Introduction
This policy on the collection and processing of personal data describes how Vallor ApS, as data controller, collects and processes personal data about you as a customer, potential customer or supplier. By contacting us and providing us with your personal information, you accept that this policy applies.
In principle, Vallor only processes personal data for specific purposes for which there are legitimate interests. Only personal data that is relevant and necessary for the fulfilment of the stated purpose will be processed, and the personal data will be deleted when they are no longer necessary.
This policy describes how Vallor:
Complies with the General Data Protection Regulation and follows good practises
Protects the rights of employees, test subjects and other partners
Protects personal data from the risk of data breach
Contact information on the data controller
Vallor is the data controller and is responsible for personal data being processed in compliance with the regulation.
Contact information:
Purpose of data processing
Vallor processes data for a specific purpose if there are legitimate interests.
What personal data does Vallor collect and for what purposes:
Employees:
Customers:
Suppliers:
Personal data categories
Vallor is processing the following personal data:
a- Personal data: Data regarding employment for administration, this includes:
a-i CPR number, name, address, position, employment, education, CV
a-ii Salary, banking data, paychecks, tax rates, pension
a-iii Sick leave, parental leave
a-iv Correspondence between employee and manager of specific circumstantial contents, disciplinary warnings etc.
b- Special categories of personal data:
b-i Portrait photos
b-ii CVs
2. Customers:
a- Personal data: Contact information, this includes:
a-i Name, address, telephone, email
a-ii Data required for the specific sale.
b- Special categories of personal data:
b-i Data required for the sale shipping products to the customer.
b-ii Banking information for return of payments
3. Suppliers
a- Personal data: Contact information, this includes:
a-i Name, address, telephone, email
a-ii Data required for the specific purchase.
b- Special categories of personal data:
b-i Data required for returning defective products to the supplier.
b-ii Banking information for payment of products
Besides this, personal data from potential applicants are processed occasionally. Data is limited to the CV and contact information of the applicant.
Transfer of personal data
Vallor is transferring employees’ personal data to fulfil employer obligations (e.g., to tax authorities).
Vallor may work with third-party service providers (e.g., IT, courier services, customer service providers) and ask them to perform certain processing operations on our behalf, such as storing personal information. When we do so, we make sure that these service providers are contractually obligated not to use your personal data for purposes other than those we request or are required by law.
Besides this,Vallor is not transferring any personal data to other third parties.
Data storage and erasure
Consent
Where possible, Vallor processes personal data based on legitimate interest based on legal bases other than consent. If Vallor asks for your consent, your consent is voluntary and can be withdrawn at any time by contacting Vallor. If you withdraw your consent, this will not affect the legality of Vallor's processing of your personal data based on your prior consent and up to the date of withdrawal. If you revoke your consent, it will only take effect at that point in time.
Rights of the data subject
According to the regulation, you have fundamental rights as a data subject in relation to the processing of your personal data by Vallor:
You can use your rights, including objecting to the processing of Vallor of personal data concerning you, by contacting Vallor, using the contact information above.
Suppose you contact Vallor with a request regarding rectification or erasure of your personal data. In that case, Vallor will assess if the conditions are met, and in that case, implement the rectification or erasure as soon as possible.
Complaints Authority
If you are unsatisfied with the way Vallor is processing your personal data, you have the right to lodge a complaint to the data protection authority. In Denmark the relevant authority is [Datatilsynet](https://www.datatilsynet.dk/).
Contact us
If you have questions or comments to this policy, or if you want to make use of one or more of your rights, please contact us on jle@vallor-msp.com.
CVR: DK42112070