Data policy for Head Connect ApS

På dansk

Data Responsibility

We take protection of your data seriously

We process personal data and have therefore adopted this privacy policy, which tells you how we treat your data and your rights connected to this.

To protect your personal data, we continuously assess the level of risk that might affect data security. We are particularly aware of the risk of discrimination, ID theft, potential financial losses, loss of reputation or data privacy.

In case we have to make decisions that depend on our ability to process sensitive personal data or biometric information about you, we analyze whether your rights to privacy will be impacted. Impact assessments are carried out before we start processing your personal data.

Contact information

Head Connect ApS is responsible for the data and to ensure that your personal data are processed in accordance with the law.

| | | | ----------------- |-------------------------- | | Contact Information: | Head Connect ApS | | Contact person: | Mathias Hovind | | CVR: | DK36930829 | Phone number: | +45 25211170 | Mail: | mathias@headconnect.dk | Website: | headconnect.dk |

| | | | ----------------- |-------------------------- | | Data Protection Officer: | Data Protection Service | Contact: | info@dpservice.dk | Website: | www.dpservice.dk

We ensure fair and transparent data processes

When we ask you to provide your personal data to us, we will inform you about the data we need about you and for what purpose. You will receive information about this as soon as we start collecting your personal data and we will ask for your consent before we collect any data.

If we collect data about you from others, we will inform you about it within at least 10 days after we have obtained your personal data. We also explain the purpose of the collection and the legal basis that allows us to collect your personal data.

Processing of personal data

What kind of personal data are we using?

We use data about you to complete our services and ensure quality in our products and services.

The data we use includes:

  • General personal data
  • Person sensitive data

We do not compile your data with data from other actors, e.g. from social media.

We collect and store your personal data for specific purposes

We collect and store your data for specific purposes or other legitimate business purposes. It happens when we work with:

  • Observations and documentation of behavior
  • Psychological tests
  • Background knowledge used for development processes, including leadership development, team development and other organizational development activities

We may need to use your personal data for a purpose other than what they were collected for. When that is the case, we ensure to ask for your consent unless the original purpose of collecting your data is compatible with the new purpose. For example, we consider which sources your data originates from and whether it's common or sensitive information we need to use. We also assess whether the use of your data for the new purpose will have negative consequences for your privacy.

We only use and collect relevant personal data

We only collect and use data about you that is relevant and necessary in relation to the purposes defined above. The purpose is crucial to what type of data about you is relevant to us. The same applies to the amount of personal data we use. For example, we do not use more data than needed for the specific purpose.

Before we process your personal data, we will investigate whether it is possible for us to minimize the amount of data about you. We also investigate whether some of the data types we use can be used in anonymous form. We can do that if it does not adversely affect our obligations or the service we offer you or your organisation.

We only process personal data that is necessary

Vi indsamler, behandler og opbevarer kun de We collect, process and store only the personal data needed to meet our intended purpose. Additionally, it may be decided by law what type of data is required to collect and store for our business operations. The type and extent of the personal data we process may also be required to fulfill a contract or other legal obligation.

We check and update your personal data

We verify that the personal data we deal with about you is not incorrect or misleading. We also make sure to update your personal data continuously.

As our service is dependent on your data being accurate and up to date, please inform us about relevant changes to your data. You can use the contact details above to notify us of any changes.

In order to ensure the quality of your data, we have adopted internal rules and established procedures for checking and updating your personal data.

We delete your personal data when they are no longer necessary

We will delete your personal data when they are no longer necessary to fulfill the purpose (of collecting, processing and storage), and no later than 5 years after we have collected data they will be deleted.

We will obtain your consent before processing your personal data

We obtain your consent before processing your personal data for the purposes described above unless we have a legal basis for obtaining them. We inform you of such a basis and our legitimate interest in processing your personal data.

Your consent is voluntary and you can withdraw it at any time by contacting us. Use the contact information above for more information.

If we wish to use your personal data for a purpose other than the original, we will inform you of the new purpose and ask for your consent before we begin the data processing. If we have another legal basis for the new treatment, we will inform you about this.

We do not disclose your personal data without your consent

We do not disclose personal data to other parties except for BestBrains P/S (the company that develops and hosts Feedbapp®).

We do not pass your personal data to third country parties either.

Security

We protect your personal data and have internal rules on information security

We have adopted internal rules on information security that contain instructions and actions that protect your personal data against being destroyed, lost or modified, from unauthorized disclosure, and against unauthorized access or knowledge of them.

We have established procedures for granting access rights to those of our employees who handle sensitive personal data and data that reveal information about personal interests and habits. We control their actual access through logging and supervision. To avoid data loss, we are continuously backing up our data sets. We also protect the confidentiality and authenticity of your data by encryption.

In case of a security breach that results in a high risk of discrimination, ID theft, financial loss, reputation loss or other significant inconvenience, we will notify you of the security breach as soon as possible.

Use of cookies

Cookies, purpose and relevance

We do not place cookies on your computer or mobile phone.

Your rights

You are entitled to access your personal data

You are entitled at any time to know what data we have about you, where they originate from and how we apply them. You can also find out how long we keep your personal data and who receives data about you.

At your request we share the data we have about you. Access may, however, be limited for the protection of other people's privacy, business secrets and intellectual property rights.

You can make use of your rights by contacting us. You can find our contact information at the top.

You have the right to have inaccurate personal data corrected or deleted

If you believe that the personal data we treat about you is inaccurate, you are entitled to correct them. You must contact us and indicate what the inaccuracies are and how they can be corrected.

In some cases, we will have an obligation to delete your personal data. This applies, for example, if you withdraw your consent. If you believe your data is no longer necessary for the purpose we obtained them, you may want to have them deleted. You can also contact us if you believe your personal data is being processed in violation of the law or other legal obligations.

When you address a request to correct or delete your personal data, we will investigate whether the conditions are met and, in that case, make changes or delete the data as soon as possible.

You have the right to object to our processing of your personal data

You have the right to object to our processing of your personal data. You may also object to our disclosure of your data for marketing purposes. You can use the contact information at the top to send an objection. If your opposition is justified, we will stop processing your personal data.

You are entitled to receive the personal data you have made available to us and those we have obtained from you with other parties based on your consent. If we process data about you as part of a contract where you are a part, you can also object to the use of your data. You also have the right to transfer your personal data to another psychologist.

If you wish to use your right to data portability, you will receive your personal data from us in a commonly used format.

If you wish to access your data, get them corrected or deleted, or object to our data processing, we will investigate and respond to your inquiry as soon as possible and no later than one month after we receive your inquiry.