2. Collection of personal data
As data controller, the Company collects personal data when physical individuals interact with the Company via electronic communication or phone about Company relevant matters. The Company processes the ordinary personal data you provide to the Company such as names, e-mail address, phone number, address, job title and job position etc. The Company does not process special categories of personal data (sensitive personal data) about you.
The Company collects personal data from physical individuals you through cookies when visiting the Company’s website.
Users of the Company’s website will not have any information registered that can lead to identifying them directly.
Already installed cookies can be removed by clearing the browsing data on your employed browser.
4. Disclosure of personal data
Personal data may be disclosed or shared with affiliates of the Company, vendors, business partners or other collaborators for commercial purposes.
In case of disputes, including when personal data is relevant to the Company’s legal claims, the Company may disclose personal data to advisers, consultants or other relevant third parties provided it is deemed necessary and lawful.
In case of sub-processors of personal data this will be covered by an agreement to ensure compliance with GDPR.
5. Transfers to outside of EU/EEA
Personal data may be transferred to a country outside of EU/EEA. The Company has made contractual arrangements to ensure that such transfer will be carried out in accordance with the applicable data protection laws and standard clauses.
6. Storage of personal data
Personal data will only be stored as long as necessary to fulfil the legitimate purpose. After that it will be deleted.
Recordings of phone conversations with traders are generally stored for 6 months from the date of recording. In certain specific cases and if deemed necessary, this storage period may be extended to for instance document a legal claim.
Personal data necessary for bookkeeping purposes such as invoices will be stored for 5 years counting from the year of which the accounting material relate in accordance with the Danish retention rules for bookkeeping. If the personal data is included in accounting material which is subject to other (foreign) legislation, the personal data will be processed as long as required under such legislation.
7. Rights of the data subject
When the Company processes a physical person’s personal data, they become a data subject with rights according to GDPR:
- right of access to the personal data processed (art. 12);
- right to rectify inaccurate personal data, including completion of incomplete personal data (art. 16);
- “right to be forgotten”; meaning that upon the data subject’s request, the Company must erase the personal data stored concerning the data subject if the Company does not have grounds for further processing (art. 17);
- right to restrict the Company’s processing of personal data (art. 18);
- right to data portability, including receiving and the right to transmit to another controller the personal data in a structured, commonly used and machine-readable format, where technically feasible and not adversely affecting the rights and freedom of others (art. 20);
- the right to object at any time to the Company’s processing of personal data (art. 21).
8. Contact information
If you have any questions about the processing of your personal data, if you want to exercise your right as data subject or if you wish to file a complaint in this regard, please contact email@example.com.
2.2.2023 – Policy created – Cathrine Benedikt Klange
11.4.2023 – Policy revised – Cathrine Benedikt Klange