Privacy
Privacy Policy
Last updated: 8th of september
Data Controller
We are the data controller responsible for processing the personal data we collect and process about our customers, business partners, and visitors to our website. You can find our contact details below:
INOPOWER A/S
Bouet Møllevej 5
DK-9400 Nørresundby
Denmark
CVR No.: 26225132
Email: info@inopower.dk
Our company is not legally required to appoint an external Data Protection Officer (DPO). However, if you have any questions about how we process personal data, you may contact us using the email address provided above.
Processing Activities
As a data controller under the General Data Protection Regulation (GDPR), we carry out the following processing activities:
Visits to Our Website
When you visit our website, we use cookies to ensure that the website functions properly and to improve your user experience.
Necessary cookies are used based on our legitimate interest in providing a secure and properly functioning website (Article 6(1)(f) GDPR). Statistical/analytical cookies and other non-essential cookies are only used if you have given your consent (Article 6(1)(a) GDPR), which you may withdraw at any time.
Information about the cookies we use, how they work, and how you can give or withdraw your consent can be found in our Cookie Policy.
Communication with Potential Customers
If you contact us via:
- Contact form
- Telephone
we process the personal data you provide (such as your name, email address, and telephone number) in order to respond to your inquiry or discuss our services. This processing is necessary to respond to your inquiry and communicate with you.
Our legal basis for processing is Article 6(1)(f) GDPR (legitimate interests). Our legitimate interest is to respond to and follow up on inquiries and to pursue potential business relationships. If your inquiry relates to steps taken at your request prior to entering into a contract, we may also rely on Article 6(1)(b) GDPR.
Providing this information is voluntary. However, without it, we may not be able to respond to your inquiry. We delete communication data once it becomes clear whether or not you wish to use our services, unless a longer retention period is required in specific circumstances.
Customers
We process personal data about our customers in order to provide our services correctly. This may include your name, address, information about the service provided, special agreements, and payment details.
The legal basis for processing is Article 6(1)(b) GDPR (performance of a contract).
Providing this personal data is necessary for us to enter into and fulfill our contract with you. If you do not provide the information, we will not be able to provide our services to you.
Once the services have been delivered and any outstanding obligations have been fulfilled, we delete the personal data as soon as reasonably possible, subject to the retention period described under "Accounting and Bookkeeping" below.
Accounting and Bookkeeping
We are legally required to retain accounting records in accordance with applicable bookkeeping legislation. This includes invoices and similar documents that may contain personal data such as names, addresses, and descriptions of services.
The legal basis for processing is Article 6(1)(c) GDPR (legal obligation). The retention requirement follows from applicable bookkeeping legislation.
We retain this material for at least five years from the end of the relevant financial year.
Job Applications
If you submit a job application to us, we process your personal data for recruitment purposes.
The legal basis for processing is Article 6(1)(f) GDPR (legitimate interests). Our legitimate interest is to assess your qualifications and suitability for the position and to manage our recruitment process.
Unsolicited applications that do not match an open position are deleted as soon as possible. Applications for advertised positions are deleted shortly after the recruitment process has been completed if you are not selected. If you are hired, we will provide separate information about how we process your personal data as an employee.
Sources of Personal Data
In most cases, we collect personal data directly from you. In some situations, we may receive personal data about you from other sources, such as publicly available sources, business partners, or references you have provided. When we collect your personal data indirectly, the categories of information and purposes described in this policy apply accordingly.
Data Processors
We use trusted partners and suppliers to support our operations, including IT hosting, communication systems, marketing services, and business tools.
These parties may process personal data on our behalf. We ensure that they comply with the applicable GDPR requirements, and we enter into data processing agreements to protect your personal data.
Disclosure of Personal Data
We do not sell, rent, or otherwise share your personal data with third parties except as described in this policy or where required by law.
Automated Decision-Making and Profiling
We do not use automated decision-making or profiling in our processing of personal data.
Transfers to Third Countries
We primarily use suppliers located within the EU/EEA, and personal data is generally stored within the EU/EEA.
If we transfer personal data to countries outside the EU/EEA, this will only take place where appropriate safeguards have been established to ensure an adequate level of protection in accordance with applicable data protection legislation.
Security of Processing
We are committed to maintaining appropriate technical and organizational measures to ensure the security of personal data.
We conduct risk assessments of our processing activities and implement measures such as access controls, encryption where relevant, and ongoing employee training to protect personal data.
Your Rights
Under the GDPR, you have the following rights regarding the personal data we process about you:
- Right of Access: You may request access to the personal data we process about you.
- Right to Rectification: You may ask us to correct inaccurate personal data.
- Right to Erasure: In certain circumstances, you may request the deletion of your personal data before our ordinary deletion procedures apply.
- Right to Restriction of Processing: In certain situations, you may request that processing be restricted.
- Right to Object: You may object to our processing of your personal data, including for direct marketing purposes.
- Right to Data Portability: You may receive your personal data in a structured, commonly used, and machine-readable format and request that it be transferred to another data controller.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time.
Right to Object
Where we process your personal data based on our legitimate interests, you have the right to object to such processing at any time. You also have the right at any time to object to the processing of your personal data for direct marketing purposes.
To exercise your rights, please contact us at info@inopower.dk.
You can read more about your rights in the guidance published by the Danish Data Protection Agency at www.datatilsynet.dk.
Complaints
If you are dissatisfied with the way we process your personal data, you have the right to lodge a complaint with the Danish Data Protection Agency at www.datatilsynet.dk.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our processing activities or applicable legislation. The current version, including the date of the latest update, will always be available on our website.