Background
Welcome to Hansen Toft’s Privacy Policy. This policy provides information about what data we collect about you, why we collect it, and how we use it. These are important details, so we encourage you to take the time to read them.
Below, you will find details about how Hansen Toft A/S (hereinafter Hansen Toft, ‘we’, ‘us’, ‘our’, etc.) processes personal data about you when you visit our website (hansentoft.dk), receive our newsletters, contact us, engage in dialogues with us, use our services, do business with us, or visit our premises.
We are the Data Controller – How to contact us?
Hansen Toft A/S
Hasselager Centervej 1, 1st floor, 8260 Viby
Company Reg. no. (CVR): 26032385
Email: mail@hansentoft.dk
Hansen Toft is responsible for processing personal data. If you have questions about how we handle your personal data, you are always welcome to contact our GDPR representative at mail@hansentoft.dk.
Your personal data
We process your personal data differently depending on the type of contact, relationship, and purpose. Read more below about the various types of data processing.
1. Visit our website
Purpose
When visiting our website, we collect information about visitors’ behaviour to deliver tailored advertisements, optimize the website, and enhance user experience, provided that you consent via the cookie banner. This information is primarily statistical. Without consent, your personal data will only be processed through cookies that are essential for the basic functions of the website (technically necessary).
Legal basis for processing
When processing the collected personal data for marketing, statistical, or functional purposes, this is done based on the consent provided via the cookie banner, according to Article 6(1)(a) of the General Data Protection Regulation (GDPR). If consent is not provided, your personal data will be processed based on Hansen Toft’s legitimate interest in delivering the website content to you as a user, in accordance with Article 6(1)(f) of the GDPR.
Categories of personal data
The information collected includes aggregated website traffic, referral sources, visit duration, most visited pages, device, operating system, country, and browser. Additionally, IP addresses are collected in an anonymized form to determine the number of unique visitors to the website.
Recipients of personal data
We share information with our data processors for purposes such as website hosting. In certain cases, your personal data may be shared with third-party providers through cookies. You can read more about this processing in our cookie policy, accessible via the cookie banner.
Storage of personal data
The collected information is stored exclusively for the purposes for which you provide explicit consent. You can read more about specific storage periods in our cookie policy.
Automated decisions and profiling
The collected information is not used for profiling or making automated decisions.
2. When you do business with Hansen Toft
Purpose
When you do business with us, we process your information to carry out and manage the purchase process, including payment, delivery, and invoicing.
Legal basis for processing
The processing of personal data is based on the contract between the company and the data subject, in accordance with Article 6(1)(b) of the General Data Protection Regulation (GDPR) (performance of a contract). Subsequently, transaction information will be processed in compliance with accounting laws requiring transaction records, as per Article 6(1)(c) of the GDPR.
Categories of personal data
The information collected includes name, address, contact details, payment information, and any details regarding the purchased product or service.
Recipients of personal data
Personal data may be shared with payment providers or banks. Additionally, we may disclose details such as name, title, and contact information to candidates in order to facilitate recruitment processes.
Storage of personal data
Personal data is stored for the duration necessary to fulfil the contract, including compliance with legal requirements such as accounting laws, which may require storage for up to 5 years.
3. Inquiries via contact form on our website or email
Purpose
When you contact us through our contact forms or email, we collect and process personal data to respond to your inquiry.
Legal basis for processing
We process the collected personal data based on the company’s legitimate interests pursuant to Article 6(1)(f) of the General Data Protection Regulation (GDPR).
Categories of personal data
The collected information includes general contact details such as name, email address, telephone number, and a detailed message describing the nature of your inquiry. We only collect personal data provided directly by you.
Recipients of personal data
We do not share personal data from inquiries made via our contact forms with third parties. However, personal data may be processed by our data processors.
Storage of personal data
The information is deleted or anonymized no later than 12 months after the most recent contact, unless the contact initiates a collaboration, customer relationship, or another similar relationship. If your inquiry initiates a recruitment process or customer relationship, your information will be stored in accordance with our retention policy as described under other processing activities.
Automated decision-making and profiling
The collected information is neither used for profiling nor for automated decision-making.
4. Service Notifications and Newsletter Subscription
Purpose
When subscribing to our newsletter, we collect and process personal data in order to send emails containing information about updates, new products and services, or other news to which you have consented.
Legal basis for processing
We process the collected personal data based on your consent, in accordance with Article 6(1)(a) of the General Data Protection Regulation (GDPR). This consent can be withdrawn at any time by writing to us or by unsubscribing via the link provided at the bottom of the newsletter. If you withdraw your consent, documentation of this consent will be stored according to Hansen Toft’s documentation obligations under marketing regulations, pursuant to Article 6(1)(c) of the GDPR.
We may also send you service notifications relevant to you as a customer, partner, or candidate. The data is processed on the basis of contract fulfilment, according to Article 6(1)(b) of the GDPR.
Categories of personal data
The information collected includes contact details such as name and email address. Only personal data provided directly by the individual is collected.
Recipients of personal data
Upon subscribing to our newsletter, we do not disclose personal data to third parties but process it via our data processors.
Storage of personal data
Personal data will be deleted or anonymized 24 months after withdrawal of consent or the most recent newsletter received. The data will also be deleted after the same period if consent has not been utilized within 12 months.
Automated decision-making and profiling
The collected information is neither used for profiling nor for automated decision-making.
5. Application through the job portal or when we contact you regarding a job opportunity
Purpose
When you apply for a position through our job portal or we contact you regarding a job opportunity, we collect your personal data in order to carry out the recruitment process. This also includes gathering information from your references with your consent.
Legal basis for processing
We process your personal data based on the consent you provided when creating your profile, in accordance with Article 6(1)(a) of the General Data Protection Regulation (GDPR).
Categories of personal data
The information we collect during this process includes your name, address, phone number, and email address. Additionally, we process your CV and any information you voluntarily provide in connection with your application, such as educational diplomas, transcripts, or certifications.
In certain cases, you may be asked to complete a personality or intelligence test, and the results of these tests will also be processed.
Lastly, we collect information from your references to assess you as a candidate. This is done only with your explicit consent.
Recipients of personal data
We only disclose your personal data to third parties with your consent in connection with potential job opportunities. Your personal data may be transferred to our data processors who assist in the recruitment process, such as recruitment or testing platforms and HR systems.
Storage of personal data
Your personal data is stored for 2 years after consent has been given. If you are hired for a position, it will be stored for 4 years. You may update your consent and maintain your profile with us at any time. Each time you apply for a new job, the consent date is updated, and we store the data for 2 years from that new date. If you choose to delete your profile, we will immediately delete your information.
Automated decision-making and profiling
The collected information is not used for profiling or for making automated decisions.
6. Signing up for the job agent
Purpose
When you sign up for the job agent on our website, we collect personal data in order to send you information about potential job opportunities.
Legal basis for processing
We process your personal data based on your consent given when you sign up, pursuant to Article 6(1)(a) of the General Data Protection Regulation (necessary for the performance of a contract). You can withdraw this consent at any time by contacting us or by unsubscribing via the link at the bottom of the job agent emails. If you withdraw your consent, documentation of the consent will be retained in accordance with Hansen Toft’s documentation obligations under marketing regulations, cf. Article 6(1)(c) of the General Data Protection Regulation.
Categories of personal data
The information we collect when you sign up for the job agent includes your name and email address.
Recipients of personal data
When you sign up for the job agent, we do not share your personal data with third parties, but we process it through our data processors.
Storage of personal data
The information is deleted or anonymized 24 months after you withdraw your consent or after the most recently received job agent email. The information is also deleted after the same retention period if the consent has not been used for 12 months.
Automated decision-making and profiling
The collected information is not used for profiling or to make automated decisions.
7. Marketing
Purpose
The purpose of processing personal data is to deliver targeted marketing, including sending relevant offers, newsletters, and information about products and services that may be of interest to the recipient.
Legal basis for processing
The
processing of personal data for marketing purposes is based on your consent
when we engage in direct marketing or targeted marketing on other websites,
pursuant to Article 6(1)(a) of the General Data Protection Regulation (GDPR).
Consent is given in connection with the cookie banner, newsletter subscription,
or other consent text.
If we market similar products through direct marketing or use your data to
improve our marketing efforts based on, for example, previous purchases, the
processing is based on our legitimate interest in marketing our products and
services, pursuant to Article 6(1)(f).
Categories of personal data
The personal data we process may include contact information such as name, email, and phone number, behavioural patterns, preferences, and interests relevant to our marketing initiatives.
Recipients of personal data
Personal data may be shared with third-party providers who assist with marketing campaigns and analytics tools, including email platforms, social media platforms, and other digital advertising partners.
Storage of personal data
Personal data is stored for as long as necessary to fulfil the marketing purposes for which it was collected, or until consent for processing is withdrawn. Upon withdrawal of consent, the data will be deleted without undue delay, unless it is retained as documentation of marketing consent. In such cases, the data will be deleted 24 months after the last use.
Automated decision-making and profiling
We use profiling to deliver more relevant and targeted marketing. This involves analysing your preferences and behaviour to help us tailor our offers. No automated decisions are made that have legal effects or similarly significant impact on you.
8. Collection of information on LinkedIn
Purpose
When you visit our LinkedIn page, we collect information about your interaction with our profile to understand how our content engages users and to respond to inquiries. Additionally, we may run social media campaigns to market our products and services.
We also collect public information on LinkedIn to identify and approach candidates in connection with various job opportunities.
Legal basis for processing
We process the collected personal data based on the company’s legitimate interest in responding to your inquiry, cf. Article 6(1)(f) of the General Data Protection Regulation (GDPR). All marketing and the collection of your personal data for that purpose are based on your consent, cf. Article 6(1)(a) of the GDPR.
The processing of information collected for the purpose of contacting candidates is based on the company’s legitimate interest in finding suitable candidates through publicly available information, which is also in the interest of the data subject, cf. Article 6(1)(f) of the GDPR.
Categories of personal data
The collected information includes name and corresponding personal data related to the data subject’s user profile on the relevant platform.
Responsibility allocation
When we process your personal data in connection with our social media pages, your personal data is initially collected by the social media platforms. In this regard, we assume joint controllership.
When we process your personal data in connection with campaigns and responses to your inquiries, we function as the data controller.
Recipients of personal data
We share information with social media platforms, which function as data controllers in certain scenarios and have their own personal data processing policies. We also disclose the data to our data processors who assist with analysis and marketing activities.
Storage of personal data
P Personal data collected through social media is stored for as long as necessary to fulfil the purpose of the processing. The information may be stored for a longer period in anonymized form for statistical and analytical purposes.
9. Internal Recruitment
Purpose
If you are applying for a job internally at Hansen Toft, we process your personal data as part of the recruitment process in order to assess applicants for available positions within our company and to be able to contact you during the recruitment process.
Legal basis for processing
The processing of your personal data is based on your application and Hansen Toft’s legitimate interest in assessing and selecting candidates, which is also in the applicant’s interest, in accordance with Article 6(1)(f) of the General Data Protection Regulation (GDPR). If you consent to the storage of your personal data for more than 6 months, the processing will be based on Article 6(1)(a) of the GDPR.
Categories of personal data
The information we collect includes your contact details, such as name, email address, and phone number. We also collect your CV and any attached documents, for example, your application, educational certificates, transcripts, certifications, and, depending on the position, your driver’s license.
In some cases, you may be asked to complete a personality or intelligence test, and the results of these will also be processed.
Finally, we collect information from your references in order to assess you as a candidate. This is done only with your explicit consent.
Recipients of personal data
Your personal data will not be shared with third parties without your consent, but may be disclosed to our data processors who assist in the recruitment process, such as recruitment or testing platforms and HR systems.
Storage of personal data
Your personal data is stored for 2 years after consent is given. You may update your consent and maintain your profile with us at any time. Each time you apply for a new job, the consent date is updated, and we store your data for 2 years from that new date. If you choose to delete your profile, we will delete your data immediately.
If you are hired for a position with us, your information will be retained until you leave the company.
Automated decision-making and profiling
The collected information is not used for profiling or for making automated decisions.
Transfer to recipients in third countries
In some cases, it may be necessary to transfer your personal data to recipients in countries outside the EU, including countries that do not have equivalent data protection laws. These transfers will only take place when necessary for the purposes outlined in this privacy statement or as required by applicable law. Transfers occur solely in connection with the use of our data processors in order to provide our services and products.
We take appropriate measures to ensure that your personal data is adequately protected during such transfers. Your data will primarily be processed in countries where the European Commission has determined that an adequate level of protection is in place. If your data is transferred to third countries without such an adequacy decision, standard contractual clauses approved by the European Commission are used. You can contact us at mail@hansentoft.dk for a copy of these clauses.
Consent
If you wish to withdraw your consent or object to our processing of your personal data, please contact us at mail@hansentoft.dk.
Please note that withdrawing your consent does not affect the legality of any processing carried out prior to the withdrawal. It also does not affect the processing of your personal data based on other lawful grounds, such as compliance with legal obligations or the pursuit of legitimate interests.
Your rights
Under the General Data Protection Regulation (GDPR), you have a number of rights in relation to our processing of your personal data:
- Right of access: You have the right to access the information we process about you, as well as additional information.
- Right to rectification: You have the right to have incorrect or incomplete information about yourself corrected.
- Right to erasure: In certain exceptional cases, you have the right to have your personal data deleted before our general deletion schedule.
- Right to restriction of processing: In certain situations, you have the right to request that the processing of your personal data be restricted. If processing is restricted, we may only process the information – apart from storage – with your consent, or for the establishment, exercise, or defence of legal claims, or to protect the rights of another person or important public interests.
- Right to object: In certain cases, you have the right to object to our otherwise lawful processing of your personal data.
Finally, we are obliged to inform any recipients to whom your personal data has been disclosed about any rectification or deletion or restriction of processing, unless this proves impossible or involves disproportionate effort. We will inform you of the recipients if you request it.
If you wish to exercise any of these rights, please contact us. See the contact details above.
Complaints
If you wish to file a complaint regarding our processing of personal data, please send an email with the details of your complaint to the email address provided in this privacy policy. We will handle your complaint and get back to you.
You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) regarding Hansen Toft’s processing of your personal data. For more information on how to submit a complaint to the Danish Data Protection Agency, please visit their website: www.datatilsynet.dk.