PRIVACY POLICY
Personal data, safety
Personal data, safety
Personal data at IntraVAT – How do you contact us?
IntraVAT is data controller for the data we collect concerning you and we ensure that your personal data is processed in accordance with the General Data Protection Regulation (GDPR). This Privacy Policy explains how IntraVAT (“we”, “our”, “us”) use personal data about you on our website, job interviews or other display as described in this Privacy Policy.
If you wish to contact us regarding our processing of personal data, you will find our contact details below:
IntraVAT ApS, Ventrupvej 6, 2670 Greve
CVR-nr.: 83 09 75 15
Phone number: +45 74 30 23 60
E-mail: info@intravat.com
The purpose and legal basis for processing your personal data
When you visit our website or purchases a service from us, we collect and process ordinary information about you. We do this with the purpose of responding to your inquiries and to fulfil our contract with you.
The processing of your personal data is based on the necessary for the performance of a contract (GDPR art. 6 (1) (b)), or for the purposes of your legitimate interests (GDPR art. 6 (1) (f)). We process data based on a legitimate interest, when we create new systems and new features in existing systems, for the purpose of optimizing such systems and provide better service to our customers.
The processing of national identification number (CPR-nummer) is based on the Danish Data Protection Act § 11 (2).
IntraVAT is also legally obligated to document the personal data in financial transactions when fulfilling our agreement, when paying or receiving payment for delivery of goods and services (GDPR art. 6 (1) (c)). We will delete your personal data when it is no longer necessary for the above purpose. Personal data collected in relation to a contract may be saved for up to five years after the end of the contract due to The Danish Bookkeeping Act.
Recruitment process in IntraVAT
The purpose of collecting information about you in the recruitment process is evaluate, whether you are a suitable candidate for a position with us.
Personal data processed in the recruitment process, is the information supplied in your application, CV and any other attached documents registered to you. It is not necessary for you to include CPR-number.
Your application, including appendices, will be disclosed internally to personnel relevant to the recruitment process, but will not be disclosed outside of your enterprise. However, we may use outside consultants to assist in the progress. In such cases, your personal data may be collected or shared with them.
If you are invited to a job interview, we will collect further information for use in continuing recruitment process.
The processing of your personal data is based on our legitimate interest (GDPR art. 6 (1) (f)), which is to assess your qualifications for the open position.
We retain your application, including appendices, for up to six months after which your personal data will be deleted. The purpose of the retention beyond the end of the process is to safeguard our interests in case of complaints of discrimination during the recruitment process.
If we find your application relevant for a possible future position, we may ask for your contest to store information for a longer period (GDPR art. 6 (1) (a)).
Processing of personal data
Personal data is every kind of information which in some way can be assigned to you. We take your data protection seriously. We process personal data and have therefore adopted this Privacy Policy, which informs you how your personal data are being processed.
We only collect, process, and store the personal data in necessity to fulfil our purposes. If your personal data is processed for a purpose other than that for which it was originally collected, we will inform you about this beforehand.
We have implemented suitable technical and organizational measures to prevent your personal data from being accidentally or illegally deleted, publicized, lost, corrupted, leaked, misused, or other treated in non-compliance with applicable law. We ensure that processing only takes place in observance with the principles of data protection and that data always is ajour.
On the following pages, we will explain on what legal ground and to what purposes we process your personal data, and for how long we storage them.
Transfer and protection of your personal data
We use several third parties to store and process information, such as distributers of IT-solutions and storage. They only process your personal data on our behalf and are not permitted to use the personal data for their own purposes. We only share the personal data where it is relevant and necessary for us to perform the activities described in this Privacy Notification, for example, the fulfilment of your order, the processing of your payment details, or the provision of support services.
When relevant, your personal data may be disclosed on an aggregated or individual level to banks, various divisions, subsidiaries, and affiliated companies of IntraVAT around the world located both inside and outside of the European Economic Area (EEA). IntraVAT will process the personal data in accordance with applicable laws and regulations, as well as to contractors and sub-contractors for storage and service purposes within the business area of IntraVAT.
We prioritize data processers from within the EU and from third countries approved by the European Commission with regards to an adequate level of protection of personal data.
Security measures
IntraVAT chooses suppliers that implement security in accordance with industry practices for good IT-security, when transferring sensitive and confidential personal data. We store personal data on servers with limited access located in secured facilities, and our security measures will be evaluated on an ongoing basis.
Your Rights
By contracting us at the contract point at the top, you may:
Please note that certain personal data may be exempt from the above-mentioned rights pursuant to applicable data privacy or other laws and regulations.
When you contact us, requesting to exercise your abovementioned rights, we will respond within a month. If we cannot comply to your request, you will receive an explanation.
In order to exercise your rights, or if you have questions about our processing of your personal data, you can always contact us. Our contact information is at the top.
If, after having been in touch, you are dissatisfied with how we process your personal data, you have the right to file a complaint with the National Data Protection Agency.