We act as the data controller when we process personal data to carry out or observe our own internal interests. In other words, we determine the purposes for which personal data is collected and processed, and we essentially set the means for carrying out these processes ourselves.
In some contexts, we also act as a data processor. This is the case when we carry out a task for another party, either a data controller or processor, and where our processing of personal data is solely based on received instructions. In these situations, we do not determine the purpose of collecting and processing personal data ourselves, nor do we set the overall means for carrying out the delegated processes.
When we act as a data processor, we enter into a data processing agreement with the responsible party, which primarily sets out the terms and instructions for our processing of personal data. The agreements are made in accordance with the General Data Protection Regulation Art. 28.
Processing Activities
As a data controller, we carry out a number of processing activities, which mainly include personnel administration, implementation of customer collaborations and supplier partnerships, as well as marketing activities.
We maintain internal records of our processing activities.
Personnel Administration
We internally inform our employees about our processing of personal data about them.
Customer Collaborations
We collect and process necessary personal data to be able to collaborate with our customers. We strive to only collect the information that is necessary for carrying out the collaboration, including fulfilling our obligations.
Regarding customer collaborations, we typically only collect and process general personal data, such as name, address, phone number, email address, and similar contact information for the customer’s owners and contact persons.
In addition, information exchanged with us, such as email correspondence, phone notes, other mail, etc., is included.
Processing of such personal data is necessary to pursue our legitimate interests in relation to the administration of our business and fulfillment of obligations to customers.
Suppliers
We collect and process necessary personal data to be able to collaborate with our suppliers and other partners. We strive to only collect the information that is necessary for carrying out the collaboration, primarily including fulfilling our obligations and safeguarding our interests in relation to the purchase of goods and services.
Regarding suppliers and other partners, we typically only collect and process general personal data such as name, address, phone number, email address, and similar contact information from relevant contact persons.
In addition, information exchanged with us, e.g., email correspondence, phone notes, other mail, etc., is included.
Processing of such personal data is necessary to pursue our legitimate interests in relation to the administration of our business and general business operations.
Marketing Activities
We collect and process personal data in connection with our marketing activities.
We strive to only collect the necessary personal data to achieve the marketing purpose we have defined. See more about this under the other points below.
Our overall marketing activities include, among other things, sending newsletters, communication via social media, and use of cookies on the website, including Google Analytics for statistics.
You can read our cookie policy by clicking here.
The newsletter is sent via our own CMS system and therefore does not involve any third parties.
In our marketing, we use a number of social media platforms. When you use our pages on social media (e.g., FACEBOOK, YouTube, Instagram, and LinkedIn), we may process personal data about you as part of this, including:
- Information about your IP address
- Your user information
- The information you share on our pages
- The information mentioned in the privacy policy applicable to the social media you use (you can find the privacy policy on the social media’s website)
- As well as other information you choose to share with us
You should be aware that information you choose to publish via our social media pages will be shared with many people. You should therefore not describe circumstances or share pictures, etc., that you do not want to be publicly available.
We are joint data controllers with FACEBOOK for the processing of personal data that occurs when you use our FACEBOOK page.
You should therefore be particularly aware that FACEBOOK collects and processes information about you when you use our FACEBOOK page.
You can find additional information about how FACEBOOK processes your personal data in the privacy policy on their website.
What is stated here about FACEBOOK, applies similarly to other social media.
Where do we collect information from?
The personal data we collect and process is primarily collected from the registered individuals themselves. However, we also obtain information to some extent from other sources, such as public databases, etc.
Disclosure of Personal Data
Depending on the type of personal data in question, the processing purpose, and the context in which the personal data is involved, we may disclose personal data to third parties, including public entities such as municipalities, tax authorities, etc.
We also share personal data with suppliers to some extent when necessary for fulfilling the purpose of the collaboration.
We ensure that we have the necessary processing basis for disclosure when sharing personal data.
Processing Security
We ensure the confidentiality, integrity, and availability of the personal data we process through technical and organizational security measures.
Our technical security measures include the security of the IT support we use in our business. Our organizational security measures include that we have established guidelines and policies that our employees must follow. We follow up on this and train our employees to an appropriate extent.
Our processing security for personal data also includes ensuring lawful processing, including complying with the processing principles set by personal data legislation, as well as ensuring that we have a processing basis for our processing.
Deletion
We delete the personal data we collect and process when our processing purpose is fulfilled, and we therefore no longer need the information.
Rights of the Data Subjects
The individuals we process personal data about have a number of rights under personal data legislation, which we respect. The rights include:
- The right to request access to and rectification or erasure of personal data
- we process
- The right to restrict our processing of personal data about the data subject
- The right to object to processing
- The right, in certain cases, to receive personal data about oneself (data portability)
- The right to withdraw consent
If you as a data subject want to exercise your rights, you can contact us. You can find our contact information below.
Links to Other Websites and Social Media
On our website, we link to other websites, including social media. Forsinketfly.com A/S is not responsible for the content of other websites and their practices regarding the collection of personal data. We therefore recommend that you always read the privacy policy and other relevant policies of the website in question when you visit other websites.
Updating Our Privacy Policy
From time to time, it will be necessary for us to update this privacy policy. We regularly review our privacy policy to ensure that it is up-to-date, accurate, and in compliance with applicable legislation and principles for processing personal data.
We publish new versions on our website www.forsinketfly.com
This policy is version no. 2 and is effective from February 1, 2022.
Guest at Forsinket fly
Forsinket fly registers personal information about you when you are a guest with us.
In this context, we are obligated to provide you with a number of details about how we process information about you.
We are the data controller for the processing of your information, and our contact person is Karina Wollsen.
When you are a guest with us, we only process general contact information about you, such as name and company name.
We receive all this information from you when you register with us.
The purpose of the processing is to ensure an appropriate level of security with us, including identifying who is a guest and preventing unauthorized persons from being on our property.
The legal basis for the processing is Forsinketfly.com A/S legitimate interest in being able to ensure an appropriate level of security cf. the General Data Protection Regulation Art. 6, para. 1, letter f.
Your information is deleted no later than 1 month after you have been registered. Storage takes place during this period to ensure an appropriate level of security. If required by applicable law or necessary to establish a legal claim, the information may be stored for a longer period.
The information is not shared with third parties unless there are compelling reasons to share the information with the police or other authorities.
Your Rights
According to the rules in the General Data Protection Regulation, as a data subject, you have the following rights in relation to us:
- Right to access information (right of access)
- You have the right to access the information we process about you, as well as a number of additional details.
- Right to rectification (correction)
- You have the right to have inaccurate information about yourself corrected.
- Right to erasure
- In special cases, you have the right to have information about you deleted before the time of our general deletion occurs.
- Right to restriction of processing
- In certain cases, you have the right to have the processing of your personal data restricted. If you have the right to have the processing restricted, we may in the future only process the information – apart from storage – with your consent, or for the purpose of establishing, exercising, or defending legal claims, or to protect a person or important public interests.
- Right to object
- In certain cases, you have the right to object to our otherwise lawful processing of your personal data. This is the case when we have a legitimate interest that outweighs your interest. As a rule, processing will be stopped unless we can demonstrate compelling legitimate grounds for the processing, or the processing is necessary to establish a legal claim.
- Right to data portability
- In certain cases, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to have this personal data transferred from one data controller to another without hindrance.
If you believe the processing is in violation of the rules in personal data legislation, you can file a complaint with us.
Complaint
If you disagree or are dissatisfied with the way we process your personal data, you can complain to us.
You also have the right to file a complaint with the Danish Data Protection Agency if you are dissatisfied with the way we process your personal data.
You can find the Danish Data Protection Agency’s contact information at
www.datatilsynet.dk
Our contact information:
Forsinketfly.com A/S
Forstallé 28
6200 Aabenraa
CVR no.: 32363121
Our data protection responsible contact person is:
Name: Karina Wollsen
Phone: +45 73 33 31 70
Email: info@forsinketfly.com
You are welcome to contact us if you have questions or if you wish to exercise your rights.
We recommend that your inquiry be made in writing to ensure that no misunderstandings arise as a result of your inquiry.
Debt Collection Cases
We are data controllers for the processing of personal data that we collect and receive about debtors in a debt collection case, where we are requested to collect the creditor’s claim from the debtor in question.
If you are a debtor in a debt collection case (including a party in any legal proceedings arising from the debt collection case) that we are handling for the creditor, it means the following for you:
What information do we process about you?
From the creditor, we receive personal information about you in the form of your name, address, and information about the debt relationship. We may receive information about your CPR number, email address, phone numbers, contact information, economic, work-related, social, health-related, or possibly criminal matters, if the creditor is aware of these.
We may also receive personal information about you from others who are familiar with your circumstances, as a result of these others representing you during the case processing with us. This could be, for example, your lawyer or other advisor.
We may also obtain personal information about you from publicly available sources, including social media and databases, from which we will continuously update your basic data in the form of name, CPR number, and address with the sole purpose of being able to identify and locate you with certainty. In your capacity as a debtor, you may also provide us with personal information either in writing, orally, by telephone, or during court hearings.
For what purposes do we process your personal data?
We use the collected personal data about you solely for the purpose of collecting the creditor’s claim from you.
As part of this case processing, seizure may be made of your assets eligible for seizure according to the rules of the Administration of Justice Act, with a view to forcibly realizing seized assets to satisfy the creditor’s claim against you if necessary. Collected and received personal data will only be used to the extent necessary to establish and collect the creditor’s claim against you.
We may disclose personal information about you
During case processing, it may become relevant to disclose personal information about you to the following:
- Creditor
- Courts
- Approved debt collection consultants
- Attorney connections who appear on our behalf in the courts
- Carriers, locksmiths, craftsmen, etc., whom we may engage as part of the case processing
- Tax authorities, your landlord, or others who need to be notified of seizures made on your assets
- Auction house that will handle the sale of seized assets
- Credit information agencies
The processing of your personal data is based on the balancing of interests rule in Article 6(1)(f) of the General Data Protection Regulation and the legal basis rules in Article 9(2)(e) and (f). The legitimate interest that justifies the processing is the creditor’s interest in obtaining payment of their claim against you. We do not need to obtain your consent for personal data about you to be processed for this purpose.
How long is personal data about you stored?
As a general rule, we store your personal data for 5 years after a debt collection case is finally concluded. However, the retention period may be both shorter and longer in specific cases. In special cases, you have the right to have your personal data deleted before the main rule of deletion after 5 years. When we determine how long your personal data will be stored, consideration will be given to whether the debt has been settled, whether disagreements have arisen about the claim or case processing, and how long any liability can be asserted against us in connection with the case processing.
Your rights
According to data protection rules, you have a number of rights. These include the following:
- Right of access: You have the right to know if we are processing information about you, and if so, to access the personal data we are processing about you
- Right to rectification: You have the right to have inaccurate personal data about you corrected in the form of an amendment.
- Right to erasure: In certain cases, you have the right to have information about you that we process deleted.
- Right to restriction of processing: In certain cases, you have the right to restrict the processing we carry out in relation to personal data about you. Regardless of your request for restriction, we can still store the information and continue processing for the purpose of establishing, exercising, or defending legal claims.
- Right to object: You have the right to object to our lawful processing of your personal data. Despite an objection, we may process your personal data if we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or when the processing is necessary for the establishment, exercise, or defense of legal claims.
If you wish to exercise your rights under the General Data Protection Regulation, you must contact us as stated initially above.
You have the right to complain to the Danish Data Protection Agency if you are dissatisfied with our processing of your personal data.
The Danish Data Protection Agency’s contact information and details about the complaint process can be found at www.datatilsynet.dk
Special conditions for tenants, interested buyers, and auction buyers of assets
As part of our handling of debt collection cases, we assist in the forced realization of seized real estate or movable property by selling such assets at forced auction. The personal data we collect or receive from persons involved in a forced auction, e.g., as a tenant of the asset, interested buyer of the asset, or auction buyer of the asset, will be processed by us in the same manner as described above with the same rights for the persons concerned.
Legal proceedings
We are the data controller for the processing of personal data that we collect and receive about the parties in a given case that we handle.
If you are a client or otherwise a party in a case (including a party in any legal proceedings arising from the case) that we are handling for a client, it means the following for you:
What information do we process about you?
From our customer, we receive personal data about the customer themselves and any opposing parties, possibly in the form of name, address, and information about the case circumstances.
We may receive information about your CPR number, email address, phone numbers, contact information, economic, employment, social, health, or possibly criminal matters, if the client is aware of these.
We may also receive personal data from others who are familiar with such matters, as a result of these others representing you during the case handling with us.
This could be, for example, your lawyer or other advisor.
We may also collect personal data about case participants from publicly available sources, including social media and databases, from which we will continuously update any basic data such as name, CPR number, and address with the sole purpose of being able to identify and locate you with certainty.
As a case party, you can also provide us with personal data either in writing, orally, by phone, or during court hearings.
For what purposes do we process your personal data?
We use the collected personal data about you solely for the purpose of advancing the case processing within the legal framework that may be applicable at any given time.
Collected and received personal data will only be used to the extent necessary to handle the correct processing of the case.
We may disclose personal data about you
During case processing, it may become relevant to disclose personal data about you to the following:
- The courts
- Legal connections who appear on our behalf in the courts
The processing of your personal data is based on the balancing of interests rule in Article 6(1)(f) of the General Data Protection Regulation and the legal basis rules in Article 9(2)(e) and (f).
The legitimate interest that justifies the processing is the correct and efficient handling of the case.
We do not need to obtain your consent for personal data about you to be processed with this purpose in mind.
How long is personal data about you stored?
As a general rule, we store your personal data for 5 years after a case is finally concluded.
However, the retention period may be both shorter and longer in specific cases.
In special cases, you have the right to have your personal data deleted before the main rule of deletion after 5 years.
When determining how long your personal data will be stored, consideration will be given to whether disagreements have arisen about the claim or case handling, and how long any liability can be asserted against us in connection with the case handling.
Your rights
Under data protection rules, you have a number of rights. These include the following:
- Right of access: You have the right to know if we are processing information about you, and if so, to access the personal data we are processing about you
- Right to rectification: You have the right to have inaccurate personal data about you corrected in the form of an amendment.
- Right to erasure: In certain cases, you have the right to have information about you that we process deleted.
- Right to restriction of processing: In certain cases, you have the right to restrict the processing we carry out in relation to personal data about you. Regardless of your request for restriction, we can still store the information and continue processing for the purpose of establishing, exercising, or defending legal claims.
- Right to object: You have the right to object to our lawful processing of your personal data. Despite an objection, we may process your personal data if we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or when the processing is necessary for the establishment, exercise, or defense of legal claims.
If you wish to exercise your rights under the General Data Protection Regulation, you must contact us as stated initially above.
You have the right to complain to the Danish Data Protection Agency if you are dissatisfied with our processing of your personal data.
The Danish Data Protection Agency’s contact information and details about the complaint process can be found at www.datatilsynet.dk
