Processing of Personal Data at Nørhalne VVS A/S
1. Introduction
In this privacy policy, you can read about how Nørhalne VVS A/S (“Nørhalne VVS,” “we,” “us,” “our”) processes your personal data in a variety of situations. We are required to provide you with this information in accordance with the General Data Protection Regulation (GDPR).
2. Data Responsibility and Our Relationship with You
Nørhalne VVS A/S is the data controller for the processing of personal data in the situations described in more detail below. You can find our contact information below.
3. Processing of Your Personal Information
We process personal data in various situations and for a variety of purposes. In the table below, you can read more about what information is processed, what the legal basis is, and how long the information is retained.
Website – Cookies
Purpose
Ensure the functionality of the website and optimize its design, user-friendliness, and effectiveness, including analyzing which information is most popular and should therefore be easy to find.
Tracking website visitors for marketing purposes, including displaying relevant ads (profiling).
Information
Information about the use of the website, including navigation on the site, time of visit, what is clicked on, pages/content visited, browser type, search terms, IP address, information about device type (computer, smartphone, etc.), and the features used.
Legal Basis
Under the cookie policy, we may use statistics, analytics, and marketing cookies only if consent is provided. At the same time, we obtain consent to process the aforementioned personal data, in accordance with Article 6(1)(a) of the GDPR.
Personal data processed in connection with cookies that are necessary for the website’s functionality is processed pursuant to Article 6(1)(f) of the GDPR, as we are pursuing our legitimate interest in ensuring the website’s functionality.
Storage
The information collected about your use of the website is deleted in accordance with our cookie policy. The specific expiration dates are listed, and you can read more about how to delete cookies yourself.
Communication with business customers, partners, etc.
Purpose
Communication with business customers, management of customer relationships, suppliers, potential business customers, business partners, etc.
Accounting obligations.
Information
Name and contact information, including email address, phone number, and, if applicable, affiliation with the specific company. Subject of the communication.
In the case of a sole proprietorship, we also process payment and billing information, information about orders and order history, and delivery information.
Name and contact information, including email address and phone number. Any affiliation with the specific company.
Legal Basis
GDPR Article 6(1)(f), as we are pursuing our legitimate interest in managing business customer relationships, communicating with the relevant contacts, and responding to inquiries, etc. In the case of a sole proprietorship, the legal basis is GDPR Article 6(1)(b), in order to fulfill the agreement we have entered into regarding the delivery of services and products.
GDPR Article 6(1)(c), as we are required to retain accounting records containing the information in question.
Storage
As a general rule, the information is deleted 12 months after the last contact or 5 years after the end of the fiscal year in which the relationship with the company ended.
As a general rule, the information is deleted 5 years after the end of the fiscal year to which the data pertains.
Communication Regarding General Inquiries, etc. – Residential Customers
Purpose
Communication regarding general inquiries, communication with potential individual customers, etc.
Information
Name and contact information, including email address and phone number. Subject of the communication.
Legal Basis
GDPR Article 6(1)(f), as we are pursuing our legitimate interest in communicating with the relevant individuals and responding to inquiries, etc.
Storage
As a general rule, the information is deleted 12 months after the last contact, but in exceptional cases, it may be retained for up to 5 years after your last inquiry so that we can process and document your inquiry.
Customer management, bookkeeping, etc.
Purpose
Delivery of products and services, as well as the day-to-day management of customer relationships.
Accounting obligations.
Ensure that we do not enter into business relationships with customers who have previously violated our terms and conditions.
Information
Name, email address, phone number, address, customer number, payment information, and order information, including previously delivered work and products.
Name, contact information, customer number, billing information, and usage data.
Your name and information indicating that you have previously violated our terms, including, for example, failure to pay.
Legal Basis
The legal basis for the processing is Article 6(1)(b) of the GDPR, as the processing is necessary for the performance of the agreement you have entered into with us.
GDPR Article 6(1)(c), as we are required to retain accounting records containing the information in question.
GDPR Article 6(1)(f), as we are pursuing our legitimate interest in ensuring that we do not enter into business relationships with customers who have previously violated our terms and conditions.
Storage
As a general rule, the information is deleted 5 years after the end of the fiscal year in which the customer relationship ended.
As a general rule, the information is deleted 5 years after the end of the fiscal year to which the data pertains.
The information is retained for a period of up to 10 years.
4. Categories of Recipients
We disclose your personal information to public authorities and similar entities when required to do so by applicable law or as a result of court orders or requests from the police or other authorities. Your personal information is also shared with our business partners in connection with the delivery of our services and products.
In the event of a debt collection case, we will also share your information with our legal advisors, including, among others, our attorneys.
We also transfer personal data to data processors who, among other things, host, develop, and provide support for IT systems.
5. Transfer of Your Personal Information to Third Countries
When we use certain data processors, personal data will not be transferred to recipients located in so-called third countries. Unless the third country has been approved by the European Commission as having an adequate level of protection (including companies located in the United States that are covered by the EU-U.S. Data Privacy Framework), the legal basis for the transfer is the European Commission’s Standard Contractual Clauses.
Currently, the focus is on Microsoft, which is covered by the EU-U.S. Data Privacy Framework.
If you would like additional information regarding our transfer of personal data to third countries, including a copy of the legal basis for the transfer, please feel free to contact us using the contact information provided below.
6. Your Rights, etc.
Under the GDPR, you have a number of rights regarding our processing of your personal information. If you wish to exercise your rights, please contact us. Your rights include:
- Right to access information (right of access): You have the right to access the information being processed about you, as well as a number of additional details.
- Right to Rectification (Correction): You have the right to have inaccurate information about yourself corrected.
- Right to erasure: In certain cases, you have the right to have information about you erased before the time of our regular general erasure.
- Right to Restriction of Processing: In certain cases, you have the right to have the processing of your personal data restricted. If you have the right to have processing restricted, the data controller may, going forward, only process the information—other than for storage purposes—with your consent, or for the purpose of establishing, exercising, or defending legal claims, or to protect an individual or important public interests.
- Right to Object: In certain cases, you have the right to object to the processing of your personal data. In such cases, we will assess whether there are legitimate grounds to continue the processing in accordance with data protection laws.
- Right to data portability: In certain cases, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, as well as to have that personal data transferred from one data controller to another without hindrance.
You can read more about your rights in the Danish Data Protection Agency’s guide on the rights of data subjects, which you can find at www.datatilsynet.dk.
7. Complaint to the Data Protection Authority
You have the right to file a complaint with the Danish Data Protection Agency if you are dissatisfied with the way we process your personal data. You can find the Danish Data Protection Agency’s contact information at www.datatilsynet.dk.
8. Contact Information
If you have any questions regarding the processing of your personal information, please contact:
Nørhalne VVS A/S
CVR No. 15382597
Bygaden 11 Nørhalne
9430 Vadum
Email: info@norhalne-vvs.dk.