Nordic RCC A/S, Ørestads Boulevard 114, DK-2300 Copenhagen, CVR. no.: 42882585 ("Nordic RCC") is the data controller for the processing of your personal data. Below, Nordic RCC has provided an overview of the processing activities in which personal data are processed, including among others the purpose thereof and the legal basis.
2. Category of personal data, purpose and legal basis
2.1 Website visitors
When you visit Nordic RCC's website: https://nordic-rcc.net/ ("Website"), Nordic RCC will process personal data about you, for instance, cookies and your IP-address.
The legal basis for the processing of your personal data in that regard is your consent, which you will be asked to give when you visit the website, cf. Art. 6(1)(a) in the GDPR.
In certain cases, the legal basis for the processing of your personal data is Nordic RCC's legitimate interests and that it is Nordic RCC's assessment that our legitimate interests override your interests or fundamental rights and freedoms, cf. Art. 6(1)(f) in the GDPR. The legitimate interests pursued are to provide you with a website that works optimally, a good website experience and marketing activities.
2.2 Social media
Nordic RCC processes your IP-address and the information you have made available via the settings of LinkedIn, your reactions to Nordic RCC's posts and sharing of posts as well as any comments to Nordic RCC's posts. The purpose of the processing is image branding and marketing of Nordic RCC.
The legal basis for the processing of your personal data is Nordic RCC's legitimate interests and that it is Nordic RCC's assessment that our legitimate interests override your interests or fundamental rights and freedoms, cf. Art. 6(1)(f) in the GDPR. The legitimate interests pursued are image branding, marketing and business development.
When you visit our social media sites on, e.g., LinkedIn or our Website where social media plugins have been installed, our social media service providers collect and process your personal data using cookies, subject to your consent to the service provider, as applicable. Such collection and processing take place even if you have no account on the social media.
2.3 Signing up for events
Nordic RCC processes your name, contact details, such as address and email address, employer company and your title. Nordic RCC will record and use the information for event administration purposes (e.g. to confirm registration, prepare name tags and attendance certificate and, where relevant, to forward event materials).
The legal basis for the processing of personal data is Nordic RCC's legitimate interests and that it is Nordic RCC's assessment that our legitimate interests override your interests or fundamental rights and freedoms, cf. Art. 6(1)(f) in the GDPR. The legitimate interests pursued are to administer events and send out evaluation forms.
2.4 Contact person at a vendor or another business partner
As a contact person at a vendor or another business partner, Nordic RCC processes your personal data when you communicate with Nordic RCC, e.g. via emails in connection with Nordic RCC's existing contractual relation with the company you are employed with or in connection with the conclusion or termination of a contract. Nordic RCC processes ordinary personal data about you, including your name, email address, telephone number, address, your position with the company, etc.
The processing of your personal data is necessary for Nordic RCC to fulfil Nordic RCC's contractual obligations towards your employer. The legal basis for such processing of your personal data is that the processing is necessary for the purposes of legitimate interests pursued by Nordic RCC and that it is Nordic RCC's assessment that our legitimate interests override your interests or fundamental rights and freedoms, cf. Art. 6(1)(f) in the GDPR. Nordic RCC's legitimate interests are fulfilment of our contractual obligations, maintaining and enhancing customer relationships, invoicing for the services your company provides to Nordic RCC and/or vice versa, communicating with you if you have any questions related to our services or vice versa, and for documentation purposes in the event Nordic RCC agree on matters relating to our services in writing via email.
In some cases, processing of personal data is necessary in order to comply with a legal obligation to which Nordic RCC is subject, for instance in relation to the obligation on the preservation of accounting records pursuant to the Danish Bookkeeping Act. In such case, the legal basis for the processing is Art. 6(1)(c) in the GDPR.
2.5 Subscription to Nordic RCC’s newsletter
Nordic RCC processes your name and email address when you sign up for Nordic RCC’s newsletter. Nordic RCC will record and use the information for sending out Nordic RCC’s newsletter to you.
The legal basis for the processing of personal data is Nordic RCC's legitimate interests and that it is Nordic RCC's assessment that our legitimate interests override your interests or fundamental rights and freedoms, cf. Art. 6(1)(f) in the GDPR. The legitimate interests pursued are to send out and manage Nordic RCC’s newsletter.
3. Recipients of your personal data
Where relevant, Nordic RCC may disclose or transfer your personal data to vendors, business partners or other collaborators for business purposes.
Certain recipients process personal data on behalf of Nordic RCC and may only process your personal data in accordance with documented instructions given by Nordic RCC and further terms and conditions stated in a data processor agreement entered into with Nordic RCC. These data processors are not permitted to process your personal data for their own purposes.
4. Transfer of your personal data to a third country (outside of EU/EEA)
In certain cases, Nordic RCC will transfer your personal data to third countries outside of EU/EEA, for instance. If your personal data are transferred to such third countries, Nordic RCC will ensure that such transfer will be carried out in accordance with applicable data protection legislation so that an adequate level of protection is ensured. If the personal data are transferred to recipients established in so-called "unsafe" third countries that are not approved by the EU-Commission, Nordic RCC ensure an adequate level of protection for instance by e.g. entering into the EU-Commission's standard contractual clauses and by implementing additional safeguards.
If in exceptional cases, none of the above legal bases apply, Nordic RCC will obtain your explicit and prior consent to the transfer of your personal data to the specific third country.
5. Storage of your personal data
Nordic RCC will only store your personal data as long as it is deemed necessary to fulfil the purposes for the processing of your personal data.
If you are a contact person of our vendors or business partners, etc., Nordic RCC will store personal data about you until termination of the contractual relationship (if any), as long as Nordic RCC communicates with you because you are the Nordic RCC's point of contact, or until it is no longer necessary for the establishment, exercise or defence of a legal claim.
Nordic RCC will store your personal data to the extent it is necessary for bookkeeping purposes such as personal data related to invoicing. Such personal data will be stored for a period of 5 years from the end of the financial year to which the accounting records relate. The purpose is to comply with the legal obligation pursuant to the Danish Bookkeeping Act.
The personal data will be deleted when you unsubscribe from Nordic RCC’s newsletter service. This may be done at any time by sending an email to email@example.com.
6. Your rights as a data subject
Nordic RCC has taken all necessary and adequate steps in order to protect your personal data and ensure your rights as a data subject.
You have a number of rights as a data subject. Please note that certain limitations may apply to your ability to exercise these rights, for example, when your right to obtain the information is found to be overwritten by essential considerations of private interests. If you have any questions or wish to exercise any of your rights as a data subject, please contact Nordic RCC using the contact details found under Section 1.
According to the GDPR, you have the following rights:
6.1 Right of access
You have the right to request access to, including the disclosure of a copy of the personal data that Nordic RCC process about you as well as the right to receive information on:
- the purposes of the processing;
- the categories of personal data concerned;
- the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries and in that connections the necessary measures carried out prior to the transfer;
- the envisaged storage period or the criteria used to determine that period;
- the existence of the right to request rectification, erasure, restriction or objection against processing of your personal data, including especially processing of personal data in connection with direct marketing purposes;
- the right to lodge a complaint with the Danish Data Protection Agency;
- where your personal data are obtained from if the personal data are not collected from you; and
- the existence of automated decision-making, including profiling, and as a minimum meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.
6.2 Right to rectification
You have the right to have inaccurate personal data about yourself rectified as well as the right to request completion of incomplete personal data concerning you.
6.3 Right to erasure ("right to be forgotten")
Under certain circumstances you have the right to obtain from Nordic RCC the erasure of personal data concerning your, for instance if the processing is based on your explicit consent and you withdraw this consent.
6.4Right to restriction of processing
You have the right to restrict Nordic RCC's processing of your personal data, for instance, in the event you dispute the accuracy of the personal data.
6.5 Right to data portability
When our processing of your personal data is carried out automatically and is based on your consent or a contract with you, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format and the right to transmit those personal data to another data controller, if this is technically feasible.
6.6 Right to object
You have the right to object, on grounds relating to your particular situation, at any time to our processing of your personal data which is based on point (e) or (f) of Art. 6(1) in the GDPR. This applies at any time where personal data are processed for direct marketing purposes.
6.7 Right to not be subject to automated individual decision-making
You have the right not to be subject to a decision based solely on automatic processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
6.8 Right to withdraw a consent
If you have given us your consent to the processing of your personal data, you have the right to withdraw such consent at any time. However, the withdrawal of your consent will not affect the lawfulness of processing of your personal data based on consent before its withdrawal.
If you wish to exercise any of the above-mentioned rights, you are welcome to contact Nordic RCC. You can read more about your data subject rights on the Danish Data Protection Agency's website here.
7. Questions and complaints
You can also file a complaint to the Danish Data Protection Agency, which is an independent public authority that is, inter alia, responsible for monitoring and enforcing the application of the GDPR. The Danish Data Protection Agency's contact information is available on its website: www.datatilsynet.dk.
9 June 2023