The name and contact details of the data controller
SIMONSEN A/S
Business reg. no.: 12646372
Møgelvangs Plads 7
DK-7900 Nykøbing Mors
Denmark
+45 96 69 13 00
+45 96 69 13 01
The purposes of the processing
The purpose of the collection is to ensure you can use the simonsen app (“system”) as part of executing your daily job assignments.
The purpose also encompasses improving the system by analysing your use of the functions in the system, including the QR scanner, news service and game.
Finally, the purpose also encompasses support services by us, if relevant.
The lawful basis for the processing
The processing activities under the stated purposes are carried out based on your responsibility to fulfil the employment contract whether concluded in writing or not.
The basis for our collection and processing are:
- Article 6(1b) of the General Data Protection Regulation
- Section 12 of the Danish Data Protection Act (users in Denmark only)
The categories of personal data collected
Personal data collected by us:
- Profile name, work e-mail
- Use of the system (QR scanner, news service and game)
All collection of personal data will nevertheless only take place if it is necessary for the purpose of the collection.
The recipients or categories of recipients of the personal data
Recipients of personal data might include public authorities, but only if we are obliged to share the personal data by law.
We disclose some information, including personal data, to external consultants to the extent it is relevant for their tasks.
Finally, we disclose personal data to our it service providers (data processors). The it service providers may change from time to time.
The retention periods for the personal data
In general, the collected personal data will be deleted, when it is no longer necessary for the purposes of the collection, including, but not limited to your employment.
When the profile of a system user is closed, all personal data that is not stored due to legal obligations or special circumstances, will be erased, or anonymized after a period of 6 month.
The source of the personal data
The personal data have been obtained during the onboarding process in the system and during the use of the system.
The details of whether individuals are under a statutory or contractual obligation to provide the personal data
If you do not provide us with the personal data, we need to fulfil the purposes, we are unable to provide a profile in the system. This might affect your ability to perform your job tasks.
The details of the existence of automated decision-making, including profiling
We do not base any automated decision-making, including profiling, referred to in Article 22(1) and (4) of the General Data Protection Regulation on personal data.
The rights available to individuals in respect of the processing
Under the GDPR, you have the following rights:
- Your right of access – You have the right to ask us for copies of your personal information.
- Your right to rectification – You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
- Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
- Your right to restriction of processing – You have the right to ask us to restrict the processing of your information in certain circumstances.
- Your right to object to processing – You have the right to object to the processing of your personal data in certain circumstances.
- Your right to data portability – You have the right to ask that we transfer the information you gave us to another organization, or to you, in certain circumstances.
Please be aware, that the rights are limited in scope and application. Moreover, the rights are applied on a case-by-case basis to each data subject request.
You are not required to pay any charge for exercising your rights.
If you make a request, we must provide information on action taken without undue delay and in any event within one month of receipt of the request. That period may be extended by two further months where necessary, taking into account the complexity and number of the requests. In that case, we will inform you of any such extension within one month of receipt of the request, together with the reasons for the delay.
Please contact us if you wish to make a request. When you make the request, please specify your request as best you can. This will help us process your request more quickly.
The right to lodge a complaint with a supervisory authority
You can lodge a complaint against the processing with your local Supervisory Authority.
https://edpb.europa.eu/about-edpb/board/members_en
If you are located outside the EU we recommend you lodge a complaint with the Danish Data Protection Agency (Datatilsynet).
Before you take action, we hope you will contact us, the data controller, directly, to give us a chance to solve the matter.