Data Controller

We are the data controller responsible for the processing of personal data concerning our customers and business partners. You can find our contact information below:

PMH Systems A/S
Huginsvej 8, 4100 Ringsted
CVR No.: 33774745

It is not a requirement for our company to have an external DPO, but if you have any questions regarding the processing of your personal data, please contact us at [email protected].

Processing Activities

As the data controller in accordance with the GDPR, we carry out the following processing activities:

Cookies

When you visit our website, information about you is collected to customize and improve our content and to increase the value of the ads displayed.
If you do not wish to have information collected, you should delete your cookies (see instructions) and refrain from further use of the website.
Below, we explain what information is collected, for what purpose, and which third parties have access to it.

The website uses “cookies”, which are text files stored on your computer, mobile phone, or similar device for the purpose of recognizing it, remembering settings, performing statistics, and targeting advertisements. Cookies cannot contain malicious code such as viruses.

It is possible to delete or block cookies. See instructions: http://minecookies.org/cookiehandtering

If you delete or block cookies, ads may become less relevant to you and appear more frequently. You may also risk that the website does not function optimally or that some content becomes inaccessible.

The website contains cookies from third parties, which may include:

• Facebook Pixel

• Google Analytics

Communication with Potential Customers

When you contact us with questions or inquiries about our products or services, we process your personal data to engage in a dialogue with you — for example, to answer questions about our offerings.
We only process the information you provide us during this communication.

We typically process the following ordinary personal data: name, email address, and phone number.

Our legal basis for processing this data is Article 6(1)(f) of the GDPR (legitimate interest).
We delete our communication with you once it is clear whether you wish to use our services or not.

In special cases, data may be stored for a longer period if deemed necessary.

Customers

We process personal data about customers to ensure correct delivery of services. This may include name, address, service details, specific agreements, payment information, and similar.

Our legal basis for processing is Article 6(1)(b) of the GDPR (contract performance).

When the service has been delivered and any outstanding matters settled, the data will be deleted shortly thereafter.

Newsletter

We offer a newsletter subscription, which is entirely voluntary — and you can unsubscribe at any time.

The purpose of the newsletter is to send subscribers updates and news from our company, such as new content, services, or promotions.
We will only send emails if you have provided explicit consent. This requires you to enter your email address, after which you will receive a confirmation email to verify your subscription.

Our legal basis for processing your personal data (email address) is Article 6(1)(a) of the GDPR (consent).
We will store your data for as long as you are subscribed. If you unsubscribe, we will stop sending newsletters.

If no newsletters have been sent to you for one year, your consent will expire due to inactivity.
After unsubscribing, we will retain your consent for 2 years as documentation, in accordance with the Danish Consumer Ombudsman’s spam guidelines, section 11.3.

Accounting

We are required by law to retain accounting records. This includes invoices and similar documents that may contain personal data such as name, address, and service descriptions.

Our legal basis is Article 6(1)(c) of the GDPR (legal obligation).
We store this information for at least 5 years after the end of the financial year.

Job Applications

We gladly accept job applications to evaluate whether they match any employment needs in our company.
Our legal basis for processing job applications is Article 6(1)(f) of the GDPR (legitimate interest).

• Unsolicited applications will be reviewed promptly and deleted if no match is found.

• For applications to open positions, data will be deleted once the recruitment process is complete and the right candidate is hired.

• If you are hired or participate in a recruitment process, you will receive additional information on how we process your data.

Data Processors

We collaborate with external partners and suppliers, some of whom act as data processors on our behalf.
These may include providers of IT systems, hosting, consultancy, or marketing services.

We ensure that all data processors handle personal data responsibly.
Therefore, we enter into data processing agreements with all partners to safeguard your data and maintain security.

Disclosure of Personal Data

We do not share your personal data with third parties.

Profiling and Automated Decision-Making

We do not use profiling or automated decision-making.

Transfers to Third Countries

We primarily use data processors located within the EU/EEA or who store data within this area.
In some cases, data may be processed outside the EU/EEA, but only if adequate protection for your personal data is ensured.

Data Security

We maintain appropriate technical and organizational measures to keep your personal data secure.
We conduct risk assessments and continuously update our procedures to improve data protection.

Our staff receives ongoing GDPR awareness training, courses, and internal reviews to ensure compliance.

Your Rights

Under the GDPR, you have several rights regarding the processing of your personal data.
To exercise these rights, please contact us.

• Right of access: You can request access to the data we process about you.

• Right to rectification: You can have incorrect data corrected.

• Right to erasure: You can request deletion of your data in specific cases.

• Right to restriction: You may, in certain cases, restrict the processing of your data.

• Right to object: You may object to our processing, including for direct marketing.

• Right to data portability: You can request to receive your data in a structured, commonly used format and have it transferred to another controller.

For more information, visit the Danish Data Protection Agency’s website: www.datatilsynet.dk

Withdrawal of Consent

If processing is based on your consent, you may withdraw it at any time.

Complaints

If you are dissatisfied with our processing of your personal data, you have the right to lodge a complaint with the Danish Data Protection Agency:
www.datatilsynet.dk

Last updated: January 2024