Privacy policy

1. Introduction

Nordic RCC A/S, Ørestads Boulevard 114, DK-2300 Copenhagen, CVR. no.: 42882585 ("Nordic RCC") is the data controller for the processing of your personal data. Below, Nordic RCC has provided an overview of the processing activities in which personal data are processed, including among others the purpose thereof and the legal basis.

If you have any question to this privacy policy (“Privacy Policy”) or you wish to exercise your data subject rights pursuant to Chapter III of the General Data Protection Regulation (“GDPR”) and according to section 6 of this Privacy Policy, please contact Nordic RCC by telephone on on +45 7011 8100 or by email to info@nordic-rcc.net.

2. Category of personal data, purpose and legal basis

2.1 Website visitors

When you visit Nordic RCC's website: https://nordic-rcc.net/ ("Website"), Nordic RCC will process personal data about you, for instance, cookies and your IP-address.

Nordic RCC's Cookie Policy includes further information on Nordic RCC's use of cookies and explains how you can delete or turn them off. The purpose of using cookies is to improve your user experience on Nordic RCC's website, to provide functionality and to customise Nordic RCC's advertising on social media.

The legal basis for the processing of your personal data in that regard is your consent, which you will be asked to give when you visit the website, cf. Art. 6(1)(a) in the GDPR.

In certain cases, the legal basis for the processing of your personal data is Nordic RCC's legitimate interests and that it is Nordic RCC's assessment that our legitimate interests override your interests or fundamental rights and freedoms, cf. Art. 6(1)(f) in the GDPR. The legitimate interests pursued are to provide you with a website that works optimally, a good website experience and marketing activities.

2.2 Social media

Nordic RCC processes your IP-address and the information you have made available via the settings of LinkedIn, your reactions to Nordic RCC's posts and sharing of posts as well as any comments to Nordic RCC's posts. The purpose of the processing is image branding and marketing of Nordic RCC.

The legal basis for the processing of your personal data is Nordic RCC's legitimate interests and that it is Nordic RCC's assessment that our legitimate interests override your interests or fundamental rights and freedoms, cf. Art. 6(1)(f) in the GDPR. The legitimate interests pursued are image branding, marketing and business development.

When you visit our social media sites on, e.g., LinkedIn or our Website where social media plugins have been installed, our social media service providers collect and process your personal data using cookies, subject to your consent to the service provider, as applicable. Such collection and processing take place even if you have no account on the social media.

When you for instance visit our LinkedIn site, Nordic RCC receives anonymous demographic and geographic statistics from LinkedIn on the visitors on our Website and our LinkedIn site. It happens via plugins (e.g. "LinkedIn Insight Tag"). Nordic RCC is joint data controller with our social media providers for personal data collected and processed in connection with your visit to our social media sites and our Website. It means, among other things, that you may contact both Nordic RCC and the social media providers to exercise your data subject rights under the GDPR. LinkedIn have primary responsibility for ensuring compliance with the GDPR and responding to requests from visitors on LinkedIn. If you are registered as user of LinkedIn, you may exercise your rights via your account settings on LinkedIn. Read more about LinkedIn’s processing of personal data and use of cookies and analytical tools here: https://www.linkedin.com/legal/privacy-policy.

2.3 Signing up for events

Nordic RCC processes your name, contact details, such as address and email address, employer company and your title. Nordic RCC will record and use the information for event administration purposes (e.g. to confirm registration, prepare name tags and attendance certificate and, where relevant, to forward event materials).

The legal basis for the processing of personal data is Nordic RCC's legitimate interests and that it is Nordic RCC's assessment that our legitimate interests override your interests or fundamental rights and freedoms, cf. Art. 6(1)(f) in the GDPR. The legitimate interests pursued are to administer events and send out evaluation forms.

2.4 Contact person at a vendor or another business partner

As a contact person at a vendor or another business partner, Nordic RCC processes your personal data when you communicate with Nordic RCC, e.g. via emails in connection with Nordic RCC's existing contractual relation with the company you are employed with or in connection with the conclusion or termination of a contract. Nordic RCC processes ordinary personal data about you, including your name, email address, telephone number, address, your position with the company, etc.

The processing of your personal data is necessary for Nordic RCC to fulfil Nordic RCC's contractual obligations towards your employer. The legal basis for such processing of your personal data is that the processing is necessary for the purposes of legitimate interests pursued by Nordic RCC and that it is Nordic RCC's assessment that our legitimate interests override your interests or fundamental rights and freedoms, cf. Art. 6(1)(f) in the GDPR. Nordic RCC's legitimate interests are fulfilment of our contractual obligations, maintaining and enhancing customer relationships, invoicing for the services your company provides to Nordic RCC and/or vice versa, communicating with you if you have any questions related to our services or vice versa, and for documentation purposes in the event Nordic RCC agree on matters relating to our services in writing via email.

In some cases, processing of personal data is necessary in order to comply with a legal obligation to which Nordic RCC is subject, for instance in relation to the obligation on the preservation of accounting records pursuant to the Danish Bookkeeping Act. In such case, the legal basis for the processing is Art. 6(1)(c) in the GDPR.

2.5 Subscription to Nordic RCC’s newsletter

Nordic RCC processes your name and email address when you sign up for Nordic RCC’s newsletter. Nordic RCC will record and use the information for sending out Nordic RCC’s newsletter to you.

3. Recipients of your personal data

Where relevant, Nordic RCC may disclose or transfer your personal data to vendors, business partners or other collaborators for business purposes.

Certain recipients process personal data on behalf of Nordic RCC and may only process your personal data in accordance with documented instructions given by Nordic RCC and further terms and conditions stated in a data processor agreement entered into with Nordic RCC. These data processors are not permitted to process your personal data for their own purposes.

4. Transfer of your personal data to a third country (outside of EU/EEA)

In certain cases, Nordic RCC will transfer your personal data to third countries outside of EU/EEA, for instance. If your personal data are transferred to such third countries, Nordic RCC will ensure that such transfer will be carried out in accordance with applicable data protection legislation so that an adequate level of protection is ensured. If the personal data are transferred to recipients established in so-called "unsafe" third countries that are not approved by the EU-Commission, Nordic RCC ensure an adequate level of protection for instance by e.g. entering into the EU-Commission's standard contractual clauses and by implementing additional safeguards.

If in exceptional cases, none of the above legal bases apply, Nordic RCC will obtain your explicit and prior consent to the transfer of your personal data to the specific third country.

5. Storage of your personal data

Nordic RCC will only store your personal data as long as it is deemed necessary to fulfil the purposes for the processing of your personal data.

Contact person

If you are a contact person of our vendors or business partners, etc., Nordic RCC will store personal data about you until termination of the contractual relationship (if any), as long as Nordic RCC communicates with you because you are the Nordic RCC's point of contact, or until it is no longer necessary for the establishment, exercise or defence of a legal claim.

Bookkeeping material

Nordic RCC will store your personal data to the extent it is necessary for bookkeeping purposes such as personal data related to invoicing. Such personal data will be stored for a period of 5 years from the end of the financial year to which the accounting records relate. The purpose is to comply with the legal obligation pursuant to the Danish Bookkeeping Act.

Social media

The personal data will be deleted when the post is deleted or when you choose to withdraw your reaction to the post (like, share, etc.). Your IP-address collected and processed for statistical purposes through the use of cookies will be retained for up to 14 months after the cookie was stored onto the visitor’s hard drive.

Newsletter subscription

The personal data will be deleted when you unsubscribe from Nordic RCC’s newsletter service. This may be done at any time by sending an email to newsletter@nordic-rcc.net.

6. Your rights as a data subject

Nordic RCC has taken all necessary and adequate steps in order to protect your personal data and ensure your rights as a data subject.

You have a number of rights as a data subject. Please note that certain limitations may apply to your ability to exercise these rights, for example, when your right to obtain the information is found to be overwritten by essential considerations of private interests. If you have any questions or wish to exercise any of your rights as a data subject, please contact Nordic RCC using the contact details found under Section 1.

According to the GDPR, you have the following rights:

6.1 Right of access

You have the right to request access to, including the disclosure of a copy of the personal data that Nordic RCC process about you as well as the right to receive information on:

the purposes of the processing;
the categories of personal data concerned;
the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries and in that connections the necessary measures carried out prior to the transfer;
the envisaged storage period or the criteria used to determine that period;
the existence of the right to request rectification, erasure, restriction or objection against processing of your personal data, including especially processing of personal data in connection with direct marketing purposes;
the right to lodge a complaint with the Danish Data Protection Agency;
where your personal data are obtained from if the personal data are not collected from you; and
the existence of automated decision-making, including profiling, and as a minimum meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.

6.2 Right to rectification

You have the right to have inaccurate personal data about yourself rectified as well as the right to request completion of incomplete personal data concerning you.

6.3 Right to erasure ("right to be forgotten")

Under certain circumstances you have the right to obtain from Nordic RCC the erasure of personal data concerning your, for instance if the processing is based on your explicit consent and you withdraw this consent.

6.4Right to restriction of processing

You have the right to restrict Nordic RCC's processing of your personal data, for instance, in the event you dispute the accuracy of the personal data.

6.5 Right to data portability

When our processing of your personal data is carried out automatically and is based on your consent or a contract with you, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format and the right to transmit those personal data to another data controller, if this is technically feasible.

6.6 Right to object

You have the right to object, on grounds relating to your particular situation, at any time to our processing of your personal data which is based on point (e) or (f) of Art. 6(1) in the GDPR. This applies at any time where personal data are processed for direct marketing purposes.

6.7 Right to not be subject to automated individual decision-making

You have the right not to be subject to a decision based solely on automatic processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

6.8 Right to withdraw a consent

If you have given us your consent to the processing of your personal data, you have the right to withdraw such consent at any time. However, the withdrawal of your consent will not affect the lawfulness of processing of your personal data based on consent before its withdrawal.

If you wish to exercise any of the above-mentioned rights, you are welcome to contact Nordic RCC. You can read more about your data subject rights on the Danish Data Protection Agency's website here.

7. Questions and complaints

If you have any questions relating to this Privacy Policy, you wish to exercise your rights as mentioned above, or you disagree with the way Nordic RCC process your personal data, you can contact Legal by using the contact information provided in section 1 of this Privacy Policy.

You can also file a complaint to the Danish Data Protection Agency, which is an independent public authority that is, inter alia, responsible for monitoring and enforcing the application of the GDPR. The Danish Data Protection Agency's contact information is available on its website: www.datatilsynet.dk.

8. Changes to this Privacy Policy

This Privacy Policy will be updated and modified periodically, as well as when necessary due to changes in applicable data protection legislation and practice and, thus, Nordic RCC recommend that you keep yourself updated of such changes.

Date of the most recent version of this Privacy Policy:

9 June 2023