Privacy policy
This privacy policy applies to: Mind Balance System ApS. CVR no: 39073994
PROCESSING PERSONAL DATA ABOUT CONTACT PERSONS AT OUR SUPPLIERS AND OUR CUSTOMERS
Mind Balance System ApS (hereinafter "Mind Balance System" or "us/we") takes the processing of your personal data seriously. We ensure fair and transparent data processing in accordance with applicable regulations on the processing of personal data.
This privacy policy explains how we process your personal data when you have purchased a license to use our Mind Balance System® behavioral analysis from us, when you purchase an analysis directly through us and when you are our supplier/partner.
1. IDENTITY AND CONTACT DETAILS OF THE DATA CONTROLLER
Mind Balance System is the data controller for the processing of the personal data we have received about you. We can be contacted via the following details:
Mind Balance System ApS
CVR: 39073994
Ørbækgårds Alle 220
2970 Hørsholm
Email: info@MindBalanceSystem.com
Phone number: +45 2488 8618
If you have any questions about our processing of your personal data, you are welcome to contact us at any time.
2. WE PROCESS THE FOLLOWING INFORMATION ABOUT YOU FOR THE FOLLOWING PURPOSES
We process the following general personal data (i.e. covered by Article 6 of the General Data Protection Regulation) about you that we have either received from you or from one of our business partners:
Identification and contact information: Name, position, address, contact details, including phone number and email address; and
Information contained in your answer to a test when you have purchased it directly through us.
- We process the data for the following purposes:
- To deliver and process a test when you have purchased it directly through us;
- To manage the relationship with our customers and suppliers;
- In order to comply with legal obligations or decisions from authorities;
- To compile statistics in order to improve our testing tool; and
- For legal claims to be established, asserted or defended.
We do not want to process sensitive data (i.e. covered by Article 9 of the GDPR) about you and therefore ask you not to send us information about racial or ethnic origin, political, religious or philosophical beliefs or trade union membership as well as the processing of genetic data, biometric data, health data or information about sexual matters or sexual orientation.
3. LEGAL BASIS FOR OUR PROCESSING OF YOUR PERSONAL DATA
Our processing of your personal data requires that we have a legal basis (also called legal basis) for the processing. The legal basis varies depending on the specific processing. Depending on the processing in question, the legal basis will be one or more of the following:
- That the processing is necessary for the performance of a contract to which you are party (e.g. the agreement for your purchase of license access to the Mind Balance System® behavioral analysis from us or when you purchase an analysis directly through us) or for the implementation of measures taken at your request prior to the conclusion of a contract, cf. Article 6(1)(b) of the Personal Data Regulation;
- That the processing is necessary to comply with a legal obligation incumbent on us, e.g. pursuant to legislation, including accounting legislation and tax legislation, cf. Article 6(1)(c) of the GDPR and Section 6 of the Danish Data Protection Act;
- That the processing is necessary for us or a third party to pursue a legitimate interest which, after a balancing of interests, overrides your interests and fundamental rights and freedoms that require the protection of personal data, cf. Article 6(1)(f) of the GDPR;
- We have assessed that we have a legitimate interest in processing the data for the purpose of compiling statistics which, after a balancing of interests, overrides your interests and fundamental rights and freedoms that require the protection of personal data, cf. Article 6(1)(f) of the Personal Data Regulation.
- That the processing is necessary for the establishment, exercise or defense of legal claims, cf. Article 9(2)(f) of the General Data Protection Regulation and Section 7(1) of the Danish Data Protection Act; and/or
- That we have specifically collected your consent to the processing, cf. Article 6(1)(a) of the GDPR, Article 9(2)(a) of the GDPR and/or Section 11(2)(2) of the Danish Data Protection Act.
4. RECIPIENTS OR CATEGORIES OF RECIPIENTS
In certain cases, we disclose or transfer your personal data to others. Personal data about you may thus be disclosed or entrusted to the following (categories of) recipients:
- Relevant public authorities, including SKAT
- For customers: Other customers in connection with your participation in certification, training, network meetings, etc. in connection with the preparation and disclosure of participant lists.
- Our data processors: AB MobilApps.
5. TRANSFERS TO RECIPIENTS IN THIRD COUNTRIES, INCLUDING INTERNATIONAL ORGANIZATIONS
We do not transfer your personal data to recipients outside the EU and EEA. If such transfer takes place, it will only take place in compliance with the necessary security guarantees as required by the Personal Data Regulation.
6. STORAGE OF YOUR PERSONAL DATA
We will retain your personal data for as long as necessary in relation to the purposes for which the data is processed.
We can provide the following general criteria that we have established for how long the data is stored:
- Regarding Customer and Supplier Relationship Management: We process your personal data as long as we have a business relationship with you. When this relationship ends, we will delete your personal data within 6 months, unless legislation requires us to retain your personal data for a longer period.
- Data stored in accordance with the rules of the Bookkeeping Act is deleted after 5 years from the end of the financial year to which the personal data relates.
- It is emphasized that all of the above deletion deadlines are only starting points. As we process your personal data for different purposes, the actual period for which the personal data is stored will vary. Thus, other deadlines than those indicated above may apply to certain personal data, and circumstances may exist or arise that justify other deadlines.
We continuously reassess our deletion deadlines, including in relation to current legislation, guidelines and practice, and changes to the above deadlines may therefore occur.
It should also be noted that the erasure of personal data does not necessarily consist of complete deletion of the data, but may alternatively consist of an anonymization of the data.
7. THE RIGHT TO WITHDRAW CONSENT
To the extent that we have obtained consent from you for a given processing of your personal data, you have the right to withdraw your consent at any time. You can do this by contacting us at the contact details stated above in section 1.
If you choose to withdraw your consent, it will not affect the lawfulness of our processing of your personal data on the basis of your previously given consent and up to the time of withdrawal. Therefore, if you withdraw your consent, it will only take effect from that time.
8. YOUR RIGHTS
You have a number of rights under the General Data Protection Regulation in relation to our processing of information about you.
If you want to exercise your rights, please contact us. Contact details can be found above in section 1.
Right to see information (right of access)
You have the right to access the data we process about you as well as a number of additional information.
Right to rectification (correction)
You have the right to have incorrect information about yourself corrected.
Right to erasure
In special cases, you have the right to have data about you deleted prior to the time of our general general deletion.
Right to restriction of processing
You have the right to have the processing of your personal data restricted in certain cases. If you have the right to have the processing restricted, we may in future only process the data - except for storage - with your consent, or for the establishment, exercise or defense of legal claims, or to protect a person or important public interests.
Right to object
In certain cases, you have the right to object to our or lawful processing of your personal data. You can also object to the processing of your data for direct marketing purposes.
Right to transmit data (data portability)
In certain cases, you have the right to receive your personal data in a structured, commonly used and machine-readable format and to have this personal data transferred from one controller to another without hindrance.
You can read more about your rights in the Danish Data Protection Agency's guide on data subjects' rights, which you can find at www.datatilsynet.dk.
9. COMPLAINT TO THE DATA PROTECTION AUTHORITY
You have the right to file a complaint with the Danish Data Protection Agency if you are dissatisfied with the way we process your personal data. You can find the Danish Data Protection Agency's contact details at www.datatilsynet.dk.
