Overview

Last updated: November 23, 2022

Privacy Policy​

We take data protection seriously. To inform you of how we process your personal information, we have adopted this privacy policy.

YAVICA Aps (CVR/VAT. 38679619) is the data controller with regard to any personal information we gather about you, and we make sure that your information is processed in compliance with the law.

If you wish to get in touch with us about our processing of your personal information, you can get hold of us at:

hello@yavica.com  or +45 22 88 00 00

Or reach out to our Data Protection Officer: Lill Larsen
Telephone: +45 71 74 99 86
E-mail: dpo@yavica.com

Processing of Personal Data

Personal data are all types of information that relate to an identifiable person. If you do not want us to process your data, it may be difficult for us to comply with some contracts and obligations.

We have implemented suitable technical and organisational measures to prevent your data from being accidentally or illegally deleted, publicised, lost, corrupted, leaked, misused, or otherwise treated in non-compliance with applicable law. We ensure that processing only takes place in adherence with the principles of data protection.


We keep data up-to-date

As our services depend on your personal information being correct and updated, we request that you inform us of any relevant changes in your personal information. You can use the contact points noted above to inform us of the changes. We will then make sure to update your information in our databases. If it comes to our attention that our information about you is incorrect, we will update it and notify you of this.

Please see below, the legal basis upon which we process your information, for what purpose and for how long we retain it.

Website visitors

When you visit our website, we will process the following personal information about you:

  • IP-address, dynamic IP-address, cookies, or any information collected through a contact form on the website, such as name, telephone number and e-mail address.

We collect personal data about website visitors for the purpose of:

  • Optimising our website to user preferences
  • Facilitating contact with users at their request
  • Optimising the running of our website
  • Our interest in marketing

 

We collect the information on the following legal basis:

  • Consent has been given through our consent form and/or cookie banner, cf. GDPR art. 6(1)(a)
  • The legitimate interest of the enterprise, i.e., optimal administration of the website, cf. GDPR art. 6(1)(f).

 

We retain the information no longer than legislation permits, and we will delete it, once it is no longer necessary for our purposes stated above. The retention period depends on the type of in-formation and the purpose of the processing. Typically, personal data on website visitors will be deleted at an annual revision.


Contact and service

When you contact us by email, telephone, contact form on the website, or by ordinary letter, we collect the following information about you:

  • Your contact information and the content of your inquiry.

 

We process this information on the following processing basis:

  • Consent has been given through our consent form, cf. GDPR art. 6(1)(a)
  • We process your information to be able to provide you with a service in connection with a contract, cf. GDPR art. 6(1)(b).

 

Your data is deleted when the purpose for storing the personal data no longer applies. This is concretely assessed based on the specific inquiry and the nature of the inquiry. We only process the information you have submitted and we do not collect any additional information.

Buying or selling

When we sell to you or buy from you, we process the following information about you:

  • General contact information, invoice information and the like.

 

We process this information on the following processing basis:

  • We process your information based on the fulfilment of a contract or a request before entering into a contract (The General Data Protection Regulation article 6 (1)(b)).

 

Information collected in connection with a purchase or sale will generally be deleted when we have delivered the service you have purchased, unless there is a specific reason to store the information for a longer period, e.g. a guarantee period, should you or we need to advertise.

We must keep accounting material for 5 years from the end of the financial year to which the purchase or sale relates.


Social Media

When you choose to follow or like us on social media such as LinkedIn, Twitter, and Youtube, you will see/receive news from us via social media.

When you like and/or follow us, we process the following information about you:

  • Your name
  • Photos
  • Video recordings
  • Titles
  • Company affiliation
  • Professional experience, etc.
  • Browsing history

 

The purpose of using social media is to keep interested followers updated on e.g. offers, new areas, points of attention.

We process this information on the following processing basis:

  • Our interest in marketing (The General Data Protection Regulation article 6 (1)(f)).



Recruitment

The purpose of collecting information about you in the recruitment process is to evaluate, whether you are a suitable candidate for a position with us.

Personal data processed in the recruitment process, is the information supplied in your application, CV and any other attached documents registered to you. It is not necessary for you to include your national ID-no./CPR-no.

Your application, including appendices, will be disclosed internally to personnel relevant to the recruitment process, but will not be disclosed outside of our enterprise.

If you are invited to a job interview, we will collect further information for use in the continuing recruitment process.

We process your information based on our legitimate interest (The General Data Protection Regulation article 6 (1)(f)), which is to assess your qualifications for the open position.

We retain your application, including appendices, for up to 6 months after the recruitment process has ended, after which your information will be deleted. The purpose of the retention beyond the end of the process is to safeguard our interests in case of complaints of discrimination, etc. during the recruitment process.

If we find your application relevant for a possible future position, we will retain it after acquiring your consent, (The General Data Protection Regulation article 6 (1)(a)).



Transmission of data

We use some third parties to store and process the information, including suppliers of IT solutions. These third parties only process information on our behalf and may not use it for their purposes.

In relevant cases, personal data is passed on to banks, debt collection, freight companies, etc.

We use data processors/suppliers to process personal data. We prioritize suppliers from the EU, as well as from third countries, which the EU Commission has approved in terms of the level of protection around personal information (The General Data Protection Regulation article 45).



Transmission of data to unsafe third countries

We use data processors in unsafe third countries. When legislation in these third countries does not offer the same protection of personal data as the EU does, we have an increased responsibility to ensure the protection of your data. 

Your personal data that we collect and process in connection with your interaction with us will be transferred to unsafe third countries. We have ensured that there is a legal basis for the transfer in the form of e.g., EU SCCs and that the information is processed under adequate security measures.

If you would like to know more about the transfer mechanisms that apply to your information, you can contact us by the above contact information. 



Your rights

By contacting us at the contact point at the top, you may:

  • achieve access to the personal information we have on you
  • rectify any faulty personal information
  • have your personal information erased
  • receive a copy of your personal information (data portability) for the purpose of moving it to another data controller
  • object to the processing
  • have the processing of your personal information restricted

 

When you contact us, requesting to exercise your abovementioned rights, we will respond within a month. If we cannot honour your request, you will receive an explanation.  

In order to exercise your rights, or if you have questions about our processing of your information, you can always contact us. Our contact information is at the top.  

If, after having been in touch, you are dissatisfied with how we process your information, you have the right to file a complaint with Datatilsynet.