Last updated: September 14, 2026
1. Introduction
BioNordic A/S, using the registered business name Biowest Nordic A/S (“Biowest Nordic”, “we”, “us”, or “our”), is committed to protecting your personal data and respecting your privacy.
We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the Danish Data Protection Act (Databeskyttelsesloven) and other applicable Danish and European data protection legislation.
This Privacy Policy explains how we collect, use, store and protect personal data when you visit our website, interact with us online, submit an inquiry or otherwise communicate with us.
2. Identity of the Data Controller
The data controller responsible for the processing of your personal data is:
BioNordic A/S
Trading/business name: Biowest Nordic A/S
C/O Regus Officespace
Automatikvej 1
DK-2860 Søborg
Denmark
CVR/VAT No.: DK-40831622
Email: info@bio-nordic.com
Biowest Nordic A/S is a registered business name (binavn) of BioNordic A/S. References to “Biowest Nordic” or “Biowest Nordic A/S” on this website therefore refer to BioNordic A/S, which is the legal entity acting as data controller.
3. Personal Data We Collect
Depending on how you interact with us, we may collect and process the following categories of personal data:
- Identification data, such as your name and job title
- Contact details, such as your email address, telephone number and business address
- Professional information, such as your company, institution, position and country
- Communication data, including information contained in inquiries, correspondence and requests submitted to us
- Commercial information, including information relating to quote requests, products or services of interest and our business relationship with you
- Website and technical data, such as IP address, browser type, device information, pages visited, referring URLs and information about how you interact with our website
- Cookie and tracking data, where applicable and subject to the consent requirements described in our Cookie Policy
- Form submission data, including information you voluntarily provide when completing contact, product inquiry, quote request or other forms on our website
We generally do not seek to collect special categories of personal data through our website. Please do not submit sensitive personal information unless it is necessary for the specific purpose for which you are contacting us.
4. Legal Basis for Processing
Depending on the circumstances, we process personal data on one or more of the following legal bases under Article 6 of the GDPR:
- Consent (Article 6(1)(a)) – where you have given consent, for example for certain cookies, analytics or marketing communications
- Performance of a contract or steps prior to entering into a contract (Article 6(1)(b)) – where processing is necessary to respond to a request, prepare a quotation, provide a service or manage a contractual relationship
- Legal obligation (Article 6(1)(c)) – where processing is necessary for us to comply with a legal or regulatory obligation
- Legitimate interests (Article 6(1)(f)) – where processing is necessary for our legitimate business interests, such as responding to business inquiries, maintaining business relationships, protecting our website and IT systems, preventing fraud or abuse, and improving our services, provided that these interests are not overridden by your rights and freedoms
Where we rely on legitimate interests, we consider and balance our interests against the potential impact on your fundamental rights and freedoms.
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
5. Purposes of Processing
We may process your personal data for the following purposes:
- To respond to your inquiries and requests
- To provide information about our products and services
- To process and follow up on quote and product requests
- To communicate with existing and prospective business customers
- To establish, manage and maintain commercial relationships
- To administer contracts and business transactions
- To provide customer and technical support
- To operate, maintain and secure our website and IT systems
- To detect and prevent fraud, misuse and security incidents
- To analyze and improve our website, products, services and user experience
- To comply with applicable legal, accounting and regulatory obligations
- Where applicable, to send marketing communications where we have a lawful basis to do so
We do not use personal data for purposes incompatible with those described above unless we have a lawful basis for doing so.
6. Data Recipients and Data Processors
We may share personal data with trusted third-party service providers where this is necessary for the purposes described in this Privacy Policy.
Such providers may include:
- Email and communication providers, such as Mailgun
- CRM and business-management platforms, where applicable
- Web hosting and infrastructure providers
- Analytics and website performance providers, such as Matomo or Microsoft Clarity, where enabled and where the applicable consent requirements have been fulfilled
- Cookie consent management providers
- IT, security and technical service providers
- Professional advisers, such as accountants, auditors, lawyers or other advisers, where necessary
- Public authorities where disclosure is required by law
Where a third party processes personal data on our behalf, we require the appropriate contractual and data protection safeguards, including a data processing agreement where required by GDPR.
We do not sell your personal data.
7. Cookies and Tracking Technologies
Our website may use cookies and similar technologies for:
- Essential website functionality
- Security and technical operation
- Analytics and statistics
- Website performance
- Embedded third-party content
- Marketing or other purposes, where applicable
Cookie Consent Management with Real Cookie Banner
To manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and related consents, we use the consent tool “Real Cookie Banner”. Details on how “Real Cookie Banner” works can be found at https://devowl.io/rcb/data-processing/.
The legal basis for the processing of personal data in this context is Article 6(1)(c) GDPR and Article 6(1)(f) GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.
The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we will not be able to manage your consents.
Where consent is legally required, non-essential cookies and similar tracking technologies are only activated after you have provided the required consent.
You can manage or withdraw your cookie choices at any time through the cookie consent mechanism available on the website.
For detailed information about the cookies and tracking technologies used on the website, including their purposes, providers and retention periods, please see our Cookie Policy.
Under Danish rules, consent is generally required before non-essential cookies or similar tracking technologies are stored or accessed. Technically necessary cookies are treated differently.
8. Data Transfers Outside the European Economic Area
Some of our service providers may process personal data outside the European Economic Area (EEA), including in countries such as the United States.
Where personal data is transferred outside the EEA, we ensure that the transfer is carried out in accordance with applicable GDPR requirements.
Depending on the circumstances, this may include reliance on:
- An adequacy decision adopted by the European Commission
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Appropriate supplementary measures where required
- Another lawful transfer mechanism recognised under GDPR
The specific international transfers applicable to cookies and third-party services may also be described in our Cookie Policy.
9. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law.
Retention periods may therefore vary depending on the type of information and the context in which it was collected.
As a general guideline:
- Contact and inquiry information: retained for as long as reasonably necessary to handle and follow up on the inquiry and, where relevant, for the duration of the resulting business relationship
- Quote and commercial inquiries: retained for as long as necessary for the relevant business relationship and legitimate business purposes
- Contractual and transaction records: retained for the period required under applicable Danish accounting, tax and other legal requirements
- Marketing data: retained until consent is withdrawn or the data is otherwise no longer necessary for the relevant marketing purpose
- Analytics and cookie data: retained according to the periods specified in our Cookie Policy and the settings of the relevant services
When personal data is no longer necessary, we will delete it or anonymize it, unless we are legally required to retain it.
10. Your Rights
Under the GDPR, you have a number of rights concerning our processing of your personal data.
Depending on the circumstances, these include:
- Right of access – you may request access to the personal data we hold about you
- Right to rectification – you may request correction of inaccurate or incomplete personal data
- Right to erasure – you may request deletion of your personal data in certain circumstances
- Right to restriction – you may request that we restrict processing in certain circumstances
- Right to object – you may object to certain processing based on our legitimate interests and, in particular, to processing for direct marketing
- Right to data portability – where applicable, you may request to receive personal data you have provided to us in a structured, commonly used and machine-readable format
- Right to withdraw consent – where processing is based on consent, you may withdraw that consent at any time
These rights are subject to the conditions and exceptions provided by applicable data protection law.
To exercise your rights, please contact us using the contact details in Section 2.
We will normally respond to requests concerning your rights within one month, subject to the circumstances and applicable legal requirements.
11. Right to Lodge a Complaint
If you believe that our processing of your personal data does not comply with applicable data protection law, we encourage you to contact us first so that we can investigate and address your concern.
You also have the right to lodge a complaint with the Danish supervisory authority:
Datatilsynet (Danish Data Protection Agency)
Carl Jacobsens Vej 35
DK-2500 Valby
Denmark
Tel.: +45 33 19 32 00
Email: dt@datatilsynet.dk
You can find information about submitting a complaint on the Danish Data Protection Agency’s website.
The Danish Data Protection Agency recommends that individuals normally contact the relevant data controller before submitting a complaint.
12. Data Security
We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
These measures may include:
- HTTPS/TLS encryption
- Access controls and authentication
- Restricted access to personal data
- Secure hosting and infrastructure
- Security monitoring and maintenance
- Regular software and security updates
- Appropriate contractual safeguards with relevant service providers
No method of transmitting or storing information can be guaranteed to be completely secure. However, we take reasonable and appropriate measures to protect the personal data entrusted to us.
13. Third-Party Websites and Services
Our website may contain links to or integrations with third-party websites and services.
If you follow a link to a third-party website, that website will operate under its own privacy policy and terms. We are not responsible for the privacy practices or content of third-party websites.
Where third-party services are embedded in our website, their processing of personal data may be subject to their own terms and privacy policies.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our processing activities, technology, services or applicable legal requirements.
The latest version will always be published on this page and will include the date of the most recent update.
Last updated: September 14, 2026