Personal data policy
PERSONAL DATA POLICY INFORMATION ABOUT OUR PROCESSING OF YOUR PERSONAL INFORMATION, ETC.
WE ARE THE DATA CONTROLLER - HOW DO YOU CONTACT US?
Schou is the data controller for the processing of the personal data that we have received about you. You will find our contact information below.
Schou Company A/S Nordager 31,
6000 Kolding CVR no.: 50102017
Contact person: Susan Christensen
HR Manager Telephone: 88 91 81 71
Email: gdpr@schou.com
In the personal data policy, you can read the purposes for which we process personal data, how we take care of the information we receive, the legal basis for processing and what rights the persons to whom the information relates have.
We have divided our treatment activities into areas according to the purpose of the treatment.
The topics are the following:
• If you use our website
• If you buy a product or communicate with us on our webshop
• If you apply for a job with us
• If you register with our job agent
• If you shop with us as a business customer (outside the webshop)
IF YOU USE OUR WEBSITE, WE COLLECT THE FOLLOWING PERSONAL INFORMATION:
• Purpose: The purpose is to optimize the user experience and the function of the website, as well as carry out targeted marketing, including retargeting via Facebook and Google. This processing of information is necessary so that we can safeguard our interests in improving the website and showing you relevant offers and news.
• What types of information do we process: When you visit the website, we automatically collect information about you and your use of the website, e.g. about the type of browser you use, which search terms you use on the website, your IP address, including your network location, and information about your computer.
• The legal basis for our processing of your personal data: Article 6 of the Data Protection Regulation, item 1, letter a.
• Storage of personal data: We refer to our cookie policy.
• Personal information is not passed on.
IF YOU BUY A PRODUCT OR COMMUNICATE WITH US ON OUR WEB SHOP, WE COLLECT THE FOLLOWING PERSONAL INFORMATION:
• Purpose: The purpose is that we can deliver the products you have ordered and otherwise fulfill our agreement with you, including to be able to manage your rights to return and advertise. We may also process information about your purchases to comply with legal requirements, including requirements for bookkeeping and accounting. Information about purchases is stored in our ERP system. When making a purchase, the IP address is collected for the purpose and to safeguard our interest in being able to prevent fraud.
• What types of information do we process: When you buy a product or communicate with us on the website, we collect the information you provide yourself;
PERSONAL DATA POLICY INFORMATION ABOUT OUR PROCESSING OF YOUR PERSONAL INFORMATION, ETC.
Company name, name, address, postal code, city, country, e-mail address, telephone number, payment method, information about which products you buy and have possibly returned, delivery requests, and information about the IP address from which the order was made.
• The legal basis for our processing of your personal data, Article 6 of the Data Protection Regulation, item 1, letters a, b and c.
• Storage of personal data: As a general rule, personal data will be stored by Schou for a period of 5 years from the end of the financial year to which the data relates, in accordance with current regulations, including in accordance with the Accounting Act. The personal data is deleted when the personal data is no longer relevant and Schou's obligation to store the personal data has ended.
• Personal information can be passed on to freight companies.
IF YOU APPLY FOR A JOB WITH US, THE FOLLOWING PERSONAL DATA WILL BE PROCESSED:
• Purpose: At Schou, data is collected for processing/assessment in recruitment processes in order to validate whether the individual applicant's qualifications and experience meet the wishes we would require in the ideal candidate.
• What types of information do we process: General personal data: Name, address, postal code, city, e-mail, application and CV. In addition, the applicant has the opportunity to provide information about date of birth, telephone number, mobile number, other relevant documents and various information in the CV and application. In addition, the applicant can choose to upload a picture. We may later request a personality test, reference report and presentation of a criminal record. Special categories/sensitive information: It appears that Schou may receive information about the health information and CPR number of people who apply for a job with Schou.
• The legal basis for our processing of your personal data, Article 6 of the Data Protection Regulation, item 1, letters a and f and Article 9, subsection 2, letters a and e.
• Storage of personal data. We store your personal data for 6 months or as long as there is a legal and objective purpose. These are stored in our e-recruitment system (data processor) and are not shared further. Data is automatically deleted after 6 months. The purpose of saving applications is to be able to fill a future position. Schou can store information about applicants as long as it has a legitimate purpose. A legitimate purpose can, for example, be to secure documentation if an applicant objects to a refusal.
• Personal information is not passed on.
IF YOU REGISTER WITH OUR JOB AGENT, THE FOLLOWING PERSONAL DATA WILL BE PROCESSED:
• Purpose: Candidates are made aware of job advertisements that may interest them.
• What types of information we process: When you register with our job agent, you must fill in your name and email. In addition, you must tick the desired departments, work areas and job types you are interested in.
• The legal basis for our processing of your personal data, Article 6 of the Data Protection Regulation, item 1, letter a.
• Storage of personal data We store your data until you unsubscribe from the job agent yourself. You do this via the link in the email you receive after you have registered.
• Personal information is not passed on.
IF YOU SHOP WITH US AS A BUSINESS CUSTOMER (OTHER THAN THE WEB SHOP), THE FOLLOWING PERSONAL DATA WILL BE PROCESSED:
• Purpose: Handling of business customer information in connection with the conclusion and implementation of concluded agreements and subsequent invoicing and any reminder procedure, as well as delivery.
PERSONAL DATA POLICY INFORMATION ABOUT OUR PROCESSING OF YOUR PERSONAL INFORMATION, ETC.
• What types of information we process: When you become a customer with us, or if you change your engagement with us, we ask you for some information. We need to know: CVR no., name, address, postal code, city, country, telephone number, company name, email to bookkeeping, invoice and order confirmation, VAT no., currency, payment terms, bonus, current turnover, number of employees, website , industry, category of purchased goods/services, invoiced amounts, discount schemes, reminder letters, reminder fees and late payment interest, debt collection processing.
• The legal basis for our processing of your personal data, Article 6 of the Data Protection Regulation, item 1, letters a, b, c and f.
• Storage of personal data Personal data will, as a starting point, be stored by Schou for a period of 5 years from the end of the financial year to which the information relates, in accordance with current regulations, including in accordance with the Accounting Act. The personal data is deleted when the personal data is no longer relevant and Schou's obligation to store the personal data has ended.
• Personal information can be passed on to our insurance company, in the event of a need for insurance coverage in the event of the customer's inability to fulfill his obligations.
YOUR RIGHTS
According to the data protection regulations, you have a number of rights in relation to our processing of personal data about you.
• Right to see information (insight): You can ask to have access to the personal data that we have registered about you in accordance with the rules on the right of access
• Right to rectification: You have the right to have incorrect information about yourself corrected
• Right to deletion: In special cases, you may have the right to have information about you deleted before our general deletion deadlines occur
• Right to restriction of processing: In certain cases, you may have the right to have the processing of your personal data restricted
• Right to object: In certain cases, you may have the right to object to our or the data processor's processing of your personal data
• Right to withdraw consent: If you have given consent to the processing of one or more personal data about you, you can withdraw your consent at any time in accordance with the rules of personal data law. Unless the company has another legal basis for processing, we can no longer process the information in question
• Right to transmit information (data portability): In certain cases, you have the right to receive your personal data in a structured, commonly used and machine-readable format and to have this personal data transferred from one data controller to another without hindrance
• Right to complain to the Danish Data Protection Authority: You have the right to complain to the Danish Data Protection Authority about our processing of your personal data if you believe that the processing does not take place in accordance with applicable regulations. You can find the Data Protection Authority's contact information at www.datatilsynet.dk
IF YOU WANT TO EXERCISE YOUR RIGHTS, YOU MUST CONTACT US.
REV. 03.20 Personal data policy_DK.indd 3 0