Privacy Policy – Labshoppen (Labflex A/S)

Last updated: 09/09/2025

1. Introduction

Labflex A/S (“Labflex”, “we”, “our”, or “us”) is the data controller for personal data processed in connection with the operation of the website Labshoppen and related services. We process personal data in compliance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable national legislation in Denmark, Sweden, and Norway.

2. Data We Collect

Depending on your interactions with Labshoppen, we may process the following categories of personal data:

Customer and order data: name, company, billing and shipping address, email address, phone number, and payment details (processed securely by our payment provider).

Account information: profile data provided when creating an account, including login credentials.

Technical and usage data: IP address, device and browser information, and website interaction data collected via cookies and analytics tools.

Payment method & transaction data: chosen payment method (bank transfer, card, or credit assurance), transaction identifiers, invoice and payment status, and relevant communications.

Credit assessment (for credit assurance): company identification details and limited financial/creditworthiness information necessary to evaluate credit terms, which may be obtained from or shared with a credit insurance/assessment provider.

3. Purpose of Processing

Order fulfilment and customer service: to process and deliver orders, manage accounts, and provide support.

Compliance: to meet accounting, tax, and other legal obligations.

Website performance and analytics: to operate, maintain, and improve our website and understand usage patterns.

We do not use your personal data for profiling or targeted advertising.

4. Legal Basis for Processing

Contractual necessity (GDPR art. 6(1)(b)) for entering into and performing our agreement with you (including processing payments and arranging delivery).

Legal obligation (GDPR art. 6(1)(c)) for compliance with statutory requirements (e.g., bookkeeping and tax rules).

Legitimate interests (GDPR art. 6(1)(f)) for operating and improving our website and services, preventing fraud, and assessing creditworthiness for credit assurance terms. Where required, we rely on your consent for analytics cookies.

5. Payment Processing & Options

We offer several payment options. The personal data processed depends on the option selected:

Bank transfer (prepayment): If you choose bank transfer, we issue an invoice with payment instructions. Payment must be received before products are sent to production (unless otherwise agreed). We process invoice details, payment status, and your company/contact information. Transfers are handled via our bank; we do not store your full bank account credentials.

Credit assurance (extended terms): Subject to approval by our credit insurance/assessment partner, we may offer payment terms of invoice at shipment with 21 days to pay. For this purpose, we process your company identification data and share limited information with the credit assurance/assessment provider to evaluate creditworthiness. We receive a decision and, where applicable, coverage confirmation. We do not use this information for marketing.

Card payments (via Flatpay): For credit/debit cards, your card is authorised at checkout and the amount is captured at shipment. Payments are processed securely by Flatpay. We do not store full card numbers; we receive tokens/identifiers and payment status from the provider.

6. Disclosure of Data to Third Parties

We only share personal data where necessary for the purposes described above:

Payment service provider: Flatpay processes card transactions and related payment data on our behalf.

Banks: Our bank processes payments made by bank transfer and provides us with reconciliation information.

Credit insurance/assessment provider (credit assurance only): Evaluates creditworthiness to grant extended payment terms (invoice at shipment + 21 days). We share only the information necessary for assessment and receive a decision/coverage response.

Shipping and logistics: carriers and logistics partners receive delivery information to fulfil orders.

All processing is carried out on behalf of Labflex A/S under appropriate data protection agreements. Labshoppen is owned and operated by Labflex A/S; data is processed by Labflex and not shared with independent group companies for their own purposes.

7. Data Retention

Account data: retained until account deletion.

Order & payment records: retained in accordance with applicable accounting and tax legislation.

Credit assessment records (if applicable): retained only as long as necessary for the assessment, contract administration, and legal obligations.

Cookies/analytics data: retained as configured in our cookie settings and the respective platform policies.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to ensure website functionality and to analyse traffic and usage patterns. Cookies used for analytics are activated based on your consent.

On your first visit, a cookie consent banner enables you to manage preferences. You may withdraw consent or change settings at any time via the banner or your browser settings.

9. Your Rights

Subject to GDPR and applicable law, you have the following rights:

• Right of access to your personal data
• Right to rectification
• Right to erasure (“right to be forgotten”)
• Right to restriction of processing
• Right to data portability
• Right to object to processing based on legitimate interests (including credit assessment)
• Right to withdraw consent at any time (for consent-based processing)
• Right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) or your local supervisory authority

10. Security

We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.

11. International Data Transfers

Where personal data is transferred outside the EEA, we ensure appropriate safeguards in accordance with GDPR Chapter V (e.g., adequacy decisions or standard contractual clauses).

12. Changes to this Policy

We may update this Privacy Policy from time to time. The “Last updated” date above reflects the latest version. Material changes will be communicated on this page and, where appropriate, directly to you.

13. Contact Information

If you have questions about this Privacy Policy or our processing of personal data, please contact:

Labflex A/S
Attn.: Marketing Manager – Thomas Elling
Email: tec@labflex.com

This website uses cookies. By continuing to use this site, you accept our use of cookies.  Learn more

let us have a chat

get a free laboratory consultancy from Labflex