AI Support

GDPR

Written by Vemco Support | Aug 19, 2026, 1:27:31 AM

GDPR

This article explains how Vemco Group describes its GDPR approach for Vemcount users and related website services.

GDPR in this context describes how Vemco Group handles limited user personal data, security processes, sub-processors, documentation, and data subject rights in connection with Vemcount and the company website.

According to the official Vemco Group article, Vemco Group A/S acts as the data controller for personal data collected about users of Vemcount and the company website. The article states that, for Vemcount users, the personal data collected is limited to name, email address, and assigned company.

The article also states that Vemco Group uses personal data where necessary to perform its contract and for legitimate interests such as improving the application and website and helping keep systems and data secure.

In addition, the published overview describes internal GDPR work including data-flow mapping, data minimisation, security reviews, anonymisation of end-customer data, breach procedures, subject access request handling, sub-processor reviews, documentation, retention practices, and staff training.

Key GDPR areas covered in the official article

Area

What the article covers

Data controller and scope

Vemco Group states that it acts as the data controller for personal data collected about users of Vemcount and the website.

User data collected

The listed user data for Vemcount is name, email address, and assigned company.

Security and internal processes

The article describes data-flow reviews, data minimisation, security assessments, anonymisation of end-customer data, and breach procedures.

Sub-processors and transfers

The article explains that third-party service providers are reviewed and covered by data processing arrangements and transfer safeguards.

Rights, documentation, and training

The article refers to subject access request handling, documentation, retention and disposal policies, and staff training.

Key points to communicate

  • State clearly that the article is a high-level overview of Vemco Group’s published GDPR position.

  • Explain that the personal data listed for Vemcount users is limited to name, email address, and assigned company.

  • Mention that Vemco Group describes both contractual processing needs and legitimate-interest processing such as service improvement and security.

  • Highlight that the article includes organisational and technical measures such as data-flow reviews, minimisation, security checks, and anonymisation.

  • Note that the published overview also covers sub-processors, cross-border transfer safeguards, subject access requests, documentation, retention, and training.

  • Use the article as an overview page, not as a substitute for the official privacy, cookie, or contractual documentation.

  • Refer readers to the official public article whenever a more formal policy reference is needed.

Important: This article should be used as a practical overview only. For legal, contractual, or customer-specific privacy questions, always refer to the official public GDPR, privacy, and cookie documentation or the relevant internal owner.