1.Data controller
As an accredited certification body and authorised entity, FORCE Certification A/S offers a number of services within the inspection and certification of products, management systems and persons, and in this respect processes various personal data. In this Personal Data Policy, you can read how we process your personal data when you are a customer, become certified, visit our website, or are in contact with us in other ways. FORCE Certification A/S is the data controller for processing your personal data. Our legal information is as follows: FORCE Certification A/S, Park Allé 345, DK-2605 Brøndby Telephone: +45 4325 0177, e-mail: info@forcecertification.com, CVR: DK31617677
2.Processing of your personal data
2.1.Personal data and purpose FORCE Certification A/S only processes personal data for specific, professional purposes. The amount and nature of personal data will vary according to the individual purpose. Below, the primary purposes are stated: WEBSITE When you visit our website, we collect your IP address, and information about your operative system, language setting, browser type, equipment type, actions on our websites, etc. The purpose of the processing is to be able to give you the best possible experience on the website. The legal basis for this is FORCE Certification A/S’ legitimate interest. SERVICES On providing quotations or purchasing services within the inspection or certification of products and management systems, we may process details of your name, address, title, place of employment, telephone number and e-mail address. The legal basis for this is FORCE Certification A/S’ legitimate interest. The purpose of processing is the establishment of the customer relationship and the delivery of the agreed service. PERSONAL CERTIFICATION In conjunction with personal certification, we may process details of your name, place of employment, title, address, telephone number, e-mail address, date of birth, photo, education, competences, etc. The basis for this is FORCE Certification A/S’ legitimate interest. In addition, we may process CPR (personal identity) number and health details, if this is a statutory requirement. The purpose of processing is to facilitate your certification and to issue a certificate. EVENTS, NETWORK GROUPS, CLUBS, ETC. On your registration and participation, FORCE Certification A/S may process details of your name, place of employment, title, address, telephone number, e-mail address, etc. The purpose of processing is to facilitate your participation. The legal basis for this is FORCE Certification A/S’ legitimate interest. VISITORS When visiting FORCE Certification A/S, on your arrival in reception you will be registered by name, place of employment, e-mail address and telephone number, just as some locations have video monitoring. This personal data is collected for security reasons. The legal basis for this is FORCE Certification A/S’ legitimate interest. COMPLAINTS AND APPEALS In complaint and appeal cases, we may process details of your name and address. The legal basis for this is FORCE Certification A/S’ legitimate interest. The purpose is to process your case.
2.2.Information obligation When FORCE Certification A/S collects and processes your personal data, we will inform you of this. The method by which you are informed will depend on the context in which we collect and process your data, and in each case, as a minimum, you will be informed via a reference to this Personal Data Policy.
2.3Rectification FORCE Certification A/S will continuously update your personal data, if we become aware that it has changed. We therefore ask you to inform us of any changes in your personal data. This can take place directly to your contact at FORCE Certification A/S or by e-mail to persondata@forcecertification.com.
2.4Transfer within the EU/EEA FORCE Certification A/S may transfer your personal data if this is necessary in order to deliver the agreed service, or to fulfil any official requirements. Any such transfer may be to consolidated companies, business partners or relevant authorities. On attending events, courses and training, your name and place of employment may furthermore appear on the list of participants issued to the other participants and any business partners for the event in question.
2.5Transfer to third countries FORCE Certification A/S may forward your personal data to recipients outside the EU/EEA. This may take place to the same extent and on the same basis as stated in clause 2.4. FORCE Certification A/S will ensure that there is an adequate level of protection on transfer to a third country, cf. articles 45-49 of the EU General Data Protection Regulation.
2.6Storage and erasure FORCE Certification A/S will retain your personal data for the period necessary for the purpose. This will vary according to the nature of the task, and is described in internal procedures and guidelines which ensure that no personal data is saved for longer than is justified on objective grounds. The period of time is determined on the basis of an overall assessment of the type and amount of personal data, FORCE Certification A/S’ legitimate interest, and the fulfilment of any customer or statutory requirements.
3.Your rights
You are entitled at any time to access the personal data that we process concerning you, but with certain statutory exemptions. In certain cases, you are furthermore entitled to object to the data collection, and to the further processing of your personal data. You are also entitled to the rectification, erasure or blocking of your personal data, according to the rules in this respect. You are furthermore entitled to receive the personal data that you have given to us. Enquiries concerning your rights can be made to us via e-mail to persondata@forcecertification.com.
4.Revocation of consent You may at any time revoke any consent that you may have given. We will then erase your data, unless we may continue to process it on other grounds.
5.Opportunity for appeal If you disagree with how we process your personal data, you are entitled to appeal to the: Danish Data Protection Agency, Borgergade 28, 5. sal, DK-1300 Copenhagen K, Telephone no. (+45) 3319 3200, e-mail: dt@datatilsynet.dk You can read more about your rights at www.datatilsynet.dk.