Privacy Policy for NIL Technology A/S
Generally
This Personal Data Policy (hereafter referred to as “the Policy”) applies to all the information that NIL Technology A/S (hereafter referred to as “we” or “the Company”) process regarding personal data.
The Policy states what information is collected, how we handle the information and how long information is stored, etc. On www.nilt.com the latest and current version of the Policy is available at all times.
Data Controller
The Company is to be regarded as a data controller:
NIL Technology ApS
Haldor Topsøes Allé 1
2800 Kongens Lyngby
Company phone number: +45 31 11 17 97
Company email address: [email protected]
CVR No. 29 31 02 03
The legal basis for the processing of personal data is set out in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC and related regulations (the General Data Protection Regulation). In addition to this, there is the Act on Supplementary Provisions to the Regulation on the Protection of Individuals in Connection with the Processing of Personal Data and on the Free Movement of Such Data (Act No. 502 of 23 May 2018) (the Data Protection Act).
All questions regarding this Policy, the processing of personal data and suspicion of non-compliance must be made by email to CFO.
Personal Data Included in the Processing
We collect this information directly from customers and suppliers, respectively:
Customers; Name of contact persons, job title, email address, mobile number and company address.
Copy of communication regarding orders/potential orders.
Supplier; The following general personal data is collected: Name of contact persons, job title, email address, mobile number and company address.
Background for Processing of Personal Data
When entering into a customer or supplier agreement, we accept the processing of general personal data for the specific purpose, including processing in connection with an enquiry or the like.
The legal basis for the Processing of your Personal Data is Article 6(1)(b) of the General Data Protection Regulation, as the processing is necessary as part of the Company’s operations.
Sharing Personal Information
Personal data may be shared with the Company’s suppliers and business partners.
In addition to the above, we share your information to the extent that we are obliged to do so, for example when reporting to public authorities, such as local Tax authorities.
Third countries
The Company does not transfer your personal data to third countries (countries outside the EU/EEA), unless it is necessary in the specific case or in connection with the provision of specific services.
Retention and Deletion of Your Personal Data
We process general contact information and information related to purchases about our customers in order to process an order, send out order confirmations, etc. Customer and supplier data is deleted after 5 years (however, the retention period can be extended 5- 7 years after from “end of life”, due to warranty on the product). The retention period is based on the purpose of processing the data and requirements from regulation, i.e. the Bookkeep-ing Act.
Rights
Insight
It is possible to gain insight into your own Personal Data. By writing to the CFO, you can re-quest access to the Personal Data that we have registered about you, including the purposes for which the data was collected. An access request is processed as soon as possible, typically within 1 month of receiving the access request.
Rectification and Deletion
You have the right to request correction, additional Processing, deletion or blocking of the Personal Data we process about you. We will comply with your request as soon as possible, to the extent necessary. If – for any reason – we are unable to accommodate your request, we will contact you.
Restriction of Processing
You have the right – under certain circumstances – to have the Processing of your personal data restricted. Please contact us if you wish to restrict the Processing of your Personal Data.
Right of Objection
You have the right to ask us not to process your personal data in cases where the Processing is based on Article 6(1)(e) (task in the public interest or exercise of official authority) or Article 6(1)(f) (legitimate interest). This Policy sets out the extent to which we process your in-formation for such purposes. You can exercise your right to object at any time by contacting us.
Withdrawal of Consent
If the Processing of Personal Data is based on your consent, you have the right to withdraw your consent at any time. Your withdrawal does not affect the lawfulness of the Processing that was carried out before you withdrew your consent.
Please note that withdrawal of a consent can impact the possibility for us to provide you relevant services, process orders etc.
Security
We have implemented internal rules and procedures to maintain appropriate security from the time we collect Personal Data until deletion, and we only entrust our Processing of Personal Data to Data Processors who maintain a corresponding appropriate level of security.
Complaint to Supervisory Authority
If you are dissatisfied with the Company’s processing of personal data, you can complain to the Danish Data Protection Agency:
The Danish Data Protection Agency, Carl Jacobsens Vej 35, 2500 Valby, phone + 45 33193200, e-mail: [email protected].
Cookies
The Company collects cookies in order to improve the user experience. You can opt out of blocking cookies at any time by selecting “Block cookies”. Please note, however, that the procedure for turning off cookies differs depending on which internet browser you are using. Please see further guidance on the homepage of the Company where also a cookie policy is available.
Updates to this Policy
We regularly review this Policy to keep it up to date and in accordance with applicable principles and laws. This Policy is subject to change without notice.
***
Latest update 19 August 2024