Privacy Policy
This privacy policy applies to: Mind Balance System ApS. CVR no: 39073994
PROCESSING OF PERSONAL DATA ABOUT CONTACT PERSONS AT OUR SUPPLIERS AND OUR CUSTOMERS
Mind Balance System ApS (hereinafter “Mind Balance System” or “us/we”) takes the processing of your personal data seriously. We ensure fair and transparent data processing in accordance with applicable rules on the processing of personal data.
This privacy policy explains how we process your personal data when you have purchased a license to use our Mind Balance System® behavioral analysis from us, when you purchase an analysis directly through us, and when you are our supplier/partner.
1. THE DATA CONTROLLER'S IDENTITY AND CONTACT INFORMATION
Mind Balance System is the data controller for the processing of the personal data that we have received about you. We can be contacted via the following information:
Mind Balance System ApS
CVR: 39073994
Ørbækgårds Alle 220
2970 Hørsholm
E-mail: info@MindBalanceSystem.com
Phone: +45 2488 8618
If you have any questions about how we process your personal data, please do not hesitate to contact us.
2. WE PROCESS THE FOLLOWING INFORMATION ABOUT YOU FOR THE FOLLOWING PURPOSES
We process the following general personal data about you (i.e., covered by Article 6 of the General Data Protection Regulation), which we have either received from you or from one of our partners:
Identification and contact information: Name, job title, address, contact information, including telephone number and email address; and
Information contained in your test response when you have purchased it directly through us.
- We process the information for the following purposes:
- To deliver and process a test when you have purchased it directly through us;
- To manage the relationship with our customers and suppliers;
- To comply with legal obligations or decisions from authorities;
- To prepare statistics to improve our testing tool; and
- To establish, assert or defend legal claims.
We do not wish to process sensitive information about you (i.e., covered by Article 9 of the General Data Protection Regulation) and therefore ask you not to send us information about race or ethnic origin, political, religious or philosophical beliefs, or trade union membership, as well as the processing of genetic data, biometric data, health information or information about sexual matters or sexual orientation.
3. LEGAL BASIS FOR OUR PROCESSING OF YOUR PERSONAL DATA
Our processing of your personal data requires that we have a legal basis (also called authority) for the processing. The legal basis varies depending on the specific processing. Depending on the processing in question, the legal basis will be one or more of the following:
- That the processing is necessary for the performance of a contract to which you are a party (e.g. the agreement on your purchase of license access to the Mind Balance System® behavioral analysis from us or when you purchase an analysis directly through us), or in order to take steps at your request prior to entering into a contract, cf. Article 6(1)(b) of the General Data Protection Regulation;
- That the processing is necessary to comply with a legal obligation to which we are subject, e.g. under legislation, including accounting and tax legislation, cf. Article 6(1)(c) of the General Data Protection Regulation and Section 6 of the Data Protection Act;
- That the processing is necessary for us or a third party to pursue a legitimate interest that, after a balancing of interests, overrides your interests and fundamental rights and freedoms that require the protection of personal data, cf. Article 6(1)(f) of the General Data Protection Regulation;
- In addition, we have assessed that we have a legitimate interest in processing the information to prepare statistics that, after a balancing of interests, overrides your interests and fundamental rights and freedoms that require the protection of personal data, cf. Article 6(1)(f) of the General Data Protection Regulation.
- That the processing is necessary for legal claims to be established, asserted or defended, cf. Article 9(2)(f) of the General Data Protection Regulation and Section 7(1) of the Data Protection Act; and/or
- That we may have specifically collected your consent to the processing, cf. Article 6(1)(a) of the General Data Protection Regulation, Article 9(2)(a) of the General Data Protection Regulation, and/or Section 11(2)(2) of the Data Protection Act.
4. RECIPIENTS OR CATEGORIES OF RECIPIENTS
In certain cases, we disclose or transfer your personal data to others. Personal data about you may therefore be disclosed or transferred to the following (categories of) recipients:
- Relevant public authorities, including the Danish Tax Agency (SKAT)
- For customers: Other customers in connection with your participation in certification, training, networking meetings, etc., regarding the preparation and distribution of participant lists.
- Our data processors: AB MobilApps.
5. TRANSFER TO RECIPIENTS IN THIRD COUNTRIES, INCLUDING INTERNATIONAL ORGANIZATIONS
We do not transfer your personal data to recipients outside the EU and EEA. Should such a transfer occur, it will only take place with the necessary safeguards as required by the General Data Protection Regulation.
6. STORAGE OF YOUR PERSONAL DATA
We store your personal data for as long as necessary for the purposes for which the data is processed.
We can provide the following general criteria that we have established for how long the information is stored:
- Regarding the administration of customer and supplier relationships: We process your personal data for as long as we have a business relationship with you. When this relationship ends, we delete your personal data within 6 months, unless legislation requires us to store your personal data for a longer period.
- Information stored in accordance with the Danish Bookkeeping Act will be deleted after 5 years from the end of the financial year to which the personal data relates.
- It is emphasized that all the above-mentioned deletion deadlines are only indicative. As we process your personal data for different purposes, the actual period for which the personal data is stored will vary. Thus, other deadlines may apply to certain personal data than those indicated above, and there may be circumstances that justify other deadlines.
We continuously re-evaluate our deletion deadlines, including in relation to applicable legislation, guidelines, and practices, and changes to the above-mentioned deadlines may therefore occur.
It should also be noted that deletion of personal data does not necessarily have to consist of complete deletion of the data, but may alternatively consist of anonymization.
7. THE RIGHT TO WITHDRAW CONSENT
To the extent that we have obtained your consent for a given processing of your personal data, you have the right to withdraw your consent at any time. You can do this by contacting us using the contact information provided above in section 1.
If you choose to withdraw your consent, it will not affect the legality of our processing of your personal data based on your previously given consent up to the time of withdrawal. Therefore, if you withdraw your consent, it will only take effect from that time.
8. YOUR RIGHTS
According to the General Data Protection Regulation, you have a number of rights regarding our processing of information about you.
If you want to exercise your rights, please contact us. Contact information is provided above in section 1.
Right to see information (right of access)
You have the right to access the information we process about you, as well as a range of additional information.
Right to rectification (correction)
You have the right to have incorrect information about yourself corrected.
Right to erasure
In special cases, you have the right to have information about you deleted before the time of our ordinary general deletion occurs.
Right to restriction of processing
In certain situations, you have the right to limit how we process your personal information. If you have the right to restrict processing, we may only process the information in the future – with the exception of storage – with your consent, or for the establishment, exercise, or defense of legal claims, or to protect a person or important public interests.
Right to object
In certain instances, you have the right to object to our or legitimate processing of your personal data. You can also object to the processing of your data for direct marketing purposes.
Right to data portability
In certain cases, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to have these personal data transferred from one data controller to another without hindrance.
You can read more about your rights in the Danish Data Protection Agency's guide on the rights of data subjects, which you can find at www.datatilsynet.dk.
9. COMPLAINT TO THE DANISH DATA PROTECTION AGENCY
You have the right to lodge a complaint with the Danish Data Protection Agency if you are dissatisfied with the way we process your personal data. You can find the Danish Data Protection Agency's contact information at www.datatilsynet.dk.
