Background
Welcome to Hansen Toft’s Privacy Policy. This policy explains what information we collect about you, why we collect it, and how we use it. This is important information, and we encourage you to take the time to read it.
Below, you can read about how Hansen Toft A/S (hereinafter “Hansen Toft”, “we”, “us” or “our”) processes your personal data when you visit our website (hansentoft.dk), receive our newsletter, contact us, engage in dialogue with us, use our services, do business with us or visit our premises.
We are the data controller – how to contact us
Hansen Toft A/S
Hasselager Centervej 1, 1st floor
8260 Viby J
Denmark
CVR no.: 26032385
Email: mail@hansentoft.dk
Hansen Toft is responsible for the processing of personal data. If you have any questions about how we process your personal data, you are always welcome to contact our GDPR representative at mail@hansentoft.dk.
Your personal data
We process your personal data differently depending on the nature of your contact with us, your relationship with us and the purpose of the processing. You can read more about the different types of processing below.
1. Website visits
Cookies
We use necessary cookies to ensure that our website functions properly. If you provide consent via our cookie banner, we also use cookies for statistics and to measure the effectiveness of our marketing. For these purposes, we use tools including Google Analytics and the LinkedIn Insight Tag.
You can change or withdraw your consent at any time via the cookie icon on our website. The cookie banner also provides an up-to-date overview of the individual cookies, their purposes, providers and retention periods.
Purpose
When you visit our website, we collect information about visitor behaviour in order to provide tailored advertising and optimise the website and user experience, provided that you have given your consent via the cookie banner. This information is primarily statistical.
If you do not provide consent, your personal data will only be processed through cookies that are necessary for the basic functionality of the website (strictly necessary cookies).
Legal basis for processing
When we process personal data collected for marketing, statistical or functional purposes, the legal basis is your consent provided through the cookie banner, cf. Article 6(1)(a) of the General Data Protection Regulation (GDPR).
If you do not provide consent, your personal data will be processed on the basis of Hansen Toft’s legitimate interest in providing the website content to you as a user, cf. Article 6(1)(f) of the GDPR.
Categories of personal data
The information collected includes aggregated website traffic, referral sources, duration of visits, most visited pages, device, operating system, country and browser. In addition, IP addresses are collected in anonymised form in order to determine the number of unique visitors to the website.
Recipients of personal data
We disclose information to our data processors in connection with services such as website hosting. In certain cases, your personal data may also be disclosed to third-party providers through cookies. You can read more about this processing in our cookie policy available via the cookie banner.
Retention of personal data
The information collected is retained solely for the purposes for which you have given your explicit consent. You can read more about the specific retention periods in our cookie policy.
Automated decision-making and profiling
The information collected is neither used for profiling nor for automated decision-making.
2. Customers and business relationships
Purpose
When you do business with us, we process your personal data for the purpose of completing and administering the transaction, including payment, delivery and invoicing.
Legal basis for processing
Personal data is processed on the basis of the agreement between the company and the data subject, cf. Article 6(1)(b) of the GDPR (performance of a contract).
Transaction data is subsequently retained in accordance with the requirements of the Danish Bookkeeping Act regarding audit trails, cf. Article 6(1)(c) of the GDPR.
Categories of personal data
The information collected includes your name, address, contact details, payment information and any information relating to the product or service purchased.
Recipients of personal data
Personal data may be shared with payment providers and banks. We may also disclose information such as name, title and contact details to candidates where necessary to carry out a recruitment process.
Retention of personal data
Personal data is retained for as long as necessary to fulfil the contract and to comply with statutory requirements, such as the Danish Bookkeeping Act, which may require information to be retained for up to five years.
3. Enquiries and contact
Purpose
When you contact us through our contact page, by email or in connection with an invitation to an introductory meeting, we collect and process personal data in order to respond to your enquiry.
Legal basis for processing
We process the personal data collected on the basis of our legitimate interest, cf. Article 6(1)(f) of the GDPR.
Categories of personal data
The information collected includes general contact details such as name, email address, telephone number, current position, company and any additional message concerning the nature of your enquiry.
We only collect personal data that you provide yourself.
Recipients of personal data
When you contact us through our contact forms, we do not disclose your personal data to third parties, although it may be processed by our data processors.
Retention of personal data
The information is deleted or anonymised promptly and no later than 12 months after registration or the most recent contact, unless the contact leads to a collaboration, customer relationship or another relationship of a similar nature.
If your enquiry leads to a candidate process or customer relationship, your information will be retained in accordance with our retention policy as described under the relevant processing activities.
Automated decision-making and profiling
The information collected is neither used for profiling nor for automated decision-making.
4. Newsletter
Purpose
When you subscribe to our newsletter, we collect and process personal data in order to send you emails containing information about updates, new products and services or other news to which you have consented.
Legal basis for processing
We process the personal data collected on the basis of your consent, cf. Article 6(1)(a) of the GDPR.
You may withdraw your consent at any time by contacting us or by unsubscribing using the link at the bottom of the newsletter.
If you withdraw your consent, documentation of that consent may be retained in accordance with Hansen Toft’s documentation obligations under applicable marketing legislation, cf. Article 6(1)(c) of the GDPR.
We may also send you service messages that are relevant to you as a customer, partner or candidate. Such information is processed on the basis of performance of a contract, cf. Article 6(1)(b) of the GDPR.
Categories of personal data
The information collected includes contact details such as name and email address. We only collect personal data that you provide yourself.
Recipients of personal data
We do not disclose personal data to third parties, although the information may be processed by our data processors.
Retention of personal data
The information is deleted or anonymised 24 months after withdrawal of consent or the most recently distributed job alert. The information is also deleted in accordance with the same retention period if we have not used the consent for 12 months.
Automated decision-making and profiling
The information collected is neither used for profiling nor for automated decision-making.
5. Recruitment processes
Purpose
When you apply for a position through our job portal or we contact you regarding a position, we collect your personal data in order to carry out the recruitment process.
This also includes obtaining information from your references with your consent.
Legal basis for processing
We process your personal data on the basis of your consent, cf. Article 6(1)(a) of the GDPR.
Categories of personal data
The information we collect in connection with the process includes your name, address, telephone number and email address.
We also process your CV and any information you voluntarily provide in connection with your application, such as educational certificates, transcripts or professional certifications.
In certain cases, you may be asked to complete a personality or ability assessment, in which case the resulting information will also be processed.
Finally, we collect information from your references in order to assess you as a candidate. This is only done with your explicit consent.
Information about salary expectations
As part of our recruitment assignments, we may, with your consent, collect and process information about your salary expectations. We may also record the expected salary level for a position following the completion of a recruitment process.
Following the completion of the recruitment process, information about expected salary levels may be retained and used to build general market knowledge of expected salary levels across, for example, different types of positions, industries and geographical areas. The purpose is to strengthen our advice to clients and provide a better basis for pricing and assessing salary levels in connection with recruitment assignments.
The information is collected on the basis of your consent, cf. Article 6(1)(a) of the General Data Protection Regulation (GDPR). The subsequent retention and use of the information for the purpose of building general market knowledge is based on Hansen Toft’s legitimate interest in developing and using relevant market knowledge as part of our recruitment and advisory activities, cf. Article 6(1)(f) of the GDPR.
The information is used for this purpose at an aggregated level and is not used to assess individual candidates.
Recipients of personal data
We only disclose your personal data to third parties with your consent in connection with potential job opportunities.
Your personal data may also be made available to our data processors that assist us with the recruitment process, such as recruitment or assessment platforms and HR systems.
Retention of personal data
Your personal data is retained for two years after you have given your consent. If you are appointed to a position, the information is retained for four years.
You can renew your consent on an ongoing basis and maintain your profile with us. Each time you apply for a new position, the date of your consent is updated, and we retain your data for two years from the new date.
If you choose to delete your profile, we will delete your information immediately.
Automated decision-making and profiling
The information collected is neither used for profiling nor for automated decision-making.
6. Job alerts
Purpose
When you create a job alert on our website, we collect personal data in order to send you information about potential job opportunities.
Legal basis for processing
We process your personal data on the basis of your consent, cf. Article 6(1)(a) of the GDPR.
You may withdraw your consent at any time by contacting us or by unsubscribing using the link at the bottom of the job alert.
If you withdraw your consent, documentation of that consent may be retained in accordance with Hansen Toft’s documentation obligations under applicable marketing legislation, cf. Article 6(1)(c) of the GDPR.
Categories of personal data
The information we collect when you register includes your name and email address.
Recipients of personal data
When you create a job alert, we do not disclose your personal data to third parties, although the information may be processed by our data processors.
Retention of personal data
The information is deleted or anonymised 24 months after withdrawal of consent or the most recently distributed job alert. The information is also deleted in accordance with the same retention period if we have not used the consent for 12 months.
Automated decision-making and profiling
The information collected is neither used for profiling nor for automated decision-making.
7. Marketing
Purpose
The purpose of the processing is to provide relevant and targeted marketing, including newsletters and information about products and services that may be of interest to you.
Legal basis for processing
Personal data used for marketing purposes is processed on the basis of your consent when we contact you through direct marketing or use targeted advertising on other websites, cf. Article 6(1)(a) of the GDPR.
Consent may be provided through our cookie banner, newsletter registration or another consent statement.
If we market similar products directly or use information about, for example, previous purchases to improve our marketing, the processing is based on our legitimate interest in marketing our products and services, cf. Article 6(1)(f) of the GDPR.
Categories of personal data
The personal data we process may include contact details such as your name, email address and telephone number, as well as behavioural patterns, preferences and interests relevant to our marketing activities.
Recipients of personal data
Personal data may be shared with third-party providers that assist with marketing campaigns and analytics tools, including email platforms, social media platforms and other digital advertising partners.
Retention of personal data
Personal data is retained for as long as necessary to fulfil the marketing purposes for which it was collected or until consent to the processing is withdrawn.
If consent is withdrawn, the information will be deleted without undue delay unless it forms part of the documentation of marketing consent. In such cases, the information will be deleted 24 months after its most recent use.
Automated decision-making and profiling
When marketing cookies are used, we may use information about your behaviour on our website to create audiences and display more relevant advertising, including on LinkedIn. This only takes place if you have consented to marketing cookies.
The distribution of newsletters, job emails and other direct marketing does not in itself constitute profiling.
We do not make automated decisions that have legal effects concerning you or otherwise significantly affect you.
8. Social media and LinkedIn
Purpose
When you visit our LinkedIn page, we collect information about your interaction with our profile in order to understand how users engage with our content and to respond to enquiries.
We may also conduct social media campaigns for the purpose of marketing our products and services.
In addition, we collect publicly available information from LinkedIn for the purpose of identifying and approaching candidates in connection with job opportunities.
Legal basis for processing
We process personal data collected in connection with enquiries on the basis of our legitimate interest in responding to your enquiry, cf. Article 6(1)(f) of the GDPR.
Marketing and the collection of personal data in connection with such marketing are carried out on the basis of your consent, cf. Article 6(1)(a) of the GDPR.
The processing of information collected for the purpose of contacting candidates is based on our legitimate interest in identifying suitable candidates through publicly available information, which is also considered to be in the interests of the data subject, cf. Article 6(1)(f) of the GDPR.
Categories of personal data
The information collected includes your name and corresponding personal data associated with your user profile on the relevant platform.
Allocation of responsibility
When we process your personal data in connection with our social media pages, your personal data has initially been collected by the relevant social media platform. In such cases, we act as joint controllers.
When we process your personal data in connection with campaigns and when responding to your enquiries, Hansen Toft acts as the data controller.
Recipients of personal data
We share information with social media platforms, which in certain circumstances act as independent data controllers. They have their own policies governing the processing of personal data.
We may also make information available to our data processors that assist us with analytics and marketing activities.
Retention of personal data
Personal data collected via social media is retained for as long as necessary to fulfil the purpose of the processing.
Information may be retained for a longer period in anonymised form for statistical and analytical purposes.
9. Recruitment for positions at Hansen Toft
Purpose
If you apply for a position at Hansen Toft, we process your personal data as part of the recruitment process in order to assess applicants for vacancies within our company and to contact you during the recruitment process.
Legal basis for processing
Your personal data is processed on the basis of your application and Hansen Toft’s legitimate interest in assessing and selecting candidates, which is also considered to be in the applicant’s interest, cf. Article 6(1)(f) of the GDPR.
If you consent to the retention of your personal data for more than six months, the processing will be based on Article 6(1)(a) of the GDPR.
Categories of personal data
The information we collect includes your contact details, such as your name, email address and telephone number.
We also collect your CV and any attached documents, such as an application, educational certificates, transcripts, professional certifications and, depending on the position, your driving licence.
In certain cases, you may be asked to complete a personality or ability assessment, in which case the resulting information will also be processed.
Finally, we collect information from your references in order to assess you as a candidate. This is only done with your explicit consent.
Recipients of personal data
Your personal data is not disclosed to third parties without your consent but may be made available to our data processors that assist us with the recruitment process, such as recruitment or assessment platforms and HR systems.
Retention of personal data
Your personal data is retained for two years after you have given your consent.
You can renew your consent on an ongoing basis and maintain your profile with us. Each time you apply for a new position, the date of your consent is updated, and we retain your data for two years from the new date.
If you choose to delete your profile, we will delete your information immediately.
If you are employed by Hansen Toft, your information will be retained until your employment ends.
Automated decision-making and profiling
The information collected is neither used for profiling nor for automated decision-making.
Transfers to countries outside the EU/EEA
In some cases, it may be necessary to transfer your personal data to recipients in countries outside the EU, including countries that do not have equivalent data protection legislation.
Such transfers will only take place where necessary for the purposes described in this Privacy Policy or as required by applicable law. Transfers only take place in connection with our use of data processors in order to provide our services and products.
We take appropriate measures to ensure that your personal data is adequately protected during such transfers.
Your information will primarily be processed in countries for which the European Commission has adopted an adequacy decision. If your information is transferred to third countries without an adequacy decision, we use Standard Contractual Clauses approved by the European Commission.
You can contact us at mail@hansentoft.dk to request a copy of these clauses.
Withdrawal of consent and objections
If you wish to withdraw your consent or object to our processing of your personal data, please contact us at mail@hansentoft.dk.
Please note that withdrawing your consent does not affect the lawfulness of processing carried out before your consent was withdrawn.
Nor does it affect the processing of your personal data based on another lawful basis, such as compliance with legal obligations or the pursuit of legitimate interests.
Your rights
Under the GDPR, you have a number of rights in relation to our processing of your personal data:
- Right of access: You have the right to obtain access to the personal data we process about you as well as certain additional information.
- Right to rectification: You have the right to have inaccurate personal data about you corrected.
- Right to erasure: In certain circumstances, you have the right to have personal data about you deleted before our standard retention period expires.
- Right to restriction of processing: In certain circumstances, you have the right to restrict the processing of your personal data. Where processing has been restricted, we may subsequently process your data – apart from storing it – only with your consent, for the establishment, exercise or defence of legal claims, for the protection of another person, or for reasons of important public interest.
- Right to object: In certain circumstances, you have the right to object to our otherwise lawful processing of your personal data.
We are also required to inform any recipient to whom personal data has been disclosed of any rectification, erasure or restriction of processing, unless doing so proves impossible or involves disproportionate effort.
At your request, we will inform you of the recipients to whom your personal data has been disclosed.
If you wish to exercise any of these rights, please contact us using the contact details above.
Complaints
If you wish to submit a complaint regarding our processing of personal data, please send an email describing your complaint to the email address stated in this Privacy Policy. We will review your complaint and respond to you.
You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) regarding Hansen Toft’s processing of your personal data.
For further information about how to submit a complaint to the Danish Data Protection Agency, please visit www.datatilsynet.dk.