Bjørntoft Maskinfabrik A/S value your privacy and take the protection of your personal data very seriously. Therefore, it is important to us that you understand how we collect and process your personal information.
- Bjørntoft Maskinfabrik A/S’s Policy on the processing of personal data can be summarized as follows:
- Bjørntoft Maskinfabrik A/S is open about how we collect and use your personal information.
- Bjørntoft Maskinfabrik A/S uses your personal information to run our business.
- Bjørntoft Maskinfabrik A/S always takes steps to ensure that we store your personal information securely.
We believe that all of our partners should have the same standards for privacy. That is why we apply our key privacy principles in all countries where we have customers, even though local legislation sets lower standards for the protection of personal data. We always process your personal information in accordance with the following key principles:
We tell you what personal information we collect about you, as well as why and how we collect and process this information. There will be no surprises.
We will only process your personal data for legitimate purposes, and only as long as it is necessary to achieve these purposes or as long as it is otherwise required by applicable law to store them.
We enable you to make relevant choices and control our processing of your personal data, not only when we do so under applicable law, but also in other circumstances where we deem it appropriate and technically feasible.
We respect the rights to protect personal data that you have under applicable law. Including your right to access, correct and keep the personal data we hold about you.
We take appropriate security measures to ensure that your personal information is secured.
WHO IS THE LEGAL RESPONSIBLE PARTY?
Bjørntoft Maskinfabrik A/S, Literbuen 19, 2740 Skovlunde, Denmark, decides for what purpose your personal data is collected and processed, and we are therefore “responsible for data” as defined in the Personal Data Act. We are legally responsible for ensuring that your personal information is processed in accordance with this data protection policy, including our key principles and applicable law.
HOW WE COLLECT YOUR PERSONAL INFORMATION
We collect your personal information in three ways:
- Information that you give us yourself, eg. when you enter your data via our website and press send.
- Information that you give us yourself when sending an email with your contact data
- Information that is publicly available and that we store in our business promotion database.
WHAT DO WE COLLECT
To run our company it is important that we know your name, position and contact data on all the partners we have. Including telephone numbers and email address as well as your work address.
HOW WE USE YOUR PERSONAL INFORMATION
The collection and processing of your personal data is primarily for us to communicate and deliver the agreed services to you on the agreements we enter into as for the agreements we try to enter into.
This treatment includes:
- Managing your customer relationship with us, including managing and executing your orders, sending out invoices around purchases and collecting payments for our services.
- Communicating with you about the services we provide to you; sending messages about purchases and about errors in our services; and answering your questions and feedback.
- Creating customer profiles.
- Protecting our services and networks, including ensuring and ensuring security for you and our employees.
- Investigation, prevention and handling of actions in connection with illegal activities and violations of our terms and / or applicable law.
- Compliance with our regulatory and regulatory obligations.
- Conducting a credit check to assess your customer request.
THE LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA
Treatments based on fulfillment of our contract with you
The majority of the personal data that we process about you is processed in order to provide the requested services to you and thereby fulfill our contract with you. Thus, the collection and processing of such personal data is done on the basis of Art. 6 (1) (b) of the Data Protection Regulation. It follows that the collection and processing of personal data may take place if it is necessary for the fulfillment of a contract to which the data subject is a party.
Treatments based on consent – and the right to withdraw consent
If we have based your processing of your personal data on your consent, you have the right to withdraw this consent at any time. You can do this by contacting our company. If you choose to withdraw your consent, it will not affect the legality of our processing of your personal data based on your prior consent and up to the time of withdrawal. If you withdraw your consent, it will not take effect until then.
We automatically collect information using cookies, web beacons (also called clear GIFs or pixel tags) and similar technologies.
A cookie is a text file that contains small amounts of information that a website can send to your browser and can subsequently be stored on your computer as an anonymous tag that identifies your computer but not you.
HOW LONG TIME WE KEEP YOUR PERSONAL INFORMATION
We will not keep your personal data longer than necessary for the purpose for which they were collected unless we are required by law to keep it longer than that.
According to the counting legislation, we are required to keep accounting material for 5 years from the end of the financial year to which the material relates.
Marketing consents are kept for documentary reasons as long as they are valid and up to 2 years after they were last used.
Data relevant to any claims that become obsolete under the statute of limitations is retained for 3 years for documentary reasons.
HOW WE PROTECT YOUR PERSONAL INFORMATION
We have a GDPR responsible through which we ensure that the processing of your personal data always complies with this data protection policy and applicable law.
We have put in place appropriate technical and organizational security measures to protect your personal information from unauthorized access, collection, use, disclosure, copying, modification or disposal.
You have certain rights in relation to the personal data we hold about you. We have measures and processes that allow you to exercise your rights and ensure that we can fulfill your wishes regarding the personal data we hold about you.
Right to view information (right to access)
You have the right to gain access to the information we process about you, as well as a number of additional information. This means that you can, as a starting point, receive copies of the documents etc. containing your personal data, and you will also be informed about the purposes of the processing, the categories of personal data concerned (eg if there is sensitive information), the recipients or the categories of recipients, how long the information is kept, whether the information is transferred to third countries, etc. There are a few exceptions to the right of access, e.g. if the documents contain our trade secrets.
Right to rectification (correction)
You have the right to have incorrect information about yourself corrected. If we find your request for correction justified, we will correct the information as soon as possible and without undue delay.
Right to be forgotten
In special cases, you have the right to have information deleted about you before the time of our regular general deletion.
You have the right to have your personal data deleted without undue delay when any of the following applies:
- It is no longer necessary for us to have the information about you for the original purposes.
- We have based our treatment on your consent, and you are now withdrawing your consent without any other legal basis for the treatment.
- We process the information illegally.
- We are required to delete the information as a result of legislation.
- We are required to delete the information as a result of exercising your right to object
Right to restrict treatment
In some cases, you have the right to restrict the processing of your personal data. In the future, if you have the right to have limited treatment, we may only process the information – other than storage – with your consent, or for a legal claim to be established, enforced or defended, or to protect a person or important public interest.
You have the right to have your personal data restricted if any of the following applies:
- You dispute the accuracy of the personal data. in this case, we must limit the processing of the information during the period until we have been able to determine whether the personal data is correct.
- We treat the information illegally and you oppose the deletion of information, but request a restriction on its use. For example, you can prefer limited treatment if you want it to be able to document what information is included in the processing of a case.
- We no longer need the personal data for processing, but they are necessary for a legal claim to be established, enforced or defended.
- You have objected to our treatment. We need to limit the processing of information during this period of time to check whether our legitimate interests precede your legitimate interest.
Right to object
In some cases, you have the right to object to our otherwise lawful processing of your personal data.
You may exercise the right to object in cases where we process your personal data on one of the following grounds:
- The processing is necessary for the sake of performing a task in the interest of the community or that falls under the exercise of public authority, which we as data controller have been assigned.
- The processing is necessary for us, as a data controller or a third party, to pursue a legitimate interest unless your interests or fundamental rights and freedoms requiring personal data protection precede this.
- In cases where you object, we have already once considered that the processing of your personal data is necessary for the performance of a public authority task, or that the legitimate interests which make the processing necessary exceed your rights not to obtain your information processed. However, with this objection, you can come up with such compelling reasons to support the treatment – because of your particular, individual situation – should not take place in the future, in which case, based on the new information, we will stop the treatment.
You may also object to the processing of your personal data for direct marketing, after which your information may no longer be processed for this purpose
Right to transmit information (data portabilitet)
You are in some cases entitled to receive your personal data in a structured, commonly used and machine-readable format as well as to have this personal data transferred from us as data controller to another data controller.
You have the right to receive and transfer your personal data when the following two conditions are met:
- Our processing of your personal data is done automatically and is based on consent or necessary to fulfill a contract.
- You have provided us with the personal data that we process. This includes both cases where you directly provided us with the information, as well as cases where they are generated via electronic devices for which we are responsible for data.
- We will respond to your request within an appropriate timeframe and in any case within the time required by law.
We will do our best to ensure that the personal information we hold about you is accurate, complete and accurate. However, it is your responsibility to ensure that you provide us with accurate, accurate and complete information and that you regularly update your information in your online account.
You can read more about your rights in the Data Inspectorate’s guide on the rights of the data subjects, which you can find on www.datatilsynet.dk.
Complaint to the Data Inspectorate
As a partner, you can always complain to the Data Inspectorate if you are dissatisfied with the way we process your personal data. You can find the Data Inspectorate’s contact information at www.datatilsynet.dk.