PRIVACY POLICY
1. Purpose of the policy
The purpose of this privacy policy is to make you aware of how Chr. Møller A/S ("we", "us") process your personal data. With this policy we want to make you aware of what data is collected and processed and for how long it is stored. The privacy policy covers the processing of personal data at Chr. Møller A/S when you enter into agreements, interact or otherwise exchange personal data with us.
2. Description of the processing
Chr. Møller A/S processes your data for one or more specific purposes and in accordance with data protection regulations. Among other things, we process your data if you are our customer, business partner, supplier, visit our website or our social media. The data will generally come directly from you, and we will only process your data for as long as it is necessary for the purpose for which it was collected. However, the data can also be processed and stored longer in anonymised form.
Below you can get an overview of the different types of processing we perform.
2.1. Customer relationships
Business customers
In connection with the sale of boiler plants and piping systems and consulting on energy optimization to business customers, we process information about their contact persons in order to enter into and fulfil an agreement with you, cf. GDPR art. 6(1)(b). This information includes contact details such as name, company name, email, address and phone number, and purchase history.
We delete the data when the data no longer has a purpose.
2.2 Cookies and website
In connection with the general operation of our website, we collect personal data about you via cookies to improve the website's output and user experience, and to compile statistics. The information we collect via cookies includes your IP address, browser type, device (type, version, operating system etc.) and user behaviour, including page views.
We only collect your data if you have given your consent, cf. GDPR Art. 6(1)(a). You can withdraw your consent at any time via the cookie banner.
2.3. Social media
We use certain social media, including Facebook, to connect with our customers and potential customers, and to promote our marketing. If you have "liked" our fan page on social media or have been in contact with us through it, we will avoid processing your personal data. We only process information about your name and email for this purpose.
If you contact us via social media, we process your personal data based on our interest in being able to contact you and respond to your enquiries, cf. GDPR art. 6(1)(f). The information will come from you and the social media that you contact us through.
We have a so-called joint data responsibility with the social media we use, as we both process your personal data for our own purposes. You can read more about social media's processing of your personal data below:
Facebook's processing of your personal data here and about joint data responsibility here.
2.4. Job applicants
If you apply for a job with us, we process your personal data in order to assess whether you are qualified for an existing or future position with us. We process the information you provide us with, including name, contact details (including phone number, email and address), date of birth, photo, application, CV, work and educational history and references.
We process your data in order to enter into an employment agreement with you based on your request for our processing of your application, cf. the GDPR. GDPR art. 6(1)(b). We also process data in cases where we assess that our interests in processing your personal data outweigh your interests in not processing it, e.g. data collected from social media published by you or data obtained through the completion of a personality and aptitude test, cf. GDPR art. 6(1)(f).
We share your personal data with the employees involved in the recruitment process.
If we want to keep your data beyond the recruitment period, we will obtain your consent.
Unsolicited applications are stored for 3 years.
2.5. Suppliers and partners
When we enter into agreements with suppliers and business partners, we process information about their contact persons. This includes information such as name, job title, phone number, email and, if necessary, payment information.
The data is processed either because it is necessary for the fulfilment of the agreement with the supplier or business partner in question, cf. GDPR Art. 6(1)(b), or because we have a legitimate interest in processing the person's contact information as part of the contract, cf. GDPR art. 6(1)(f).
We keep relevant contact information throughout our co-operation. Written correspondence is deleted on an ongoing basis, and information necessary to fulfil our obligations under the Danish Bookkeeping Act is stored for 5 years plus the current financial year.
3. Notification of statutory or required processing
In cases where we process your personal data based on a legal obligation or contractual requirement or a requirement that must be fulfilled in order to enter into a contract, you are obliged to provide us with the data in order for us to maintain the customer relationship, fulfil the contract and invoice you for our services etc. If you do not wish to provide us with the information we need to fulfil our obligations, the consequence may be that we will not be able to establish or continue the client relationship or fulfil a contract with you.
4. Recipients of personal data
We treat your personal data with confidentiality and we do not generally disclose it to third parties. However, we may disclose your personal data if you have given your consent, if we have a legitimate interest in the disclosure or if we have a legal obligation.
We may entrust personal data to our system suppliers who process personal data on our behalf and under our specific instructions in accordance with the data processing agreement entered into.
In some cases, we use data processors outside the EU/EEA, whereby personal data may be transferred to third countries, e.g. in connection with our use of cloud solutions. For this purpose, we use a valid transfer basis (possibly including Standard Contractual Clauses) before we transfer the personal data.
5. Your rights
When we collect information about you, you have a number of basic rights under the data protection rules that you can make use of. Your rights include the right to request access to and rectification or erasure of your personal data, restriction of and objection to our processing, and the right to receive your data in a structured, commonly used and machine-readable format (data portability).
The rights mentioned above may be subject to conditions and limitations. Whether you as a data subject can request, for example, to have your personal data deleted, will in all cases depend on a concrete assessment.
If you have given your consent to our processing of your data, you have the right to withdraw this consent at any time.
If you are dissatisfied with our processing of your personal data, you can file a complaint with the Danish Data Protection Agency via their website www.datatilsynet.dk or by calling +45 33 19 32 00.
6. Contact details
The company responsible for processing your personal data is:
Chr. MØLLER A/S
Company registration number: 24997235
Tåsingevej 4, 5800 Nyborg, Denmark
Email: info@chrmoeller.dk
Phone: +45 65 99 10 99
We have appointed an employee as our internal data protection coordinator. If you have any questions regarding our processing of your personal data, please contact Mia Bender Kristiansen at mia@chrmoeller.dk.
7. Changes
We reserve the right to update and amend these guidelines for the processing of personal data. In the event of significant changes, we will contact you by email or visible notice on our website.
This privacy policy was last modified on 25.04.2024