in connection with such data transfers, for example, by using the EU Commission's adequacy decisions and standard provisions ("SCCs"), which are approved by the EU Commission pursuant to Article 46(2)(c). You can obtain a copy of these standard contracts by contacting us (see section 2 above).
3.8.5 How long are the personal data retained?
If you are offered a position with us, your application and any additional relevant personal data collected during the recruitment process will be kept in your personnel file with us for the duration of your employment.
If we are unable to offer you a position, we will retain your application and any additional personal data collected during the recruitment process for up to 6 months after our decision, unless you have consented to a longer retention of such personal data. In that case, we may retain your personal data for up to 1 year after the decision.
If we have exceptionally obtained your criminal record or sensitive personal data, they will be deleted immediately after our review.
However, we may retain personal data for a longer period if necessary to comply with a legal obligation or to establish, exercise, or defend a legal claim.
3.9 When you visit our social media profiles
This section describes how we process your personal data collected through our profiles on social media. As a rule, we are responsible for our own activities on social media.
In some cases, we are joint controllers with the provider of the social media platform and have entered into agreements on joint responsibility with the provider of the social media platform. You can read more about this in the individual privacy policies of the social media providers.
We are available on the following social media platforms:
• LinkedIn (LinkedIn Ireland Unlimited Company)
3.9.1 What personal data is processed and where does it come from?
You provide the personal data to us yourself, and as a rule, you determine which personal data you want to provide. In addition, we expect to collect the following personal data about you when you visit and interact with our profile on social media:
• Information publicly available on your profile, including your name, photo, gender, marital status, workplace, position, interests, city, etc.
• Whether you have "liked" or used other features on our profile, such as commenting on or sharing posts, visiting our profile, and communicating with us via chat messages
This information comes from publicly available sources (including the internet).
3.9.2 Why are the personal data processed?
We process your personal data for the following purposes:
• Statistics and analysis, including for the purpose of improving our products and services, and our profiles and pages on social media
• To communicate with you if you comment on a post, leave a review, or send us a message
• General marketing.
The providers of social media platforms, among other things, process your personal data for the following purposes:
• Operation and development of advertising systems
• To provide us with statistics, which the providers of social media platforms compile based on your visits to our profiles on social media
• General advertising on the site.
3.9.3 What is the legal basis for the processing?
Our processing of ordinary personal data is based on the following legal basis:
• Pursuance of our or a third party's legitimate interests, which outweigh your fundamental rights and freedoms. This legal basis is found in Article 6(1)(f) of the General Data Protec-tion Regulation (GDPR). Our legitimate interests are based on our desire to communicate with and market to you on our social media profile and our legitimate interest in improving our products and services. You can object to this processing at any time by contacting us (see section 2 above).
The social media providers base the processing of your personal data on their agreement with you according to their terms of use (Article 6(1)(b) of the GDPR) and their legitimate interest in improving their advertising system and providing statistics to us, such as those compiled by the social media provider based on your visit to our profile on the social media platform. Additionally, the social media providers have a legitimate interest in providing an innovative, tailored, secure, and profitable service (Article 6(1)(f) of the GDPR).
The social media providers process some personal data based on your consent. This legal basis is found in Article 6(1)(a) of the GDPR. You can withdraw your consent at any time by contacting the social media provider or by accessing your privacy settings on the social media platform.
3.9.4 Who are the personal data shared with?
The social media providers may share your personal data with the following recipients:
• Other companies within the group to which the social media provider belongs
• Partners who provide analysis and research services
• Advertisers
• Individuals who visit our profile on the social media platform (to the extent your information is publicly available)
• Research and educational institutions
You can learn more about who the social media providers share your personal data with in the respective privacy policies of the providers. The social media providers may also transfer your personal data to recipients outside the EU/EEA in accordance with applicable data protection laws. You can read more in the individual providers' privacy policies.
3.9.5 How long are the personal data retained?
As a general rule, we do not delete your personal data on our social media profiles. We keep personal data as long as they are active on our profile and accessible until you delete any "likes," shares, comments, etc., on our profile. The information may be processed and retained longer in anonymised form.
Please refer to the privacy policy of each social media provider for more information on how long they retain your personal data.
4 Sharing of Personal Data with Data Processors and Other Data Controllers
Data Processors
In connection with the above purposes, we may need to share your personal data with third parties, including IT suppliers and other subcontractors. Our subcontractors process your personal data solely under our direct instructions and in accordance with the concluded data processing agreement. Thus, our subcontractors do not process the personal data for their own purposes but solely as data processors.
Disclosures
In some situations, it may be necessary for us to disclose your personal data to third parties to provide you with the right solution and deliver our products and services. Under special circumstances and in accordance with the law, we may need to disclose your personal data to these recipients:
• Lawyers and auditors
• Courts and other public authorities, such as the police
• Insurance companies
• Potential buyers of the company
Our company structure may change as we develop, such as through the complete or partial sale of Biofuel. In the event of transferring assets containing personal data, we disclose your personal data based on our legitimate interest in transferring parts of our assets and making commercial changes (Article 6(1)(f) of the GDPR).
Any transfers of personal data to recipients in countries outside the EU/EEA ("third-country trans-fers") are based on the EU Commission's standard contractual clauses or relevant adequacy decisions made by the EU Commission (Chapter 5 of the GDPR).
5 Your Rights
You have the right to assert your rights under data protection legislation at any time:
• Access: You have the right to access the information we process about you and additional information.
• Objection: You have the right to object to our collection and further processing of your personal data.
• Rectification: You have the right to have incorrect information about yourself corrected.
• Erasure: In special cases, you have the right to have information about yourself erased before the time of our normal general deletion occurs.
• Restriction: In certain cases, you have the right to have the processing of your personal data restricted. If you have the right to have the processing restricted, we may only process the personal data going forward – except for storage – with your consent, or for the purpose of establishing, exercising, or defending legal claims, or to protect an individual or important public interests.
• Data Portability: In certain cases, you have the right to receive a copy of the personal data you have provided in a structured, commonly used, and machine-readable format.
If you wish to assert your rights, please contact us at mail@biofuel-express.com. Your request will be processed in accordance with the applicable legislation. To the extent necessary, we will contact you and request additional information needed to handle your request correctly.
If you would like to read more about your rights, you can find more information on
www.datatilsynet.dk.
6 If You Wish to Complain
If you wish to complain about our processing of your personal data, we would like to hear from you. Our contact information can be found in section 2 above.
You also have the right to lodge a complaint with the Danish Data Protection Agency, Carl Jacobsens Vej 35, 2500 Valby. This can be done via email dt@datatilsynet.dk or on the Danish Data Protection Agency's website
www.datatilsynet.dk.
7 Updating the Privacy Policy
We may periodically change this privacy policy if necessary to provide an accurate description of our processing of personal data..
In the event of significant changes in our processing of personal data about you that we already possess, you will be notified of the update, either directly or by us publishing the change on our website.
This privacy policy was last updated in February 2024.
