Privacy Policy for Fabrika A/S
1. Data Controller
Fabrika A/S
Normansvej 1
8920 Randers NV
CVR: 34903581
Tlf.: +45 88 82 50 00
Mail: df@fabrika.dk
2. Processing of personal data and purposes
Fabrika processes your personal information when you contact us via email, letter, website, social media, and in connection with the purchase or fulfillment of contracts and agreements.
The personal information you submit to us, digitally or in paper form, is processed by Fabrika’ staff according to purpose and relevance. Your personal information is thus processed and stored confidentially and securely, and only the relevant employees have access to your personal information and any files.
The person information that vwe process is of a non-sensitive, ordinary matter (e.g. name. address)
2.1 Applications / CV
When you submit your application or CV to us, we will process the personal information we have received from you.
The purpose of processing your personal data is to be able to assess your qualifications in relation to the job.
If your application does not lead to employment with us, we will delete the personal information about you no later than after six months.
The information may be disclosed to external recipients, including our recruitment agency/headhunter, our data processors and our auditors.
The legal basis (the authority) for our processing of your personal data is article 6.1 (f) of the General Data Protection Regulation Regulation as we pursue our legitimate interest in reviewing your application and CV. Further, in case we proceed with the application process, and we need to prepare an employment contract, our legal basis is article 6.1 (b) of the General Data Protection Regulation.
2.2 Administrating customer and supplier contracts
The purpose of processing your personal data is to fulfill the obligations in our contractual relationship with you/your company and to improve our services.
The data may be disclosed to external recipients, including business partners who need your personal data to perform certain transactions, e.g., freight, repairs, installations.
The legal basis (the authority) for our processing of your personal data is article 6.1 (f) of the General Data Protection Regulation.
2.3 Accounting
We process personal informations of employees at our customers and suppliers.
The purpose is managing relations with our customers and suppliers and answering questions related to our financial balances eg. invoicing.
The legal basis (the authority) for our processing of your personal data is article 6.1 (f) of the General Data Protection Regulation as we pursue the above-mentioned legitimate interests.
Further, we process personal data as part of our statutory bookkeeping (as contact information is part of invoices, etc.). The legal basis for such processing is article 6.1 (c) of the General Data Protection Regulation, c.f. the Danish Bookkeeping Act.
2.4 General communication
We process general personal information such as names, addresses, email addresses, phonenumbers with the purpose of communicate via mail, phone, website etc..
The legal basis (the authority) for our processing of your personal data is article 6.1 (f) of the General Data Protection Regulation as we pursue the above-mentioned legitimate interests.
2.5 Marketing
Newsletter:
We process names and email addresses for recipients of our newsletter – for direct marketing purposes.
Facebook Company Page:
As operator of the Facebook Company Page for Fabrika A/S, Fabrika A/S and the operator of the social network Facebook are Joint Controllers.
Fabrika A/S has entered into agreements with Facebook that define the terms for use of the Facebook Fan Page, among other things. These terms are mostly based on the Facebook Terms of Service: https://www.facebook.com/terms.php and the joint controller addendum: https://www.facebook.com/legal/controller_addendum
Visit the Facebook Privacy Policy https://www.facebook.com/policy.php for more information about how Facebook manages Personal data or contact Facebook online, or by mail: Facebook, Inc. ATTN, Privacy Operations, 1601 Willow Road, Menlo Park, CA 94025, United States.
LinkedIn Company Page:
As operator of the LinkedIn Company Page for Fabrika A/S, Fabrika A/S and the operator of the social network LinkedIn are Joint Controllers.
Fabrika A/S has entered into agreements with LinkedIn that define the terms for use of the LinkedIn Company Page, among other things. These terms are mostly based on the LinkedIn joint controller addendum and LinkedIn Privacy Policy.
Website:
In connection with your visit on Fabrika’ websites and pages on social media, your and other users’ traffic may be registered via “cookies”. See point 2.6 for information concerning cookies.
The legal basis (the authority) for our processing of your personal data is article 6.1 (a) of the General Data Protection Regulation. (Newsletter and Cookies)
The legal basis (the authority) for our processing of your personal data is article 6.1 (f) of the General Data Protection Regulation (Social Media Company Pages) as we pursue our legitimate interest in administrating Fabrika’s Company pages and to market our products through social media.
2.6 Cookies
In connection with your visit on Fabrika’ websites and pages on social media, your and other users’ traffic may be registered via “cookies”.
The purpose of processing your personal data is to measure traffic and keep statistics on the most visited pages.
When you send information via forms from our website, this happens via a secure connection (SSL encryption).
Read more about our Cookie Policy and/or change your settings/consent here.
The legal basis (the authority) for our processing of your personal data is article 6.1 (a) of the General Data Protection Regulation.
3. Consent
In most cases, our personal data processing is based on legal requirements other than your consent.
To the extent that we may have obtained consent from you for specific processing of your personal data, it applies that you have the right to withdraw your consent at any time. You can do this by contacting us at the contact details listed above in point 1.
If you choose to withdraw your consent, it does not affect the legality of our processing of your personal data based on your previously given consent and up to the time of the withdrawal. Therefore, if you withdraw your consent, it will only take effect from this time forward.
4. Recipients – Disclosure to third parties
With regard to customer contact information, your personal data is disclosed to external recipients. This includes business partners who need your personal data to perform certain transactions, e.g., freight (such as PostNord, GLS, UPS and Bring) and external accountants.
As part recruitment, please see above under section 2.1.
Further, we disclose your personal data to as part of the use of cookies (please refer to our cookie policy).
When we are required by law, we disclose your personal data to the relevant authorities.
Use of dataprocessors:
Fabrika A/S, in some cases, use data processors for processing of personal information. Eg. Hosting, backup and support.
5. Transfers to third countries
In certain cases, we transfer personal data to recipients outside the EU and EEA. The recipients are our marketing partners (see social media mentioned under section 2.5 and our cookie policy.).
The third countries are: USA.
The transfer is based on EU standard contractual clauses approved by the European Commission.
6. Deletion of personal data
For the purpose of application and CV review (recruitment), see Section 2.1 above.
For the purpose of administrating customer and supplier contracts, we store personal data up to 3 years after the termination of the contractual relationship (based on the general statute of limitations that apply in Denmark).
With regard to accounting obligations, personal data processed in relation to invoicing etc. is stored for 5 years in accordance with the Danish bookkeeping legislation.
For the purpose of general communication with you (e.g. via the website enquiry form), we generally store such personal data for up to one year after our last communication with you.
In relation to marketing activities, we generally store such personal data for up to one year after our last communication with you. In relation to social media, please find the relevant deletion periods here: Facebook and LinkedIn.
With regard to cookies, please refer to our cookie policy.
7. Your rights
Under the General Data Protection Regulation, you have a number of rights in relation to our processing of your personal data. If you want to exercise your rights, you must contact us.
- You are entitled to access and rectification, which means that from time to time you can request access and have rectified/updated your personal data.
- You are entitled to erasure. The information is deleted from us no later than six months after a negative response, unless any property-law claims have not been time-barred.
- You are entitled to limitation of processing of your personal data, i.e. you may request any limitation of who can or may process your personal data.
- You have the right to object, i.e. in certain cases you have a right to object to our otherwise lawful processing of your personal data.
You can read more about your rights in the Danish Data Protection Agency’s guidelines on the rights of data subjects, which you will find at www.datatilsynet.dk.
Complaint to the Danish Data Protection Agency
If you want to complain, we will of course be pleased to be informed and do what we can to make you satisfied, but you are always entitled to file a complaint directly to the Danish Data Protection Agency, Carl Jacobsens Vej 35, DK-2500 Valby, tel. +45 3319 3200 or by email da@datatilsynet.dk, see more at www.datatilsynet.dk.