Personal information about customers

1 INTRODUCTORY REMARKS

1.1 Purpose

1.1.1 At MT Højgaard (hereinafter "the Company"), we will continuously process various personal data about you electronically/automatically. We are therefore obliged to inform you about what information we collect, register, disclose, or otherwise process about you.

1.1.2 When you use the Company's website or otherwise contact or interact with us, the Company, as the data controller, processes various personal data about you.

1.1.3 The purpose of processing your information is primarily the administration of your customer relationship, including in relation to the delivery of agreed services, obligations, etc.

1.1.4 In this privacy policy, you can therefore read about how we process your information when we register you as a customer, when you otherwise contact us, and when we receive information about you from third parties. For all the personal data mentioned below, they are processed in accordance with the guidelines and frameworks set by data protection legislation.

1.1.5 Our website also uses cookies and similar technologies to collect and process information about our visitors' use of our website and services. If you want to know more about our use of cookies and similar technologies, you can read about it by clicking on "Cookie Policy" at the bottom of the website.

1.1.6 You are always welcome to contact us at persondata@mth.dk if you have questions regarding our processing of personal data. See also section 8 below, where we describe your rights and provide additional contact information.

2 PROCESSING OF PERSONAL DATA IN RELATION TO CUSTOMERS ETC.

2.1 Representative of a company

2.1.1 When you enter into a contract with or are an existing customer, business partner, supplier, etc., with the Company, we create a record of you and the company you represent in our IT system. Here, we register a range of different personal data, which primarily comes from you.

2.1.2 We register, among other things, identification information, including your name, job title, latest employer, contact role, department, as well as your contact information, including work phone numbers, work email addresses, activity history, or other personal data that you may provide to us.

2.1.3 The legal basis for processing your information is our legitimate interest in fulfilling the contract we have entered into with the company you represent, including being able to contact you and deliver the products/services we have agreed upon. Similarly, we may use your contact information when we need to invoice the company you represent. The legal basis is the Data Protection Act, cf. the General Data Protection Regulation (Regulation (EU) 2016/679 of April 27, 2016), Article 6(1)(f).

2.1.4 The information in the system may be combined with information about other customers, business partners, suppliers, website visitors, etc., for example, to create various types of statistics and reports.

2.1.5 The legal basis is the Data Protection Act § 6(1), cf. the General Data Protection Regulation Article 6(1)(f). Our legitimate interest is the potential optimization of our current services or the development of new services, which the processing aims to achieve.

3 PROCESSING OF PERSONAL DATA IN OTHER CONTEXTS

3.1 Inquiries

3.1.1 When you contact us via contact forms on our website or in connection with other inquiries, your inquiry may sometimes contain personal data, such as contact information, your affiliation with a specific company, or other personal data you may provide us. We process this data in order to handle and respond to your inquiry.

3.1.2 The legal basis is the Data Protection Act § 6, section 1, cf. the General Data Protection Regulation (Regulation (EU) 2016/679 of April 27, 2016), Article 6, section 1, letter f. Our legitimate interests are our processing and response to your inquiry.

3.2 If you contact us as a private individual in the context of an existing customer relationship with us, the legal basis may instead be the fulfillment of the agreement we have entered into, cf. the Data Protection Act § 6, section 1, cf. the General Data Protection Regulation, Article 6, section 1, letter b.

3.2.1 If you use one of our contact forms, express interest in one of our products in an inquiry, or contact us on behalf of a company, we may also register you and the information you provide in our IT system as a potential lead or representative of a company, so we can contact you with information and offers on our products. You will then be registered as a contact person for the company you represent.

3.2.2 The legal basis is the Data Protection Act § 6, section 1, cf. the General Data Protection Regulation, Article 6, section 1, letter f. Our legitimate interests are (i) the potential sale of our products that we can achieve by later using the information to contact you regarding our products, and/or (ii) our interest in being able to contact you as a contact person for the company you represent.

3.2.3 We may also use your inquiry, and thereby personal data contained therein, as part of optimizing our current services or developing new services, for example, by compiling statistics on received inquiries or anonymizing received inquiries for later use.

3.2.4 The legal basis is the Data Protection Act § 6, section 1, cf. the General Data Protection Regulation, Article 6, section 1, letter f. Our legitimate interests are the potential optimization of our current services or the development of new services that the processing aims to achieve.

3.3 Newsletters

3.3.1 If you sign up for our newsletter, we register your email address and any other contact information that may constitute personal data in order to send you our newsletters and offers. In some cases, we also register other information that you specifically provide to us.

3.3.2 We use this additional information to personalize the offers and news we send to you.

3.3.3 The legal basis for the above processing is the consent you give when signing up for our newsletter. The legal basis is the Data Protection Act § 6, section 1, cf. the General Data Protection Regulation, Article 6, section 1, letter a.

3.3.4 You can always withdraw your consent. This can, for example, be done by contacting us using the contact details provided in section 8.1 below. As a general rule, we process personal data until you withdraw your consent to receive our newsletters.

3.4 Cookies

3.4.1 Our website uses cookies and similar technologies to collect and process information about our visitors' use of our website and services. If you want to know more about our use of cookies and similar technologies, you can read about it by clicking on "Cookie Policy" at the bottom of the website.

3.4.2 The legal basis is your consent given pursuant to the Cookie Order (Executive Order No. 1148 of December 9, 2012, on requirements for information and consent for storing or accessing information in end users' terminal equipment).

4 INFORMATION RECEIVED FROM THIRD PARTIES

4.1.1 Sometimes we may receive personal data about you from third parties, such as your employer or colleagues. This may include your contact details and information about your affiliation with your employer. Sometimes we may register the information we receive from third parties about you in our IT system or elsewhere as a potential lead or representative of a company, so we can contact you with information and offers on our services as well as regarding our ongoing customer relationship with the company you represent.

4.1.2 Our legal basis for processing information as described in section 4.1.1 is the pursuit of our legitimate interests. Our legitimate interests are (i) the potential sale of our products and/or services, as well as (ii) our interest in being able to contact you, possibly in your capacity as a contact person for a company you represent. The legal basis is the Data Protection Act § 6, section 1, cf. the General Data Protection Regulation, Article 6, section 1, letter f.

4.1.3 We may also use information received from third parties, and thus personal data contained therein, as part of optimizing our current services or developing new services, for example, by compiling statistics on received inquiries or anonymizing received inquiries for later use.

4.1.4 Our legal basis for processing information as described in section 4.1.3 is the pursuit of our legitimate interest. Our legitimate interest is the potential optimization of our current services or the development of new services that the processing aims to achieve. The legal basis is the Data Protection Act § 6, section 1, cf. the General Data Protection Regulation, Article 6, section 1, letter f.

5 RECIPIENTS AND DISCLOSURE, ETC.

5.1 Recipients

5.1.1 Certain information is stored with our data processors in connection with operational and IT security tasks (e.g., backup, website hosting, etc.) that we also have handled externally. The storage of information with external partners (our data processors) is subject to the rules of the General Data Protection Regulation and the Danish Data Protection Act, and data processing agreements have been concluded with the data processors to ensure, among other things, that your information does not fall into unauthorized hands.

5.1.2 As a general rule, we do not disclose personal data covered by this policy to third parties without your consent unless we are required to do so by law or if it is necessary to pursue the purposes described above. Our legal basis for such disclosure is generally the same as described above concerning our own processing.

5.1.3 In specific cases, your personal data may be disclosed to our external legal advisors for the resolution of a specific matter. For example, this may occur if the Company requires legal assistance in a case involving you, where the relevant personal data is necessary for our lawyer.

6 DATA RETENTION LIMITATION

6.1 Deletion Policy

6.1.1 At the Company, we have developed a policy that describes how and when we delete personal data. If you would like to know more about our deletion periods, you are always welcome to contact us as described in section 8.

6.2 Request for Deletion

6.2.1 If you submit a request to have your personal data corrected or deleted, we will assess whether the conditions are met and, if so, implement the necessary changes or deletion as soon as possible.

7 YOUR RIGHTS

7.1 Under data protection legislation, you have certain rights regarding our processing of your personal data.

7.2 In this context, you have the right to:

Request access to the personal data we process about you (pursuant to Article 15 of the General Data Protection Regulation),
Request rectification of the personal data we process about you (pursuant to Article 16 of the General Data Protection Regulation),
Request deletion of the personal data we process about you (pursuant to Article 17 of the General Data Protection Regulation),
Request restriction of our processing of your personal data (pursuant to Article 18 of the General Data Protection Regulation),
Request data portability, where applicable (pursuant to Article 20 of the General Data Protection Regulation), and
Object to our processing of your personal data (pursuant to Article 21 of the General Data Protection Regulation).

8 CONTACT INFORMATION

8.1 If you have any questions regarding the above or your rights under data protection legislation, you can always contact the Company at: persondata@mth.dk.

You can read more about data protection legislation and your rights on the Danish Data Protection Agency's website at www.datatilsynet.dk. The Danish Data Protection Agency is the authority that ultimately assesses whether your personal data is processed lawfully, for example, as part of a complaint case.

The Danish Data Protection Agency's contact details are: Datatilsynet, Borgergade 28, 5., 1300 Copenhagen K, phone +45 3319 3200, dt@datatilsynet.dk.