Data Controller
We are the data controller for the processing of personal data about our customers and partners. You can find our contact details below:
VisBlue A/S
Bautavej 1A
DK-8240 Aarhus V
CVR no.: 36427957
We are not required to appoint an external DPO, but if you have any questions regarding the processing of your personal data, you can contact us at service@visblue.com.
Processing Activities
As a data controller under the GDPR, we maintain records of the following processing activities in our GDPR documentation.
Communication with Potential Customers
If you have questions about our website or would like to know more about our services, you can contact us via:
sales@visblue.com (sales inquiries)
service@visblue.com (customer support)
Tel. +45 71 99 69 96
Through this communication, we will process your personal data in order to engage in a dialogue with you — for example to answer questions regarding our services. We only process the information you provide in connection with our communication.
We typically process the following ordinary personal data: name, email address, phone number.
The legal basis for this processing is GDPR Article 6(1)(f).
Customers
We need to communicate with our customers to ensure that our services are delivered correctly. In this connection, we may process information such as name, address, services, special agreements, payment information, and similar data.
The legal basis for this processing is GDPR Article 6(1)(b).
Bookkeeping
We are required to retain all accounting records in accordance with the Danish Bookkeeping Act. This means we store invoices and similar documentation for accounting purposes. Such documents may contain ordinary personal data such as name, address, and service descriptions.
The legal basis for this processing is GDPR Article 6(1).
We retain these records for 5 years after the end of the current financial year.
Job Applications
We gladly accept job applications for the purpose of assessing whether they match a staffing need within our company.
If you send us a job application, the legal basis for processing your personal data is GDPR Article 6(1)(f).
If you submit an unsolicited application, we will assess whether your profile is relevant. If not, we will delete your information immediately.
If you apply for an advertised position and are not selected, your application will be deleted 6 months after the right candidate has been found.
If you proceed in a recruitment process and/or become employed, we will provide you with separate information regarding our processing of your personal data in that context.
Data Processors
We cannot handle everything ourselves, and therefore we collaborate with partners and suppliers, some of whom act as data processors.
External suppliers may provide systems for organizing our work, services, consultancy, IT hosting, or marketing.
It is our responsibility to ensure that your personal data is handled properly. We therefore set high standards for our partners, who must guarantee that your data is protected.
We enter into data processing agreements with all companies (data processors) that process personal data on our behalf to ensure a high level of security.
Disclosure of Personal Data
We do not disclose your personal data to third parties.
Profiling and Automated Decision-Making
We do not engage in profiling or automated decision-making.
Transfers to Third Countries
As a general rule, we use data processors within the EU/EEA or those who store data within the EU/EEA.
In some cases, this may not be possible, and we may use data processors outside the EU/EEA if they can provide adequate protection for your personal data.
Data Security
We keep personal data secure by implementing appropriate technical and organizational measures.
We have conducted risk assessments of our processing activities and introduced relevant safeguards — for example GDPR awareness training.
One of our most important measures is keeping our employees updated on GDPR through ongoing awareness training, GDPR courses, and regular reviews of our internal GDPR procedures.
Your Rights
Under the GDPR, you have several rights regarding our processing of your personal data.
If you wish to exercise your rights, please contact us so we can assist you.
Right of Access
You have the right to access the personal data we process about you, as well as additional information.
Right to Rectification
You have the right to have incorrect personal data corrected.
Right to Erasure
In certain cases, you have the right to have your data deleted before our regular deletion practices occur.
Right to Restriction of Processing
In certain cases, you have the right to have the processing of your personal data restricted. If processing is restricted, we may — apart from storage — only process your data with your consent, or for the establishment, exercise, or defence of legal claims, or to protect a person or important public interests.
Right to Object
In certain situations, you have the right to object to our otherwise lawful processing of your personal data. You can also object to the processing of your data for direct marketing purposes.
Right to Data Portability
In certain cases, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to have your data transferred from one data controller to another without hindrance.
You can read more about your rights in Datatilsynet’s guidance on data subject rights at www.datatilsynet.dk.
Withdrawal of Consent
If our processing of your personal data is based on your consent, you have the right to withdraw your consent at any time.
Complaint to Datatilsynet
You have the right to file a complaint with Datatilsynet if you are dissatisfied with the way we process your personal data. You can find Datatilsynet’s contact details at www.datatilsynet.dk.
We encourage you to stay informed about GDPR to keep up to date with the rules.