OUR PRIVACY POLICY AND TERMS

 

1. DATA CONTROLLER

We are the data controller for the processing of personal data concerning our customers and partners. You will find our contact information below.

Company name: EMD Retail

Address: Håndværkervej 1, 9700 Brønderslev

CVR: 32827772

If you have questions regarding the processing of your personal data, you can contact us through info@emdretail.com

 

2. PROCESSING ACTIVITIES

 

2.1. Website Visits

When you visit our website, we use cookies to enable the website’s functionality, about which you can read more in our link to the cookie policy.

 
2.2. Communication with Potential Customers

When you have questions about our website or want to learn more about our services, you can contact us through:

  • Contact form
  • Email
  • Phone

Through these means, we will process your personal data to engage in a dialogue with you, such as answering questions about our services. We only process the information you provide us with during our communication.

We will typically process the following general information: name, email, phone number, address.

Our legal basis for processing this personal data is Article 6, paragraph 1, letter f of the Danish Data Protection Regulation.

We will delete our communication with you once it becomes clear whether you wish to use our services or not.

In a special case where there is a need to retain your personal data for a longer period, this may be applicable.

 
2.3. Customers

We need to communicate with our customers to ensure that services are delivered correctly. Through this, we may process information such as name, address, services, special agreements, payment information, and similar details.

The legal basis for processing this personal data is Article 6, paragraph 1, letter b of the Danish Data Protection Regulation.

Once the service is delivered and any remaining matters are resolved, we will promptly delete the personal data.

 

2.4. Newsletter

We have a newsletter to which you can voluntarily subscribe, and you can always unsubscribe from it.

The purpose of the newsletter is to send subscribed emails with new information from the company, which may include new content on the website and advertising our services.

We will only send you emails if you have given your active consent. This initially requires you to provide your email address, to which we will subsequently send an email for confirmation. This way, we ensure that you have actively subscribed to the newsletter, giving your consent.

Our legal basis for processing your personal data (i.e., email address) for the newsletter is Article 6, paragraph 1, letter a of the Danish Data Protection Regulation.

We will process your personal data as long as you are subscribed to the newsletter. Unsubscribing from the newsletter will also prevent us from sending it to you. If we have not sent you a newsletter in 1 year, your consent will expire due to our inactivity.

Upon unsubscribing from the newsletter, we will retain your previous consent for 2 years, as required by the Danish Consumer Ombudsman’s spam guidelines, section 11.3.

 

2.5. Accounting

We are required to retain all accounting records as per the Danish accounting law. This means that we keep invoices and similar documents for accounting purposes. These documents may contain common personal data such as name, address, service description.

Our legal basis for processing personal data for accounting purposes is Article 6, paragraph 1.

We retain this information for a minimum of 5 years after the current fiscal year has ended.

 
2.6. Job Applications

We welcome job applications to assess whether they match any employment needs in our company.

If you send us your job application, our legal basis for processing your personal data is Article 6, paragraph 1, letter f of the Danish Data Protection Regulation.

If you send an unsolicited application, we will immediately assess whether it is relevant, and if not, we will delete your information.

If you apply for a posted job, we will dispose of your application if you are not hired, and immediately after the right candidate is found for the job.

If you are involved in a recruitment process and/or are hired for the job, we will provide you with separate information on how we process your personal data in that context.

 

3. DATA PROCESSORS

No one can handle everything themselves, and the same applies to us. Therefore, we have partners and suppliers, some of whom may act as data processors.

External vendors may, for example, provide systems to organize our work, services, consulting, IT hosting, or marketing.

It is our responsibility to ensure that your personal data is handled properly. Therefore, we have high expectations of our partners, and they must guarantee the protection of your personal data.

We, therefore, enter into agreements with companies (data processors) which handle personal data on our behalf to enhance the security of your personal data.

 

4. DISCLOSURE OF PERSONAL DATA

We do not disclose your personal data to third parties.

 

5. PROFILING AND AUTOMATED DECISIONS

We do not engage in profiling or automated decision-making.

 

6. TRANSFERS TO THIRD COUNTRIES

As a general rule, we use data processors in the EU/EEA or those that store data in the EU/EEA.

In some cases, this is not possible, and data processors outside the EU/EEA may be used if they can provide adequate protection for your personal data.

 

7. DATA PROCESSING SECURITY

We ensure the security of processing personal data by implementing appropriate technical and organizational measures.

We have conducted risk assessments of our processing of personal data and subsequently implemented appropriate technical and organizational measures to increase processing security.

One of our most important measures is keeping our employees informed about GDPR through ongoing awareness training, GDPR courses, and by reviewing our GDPR procedures with employees.

 

8. DATA SUBJECT RIGHTS

Under the Danish Data Protection Regulation, you have a range of rights regarding our processing of information about you.

If you wish to exercise your rights, please contact us so that we can assist you with this.

 

8.1. Right to Access (Right of Access)

You have the right to access the information we process about you, as well as additional information.

 

8.2. Right to Rectification (Correction)

You have the right to have incorrect information about yourself corrected.

 

8.3. Right to Erasure

In special cases, you have the right to have information about you deleted before our usual general deletion period.

 

8.4. Right to Restriction of Processing

In certain cases, you have the right to have the processing of your personal data restricted. If you have the right to restrict processing, we may only process the information – except for storage – with your consent or for the establishment, exercise, or defense of legal claims, or for the protection of a person or important public interests.

 

8.5. Right to Object

In certain cases, you have the right to object to our otherwise lawful processing of your personal data. You can also object to the processing of your information for direct marketing.

 

8.6. Right to Data Portability

In certain cases, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transfer this personal data from one data controller to another without hindrance.

You can read more about your rights in the Danish Data Protection Authority’s guide on data subjects’ rights, which you can find at www.datatilsynet.dk.

 

8.7. Withdrawal of Consent

When our processing of your personal data is based on your consent, you have the right to withdraw your consent.

 

9. COMPLAINT TO THE DANISH DATA PROTECTION AUTHORITY

You have the right to file a complaint with the Data Protection Authority if you are dissatisfied with the way we process your personal data. You can find the contact information for the Danish Data Protection Authority at www.datatilsynet.dk.