Skip to Content

Wiki source code of Privacy Notice

Last modified by Anders Dohn on 2024/10/26 16:09
Show last authors
1 At Copenhagen Optimization ApS (“Copenhagen Optimization”, “we”, “us”), we believe in respecting your privacy. This privacy policy lays out our specific commitments and your rights when we process your personal data.
2
3
4 == Data controller ==
5
6 The data controller for the processing of your personal data is:
7
8 Copenhagen Optimization ApS
9
10 Esplanaden 8A, 2.
11
12 Company reg. no.: 36414103
13
14 DK-1263 Copenhagen
15
16 [[contact@copopt.com>>mailto:contact@copopt.com]]
17
18
19 == Processing activities ==
20
21 We will only process your personal information fairly and securely and when necessary for legitimate purposes. In the following we describe our processing of your personal data.
22
23
24 === Customer and supplier relationships ===
25
26 When your employer concludes a contract with us, we process your personal data for us to document the conclusion of the contract, and to be able to fulfil the contract, including by having a point of contact with our customers, suppliers and partners and carry out billing.
27
28 In relation to the contract, we will process your name, phone number, e-mail address, place of employment and your position.
29
30 We collect your personal data directly from you or from your employer.
31
32 The legal basis for this processing is Article 6(1)(f) of the GDPR, as the processing is necessary for us to full the contract that we have concluded with your employer.
33
34 We process your personal data as long as it is necessary for the purpose for which it was collected. Usually, we will delete your personal data 5 years from the end of the fiscal year, after which the cooperation with your employer concludes.
35
36
37 === Data regarding use of our services ===
38
39 When you use our services as part of your employment, we process your personal data for the purpose of developing and improving our services as well as to monitor the security of our services.
40
41 The personal data we collect for this purpose relates to metadata, including access credentials, how you navigate our services, unique user ID, URL, and device operative system.
42
43 We collect the personal data from the device you use to access our services.
44
45 The legal basis for this processing is Article 6(1)(f) of the GDPR, as the processing is necessary for our legitimate interest in developing and improving our services and maintaining the security of our services.
46
47 We process your personal data as long as it is necessary for the purpose for which it was collected. Usually, we will delete your personal data 3 years after they were collected.
48
49
50 === General communication and meetings ===
51
52 When you communicate with us via e-mail or contact form on our website or you book a meeting with us, we will process your personal data to respond to any queries from you.
53
54 In relation to our communications with you, we will process your name, phone number, e-mail address, place of employment, job position, and the content of our communications with you.
55
56 We collect your personal data directly from you or from your employer.
57
58 The legal basis for this processing is Article 6(1)(f) of the GDPR, as the processing is necessary for our legitimate interest in responding to your queries.
59
60 We process your personal data as long as it is necessary for the purpose for which it was collected. Usually, we will delete your personal data 5 years after our last communication with you.
61
62
63 === Newsletter ===
64
65 If you have signed up for our newsletter, we process your personal data for the purpose of providing you the newsletter.
66
67 In relation to our newsletter, we will process your name, e-mail address, place of work and job position.
68
69 We collect your personal data directly from you.
70
71 The legal basis for this processing is Article 6(1)(f) of the GDPR, as the processing is necessary for our legitimate interest in providing the newsletter that you have requested.
72
73 We process your personal data as long as it is necessary for the purpose for which it was collected. Usually, we will delete your personal data up to 2 years after you withdraw your consent to receive our newsletter.
74
75
76 === Webinars, events, etc. ===
77
78 When you participate in a webinar, event or the like that we facilitate, we process your personal data to register your participating and facilitating the webinar, event or the like.
79
80 We will process personal data about your name, email address, phone number, workplace and job position. If we facilitate events where food is served, we may also process personal data regarding diet restrictions and allergies.
81
82 We collect your personal data directly from you or from your employer.
83
84 The legal basis for this processing is Article 6(1)(f) of the GDPR, as the processing is necessary for our legitimate interest in facilitating the webinar or event.
85
86 The legal basis for processing personal data regarding diet restrictions and allergies is your consent pursuant to Article 6(1)(a) and 9(2)(a) of the GDPR.
87
88 We process your personal data as long as it is necessary for the purpose for which it was collected. Usually, we will delete your personal data 5 years from the end of the fiscal year, after which the webinar or event is concluded. Personal data regarding diet restrictions and allergies will be deleted within 1 month after the event is concluded.
89
90
91 === Cookies ===
92
93 When you visit our website, we may collect your personal data via cookies and similar technologies to carry out statistics regarding the use of our website for the purpose of improving and developing our website. Further, we may track your behaviour and interests for the purpose of providing you with advertising that is relevant to your interests.
94
95 If you consent to our use of cookies, we will process personal data regarding how you navigate and interact with our website, your IP address, URL, device operative system, preferences, time zone, geo location, browser type and browser version.
96
97 We collect the personal data from the device you use to access our website.
98
99 The legal basis for our processing of your personal data is your consent pursuant to Article 6(1)(a) of the GDPR. You may withdraw your consent at any time by clicking the small icon at the bottom left corner of the website.
100
101 We process your personal data as long as it is necessary for the purpose for which it was collected. Usually, we will delete your personal data up to 24 months from your latest visit to our website. You can see the specific storage period for each cookie or similar technology by clicking the small icon at the bottom left corner of the website.
102
103
104 == Recipients ==
105
106 Your personal data may be handed over to our data processors, including the providers of our communications platform, CRM system, marketing platform providers, customer support system providers, etc. These suppliers may have access to your personal data when providing services to us.
107
108 We may also disclose your personal data to public authorities where we are obligated to do so.
109
110
111 == Transfers to third countries ==
112
113 We will not transfer your personal data to third countries outside the EU/EEA, unless we have established a legal basis for such transfer pursuant to Chapter V of the GDPR.
114
115 Some of our suppliers are established in third countries, including the United States, therefore their processing of your personal data will entail a transfer of personal data to third countries.
116
117 Most of our suppliers, including Google, Hubspot, Slack Technologies, Zendesk, and Dropbox, have certified under the EU-U.S. Data Privacy Framework which have been adopted by the EU Commission pursuant to Article 45 of the GDPR, as the EU Commission have deemed that this framework ensures an adequate level of data protection.
118
119 Transfers to other suppliers or sub-processors of our suppliers in Andorra, Argentina, Canada, the Faroe Islands, Guernsey, Israel, Isle of Man, Japan, New Zealand, Switzerland, South Korea and Uruguay will be based on an adequacy decision pursuant to Article 45(1) of the GDPR, as the EU Commission has deemed that the country or sector provides an adequate level of data protection.
120
121 Where the transfer to a supplier or sub-processor of our suppliers is not subject to an adequacy decision pursuant to Article 45 of the GDPR, we will conclude standard contractual clauses with the supplier pursuant to Article 46(2)(c) of the GDPR.
122
123 You may obtain a copy of the standard contractual clauses by contacting us via [[contact@copopt.com>>mailto:contact@copopt.com]].
124
125
126 == Your rights ==
127
128 === The right to access data ===
129
130 You are at any time entitled to request us to inform you which information we have registered about you, what the purpose of these data is, which categories of personal data and recipients of data may be registered, as well as information on the origin of the registered data.
131
132 You have the right to have a copy of the personal data registered about you provided, as you may be required to provide proof of your identity.
133
134
135 === The right to rectification ===
136
137 You have the right to have incorrect data about yourself rectified by us. If you become aware that data registered about you is incorrect, we encourage you to contact us in writing, in order to correct the data.
138
139
140 === The right to deletion ===
141
142 Under certain conditions, you are entitled to have all, or part of, your personal data deleted by us, e.g. by retraction of your consent, and we do not have any other legal basis for continuation of the processing of your data. In the event that further processing of your data is necessary, e.g. in order for us to meet our legal commitments, or in the interest of establishing, maintaining or defending legal demands, we are not required to delete your personal data.
143
144
145 === The right to restriction of processing ===
146
147 In certain cases, you are entitled restrict our processing of your personal data. We are, however, still entitled to store your personal data. We may under certain circumstances, despite the processing being restricted, still process your personal data.
148
149
150 === The right to object ===
151
152 You are, due to reasons pertaining your personal situation, entitled to object to the processing of your personal data, which we perform on the basis of our legitimate interest pursuant to Article 6(1)(f) of the GDPR.
153
154 Also, you may **at any time** reject to our processing of your personal data for direct marketing purposes.
155
156
157 === Right to withdraw consent ===
158
159 You may at any time withdraw your consent. You may withdraw your consent by contacting us at [[contact@copopt.com>>mailto:contact@copopt.com]]. We note that the withdrawal of your consent will not influence the legality of our processing prior to your withdrawal of consent.
160
161
162 === The right to file a complaint ===
163
164 You are at any time entitled to file a complaint with the Danish Data Authority, Carl Jacobsens Vej 35, 2500 Valby concerning the processing of your personal data by us. Complaints may be filed by e-mail to dt@datatilsynet.dk or by telephone +45 33 19 32 00.
165
166
167 == Updates to privacy notice ==
168
169 We reserve the right to update this privacy notice from time to time.