Privacy policy

Complychain ApS (CVR no.: 45031683) is the data controller for the personal data we process about you.

Responsible handling of personal data collected as part of our business operations is essential to our business objectives and reputation. In this Privacy Policy, you are informed about how we process your personal data and what rights you have.

Contact details

If you wish to contact us regarding our processing of your personal data, you can do so at:

mb@blannercompliancer.dk or +45 51 83 68 91

Processing of Personal Data

In order for us to fulfil any agreements entered into with you, it is necessary for us to process information relating to you.

Customers

When you are a customer with us, we process your contact details for the purpose of delivering purchased services, communicating with you, and invoicing. We rely on the legal basis in Article 6(1)(b) of the General Data Protection Regulation (GDPR). Your information is deleted when we no longer have a purpose for retaining it, including when your relationship with us is inactive and more than 5 years have passed since the last activity.

When you and your colleagues use our software, we process information about users’ names, email addresses, and activities in the solution, as well as any personal data contained in documents that you upload to Complychain. We rely on the legal basis in GDPR Article 6(1)(b). Your information will be returned and/or deleted when there is no longer a customer relationship.

If, as a customer, you choose to use our solution to process documents containing personal data, we will enter into a data processing agreement (DPA) with your company.

General Enquiries

If you contact us via email, contact form, social media, etc., we process your contact details and any other information you provide in your enquiry for the purpose of responding to you. We rely on GDPR Article 6(1)(f), as we have a legitimate interest in responding to your enquiry. Enquiries are deleted on a rolling basis once they have been handled.

Contact Persons at Suppliers and Partners

When you are a supplier or partner with us, we process your contact details for the purpose of handling our purchases and administering your relationship with us, including settlement. We rely on GDPR Article 6(1)(b). Your information is deleted when we no longer have a purpose for retaining it, including when your relationship with us is inactive and more than 5 years have passed since the last activity.

Job Applicants

When you send us a job application, we process the information you include, such as contact details, other information in your CV and application, diplomas, and anything else you submit. You are informed that we may seek information from references as well as from your social media. We process the data for the purpose of responding to your application and assessing your profile in relation to offering you a job with us. We rely on GDPR Article 6(1)(f), as we have a legitimate interest in processing your application and providing you with a response. Solicited applications are stored until the right candidate is found. Unsolicited applications are stored for up to 6 months. If we wish to retain applications for a longer period, we will request your consent.

Your consent is voluntary, and you may withdraw it at any time by contacting us using the contact details provided under “Contact Details”.

Photos and Videos of External Individuals

If we wish to publish images of you for marketing purposes, we will collect your consent for this (GDPR Article 6(1)(a)). You may withdraw your consent at any time by contacting us using the contact details provided under “Contact Details”. We will use the material until you withdraw your consent or until we assess that it is no longer relevant to use.

Website Visitors

When you visit our website, we may process certain information about you if you give your consent in accordance with GDPR Article 6(1)(a). For further information, please refer to the cookie banner you are presented with the first time you visit our site.

Newsletter

If you have given consent (GDPR Article 6(1)(a)) for us to send you our newsletter, we will store your name and email address for the purpose of sending newsletters to you by email. We also collect information about how you interact with our newsletter. You can withdraw your consent at any time by contacting us using the contact details provided under “Contact Details” or by clicking “unsubscribe” at the bottom of the newsletter. We retain documentation of the consent for up to 2 years after it has been withdrawn.

Disclosure of Data

We use a number of third parties for storage and processing of data, including providers of IT solutions. Where relevant, data is disclosed to banks, debt collection agencies, shipping companies, auditors, etc.

We only use processors in the EU or in secure third countries, as well as companies in countries that can provide an adequate level of protection for your information. Processors in countries outside the EU include:

Microsoft Inc., USA

• Microsoft Office 365: provider of the office suite.

Google Inc., USA

• Google Analytics: website statistics.

When we cooperate with providers in countries outside the EU, we as a rule use the European Commission’s Standard Contractual Clauses (SCCs) as the transfer basis, together with supplementary measures. This ensures the necessary safeguards for the protection of your information.

Your Rights

Under the GDPR, you have a number of rights with regard to our processing of information about you. You can exercise your rights by contacting us using the contact details above under “Contact Details”.

Right to Withdraw Consent

You have the right to withdraw your consent at any time. You can do this by contacting us using the contact details listed above under “Contact Details”.

If you choose to withdraw your consent, this does not affect the lawfulness of our processing of your personal data based on your previously given consent up to the time of withdrawal. If you withdraw your consent, it therefore takes effect only from that time. We retain documentation of given consents for 2 years after withdrawal.

Right of Access

You have the right to obtain access to the information we process about you as well as certain additional information.

Right to Rectification

You have the right to have inaccurate information about yourself corrected.

Right to Erasure

In special cases, you have the right to have information about you erased before the time of our general routine deletion.

Right to Restriction of Processing

In certain cases, you have the right to have the processing of your personal data restricted. If you have the right to restriction, we may in future only process the information – apart from storage – with your consent, or for the establishment, exercise, or defence of legal claims, or for the protection of a person or important public interests.

Right to Object

In certain cases, you have the right to object to our otherwise lawful processing of your personal data. You may also object to the processing of your data for direct marketing purposes.

Right to Data Portability

In certain cases, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to have this personal data transmitted from one controller to another without hindrance. You can read more about your rights in the Danish Data Protection Agency’s guidance on data subjects’ rights, which is available at www.datatilsynet.dk.

Complaint to the Danish Data Protection Agency

You have the right to lodge a complaint with the Danish Data Protection Agency if you are dissatisfied with the way we process your personal data. You can find the Agency’s contact details at www.datatilsynet.dk.

Governing Language

In the event of any discrepancies or ambiguities between the Danish and the English versions of this Privacy Policy, the Danish version shall prevail.