Data protection

    PrivacyPolicy

    NSH NORDIC, CVR-nr.: 25472861 is the data controller with regard to any personal information about you that we process. We make sure that your information is processed in compliance with the law.
    We take data protection seriously. To inform you of how we process your personal information, we have adopted this privacy policy.

    Contact information

    If you wish to get in touch with us about our processing of your personalinformation, you can get hold of us at:
    NSH NORDIC A/S
    Virkefeltet 4,
    8740 Brædstrup
    Phone +45 7575 4270
    Mail: post@nshnordic.com

    Processing of Personal Information

    Personal information are all types of information that relate to an identifiable person. This privacy policy describes how NSH NORDIC processes your information. We will only process information about you when necessary and for a specific purpose. We will always process your information confidentially.

    Data protection

    We have implemented suitabletechnical and organisational measures to preventyour data from being accidentally or unlawfully deleted, publicised, lost, corrupted, leaked, or misused. We ensure that processing only takes place in adherence with all the principles of data protection.

    We keep data up-to-date

    As our services depend on our information aboutyou being accurate,we ask that you keep us informedabout rel-evant changes to your information. You can always make use of the contact information above to let us know about any changes. We will update your information accordingly. If we find out that the information about you is incorrect, we will update it and let you know.
    Please see below, the legal basis upon which we process your information, for what purpose and for how long we retain it.

    Website Visitors

    When you visit our website,we process the following personalinformation about you:
    • IP-address, Geo-location, cookies
    We processpersonal data aboutwebsite visitors for the purposeof:
    • Optimising our websiteto user preferences
    • Optimising the runningof our website
    We process the information on the followinglegal basis:
      • Consent has been given throughour consent form and/or cookiebanner, cf. GDPR art. 6(1)(a)
      • The legitimate interest of the enterprise, i.e., optimal administration of the website, cf. GDPR art. 6(1)(f).
    Personal information on website visitors will be deleted latest 2 years after.

    Contact & Service

    When you contact us by email, phone, or by ordinary post, we processthe following information about you:
    • Your contact information as well as the contentsof your message.
    We processthis information for the purposeof providing good service and for handling your inquiry. We process the information on the following legal bases:
    • For the performance of providing serviceunder a contract(cf. GDPR art. 6(1)(b))
    • Our legitimate interestin answering your questions and having a dialogue regardingwhat you need from us (cf. GDPR art. 6(1)(f))

    We retain the information no longer than necessary for our purposesstated above. This is assessed individually for each inquiry based on it content and nature. We will continue to process your information for as long as our corre-spondence continues. Once correspondence is closed and requires no further action,your information will be deleted.

    Provision of goods & services

    When we contractto provide our goods/services to you, it is necessary for us to process some personal information about you. This is restricted to ordinary typesof information, e.g.,name and email for the purpose of delivering on our contract with you (cf. GDPR art. 6(1)(b))
    Information collected for this purpose will be deleted once it is no longer necessary for delivering on the contract, unless there are specific reasons to store the information longer, e.g., a warranty period or the handling of com-plaints.
    Information containedin bookkeeping/accounting materials will be retained for 5 years from the end of the accounting year in which the contract was fulfilled/paid. We are legally required to do so.

    Social Media

    When you like and/or follow us on Facebook, Instagram, YouTube and LinkedIn we process the following infor-mation about you:
    • Your name and the contentsof messages you send us.
    The purpose of processing your information is to keep interested followers updated on specialoffers, new services, things to note, etc.
    We process the information on the followinglegal basis:
    • Our interest in marketing as well as in improvement of our page and products(cf. GDPR art. 6(1)(f))

    Recruitment

    If you apply for a positionwith us, we will process the information you supply in your application, CV and any other attached documents. We do not need you to send us your CPR-/national ID-no.
    The purpose of collecting information about you in the recruitment processis to evaluate, whether you are a suitable candidate for a position with us.
    We process your information based on the following legalbases:
    • Our legitimate interestin assessing your qualifications, (cf. GDPR art. 6(1)(f))
    • Processing of your CPR-/national ID-no. if you have included it with your application/CV. We only process CPR-/national ID-nos. in order to defend or exercise a legal claim (cf. Danish Data Protection Act § 11, section 2, no. 4, cf. § 7, section 1 & GDPR art. 9(2)(f))
    • ​
    If you send us specialcategories of personalinformation, we will process them on the following legal basis:
    • a legitimate interest, which is both parties’ interest in assessing future cooperation (cf. GDPR art. 6(1)(f)) and in order to exercise or defend a legal claim (cf. GDPR art. 9(2)(f))
    • ​
    We retain your application, including attachments, for up to 6 months afterthe recruitment processhas ended, after which your information will be deleted. The purpose of the retention beyond the end of the process is to safeguard our interests in case of complaints of discrimination, etc. during the recruitment process.
    We retain unsolicited applications, including attachments, for up to 6 months after which they are deleted. If we wish to retain your application for longer than that, we will request your consent to do so.
    If we find your application relevant for a possible future position,we will retain it only if acquiringyour consent (cf. GDPR art. 6(1)(a)).

    Video surveillance

    We have video surveillance in our facilities. We may end up having recordings of you. Any areas coveredby video surveillance will have signs letting you know about it.
    The purpose of the surveillance is to crime prevention. We process this information on the following legal bases:
    • Protecting our premisesfrom crime (cf. GDPR art. 6(1)(f))
    Footage is retained for 30 days, unless specific events necessitate keeping them for longer.

    Transfer of your information

    We use third parties to store and process information. When we use data processors, we make sure to have data processing agreements in place. Thus, they will only process your information on our behalf and will not use the information for their own purposes.


    We prioritize data processors from within the EU and from thirdcountries approved by the European Commission with regards to an adequate level of protection of personal data, cf. GDPR art. 45.

    When relevant, your information may be disclosed to other data controllers, e.g., banks, public authorities.

    Transfer of information to thirdcountries

    We use data processors in unsafe third countries. When legislation in these third countries does not offer the same protection of personal information as the EU does, we have an increased responsibility to ensure the protection of your information.

    Your personalinformation may be transferred to recipients in the USA based on the EU-U.S.Data Privacy Frame-work or to e.g. USA based onthe EU Commission’s Standard Contractual Clauses (cf. GDPR art. 46(2)(c)). If you want to know more about the transfermechanisms that applyto your information, you can contactus for further information and documentation.

    Your rights

    By contacting us at the contact pointat the top, you may:

    • Gain insight into the personalinformation we have about you
    • rectify any erroneouspersonal information
    • have your personalinformation erased
    • have the processing of your personalinformation restricted
    • receive a copy of your personal information (data portability) for the purposeof moving it to another data controller
    • object to the processing

    When you give us your consentfor processing, it is voluntary. It will have no consequences for you, if you do not consent, only consent to certain elements, or later withdraw your consent.

    With drawal of consent can be done at any time to the contact point at the top of the page.

    When you contact us, requesting to exercise your above mentioned rights, we will respond within one month. If we cannot honour your request, you will receive an explanation as to why.

    In order to exerciseyour rights, or if you have questions about our processing of your information, you can always contact us. Our contact information is at the top.

    If, after having been in touch, you are dissatisfied with how we process your information, you have the right to file a complaint with Datatilsynet