Personal data is all kinds of information that, to some extent, can be attributed to you. When you use our website, we collect and process a series of such data. This may be during ordinary interactions on the website. For instance, when you submit a contact form, sign up for a newsletter, participate in a competition/survey, register as a new user/subscriber, or otherwise use our services or make purchases via our website. When we process this information, we become the data processor, cf. the General Data Protection Regulation EU 2016/679, also known as “GDPR”.
What data is collected?
We typically collect and process the following types of information: A unique ID and technical information about your computer, tablet or mobile phone, your IP address, geographical location, and which pages you visit. To the extent that you give explicit consent and enter the information yourself, we also process: name, telephone number, email, address, and customer/system number.
The information is used to identify you as a user and communicate with you in the most relevant way, to be able to provide you with the services you have requested, e.g., to buy our products/services, receive newsletters and to keep statistics on the use of our website and its features.
In addition, we use the information to optimise and improve our website, services and content. We will never resell your information.
Legal basis for processing
Our processing is founded on the following legal bases:
- GDPR art. 6(1), letter a, where you have given consent to the processing of your personal data for one or more specific purposes. This will be the case, for example, when subscribing to our newsletter. If you have given consent, you can withdraw it again at any time.
- GDPR art. 6(1), letter b, where the processing is necessary for the performance of a contract to which you are a party, or for the implementation of measures taken at your request prior to the conclusion of a contract.
- GDPR art. 6(1), letter c, where the processing is necessary to comply with a legal obligation to which we are subject, e.g. the Danish rules on marketing and marketing practices.
- GDPR, art. 6(1), letter f, where the processing is necessary for Brunata or a third party to pursue a legitimate interest, unless your interests or fundamental rights and freedoms requiring the protection of personal data precede it.
- GDPR, art. 9(2), letter f, where the processing is necessary for legal claims to be established, invoked or defended, or when courts act in their capacity as a court.
We process your personal data securely and confidentially, in accordance with applicable law, including the General Data Protection Regulation and the Data Protection Act.
Your information will only be used for the purpose for which it was collected, and will be deleted when this purpose has been fulfilled or is no longer relevant.
We have taken technical and organisational measures to protect your data against accidental or unlawful deletion, disclosure, loss, deterioration, unauthorised disclosure, misuse or otherwise being processed in violation of the legislation.
Disclosure of information
We do not disclose your information to third-party advertisers of other/own products and services, but only to third parties who facilitate direct communication between you and Brunata, e.g., LinkedIn, Twitter, or subcontractors for sending out newsletters or performing statistics on the website (google analytics). These exclusively process information on our behalf and may not use it for their own purposes.
Disclosure of personal information such as name and email etc. will only occur if you give your consent. We only use data processors in the EU or in countries able to sufficiently protect your data.
You have the right to obtain information about the personal data we have registered about you, and to receive a copy of it in a standard format (data portability).
You can object to the use of the data at any time. You can withdraw your consent if you no longer want us to process your personal data, or you want us to limit the processing of your personal data. If the information processed about you is incorrect, you also have the right to have it corrected or deleted. Inquiries can be made to: firstname.lastname@example.org
All rights in this section are subject to rules and exceptions listed in Chapter 2 of the GDPR.
Your rights to complain
If you want to complain about our processing of your personal data, you have the opportunity to contact the Danish Data Protection Agency
We may need to change this policy on an ongoing basis, so it reflects our actions and your rights at all times. The current policy will be available on our website.