Privacy Policy

1. Purpose of policy

The purpose of this privacy policy is to make you aware about Sweetway ApS, CVR-nr. 43545949, Smallegade 43 st 3, 2000 Frederiksberg, what information is collected and processed and how long it is stored. The privacy policy deals with the processing of personal data at Sweetway when you enter into agreements, interact or otherwise exchange personal data with us.

 

2. Description of the treatments

Sweetway processes your information for one or more specific purposes and in accordance with the data protection rules. We treat, among other things your information, if you are a customer of ours, customer through our webshop, guest, partner, supplier, visit our website ( www.sweetway.dk) or our social media if you sign up for our newsletter or apply for a job with us.

The information will, as a general rule, come directly from you, and we will only process your information as long as it is necessary for the purpose for which it was collected. However, the information can also be processed and stored longer in anonymized form.

In the below you can get an overview of the different types of treatments that we do.

 

2.1. customer Relations

In connection with the sale of our products, we process information about you when you are a customer with us, a customer through our webshop at www.sweetway.dk as well as the contact person at our business customers. We process your information in connection with the sale of our products in order to enter into and fulfill an agreement, cf. GDPR art. 6 (1) (b). This information includes contact information such as name, company name, job title, CVR number, e-mail, address and telephone number as well as other delivery address, purchase history and payment information.

We delete the information on an ongoing basis, but no later than 5 years plus current financial year after the last invoice, cf. the Accounting Act.

In some cases, we may supplement our information about you with the information you continuously provide us, e.g. information on interests for particular products, etc., so that we can make our marketing as relevant to you as possible. This is done on the basis of our legitimate interest, cf. GDPR art. 6 (1) (f) as we believe that our interest in offering you the best service outweighs your interest in not processing such general information that you provide to us. Of course, you always have the opportunity to gain insight into such information and have it deleted. Read more about your rights in section 5 below.

2.2. Customer inquiries
We process your personal information if you contact our customer service. We process your personal information in the light of our interest in contacting you and responding to your inquiries, cf. GDPR art. 6 (1) (f). The information we process will typically include name, company name, job title, CVR number, email, telephone number, address and inquiry information.

We will delete your information on an ongoing basis, but no later than 5 years after the last inquiry.

2.3. guests
If you visit one of our locations, we will register your visit and will therefore process your personal information. We process the information in order to manage which guests visit our company. The treatment is done in accordance with GDPR art. 6 (1) (f). The information we process will typically be name, company name and telephone number.

However, we delete the information collected during your visit on an ongoing basis within 5 years of registration.

2.4. Jobseeker
If you are applying for a job with us, we will process your personal information in order to assess whether you are qualified for an existing or future position with us. We process the information you provide to us, including name, contact information (including telephone number, email and address), date of birth, image, application, CV, work and educational conditions and references.

We process your information in order to enter into an agreement with you on employment based on your request for our processing of the application, cf. GDPR art. 6 (1) (f). We also process information in cases where we believe that our interests in processing your personal data exceed your interests in not being processed, e.g. information collected from social media published by you or information obtained through the conduct of a personality and skill test, cf. GDPR art. 6 (1) (f).

We share your personal information with the employees involved in the recruitment process as well as pass on your personal information to the companies that complete the personality and skill test as well as any. recruitment company.

Information about you is kept for 6 months after the position has been filled, unless consent has been obtained for extension. In special cases, we may keep your information for up to 3 years after the end of the recruitment period.

2.5. Suppliers and partners
When we enter into agreements with suppliers and partners, we process information about their contacts. This includes information about contact name, company name, CVR number, job title, telephone number, e-mail and, if necessary, payment and / or bank information.

The information is processed either because it is necessary for the fulfillment of the agreement with the supplier or partner concerned, cf. GDPR art. 6 (1) (b) or because, as part of the agreement, we have a legitimate interest in processing the person’s contact information, cf. GDPR art. 6 (1) (f).

We keep relevant contact information through our collaboration. Written correspondence is deleted on an ongoing basis and information needed to fulfill our obligations under the Accounting Act is kept for 5 years plus current financial years.

2.6. Cookies and website
In connection with the regular operation of our website, we collect personal information about you through cookies to improve the website’s appearance and user experience, as well as to compile statistics. The information we collect through cookies includes your IP address, MAC address, communication with you, browser type, device (type, version, operating system, etc.) as well as digital footprints, including user behavior and page views.

We will only collect your information if you have consented. You may withdraw your consent at any time. Read more about this in our cookie declaration on our websites.

2.6.1 Compliance with the sanctions rules or anti-corruption rules
In order to ensure compliance with the sanctions rules in the legislation as well as compliance with the anti-corruption rules, screening of external third parties can take place in relation to suppliers, partners or business associates we have or will establish relationships with.

We therefore process information about contact person, business customer managers as well as people with management or board positions in the form of full name, email address, telephone number, job title, communication, participation in meetings with us, input given at meetings, business observations and reviews, picture, audio and film footage (including footage from Teams meetings), results in anti-corruption and compliance screenings.

The information will be cross-referenced against penalty and fraud databases for this activity.
The treatment is based on GDPR Article 6 (1) (f), as we have a legitimate interest in conducting the treatment for the purpose of meeting our regulatory and compliance obligations and to ensure that our counterparties are within acceptable risk.

In most cases, there will be no retention of personal data. However, personal data may be stored under special circumstances as long as it is deemed necessary to document compliance with laws and regulations or for contractual reasons.

2.7. tracking Tools
On our websites, we also have integrated social media plugins that allow you to collect data about you if you have given your consent. In this context, we have a common data responsibility with each social media. We use integrated plugins from Pinterest, YouTube, Meta (Facebook and Instagram) as well as LinkedIn.

In order to do targeted marketing on Facebook, we use tracking tools from Meta Ireland Ltd., including Meta Business tools in the form of Meta-pixel. Through that path, we collect data about you.

This means that when you visit our website, the tools collect information about your IP address, that you have visited our website, the time of your visit, information about your browser and operating system, and information about other online identifiers that have been collected through cookies. The information is processed for the purpose of targeting our marketing on Facebook.

We are jointly responsible for data with Meta Ireland Ltd. for the processing of personal data collected and transmitted in connection with your visit to our website. Meta Ireland Ltd. processes the information for its own purposes e.g. improving and streamlining their advertising platform.

We will only collect your personal information if you have given your consent, cf. GDPR art. 6 (1) (a). You can withdraw your consent at any time in your browser setting or by contacting [email protected] 

You can read more about Meta Ireland Ltd. ’ s processing your personal information in their privacy policy here, and on the joint data responsibility as well as the joint data liability agreement entered into here

In addition to tracking tools from Meta Ireland Ltd. we also use tracking tools from Google Inc. in the form of Google AdWords and Google Analytics.

2.8. Social media
We use certain social media, including Pinterest, YouTube, Meta (Facebook and Instagram) as well as LinkedIn to get in touch with our customers and potential customers, as well as promote our marketing. If you have been in and ”like ” our social media fan page or have been in contact with us through this, we will inevitably process your personal information. We only process information about your name and e-mail. You can read more about our processing of personal data under the auspices of Sweetway fan pages on Facebook here.

If you contact us via social media, we will process your personal information based on our interest in contacting you and responding to your inquiries, cf. GDPR art. 6 (1) (f). The information will come from you and the social media through which you contact us.

We have a so-called common data responsibility with the social media we use, both processing your personal data for our own purposes. You can read more about the social media’s processing of your personal data below:

• Metas (Facebook and Instagram) processing your personal information here, and on the common data responsibility here.
• You can read more about LinkedIn’s processing of your personal information here and on the common data responsibility here.
• Pinterest’s processing of your personal information here and on the common data responsibility here.
• Google (YouTube) processing your personal information here.

As a user, you have the opportunity to send private messages through our social platforms. Information relating to direct communication via the social media is deleted immediately after the inquiry. In relation to correspondence sent via respectively. Facebook and Instagram the messages are automatically transferred to Messenger. The information is answered via Messenger and deleted immediately after reply.  

Lookup on e.g. Facebook pages or in public groups are not deleted, as a post or comment on Facebook pages or in public groups is considered public areas. You can read more about public areas here.

2.9. newsletters
We will only process your personal information for marketing purposes if you have given your consent in accordance with GDPR Art. 6 (1) (a).

If you have consented to receive newsletters via email about professional inspiration, recipes for all year round occasions as well as tips and tricks from our pastry chef, we process personal information about you. We basically process information about name and email, but also company name and profile type under our websites for professionals. The extent of our treatment is evident from the specific consent.

You have the right at any time to withdraw your consent by using the ”unsubscribe link ” in the newsletters you receive.

In addition, when you receive our newsletters, we collect information about you through analytics tools to optimize the content of our newsletters. The announcement is targeted based on what you have shown interest in in the email and newsletter, including your click behavior. This processing of your personal data is in accordance with GDPR art. 6 (1) (f).

We keep the documentation for your consent as long as you receive marketing or participate in our marketing and for 2 years after you revoke your consent, if necessary for legal claims to be established, enforced or defended.

2.10. competitions
If you participate in a competition, we also process information about name, address and telephone number, cf. GDPR. nature. 6 (1) (f) so that we have the opportunity to submit a gift if you are the winner of the competition.  

The information we process in connection with your participation in a competition will be deleted immediately after the conclusion of the competition.

 

3. Recipients of personal data

3.1. We process your personal information confidentially and we do not, as a rule, disclose the information to third parties. However, we may disclose your personal information if you have given your consent, if we have a legitimate interest in the disclosure or if we have a legal obligation.

3.2. In addition, there is a transfer of personal data between the group affiliated companies, as we have a legitimate interest in disclosing personal data within the group for internal administrative purposes.

3.3. We may assign personal information to our system vendors who process personal data on our behalf and in accordance with our specific instructions under the data processor agreement entered into.

3.4. In some cases, we use data processors outside the EU / EEA, whereby personal data can be transferred to third countries, including: in connection with our use of cloud solutions. To this end, we use a valid transfer basis either in the form of EU-U.S. Data Privacy Framework or Standard Contractual Clauses) before transferring personal information. The transfer is made only in compliance with the necessary security guarantees required by applicable data protection law, and an individual assessment is always made regarding the need for additional measures.

 

4. Your rights

4.1. When we collect information about you, you have a number of basic rights under the data protection rules that you can use. You can read more about your rights on the Danish Data Protection Agency’s website here.

4.2. The above rights may be associated with conditions and restrictions. Whether, as a registrant, you can request e.g. getting your personal information deleted will in any case depend on a specific assessment.
4.3. If you have consented to our processing of your information, you have the right to revoke this consent at any time.

4.4. If you are dissatisfied with our processing of your personal data, you can file a complaint with the Danish Data Protection Agency via their website www.datatilsynet.dk or by calling on tel. 33 19 32 00.

 

5. Contact information

5.1. The company responsible for processing your personal data is:
Sweetway ApS

CVR-nr. 43545949 

Smallegade 43 st 3 

2000 Frederiksberg

Email: [email protected]
Phone: +45 53 33 36 63

 

6. Changes

6.1. We reserve the right to update and amend these privacy policy guidelines. In the event of any significant changes, we will contact you in the form of email or visible notice on our website.
6.2. This privacy policy was last amended on 20.01.2025.