At Vemco Group A/S, we respect your privacy. This privacy notice serves to clarify the general public of the nature, scope and purpose of our collection, usage, and processing of personal data. At the same time, we also seek to inform you (“data subject”) of your rights and the possible courses of action to take, if you wish to exercise them. We advise you to read this information thoroughly.
As a data controller, Vemco Group A/S highly prioritizes that the processing of your personal data is in compliance with the General Data Protection Regulation (“GDPR”). Accordingly, we will implement the necessary technical and organizational measures to ensure that your personal data is protected to the best of our ability.
To ensure transparency in our privacy practices, this policy is available on our vemcogroup.com home page and at the bottom of every vemcogroup.dk page.
The definition of personal data, processing, data subject, recipient, third party, consent, processor and controller has the same meaning as the one found in the applicable data protection law, including the GDPR.
- Name and Address of the controller
Vemco Group A/S
Røde Banke 77
Phone: +45 76 22 11 46
This privacy notice applies to all business processes in Vemco Group A/S, to all our websites, domains, mobile solutions, cloud services and communities.
- Nature and purpose of collection, processing and use
This section provides the details on the purposes and means of processing, the categories of personal data processed, the categories of recipients as well as the lawful basis for the processing of this data.
Vemco Group acts as a data controller, when we determine the purposes and means of processing the personal data of data subjects. More specifically, we control the personal data that we receive from you through contact forms and other means of direct communication on vemcogroup.com, whether you are a jobseeker, employed by or representing a Customer. We also control personal information about the software users of our application, Vemcount, including contact details about our Customer’s employees and our distributors, which are essential for us to carry out our services.
- Contact forms
When enquiries are made through our contact form provided on the website or other means of direct communication, personal data such as name and email-address are required for submission. This voluntary transmission of personal data is collected and retained for the purpose of responding to requests and offering support to users of our programs and services. The recipients are limited to authorized personnel and the personal data is not shared with any third parties, nor is there a cross-border transfer of such data to third countries.
- User Data in Vemcount
In order to use and access the services that we provide in Vemcount, you will need to provide us with your personal information to set up an account. Each software user of our Customer are required to be registered, which entails the storage of personal data, such as name, user name, email address and assigned company. These contact details are necessary for the entry into and performance of a contract with our Customer and for the purpose of contacting employees and representatives of the Customer in connection with enquiries and customer support. The processing of this personal data is likewise contract-based. Furthermore, the Customer has the option to forward reports to other persons, whose data they control, in which case personal data such as email address and phone number will be logged in our system in order to provide this service. These personal data are not shared with third parties and there is no transfer of personal data across borders.
- Job applications
If you are a jobseeker, personal data such as the application and CV, contact details and attached photo, which you have submitted voluntarily, will be stored for a limited time in order to evaluate your potential as a candidate for the job position. These are only shared with staff whom are involved in the job application evaluation process. You will be informed of the nature, scope and purpose of the processing of personal data at the first point of collection.
Vemco Group A/S has integrated Google Analytics as a component on this website and uses Google Adwords for tracking and remarketing.
Google Analytics is a web analytics service that collects, gathers and analyzes the behavior of website visitors. Google Analytics places cookies on your computer, which store information about access time, the location from which the access was made and the frequency of visits. This information is not personally identifiable. The purpose of the processing is to understand the traffic on our website. Google Analytics uses the collected data to evaluate the use of our websites in terms of activities and origin of the users, which are passed on to authorized personnel at Vemco Group A/S in the form of online reports.
Google Adwords is an advertising system in which advertisers bid on certain keywords for ads to appear on Google’s search results. A code is used to track conversions on the website from the clickable ads and cookies are placed on your computer to show advertisements you may be interested in when you leave the website. This information is not personally identifiable.
The purpose of the processing is to better personalize the advertisements shown to you, based on your previous behavior on our website and to optimize our paid search budget.
You are entitled to object to the collection of personal data and further processing of
such data at any time. You can choose to deny the setting of cookies on our website by
adjusting the web browser in use, and by the same means, delete any cookies that may already
be stored by Google Analytics at any time. If you wish to completely opt-out of
any processing of data conducted by Google Analytics, it is possible to download and install a
browser add-on (https://tools.google.com/dlpage/gaoptout), which will effectively prevent any transmission about visitor behavior to Google Analytics.
Further information about the data protection provisions of Google that apply to the processing
of personal data is to be found here https://www.google.com/intl/en/policies/privacy and
- Lawful basis for processing the data
The active opt-in of the processing of cookies constitutes consent. You are presented with the purpose of the processing and the option to change browser settings insofar that such processing is unwanted. The same applies to cookies placed by Google for web analytics and remarketing purposes.
The processing of personal data transmitted through contact forms on the website or any other means of direct communication is based on our legitimate interests in wanting to provide our Customer with support and improved services.
The data stored in Vemcount about the software users of our Customers are processed in order to perform our part of a contract. Furthermore, the email addresses and phone numbers of third parties to whom reports have been sent are logged in our system in order to fulfill the interests of our Customer.
The processing of personal data in the context of reviewing job applications and evaluating candidates for job positions is consented to upon submission of the application.
- Data retention periods
Any personal data is retained by the controller only for the duration of time that is necessary for fulfilling the purpose of processing the data, while also taking into account compliance with legal requirements under applicable laws. The processing of personal data shall cease by deletion or destruction, when the stated purpose is no longer applicable.
The duration of each type of cookie on our website is detailed in our cooke policy. Enquiries made through our support system will be kept only for a maximum of 1 year or for the duration of time it takes for the problem to be solved. Once this storage period expires, this data will be erased. The contact details of Vemcount users are stored until the end of the customer relationship. Job applications are erased when the position has been filled or after 6 months at the latest, unless otherwise agreed.
- Rights of the data subject
In relation to the controller’s processing of personal data, you shall have the following rights granted by the European directives and regulations, where appropriate.
- The right to be informed
- The right of access
- The right to rectification
- The right to erase
- The right to restrict processing
- The right to data portability
- The right to object
If you wish to exercise your rights, you may at any time directly contact the controller. These requests are handled manually by the controller.
We retain the right to reject requests that are unfairly repeatable, demand a disproportionate technical effort, affect the protection of the personal data of other data subjects, or any requests that are deemed extremely impractical to fulfill.
If the grounds for making a request is valid, Vemco group A/S will ensure that the request is complied with without undue delay.
You are at any time entitled to lodge a complaint with the supervisory authority of the EU country, in which the main establishment is based. Should you find the processing of personal data related to your identity to be unlawful, you can file a complaint to Datatilsynet, under the following contact details.
Borgergade 28, 5
1300 Copenhagen K
Tel. +45 33 19 32 00
Fax +45 33 19 32 18
- Sharing of information with third parties
As a rule, the controller does not forward personal data to third parties outside of the company. The exceptions are:
- With your consent
We only share your personal data with companies, organizations and individuals outside of the company, if you have consented to this. We require an active opt-in for this to take effect.
- Data processors
- Legal reasons
We only share personal data with companies, organizations and individuals outside of the company, if we have good reasons to believe that the access, use, storage and publication of such data is necessary to
- Comply with applicable laws, provisions or legal requests from public authorities.
- Register, prevent or in any other way to provide protection against fraudulence, security and technical problems.
At Vemco Group we prioritize the trust that is placed on us as a data controller. We are committed to ensure that any personal data we may process in providing our services are subject to the most complete protection in line with the GDPR. We have implemented a number of general organizational and technical measures to secure this, including:
- Access control to personal information, so as to only grant access where this is necessary.
- Data Processing Agreement with processors responsible for processing personal data on behalf of the company.
- Ensure that staff working with personal information are subject to confidentiality agreements.
- Personnel who have access to IT systems are provided with security training.
- Completion of risk assessment and documentation of all systems that process personal data, in order to ensure an informed basis for the security level of the processing of personal data in the company.
- Compliance and co-operation with supervisory authorities
- Revision history
This policy was last changed on the 15. March 2018