PERSONAL DATA POLICY

Information on how we handle your personal data

You probably do not want your personal data ending up in the wrong hands or being processed for purposes with which you disagree. It is for this reason that we have published this Personal Data Policy informing you of all the important aspects of how we handle your personal data.

This Personal Data Policy is divided into two main parts:

A general section applicable to all personal data processing.

A specific section detailing all the processing activities of relevance to you. Any deviations from the general section are described in this section.

General section

Responsibilities
The data controller for the processing of your personal data is:
D4 Enterprise solutions ApS
Høgevej 10
DK-3400 Hillerød
Denmark
Telephone: +45 45 90 31 50
Email: gdpr@d4.dk
Contact person Martin S. Larsen

Your rights
You have the right to ask the data controller (D4) for confirmation as to whether personal data relating to you are being processed.
You have the right to be provided with information about any personal data stored on our servers that is related to you.
You may have the data stored on our servers corrected or deleted, or have the processing thereof limited.
You have a right to object and a right to data portability, i.e. You have the right to receive your personal data from us in a structured, commonly used and machine-readable format.
If the processing of your personal data is performed on the basis of your consent (pursuant to Article 6 (1) (a) or 9 (2) (a)), you have the right to withdraw your consent at any time. For example, you may contact the person in charge at D4 referred to above.
You may also make a complaint to the relevant regulatory authority, Datatilsynet, Borgergade 28, 5, DK-1300 København K, Denmark, tel.: +45 33 19 32 00.

Storage duration of personal data
Your personal data are reviewed regularly in accordance with our internal policies and deleted as needed. Basically, what this means is that the data are deleted once the processing purpose has been met. Should longer statutory retention periods apply, or should the data be required for ongoing processes or for defence against liability claims, the data in question will be stored for longer accordingly.

Obligation to provide data
The provision of personal data is voluntary, unless there is a legal obligation to do so or unless the data are required in order to conclude a legally binding contract with D4.

Special section

IP addresses
IP addresses are considered personal data. In principle, IP addresses are required for data exchange between different devices. In some cases, your IP address will be forwarded to external service providers or processors when using this website; such forwarding is nearly always necessary for the website to function properly. In principle, the complete IP addresses of visitors to the website are stored.

Cookies
Cookies are files that allow our website to save customized information to your terminal’s browser. Cookies serve mainly to simplify the use of our website. It is also possible to use our services without storing cookies. You can deactivate the storage of cookies or configure your browser to notify you whenever cookies are sent. However, we would point out that the site’s ease of use may be impaired without the use of cookies. More information is available in our Cookie Policy.

Logging by the web server
General information
When you visit our website, the web server collects the IP address currently used by your PC, the date and time, the browser type and your PC’s operating system, the pages you view and the status code of the server.

Purposes
We use the log files to ensure that normal operation is maintained and so that we can detect and counter attacks on our web server.

Legal basis
The legal basis for processing is Article 6 (1) (f). Our interest is the trouble-free operation of the web server.

Recipients or categories of recipients of the personal data
The data will not be passed on.

Transmission to a third country and guarantees of an adequate level of data protection
Transfer to a third country does not take place.

Storage duration of the personal data
The log files are stored for a period of 12 months.

Traffic analysis
Data regarding visitor behaviour are collected and evaluated as part of our analysis of traffic. The processing of these data serves to ward off attacks, identify security vulnerabilities, and to optimize this website. Specific privacy notices relating to the tools used are described below.

You may refuse data collection by the traffic analysis tools used on this website. To do so, you must activate the “Do Not Track” option in your browser.

Google Analytics

General information
Google Analytics is a web application used for the statistical evaluation of visitor behaviour. Google Analytics uses cookies stored on your computer to enable the analysis of your usage of the website. You can prevent the installation of cookies by configuring your browser software accordingly.

Purposes
We use Google Analytics in order to analyse visitors’ user behaviour and to continually improve the website based on the insights gained thereby.

Legal basis
The legal basis for processing is Article 6 (1) (f). Our interest is the trouble-free operation of the website and the optimization thereof. You may object to data processing by setting an opt-out cookie. This cookie also prevents future data collection. Alternatively, you may object to data collection by Google Analytics by installing a browser add-on that you can download at https://tools.google.com/dlpage/gaoptout. This browser add-on informs Google Analytics that no data or information about the visits to this website may be transmitted.

Recipients or categories of recipients of the personal data
The data will not be passed on.

Transmission to a third country and guarantees of an adequate level of data protection

The information processed about the use of this website is normally transferred to a Google Inc. server in the United States and stored there. According to GDPR, the US is considered a third country with poor data protection security. Google Inc. has submitted to what is referred to as “Privacy Shield”, thereby committing to compliance with EU data protection regulations.

Storage duration of the personal data

The analytics data are stored for a period of 26 months.

Further information

For more information about Google Analytics and the applicable Google Analytics privacy policy, please visit the website https://www.google.com/analytics/terms/.

Integration of external content

We integrate external content into our website, in the context of which your IP address is transmitted to an external service provider. The purpose is the proper operation of our website. The legal basis for processing in the context of external content integration is Article 6 (1) (f). Our interest is the operation of the website in the manner desired by us.

YouTube

General information

YouTube is a video portal that offers hosting of video clips and enables users of the portal to view these video clips.
If you use our website and are logged into YouTube at the same time, when you visit a subpage that contains a YouTube video, YouTube recognizes which subpage you visited. If such transmission of this information to YouTube is not desired, you can prevent the transmission by logging out of your YouTube account before visiting our website.

Purposes

Integration of videos into this website.

Legal basis

The legal basis for processing in the context of YouTube video integration is Article 6 (1) (f). Our interest is the operation of the website in the manner desired by us.

Recipients or categories of recipients of the personal data

The data will not be passed on.

Transmission to a third country and guarantees of an adequate level of data protection

The videoclips are normally downloaded from a YouTube server in the United States, and the IP addresses are stored there. According to GDPR, the US is considered a third country with poor data protection security. Google Inc. has submitted to what is referred to as “Privacy Shield”, thereby committing to compliance with EU data protection regulations.

Further information

YouTube is operated by YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
For more information about YouTube and the applicable YouTube privacy policy, please visit the website https://policies.google.com/privacy?hl=en&gl=de.

reCaptcha, Google Fonts

General information

Some external scripts from Google Inc. are used on this website. ReCaptcha is a script library that is able to distinguish whether a form entry is of human origin or if it represents automated machine processing of an abusive nature. Google Fonts makes it possible to display this website in different fonts.

Categories of personal data

IP addresses of website visitors.

Recipients or categories of recipients of the personal data

The data will not be passed on.

Transmission to a third country and guarantees of an adequate level of data protection

The scripts are normally downloaded from a Google Inc. server in the United States, and the IP addresses are stored there. According to GDPR, the US is considered a third country with poor data protection security. Google Inc. has submitted to what is referred to as “Privacy Shield”, thereby committing to compliance with EU data protection regulations.

Further information

For more information about Google Inc.’s integrated scripts and the applicable Google Inc. privacy policy, please visit the website https://www.google.com/analytics/terms/.

Features of the website

General information
Contact form/requests

You will find a contact form on our website. The personal data that you enter in the form (name, contact details) will be processed. If you enter data there, the data will be processed as follows.

Purposes

The purpose of processing is to handle requests for service or to forward communications directed to us.

Legal basis

The legal basis is Art. 6 (1) (b) GDPR.

Recipients or categories of recipients of the personal data

The data will not be passed on.

Storage duration of the personal data

The data will only be used to contact you and for subsequent processing of your request.
If you are already a D4 customer, the request will be stored among your data under the company that you represent in our internal CRM system, in order to provide you with optimal service.
All data will be deleted five years after termination of the customer relationship.

If you are not yet a D4 customer, the request will be stored among your data under the company that you represent in our internal CRM system, in order to provide you with optimal service.
If the company terminates its cooperation with D4, all data will be deleted five years after the final activity performed on the registered company.

Aquisition

General information

We are contacting you because we suspect that our software solution D4InfoNet can support you in your daily work.

Purposes

Contacting potential new customers.

Legal basis

The legal basis for processing is Article 6 (1) (f). Our interest is establishing contact with potential new customers. You may object to the processing of your personal data at any time.

Categories of personal data

Contact details of potential customers

Recipients or categories of recipients of the personal data

The data will not be passed on.

Storage duration of the personal data

The data will only be used to establish contact and will be stored in our internal CRM system.

All data will be deleted five years after the final activity performed on the registered company. If the contact results in the sale of a service, and if the company subsequently terminates its cooperation with D4, all data will be deleted five years after the final activity performed on the registered company.

Further information

The data about you come from publicly available sources (data from your website, data from telecommunications companies or other publicly available sources), or data that we have purchased from providers of such information.

Ongoing dialogue with customers

General information

Companies that are customers and the people at the company with whom we communicate and interact will be registered in our CRM system. We continuously store correspondence and any activities of our customers attributable to registered contacts at the company.

Purposes

The purpose is to be able to supply the desired services as part of the contract concluded with our customers.

Legal basis

The legal basis is Art. 6 (1) (b) or (c) GDPR.

Recipients or categories of recipients of the personal data

The data will not be passed on.

Storage duration of the personal data

As a D4 customer, correspondence/requests will be stored under the company that you represent in our internal CRM system, in order to provide you with optimal service.
All data will be deleted five years after termination of the customer relationship.

Applications

If you submit an unsolicited application to D4 or if your application does not result in an employment, your application will be deleted six months after processing is complete.

Legal basis

The legal basis is Art. 6 (1) (b) or (c) GDPR.

Recipients or categories of recipients of the personal data

The data will not be passed on.

Act-On

General information

Act-On as a Marketing Automation provider and our analytics provider, use technologies such as cookies, beacons, tags, and scripts. Users can control the use of cookies at the individual browser level. If you reject cookies, you may still use our website, but your ability to use some features or areas of our website may be limited.

Purposes

We use Act-On in order to analyze trends, administer the website, tracking users’ movements around the website, and to gather demographic information about our user base as a whole.

Legal basis

The legal basis for processing is Article 6 (1) (f) in GDPR. Our interest is the trouble-free operation of the website and the optimization thereof. You may object to data processing by setting an opt-out cookie. This cookie also prevents future data collection.

Recipients or categories of recipients of the personal data

The data will not be passed on.

Transmission to a third country and guarantees of an adequate level of data protection

The information processed about the use of this website is normally transferred to a Act-On servers in the United States and Europe (Frankfurt and Dublin), and stored there. According to GDPR, the US is considered a third country with poor data protection security. Act-On has submitted to what is referred to as “Privacy Shield”, thereby committing to compliance with EU data protection regulations.

Storage duration of the personal data

The analytics data are stored for a period of 26 months.
We take the liberty of removing and deleting non-company email addresses associated with individuals in our database.

Further information

For more information about Act-Ons privacy policy, please visit the website
https://www.act-on.com/privacy-policy/

Any questions about this Privacy Policy should be addressed
to privacy@act-on.com
or by postal mail at:
Act-On Software, Inc.,
121 SW Morrison St.
Suite 1600
Portland, OR 97204