Data security

PERSONAL DATA POLICY
Last updated September 24, 2019

We are delighted with your interest in us and our products.

This personal data policy describes how Bolia A/S (“we”, “us”, “our”) process your personal information.

You are agreeing that your personal data will be processed in accordance with this personal data policy. The processing of your personal data is necessary so that we, for example, can enter into and honour agreements with you, respond to your enquiries and send you newsletters (if you have given your consent for this).

1   CONTACT INFORMATION

1.1  We are data controllers pursuant to the Danish Data Protection Act and the personal data protection legislation in force at any given time, including the European Parliament and Council’s General Data Protection Regulation (EU) 2016/679 of 27 April 2016.

1.2  If you have any questions or comments regarding this personal data policy you can contact us at:

Bolia A/S
Værkmestergade 11
8000 Aarhus C
Denmark

E-mail: gdpr@bolia.com
Telephone: +45 88 96 02 26

2   COLLECTION OF PERSONAL DATA

2.1  We collect and process certain personal data about you for the purposes outlined in Section 3

2.2  We collect the personal data which you give us, for example, contact information and information about your purchases.

2.3  We also collect the personal data below about our customers from the specified third parties:

2.4  Furthermore, we automatically collect certain personal data relating to your use of our website via cookies, including IP addresses, browser type and which pages you have visited. You can read more about how we use cookies here.

3  USE OF YOUR PERSONAL DATA

• We only use your personal data for the following purposes:

1. to honour our agreement with you, including delivery of the goods and service you have asked for;
2. to communicate with you regarding special offers, advertising material, and other news about our products, including via e-mail, if you have given your consent for such marketing;
3. to compile statistics and analyses which enable us to improve your customer experience and our website;
4. to comply with our legal obligations;
5. to respond to your enquiries; and
6. to establish, plead or defend a legal claim.

4   TRANSFER OF YOUR PERSONAL DATA TO THIRD PARTIES

4.1  We can, to the relevant extent, transfer your personal data to the categories of third parties specified below:

1. Service providers, including for example, hosting providers, third parties who provide IT support, or providers of analysis tools and CRM systems;
2. Affiliated companies;
3. Collaborative partners who assist with our business activities;
4. Carriers and craftsmen;
5. Consultants, including, for example, auditors and lawyers; and
6. Public authorities, including for example, the Danish Tax Authority (SKAT).

4.2  You can be sure that the transfer of your personal data will always be in accordance with the applicable personal data protection laws and under the appropriate security measures.

5   TRANSFER TO THIRD PARTIES OUTSIDE THE EU/EEA

5.1  Some of the third parties to which we transfer personal data may be located outside the EU/EEA. When we transfer your personal data to recipients in countries outside the EU/EEA that do not have an adequate level of data protection in accordance with data protection legislation, we will always ensure that the necessary security measures for the protection of your personal data are in place. Transfers will only take place if the recipient:

(a)       is located in a country which, according to the decision taken by the European Commission, has a sufficiently high level of protection;

(b)       has entered into an agreement with us based on the European Commission’s standard contracts; or

(c)       has obtained ‘EU-US Privacy Shield Framework’ certification (only relevant to recipients in USA).

5.2  We may transfer your personal data to the following third parties outside the EU/EEA:

5.3  If you would like further information about our transfers of personal data to third parties outside the EU/EEA, you can contact us at any time using the contact information in point 2. You can contact us at any time if you would like information on where the information on the data protection measures in question can be accessed, or how you can get a copy of relevant documents, including the European Commission’s standard contracts.

6   LEGAL BASIS FOR THE PROCESSING OF YOUR PERSONAL DATA

6.1  We will process your personal data in accordance with this personal data policy because it is necessary:

1. to enter into or honour a contract concluded with you, including contracts to deliver the products or service you have asked for and also to process your payments and enquiries (cf. Article 6(1), schedule b) of the General Data Protection Regulation;
2. to comply with our obligations in accordance with, for example, Chapter 5 of the Danish Bookkeeping Act (cf. Article 6(1), schedule c) of the General Data Protection Regulation.
3. to pursue our legitimate interest in (i) responding to your enquiries, and (ii) compiling statistics and analyses which enable us to improve your customer experience and our website (cf. Article 6(1), schedule f) of the General Data Protection Regulation; and
4. to establish, plead or defend a legal claim (cf. Article 9(2), schedule f) of the Danish Data Protection Act.

We will also process your personal data if you have given us your consent for this, for example, to communicate with you regarding special offers, advertising material and other news about our products (cf. Article 6(1), schedule a) of the General Data Protection Regulation. 

You can withdraw your consent at any time by contacting us using the contact information in point 1.2.

7   PROTECTION AND STORAGE OF YOUR PERSONAL DATA

7.1  We take your security seriously and will always ensure that the necessary technical and organisational security measures are in place in order to protect your personal data against unauthorised or illegal processing, as well as accidental destruction, loss, modification, misuse or publication.

7.2  The personal data we collect about you will be stored as stated, including:

8   YOUR RIGHTS

8.1  You have the right to:

1. view the data which we are processing about you, as well as a range of other data;
   
   
2. to receive a copy of the data we are processing about you in a structured, easily usable and machine-readable format, and to have this personal data transferred to another data controller;
   
   
3. to have inaccurate data about you corrected or (in special cases) deleted within the time frame stipulated in point 2;
   
   
4. to object to the processing of our otherwise legitimate processing of your personal data, including in relation to direct marketing;
   
   
5. in certain cases, to have our processing of your personal data restricted.
6.  

8.2  If you have the right to have the processing restricted, in future, we may only process the data (apart from in relation to storage), if you have given your consent for this, so that a legal claim can be established, pleaded or defended, or to protect a person or important social interest.

8.3  The above rights can be exercised by contacting us using the contact information provided in point 2.

8.4  You have the right to complain about our processing to the Danish Data Protection Agency (datatilsynet.dk).

9   SPECIFICALLY FOR JOB APPLICANTS

9.1  Bolia A/S is the data controller insofar as the job applications that are received are concerned. You will find the contact information in Section 2 above.

9.2  We process the personal data which you send to us in connection with your job application, and the data we receive from recruitment agencies you have been in contact with. If you have used your previous employer as a reference, we may also obtain a statement from them with a view to being able to evaluate your application.

9.3  We process personal data because it is necessary in order to pursue our legitimate interests in being able to process your job application, cf. Article 6(1), schedule f of the General Data Protection Regulation.

9.4  Your personal data may be passed on to third parties, including service providers and collaborative partners who assist us with our business activities, and these entities may be located outside the EU/EEA, cf. Sections 4-5.

9.5  Your job application, including personal data contained in your job application, will be stored for up to six months from the day on which we receive your job application, unless you consent to a longer storage period.

9.6  Pursuant to the Articles 15-18 and 20-21 of the General Data Protection Regulation, you have certain rights, cf. Section 8 in this personal data policy.

10   CHANGES TO THIS PERSONAL DATA POLICY

10.1  Important changes to this personal data policy will be notified our website.