We use this type of data about the customer
We use the personal data provided by the customer in order for us to solve the agreed task. It also includes the data that appears in the customer's tax folder to the extent that the customer gives us access to it.
This is information on the customer's financial, fiscal and business circumstances.
We only process necessary personal data
We collect, process and store only the personal data necessary to perform the agreed tasks. This applies in principle to the Personal Book, the Land Registry, the Danish Business Authority, the CVR register, skat and ejerregisteret.
In addition, it may be determined by law what type of data is necessary to collect and store for our business operations. This applies, for example, to the Bookkeeping Act and the Danish Anti-Money Laundering Act (see below in the last section).
We delete personal data when it is no longer necessary
We delete personal data when it is no longer necessary for the purpose for which the collection was made. As a rule, it will be after the end of customer relations. However, customer data for use in accounting material is always stored for at least 5 years due to the rules of the Danish Bookkeeping Act and the Danish Money Laundering Act.
Disclosure and entrustment of personal data
We disclose and entrust personal data to business partners and other actors if necessary to fulfill the agreement that we have entered into with the customer.
We do not disclose personal data for purposes that do not result from the agreement – e.g. disclosure to others for the purposes of their marketing – unless we have agreed with the customer in connection with the collection or obtain consent from the customer after informing them of what the customer's data will be used for. The customer may at any time ask us to stop the disclosure of personal data, regardless of the agreement or the customer has otherwise consented to it.
However, we do not obtain the customer's consent if we are legally obliged to disclose personal data, e.g. as part of a statutory report to an authority.
The customer has the right to access his personal data
The customer has the right to know at any time what data we process about them, where it comes from and what we use it for. The customer can also be informed how long we store personal data and who receives data about the customer.
However, access may be restricted for the privacy of other persons, business secrets and intellectual property rights. The customer can make use of rights by contacting us.
The customer has the right to have inaccurate personal data corrected or deleted
If the customer believes that the personal data we process about the customer is inaccurate or incorrect, the customer can of course contact us and have it corrected.
In some cases, we will have an obligation to delete personal data. This applies, for example, if the customer withdraws his consent. If the customer believes that data is no longer necessary for the purpose for which we obtained it, the customer can ask for it to be deleted. The customer can also contact us if the customer believes that personal data is processed in violation of the law or other legal obligations.
The customer has the right to object to our processing of personal data
The customer has the right to object to our processing of personal data. The customer may also object to our disclosure of data for marketing purposes. If the customer's objection is justified, we will stop processing and delete the customer's data unless we are required by law to store it.
If the customer wishes to use their right to data portability, the customer will receive personal data from us in a commonly used format
The customer has the right to receive the personal data made available to us by the customer and those we have obtained about the customer from other actors on the basis of the customer's consent.
General about the customer's use of his rights
If the customer wishes to access data, have it corrected or deleted, or to object to our data processing, we will check if it is possible and provide the customer with a response to your inquiry as soon as possible and no later than one month after we have received the request.
Right of appeal
The customer has the right to complain to the Danish Data Protection Agency if the customer believes that Sandgrav Solutions' processing of personal data does not meet the legal requirements.
Collection of information under the Danish Anti-Money Laundering Act
We are obliged to collect information in accordance with the rules of the Danish Anti-Money Laundering Act and in this connection:
- Identity and control information and copies of proven credentials are obtained when establishing the customer relationship.
- Documentation and records of transactions carried out as part of a business relationship or individual transaction shall be obtained.
- In the event of suspicion that the customer is committing money laundering or terrorist financing, documents and records relating to completed investigations will be obtained.
- Information is provided that the information obtained about the customer will only be used to fulfill the auditor's obligations under the Danish Money Laundering Act and not for e.g. marketing purposes.
- Please note that the information may be passed on to SØIK in case of suspicion that the customer is believed to be involved in money laundering or terrorist financing.
- Please note that the customer has the right of access to the registered information.
- Please note that the information is stored for 5 years and will normally be deleted 5 years after the last engagement with the customer.
- Please note that the customer has the right to have incorrect information recorded corrected.