Privacy Policy (Denmark)

Data subject

Purpose of processing

Data categories

Legal basis for processing

Retention period

Users of the website https://qufora.com

Weblog files

Operation and administration of the website https://qufora.com

·    Called address of the web server (URL)

·    “User agent” ID, which contains additional information depending on the browser

·    Operating system used

·    Browser type and browser version

·    Referrer URL (last visited website, if submitted)

·    Date and time of the server request

·    IP address

·    Hostname of your Internet service provider

Article 6(1)(b)

(Taking steps prior to entering into a contract at your request)

Article 6(1)(f)

(legitimate interest in providing and administering our website)

30 days

Cookies: Website Functionality (needs necessary cookies); documentation of consent for unnecessary cookies; marketing and web analytics

Consent and log data; user information such as browser and location data, IP address values, and information about website usage.

Article 6(1)(a)

(Consent to cookies and tools for marketing or web analytics purposes)

Article 6(1)(f)

(Legitimate interest in necessary cookies)

Detailed information can be found in our Cookie Policy.

Visitors to and users who interact with Qufora via our company profiles on LinkedIn and/or Facebook

To be visible on social media, provide information about Qufora, respond to any inquiries and gain overall insight into the use of our profiles.

Name, profile name, publicly available profile information, content of any messages, comments and reactions, as well as statistical and page insight information provided by LinkedIn and Meta/Facebook.

Article 6(1)(f)

(legitimate interest in being visible on social media, providing information about the company and responding to inquiries)

Article 6(1)(b)

(if the processing is necessary to respond to a specific inquiry or to take steps prior to a possible agreement)

Personal data is only stored for as long as is necessary to fulfill the purpose of the processing. Information in messages, comments, etc. is deleted or anonymized in accordance with internal guidelines. Statistical and insight information is stored to the extent and for the period provided by the relevant platform.

Children (up to 15 years)

Support and advice on the use of our products and the improvement of our products and services related to the child through parents or guardians.

Please note that our support service is aimed at adults and all communication is carried out exclusively through parents or guardians, even if the child uses the product themselves.

Art. 6(1)(a)

(Consent of parents or guardians to information concerning the child’s health data, to contact/send information by e-mail and to record conversations and store the recording)

Art. 6(1)(b)

(contract)

Art. 6(1)(c)

(legal obligations)

Art. 6(1)(f)

(legitimate interest)

Art. 9(2)(a)

(explicit consent for special categories of data, in particular health data)

Art. 9(2)(f) (establishment, exercise or defence of legal claims)

Personal data is stored for as long as necessary to fulfill the purpose and is then deleted in accordance with internal guidelines and applicable legislation.

Verbal consent is stored for 6 months, and written consent is stored for 3 years from the last period of use.

At the end of the storage period, the information is anonymized so that it can only be used for statistical purposes without being personally identifiable.

Participants / Participants in product development (clinical studies) /

If you participate in product development, including clinical trials, Qufora will process your personal data in order to enable your participation and to ensure that the development process is carried out in accordance with applicable legislation and consent requirements.

Healthcare professionals and any external partners may in certain cases be involved in product development and individual clinical studies, for example by providing advice or communicating directly with you as a participant.

Contact information, health information and other relevant data related to the use of the products.

This data is anonymized before it is used for research purposes. Once the data is anonymized, we use it to improve our products and services (including staff training) and to monitor and handle complaints and issues regarding the products.

Art. 6(1)(a)

(Consent)

Art. 6(1)(b)

(contract)

Art. 9(2)(a)

(explicit consent for special categories of data, in particular health data)

Personal data will be stored for as long as necessary to fulfill the purpose and will then be deleted in accordance with internal guidelines and applicable legislation.

Data related to medical devices will be stored for a period of at least 10 years after the market launch of the last product and data related to implants for a period of at least 15 years, cf. the EU Medical Device Regulation (MDR).

Healthcare professionals

(doctors/nurses)

Collaboration on clinical studies, product development and dissemination of information about products and other relevant tasks

Processing of personal data about healthcare professionals when they are involved in the user’s process, including advice, treatment or documentation.

Name, contact information, professional qualifications, place of work, and information about participation in clinical studies or product development

Art. 6(1)(a)

(Consent)

Art. 6(1)(b)

(contract)

Art. 6(1)(f)

(legitimate interest)

Personal data is stored for as long as necessary to fulfill the purposes for which it was collected, and will then be deleted in accordance with internal policies and applicable legislation. Relevant information for accounting and financial documentation is stored in accordance with the Danish Accounting Act.

Distributors and Subsidiaries

Administration of cooperation agreements, communications and other related business activities, including support for sales activities carried out exclusively through Qufora’s distributors and subsidiaries.

Please note that each distributor and subsidiary acts as an independent data controller and processes personal data in accordance with the applicable data protection legislation in the relevant country, unless otherwise stated. However, in some cases they may act as joint data controllers together with Qufora A/S (Denmark).

Company information, including contact information, as well as information related to business relationships and sales activities

Art. 6(1)(b)

(contract)

Art. 6(1)(f)

(legitimate interest)

Logistics and distribution partners

Handling and shipping sample packages and product deliveries to end users via an external courier service

Contact information (name, address, phone number), delivery information (product order/order, shipping status)

Art. 6(1)(b)

(contract)

Art. 6(1)(f)

(legitimate interest)

Personal data is stored for as long as necessary to complete the delivery, and is then deleted in accordance with internal guidelines and applicable legislation, including tax retention requirements.

Other people who contact us

Responding to inquiries, general communication and administration of requests

Contact information (name, email, telephone number), content of the inquiry, any attached files

Art. 6(1)(f)

(legitimate interest)

Art. 6(1)(b)

(Contract or implementation of pre-contractual measures upon request)

Personal data is stored for as long as necessary to respond to and administer the inquiry, and is then deleted in accordance with internal guidelines.

Employees

Administration of employment relationships, payment of wages, compliance with legal obligations, including occupational health and safety and tax requirements

Contact information, CPR number, bank information, employment history, health information (e.g. for reimbursement)

Art. 6(1)(b) (performance of employment contract)

Art. 6(1)(c)
(legal obligations)

Art. 6(1)(f) (legitimate interest)

Art. 9(2)(b) (employment, health and safety obligations)

Art. 9(2)(f) (establishment, exercise or defence of legal claims)

Personal data is stored during employment and deleted after termination when it is no longer necessary in accordance with internal guidelines, unless there is a statutory reason for a longer retention period.

Documentation and work emails related to medical devices: Retained for at least 10 years after the last product has been placed on the market, cf. MDR. For implants, the documentation is kept for at least 15 years

Please note that upon termination of an employee, incoming emails for up to 6 months may be automatically forwarded to a relevant colleague to ensure business continuity and follow-up on ongoing cases. After this, the employee’s email account will be deactivated and deleted in accordance with internal guidelines.

Job applicants (including unsolicited ones)

Assessment of applications, conducting interviews related to the job posting, and possibly storing contact information for future recruitment opportunities, provided that you have actively consented to this, either verbally or in writing.

Contact information, CV, application, references, and any publicly available information online, including from social media, if relevant to the position

Art. 6(1)(b)

(to carry out the recruitment process with a view to a possible employment contract)

Art. 6(1)(f)

(legitimate interest in carrying out a comprehensive assessment of the applicant using publicly available information)

Art. 6(1)(a)

(storage of application for future positions based on e-mail consent)

If you are not hired, we will retain your information for up to 6 months after the end of the recruitment process, unless you have actively consented via email to a longer retention period.