Skip to main content
EN

Privacy and cookie policy

Malik Supply A/S, business registration VAT No.: DK12655142 Gøteborgvej 18, 9200 Aalborg, Denmark and each of its subsidiaries (collectively referred to as “Malik Supply”) are committed to handling personal data responsibly and in accordance with applicable data protection legislation.

This privacy notice outlines Malik’s principles in collecting, using and safeguarding personal data collected from users of our website and profiles on social media platforms, contact persons at Malik’s customers, suppliers and other business partners as well as data subjects which are part of a whistleblower reporting (i.e. the senders of notifications, the reported persons and other third parties involved).

We encourage you to read this privacy notice to learn more about the ways we collect, use, disclose and protect your personal data.

What are cookies?

A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer's hard drive.

We are placing cookies on your computer’s hard drive when you click “Yes, I accept the use of cookies”.


1. IF YOU VISIT OUR WEBSITE

Data controller

Malik Supply A/S
Gøteborgvej 18, 9200 Aalborg SV
VAT No.: DK12655142
Phone +45 9631 3900
E-mail: sales@malik.dk

Malik Supply A/S is the Data Controller of the personal information gathered when using cookies in connection with your visit on our website

 

Collection of personal data

Malik Supply may collect, process and store personal data about you in the following instances:

 

  • When you visit and browse our websites
  • When you make use of our invoice checker
  • When you communicate with Malik Supply
  • When you make use of other functions and services offered by Malik Supply

 

Types of personal data

Malik Supply may collect, process, and store the following personal data about you:

 

  • Name, e-mail address and similar identification data
  • Company name and company address
  • Branch/business area
  • Customer ID
  • Content of inquiries
  • IP address and device information
  • Information about your usage of our websites (digital footprint)

 

Cookies

We use cookies on our website. Please read more about the use of cookies in our cookie policy, which is available on Malik’s website.

 

Purposes of the processing

Your personal data may be processed for the following purposes:

 

  • Completion of requests received from you
  • Promotional marketing in general
  • General communication
  • Providing support
  • Product and service development
  • Statistics and analysis

 

Legal basis

Malik will mainly process your personal data based on one or more of the following legal bases:

 

  • Legitimate interests:

 

In most cases, the processing of your personal data will be based on our legitimate interest in, for instance, conducting statistics, analysis, marketing activities (where consent is not required), providing support as well as improving and developing our products and services (Article 6(1)(f) of the GDPR).

  • Contractual obligation:

 

The processing of your personal data will in some cases be necessary for the performance of a contract (Article 6(1)(b) of the GDPR).

If you accept our use of functional, statistical, and marketing cookies, we base the processing of your IP address, device information and digital footprint on your consent (Article 6 (1) (a) of the GDPR).

  • Consent: If you accept our use of functional, statistical, and marketing cookies, we base the processing of your IP address, device information and digital footprint on your consent (Article 6 (1) (a) of the GDPR).

 

Retention period

Your personal data will be deleted when it is no longer needed for one or more of the purposes mentioned above.

 

Personal data relating to statistics and analytics is deleted within 1 year.

 

The personal data may, however, be processed and stored for a longer period if anonymised.

 

2. IF YOU VISIT OUR PROFILES ON SOCIAL MEDIA

Malik and the individual social media are joint data controllers in the processing of your personal data. Malik complies with the guidelines of the European supervisory authorities concerning joint controllership and Malik attempts to ensure that you receive information on the processing of your personal data when you visit our sites on the social medias.

 

This section applies to Malik’s processing of personal data which you leave behind and/or provide when you visit Malik’s sites on social medias such as Facebook (including Instagram) and LinkedIn (the “social medias”). This section is a supplement to the general privacy policy issued by the social medias individually. Both Facebook and LinkedIn have published an addendum on the joint controllership which you may go to by clicking here (Facebook or LinkedIn).

 

Processing of your personal data through social media

Depending on your conduct on the social media sites, Malik and the social media may retrieve the following personal data about you:

 

  • Your “likes” or other reactions expressed on the sites
  • Comments left by you on the sites
  • Your visits to the sites

 

We encourage you to delete comments, likes and other interactions you have left on our profile yourself if you no longer want them shown on our pages. Malik does not delete such publicly available interactions.

 

Please refer to the privacy policy of the provider for each of the social media platforms for information on how long they store your personal data.

 

Purposes of the processing

Your personal data may be processed for the following purposes:

 

  • Development, improvement and protection of our products and services
  • Performance of research activities and statistics

 

The social media collect statistical data on the visitors’ behaviour for their own purposes through cookies and pixels on your device when you visit the sites. Each cookie contains a unique identification code which remains active for a certain period unless it is deleted prior to the expiry of such period.

 

You can read more about social media’s processing of personal data by visiting their privacy policies (Facebook or LinkedIn) and cookie policies (Facebook or LinkedIn).

 

Legal basis

Malik will mainly process your personal data based on the following legal basis:

 

  • Legitimate interests: We process your personal data pursuant to our legitimate interest in being able to improve our products and services (Article 6(1)(f) of the GDPR).

 

Sharing of your personal data

Malik will at no point disclose your personal data collected via social medias to third parties.

 

The social medias may share your personal data internally among its subsidiaries and externally among its partners using analytical services, advertisers, other individuals, surveying partners and researchers and academics. Such transfers may include transfers to countries outside EU. For more information, please refer to the social medias’ terms and conditions and privacy policies linked to above.

 

Rights towards the social media

The social media’s general set-up dictates that you must contact the social media in question if you wish to exercise your rights. This is since only social media are, in purely functional terms, capable of taking the steps necessary to comply with most of your requests. If, however, you are of the opinion that Malik can comply with your request, please do not hesitate to contact us.

 

If you are a Facebook user, you may exercise your rights by changing your private settings (link) or configure your preferences (link) to have an influence on how your personal data will be collected and processed when you visit and use the Facebook site. If you are a LinkedIn user, click here (link) to change your settings or here (link) to exercise your rights.

 

3. IF YOU ARE A CONTACT PERSON AT OUR CUSTOMERS, SUPPLIERS, OR OTHER BUSINESS PARTNERS

This section sets out the policy of Malik’s processing of personal data collected from owners of sole proprietorships or contact persons at Malik’s customers, suppliers and other business partners who collaborate with Malik.

 

Data controller

Unless otherwise informed, the Malik entity your company (or your employer) concludes an agreement with, collaborate with or correspond with is the data controller in relation to the personal data collected.

 

Collection of personal data

Malik may collect, process and store personal data about you in the following instances:

 

  • When your company or the company you are employed with enters into an agreement with Malik, including buys services offered by Malik
  • When you have shown an interest in Malik’s products or services, e.g. by providing your business card to Malik
  • When you participate in customer satisfaction surveys
  • When you fill in HSEQ event reports
  • When you make use of Malik’s website and portals
  • When you collaborate and communicate with Malik
  • When you visit our physical addresses

 

Types of personal data

Malik may collect, process, and store the following personal data:

 

  • Name, e-mail address, telephone number and similar identification data
  • Individual data, such as preferred language
  • Organizational data, such as company name, company address, job position, business area, primary work location and country
  • Contractual data, such as purchase orders, invoices, contracts and other agreements between your company (or your employer) and Malik, that may include e.g. your contact information
  • Financial data, such as payment terms, bank account details and credit ratings
  • IT-related data, such as logs about your usage of Malik’s website
  • Information provided when you visit our physical addresses, e.g. registration of visitors or recordings from video surveillance

 

Such information may be provided directly by you (primarily via emails and other correspondence) or by a third party such as your employer.

 

Purposes of the processing

Your personal data may be processed for the following purposes:

 

  • Generally, to plan, perform and manage the business relationship, including any contracts
  • Administration, such as processing payments (including the collection of outstanding invoices), evaluation of credit ratings, performing accounting, auditing, billing activities, arranging shipments and deliveries as well as providing support services
  • Ensuring security on our physical addresses
  • Completion of requests received from you
  • General, including promotional, communication
  • Evaluation and development of our services, including statistics and analytics
  • Compliance and regulatory purposes, such as fulfilling our legal and compliance-related obligations to prevent illegal activity
  • Dispute handling

 

Legal basis

Malik will mainly process your personal data based on the following legal bases:

 

  • Contractual obligation: The processing of your personal data will in some cases be necessary for the performance of a contract (Article 6(1)(b) of the GDPR).
  • Legitimate interests: We may process your personal data pursuant to our legitimate interest in, for instance, to manage daily operations according to lawful and fair business practices, including planning, performing and managing the business relationship or our legitimate interest in e.g. fulfilling our contractual rights and obligations with our company, conducting credit ratings, statistics, analysis, customer satisfaction surveys, marketing activities (where consent is not required), providing support as well as improving and developing our products and services (Article 6(1)(f) of the GDPR).
  • Legal claims: The processing may also be necessary to prevent fraud or establish, exercise, or defend legal claims (Article 6(1)(f) of the GDPR).
  • Legal obligation: The processing of your personal data will in some cases be necessary to comply with legal obligations, such as our obligations to prevent illegal activity (Article 6(1)(c) of the GDPR).

 

Retention period

Your personal data will be deleted when it is no longer needed for one or more of the purposes mentioned above.

 

However, subject to other requirements under local law, the following retention periods apply:

 

  • Personal data included in accounting records is kept for 5 years from the end of the financial year to which the records relate.
  • Personal data contained in customer satisfaction surveys will be deleted within 5 years.
  • Personal data contained in HSEQ event report will be deleted within 5 years.
  • Personal data collected in connection with business, support or other commercial activities will be stored if such data is relevant for the handling and monitoring of the issue in question. The retention period will typically be commensurate with the period laid down in the rules on the limitation of legal claims or the duration of our business relationship.

 

The personal data may, however, be processed and stored for a longer period of time if anonymized or if we are obliged to do so according to law.

 

4. IF YOU USE OUR WHISTLEBLOWING SYSTEM

Serious and sensitive concerns that may have an adverse impact on the operations and performance of Malik or which may have a significant effect on a person’s life or health may be reported via our whistleblowing system, whereby Malik will process personal data about data subjects which are part of a whistleblower reporting (i.e. the senders of notifications, the reported persons and other third parties involved).

 

Data controller

Unless otherwise informed, Malik Supply A/S is the data controller in relation to the personal data collected as part of a whistleblower reporting.

 

Collection of personal data

Malik may collect and process personal data when a report is made as well as during the investigation of reports.

 

Types of personal data

If you report a suspected misconduct, such report will remain confidential and, if desired, anonymous. You should in any case provide a contact email address, as the investigating person may need to contact you for further details on the incident to be able to handle the case properly.

 

We may process the following personal data about the reported person:

 

  • Name, job position, contact information and reported facts, including a description of the suspected misconduct

 

The following personal data may be processed about other third parties mentioned in the report:

 

  • Name, job position, contact information and reported facts

 

Purposes of the processing

Malik may process personal data for the following purposes:

 

  • Initial reporting and investigation of reports of alleged breaches
  • Provide responses to requests made by the whistleblower, the reported person or other third parties involved

 

Legal basis

Malik will mainly process the personal data based on one or more of the following legal bases:

 

  • Legitimate interest: We may process the personal data pursuant to our legitimate interests in investigating reports (Article 6(1)(f) of the GDPR).
  • Legal obligation: Establishment of a whistleblowing system is mandatory to Malik and the processing of personal data is necessary to comply with a legal obligation (Article 6(1)(c) of the GDPR).

 

Retention period

Subject to other requirements under local law, the report and collected information will be deleted:

 

  • Immediately if the report is outside the scope or is manifestly unfounded, or if no internal action is made in relation to the concern.
  • Right after the closing of the case by the authorities if a report is filed with the police or other relevant authorities.
  • 2 months after the investigation has been completed if no further action is taken.
  • If disciplinary sanctions are made towards the reported employee based on the collected information or there are other reasons for it being necessary to continue storing the information, the collected information may be transferred to the employee’s personnel file. In such case the personal data will be deleted no later than 5 years after termination of employment.

 

5. GENERAL INFORMATION APPLICABLE FOR ALL INDIVIDUALS COVERED BY THIS PRIVACY NOTICE

Disclosure to other data controllers and transfer to data processors

To meet the purposes mentioned above we may give third parties, who provide relevant services on basis of a contractual relationship with Malik, access to your personal data, including providers of e.g. IT services, ERP systems, invoicing systems, marketing services, website analytics, IT support, IT service development as well as digital developers, e-mail operators, hosting providers and other suppliers providing systems or services to Malik. Such service suppliers may only process personal data on behalf of Malik and in accordance with our instructions.

 

Your personal data may be disclosed to accountants. Under certain circumstances it may also be necessary to disclose your personal data to lawyers, courts, public authorities, the police and potential buyers.

 

In connection with Malik’s development, the company structure may change, e.g. through a full or partial sale of Malik. In case of a partial hand over of assets containing personal data, the legal basis for the related disclosure of personal data is, as a rule, Malik’s legitimate interest in handing over parts of its assets as well as making commercial changes.

 

If your personal data is transferred to data processors or data controllers established in countries outside the EU/EEA which do not have an adequate level of protection, such transfers will in general be based on the Data Privacy Framework or EU Commission’s Standard Contractual Clauses which you have a right of access to. If you have any questions about the tools for transfers to countries outside the EU/EEA please contact us at lll@malik.dk

 

Cookies

We use “cookies” which is a small text file transferred from our website to your hard drive, to track usage and facilitate your ease of access to and use of our site. We do not use “cookies” to gather personal information.

 

Protection and Security

Malik uses a variety of security safeguards to protect customer data and personal information from disclosure. These security safeguards are designed to prevent unauthorized access, improper use or disclosure, unauthorized modification and unlawful destruction or accidental loss of personal data.

 

Your rights

  • You have the right to access the personal data we process about you.
  • You have a right of objection towards our collection and further processing of your personal data.
  • You have the right to have your personal data rectified and deleted, with certain national statutory exceptions.
  • You have the right to request us to restrict the processing of your personal data.

Under certain circumstances you may also request to receive a copy of your personal data as well as the transmission of your personal data which you have provided us with to another data controller (data portability)

You may at any point withdraw the consents that you have given.

Questions or complaints

If you have any questions in relation to this privacy notice or if you wish to make a complaint in connection to our processing of your personal data, please contact us on:

 

Malik Supply A/S
Gøteborgvej 18, 9200 Aalborg SV
Email: sales@malik.dk

If your complaint is not resolved by us and you wish to proceed with the case, you can send your compliant to the supervisory authority in your country. A list of European supervisory authorities is available here.

 

Latest update 17-11-2023