Privacy Policy for Admind A/S
Sauntesvej 13, Gentofte
CVR: 2632 6729
Our Privacy Policy describes how we use and protect personal data, and is intended to ensure that employees are aware of the rules governing the use of the personal data to which they have access as part of their work. This policy supplements our other policies on IT security, the Internet, email, and similar matters. The purpose of this policy is to comply with the requirements of the General Data Protection Regulation (GDPR).
Processing of Sensitive Personal Data at
Any processing of personal data within our company is conducted in accordance with the principles of lawfulness, fairness, and transparency. Personal data is collected solely for explicitly stated and legitimate purposes, and we adhere to the principle of data minimization. We strive to ensure that all information is accurate and up-to-date, and we prioritize the principles of data minimization, integrity, confidentiality, and, above all, accountability. If you have any questions regarding our processing of personal data or this privacy policy, you are always welcome to contact the company’s data protection officer:
Christian Sanggaard,christian@admind.dk
Information Processed – Purpose
The purpose of collecting and processing personal data is relevant to our business dealings with our customers and business partners. If, in exceptional cases, we need to process personal data for purposes incompatible with those listed below, you will be notified. The same applies if we collect or process your personal data from sources other than you.
We collect and use data about our customers to fulfill our agreements and business processes with them, as well as to improve our service and ensure the quality of our solutions.
The personal data we process includes:
1. Automatically Collected Data–We use a range of digital solutions based on various technologies to ensure user-friendliness and security. These technologies may automatically collect data in order to provide the best possible user experience. Data is collected either directly by us or by a third party on our behalf. Analysis of clickstream data and cookies are examples of this. This applies, for example, to our contact feature on the website.
Every visit to a digital solution results in information being sent from the user’s browser to a server. We optimize our digital solutions by analyzing this data. Data is collected by third parties on our behalf. Data about your browser may be collected to manage our system and conduct internal, marketing-related analyses based on the user’s behavior.
1.1 Examples of data collected and analyzed:
Date and time of visit – pages visited within the solution – geographic location of the IP address – information about the browser and computer used (type, version, operating system, etc.) – URL of the referring site (the page from which the visitor arrived at our platform). We are the data controller for the collected data, and the collected data will not be disclosed unless we have written or electronic consent or are required to do so by law.
2. Information Provided Voluntarily (Actively)–We naturally record the information provided to us in connection with a physical visit or a visit to our website. Examples of data that you actively provide are typically general in nature and include your name, address, phone number, email address, etc.
- Information shared with us via social media media – Information sent via email – Information we receive in connection with the fulfillment of orders – Information shared with us in connection with surveys, events, contests, and similar activities.
Legal Basis for Processing
The processing of personal data is necessary to fulfill contractual obligations between
Admind A/S and our customers. Certain information, including sensitive data, is processed, to the greatest extent possible, based on written or electronic consent.
- Receipt and Disclosure of Personal Data
We disclose personal data to third parties only in accordance with the provisions of this Privacy Policy. We may disclose your information if we are required to disclose or share it to comply with a legal obligation. Disclosure may also occur pursuant to an order from a court or other authority, or to protect trademarks, rights, or property.This involves sharing information with other companies and organizations for the purpose of fraud prevention. We use service providers and data processors who perform work on our behalf. These services may include, for example, server hosting and system maintenance, analytics, payment solutions, address and credit checks, email services, etc. These partners may have access to data to the extent necessary to provide their services. Our partners are contractually obligated to treat all data as strictly confidential and are therefore not permitted to use the data for any purpose other than what is covered by their contractual obligations to us.
We verify that our data processing partners comply with their obligations.
If we disclose your information to a service provider or data processor outside the EU,
we ensure that we comply with the legal requirements for such transfers. We never collect personal data,
without your prior consent upon registration, purchase, or participation in a survey, etc.
Data Retention and Deletion PolicyWe retain information about our customers and business partners for as long as we have a legitimate and objective basis for doing so, including to enable us to provide the best possible service.
As a general rule, all personal data will be deleted 6 months after the end of the customer relationship, which is defined as the last active transaction. However, certain industries and customers are subject to stricter requirements that require us to retain personal data for up to 5 years.
Personal data may be retained for a longer period if there is a legitimate need to do so, for example, if a legal claim
needs to be established, asserted, or defended.
B1. Right of Access, Rectification, and Erasure
The data subject (DS) has the right to request access to the information we
process:
What data is processed, the purpose of the processing, the categories of personal data involved (general or
sensitive) – the period during which it is processed, including storage – the right to request rectification
or erasure, and to file a complaint with the Danish Data Protection Agency.
RE has the right to have inaccurate information about you corrected without undue delay. RE may itself take
the initiative to make such a correction. You may also request that your personal data be deleted (“the right to be
forgotten”), but only after our statutory retention period under the
Accounting Act has expired. You may also contact us if you believe that your personal data is being processed in violation
of the law or other legal obligations. When RE contacts us with a request to
correct or delete your personal data, we will determine whether the conditions are met and, if so,
make the changes or delete the data as soon as possible. If RE wishes to access the information that has been
recorded about RE by us via our cookies, RE must contact:
Christian Sanggaard,christian@admind.dk
If incorrect data has been recorded, or if RE has any other objections, you can contact the same office.
RE has the right to access the information recorded about RE, and RE may at any time
object to the recording.
B2. Data Portability
The data subject (RE) has the right to receive the personal data that RE has provided to us, as well as the data that we
have obtained about RE from other parties based on RE’s consent.
If we process data about the data subject as part of a contract to which the data subject is a party, the data subject may also have their own data sent to them.
The data subject also has the right to transfer this personal data to another service provider. If the data subject wishes to exercise
their right to data portability, they will receive their own personal data from us in a commonly used format.
- Consent
When consent is required as the basis for processing, we must be able to document that such consent has been obtained. Therefore, we always require consent in writing or electronically.
Consent is a voluntary, specific, informed, and unambiguous expression of will regarding the processing of
personal data. The data subject may withdraw their consent at any time, and if consent is the sole
legal basis for processing, future processing will cease. However, our obligation or right to retain data is not affected
by this.
Consent may be withdrawn by contacting us using the contact information
registered in accordance with the data subject's consent.
- Website and Cookies
Cookies are small text files containing letters and numbers that are stored on the user's computer or other device,
when they visit our website. Cookies can be used to keep track of which pages you have visited
visited, and can help the user resume previous visits, or they can remember language settings or
other preferences regarding visits to the website.No personal information is stored in our cookies, and they cannot contain viruses. If we place
cookies, the user is informed about their use and the purpose of collecting data via cookies.
At the same time, the user is asked to give their consent. However, cookies necessary to ensure functionality
and settings may be used without the consent of visitors to our website.
D1. Types of Cookies and Their Purposes
The purpose of cookies is to measure traffic and improve the user experience on the website.
For example, the website may use cookies from Google Analytics to measure traffic on the website.
Users can opt out of Google Analytics cookies here:https://tools.google.com/dlpage/gaoptout
Instructions: Deleteor disable cookies in your browser—users can always reject cookies on their PC by changing
the settings in their browser. Where these settings are located depends on which browser is being used.
However, please be aware that if you do this, certain features and services on the Internet
will no longer be available.
E. Security
Admind A/S protects your personal data and has a set of internal rules regarding information and IT
security. Our internal security policies include instructions and measures that protect
data subjects’ personal data from destruction, loss, or alteration; from unauthorized
disclosure; and from unauthorized access or knowledge by third parties.
We have established procedures for granting access rights to those of our employees who
process personal data, including sensitive personal data. We monitor their actual access through logging, passwords
and supervision. To prevent data loss, we regularly back up our data sets. In the event of a security breach,
that results in a high risk to you of discrimination, identity theft, financial loss, reputational damage, or
other significant harm, we will notify you of the security breach as soon as possible, just as we are
legally required to do so.
Right to File a Complaint
Any data subject has the right to file a complaint with the Danish Data Protection Agency regarding our processing of personal data:
Danish Data Protection Agency, Borgergade 28, 5th Floor, 1300 Copenhagen K, email:dt@datatilsynet.dk,Phone: 3319 3200
Update to the Privacy Policy
We therefore reserve the right to update and modify these guidelines for the processing of personal data. If we do so, we will update the “Last Updated” date as shown below.
This Privacy Policy was last updated on October 3, 2018.
ADMIND A/S
Christian Sanggaard