1. introduction
Personal data is information that can be attributed to a specific person (the data subject), and can for example be name, address, telephone number, social security number, or other information about health, sexual orientation, or trade union.
JH Packman is responsible for ensuring the integrity and protection of your personal information when you use our services or visit our website. This privacy policy, which complies with the EU General Data Protection Regulation (GDPR) and Danish laws, describes how JH Packman will process and ensure that the rights of data subjects are met.
JH Packman takes your data protection seriously and in order to protect your personal data in the best possible way, we continuously assess the risk of our data processing negatively affecting your fundamental rights. In particular, we pay attention to the risk of you being subject to discrimination or ID theft, suffering financial loss, or loss of reputation or data confidentiality.
We pay particular attention to these principles:
- That your personal data must be processed in a lawful, fair and transparent manner.
- Personal data is collected or generated for a specific, explicit and legitimate purpose.
- Only data that is relevant and limited to what is necessary for the intended purpose is collected or generated.
- That the data is accurate and kept up to date.
- That the data is only retained for as long as necessary to process or as required by required by law.
- That the data shall be processed with the necessary security measures.
As data controller, JH Packman must be able to demonstrate that the above principles are met both within JH Packman, with any suppliers, partners, and where the data is transferred.
This privacy policy is presented in the following information:
- Contact information.
- What personal data we collect, how we collect it and how we use it.
- Who has access to your data and how long we keep the data.
- What we do to protect your data and general information about data security at JH Packman.
- What your rights are.
- If there is information you are looking for that is not in this privacy policy or there is anything else you would like to explain to us, please feel free to contact us. Contact details can be found in the next section.
2. Contact information
JH Packman ApS is the data controller and we ensure that your personal data is processed in accordance with the law. If there are any questions about this policy, how we process your data, or if there is a complaint, these contact details can be used.
In the unlikely event that there is a confirmed or suspected data breach, please also contact JH Packman immediately.
Contact person / DPO: Mikkel Hansen, Email: mikkel@jhpackman.dk
Address: JH Packman ApS, Nimbusvej 7, 2670 Greve, Denmark
CVR: 12673108
Phone number: 43735555
Mail: info@jhpackman.dk
Website: https://jhpackman.dk
3. Collection of personal data
JH Packman collects personal information in order to provide our services to you. This can be information that is collected or generated when you e.g. visit our websites (cookies), register as a new customer or use our services.
3.1 What data do we collect?
The type of data we collect is limited to general personally identifiable data.
- General contact info (name, address, email, phone number, company information, possibly job title)
- Order and delivery history
3.2 Consent
Some processing operations require explicit consent from you. This applies, for example, to processing operations such as marketing and customer surveys that are not necessary for the fulfilment of a contract or the law. In these situations, JH Packman will need your consent to collect and process your personal data. The consent explicitly states what data we process, how we do it and why. It is also stated how long a consent is valid.
As a data subject, you have the right to withdraw your consent at any time. JH Packman ensures that it is as easy to withdraw consent as it is to give consent.
In connection with the General Data Protection Regulation, JH Packman will in relevant contexts keep records to demonstrate that consent has been given for the processing of personal data.
3.3 Cookies
Before we place cookies on your device, we ask for your consent. However, cookies that are necessary to ensure functionality and settings can be used without your consent. You can find more information on our website about our use of cookies and how you can delete or reject them. If you want to withdraw your consent, please see the instructions under our cookie policy.
3.4 Embedded content from other websites
Articles on this website may contain embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in exactly the same way as if the visitor had visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking and monitor your interaction with the embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
4. Who has access to your data
4.1 Access
To ensure that only the people who need to see your personal data have access to it, JH Packman has implemented strict access restrictions to the systems where personal data is stored and processed. This means that unless an employee has a task to perform that is directly related to your customer relationship, they do not have access to your information. Depending on the task at hand, they will only have access to parts of your data that are necessary to fulfil the task. We also require our partners and suppliers to implement similar restrictions if they handle your personal information on our behalf.
We do not share your personal information with anyone outside of JH Packman except in the following situations:
- For external processing, as part of providing you with a product or service
- In situations where we share (transfer) data to a subcontractor or partner, we make sure to transfer only the data they need to help us fulfil their part of providing you with a service or product. We also ensure that suppliers or partners process the data in a secure and confidential manner and, where applicable, according to our instructions.
- With your consent
- We only share personal data with companies, organisations or individuals outside of JH Packman when we have your consent to do so.
- For legal reasons, including to:
- Comply with applicable law, regulation, legal process or enforceable governmental requests.
- Enforce applicable terms of service, including investigation of potential violations.
- Detect, prevent or otherwise address fraud, security or technical issues.
- Protect the rights, property, or safety of JH Packman, our users, or the public as required or legally permitted.
It may be that a supplier has parts of their services operated or stored in a country outside the EU (in a so-called third country), and thus your data is transferred outside the EU. In these situations, our subcontractors are required to ensure that the same security regulations and measures that protect your data within the EU are also applied to the data transferred outside the EU. This means that your personal data is equally secure whether it is processed within the EU or in a third country.
4.2 Storage
JH Packman does not store your data longer than legally required or what is necessary to provide our services to you or is necessary for traceability in case of incidents, disputes etc.
We have a general deletion policy which describes how long we keep certain types of data and can be referred to if there is any doubt.
We will ensure that the data retention time (the time the data is stored) that we have in our own systems is reflected in our subcontractors’ systems. They will not store your data longer than we do.
5. General security in JH Packman
To ensure that the processing of your data is carried out in a secure manner, we have paid special attention to the systems where personal data is processed. JH Packman has taken a risk-based approach to securing the IT environment used to provide our services and for storing or processing personal data.
We have adopted internal information security rules that contain instructions and measures to protect your personal data from destruction, loss or alteration, from unauthorised disclosure, and from unauthorised access or knowledge.
We have established procedures for granting access rights to our employees who process sensitive personal data and data revealing information about personal interests and habits. We control their actual access through supervision and in some cases logging. To avoid data loss, we regularly back up our data sets. We also protect the confidentiality and authenticity of your data as much as possible through encryption.
6. Your rights
You have the right to request access to, rectify, export or suspend the processing of your data. JH Packman will act in accordance with Danish and EU law and will support you along the way.
We understand that different people have different security needs. JH Packman strives to be transparent in what data is collected so that you have the opportunity to exercise your rights to access, correct, export, delete or suspend the processing activities.
6.1 Right of Access
As a customer of JH Packman, you have the right to request access to your personal data that we process. To protect your personal data, JH Packman must verify your identity in an official manner before we grant you access to the personal data.
The personal data that JH Packman may grant you access to depends on which services you use. In the event that JH Packman processes personal data relating to you, we may provide you with access to the following information upon request:
- The purpose of the processing.
- The types of your personal data we process.
- The organisation or individuals who have access to your personal data.
- The time we store that type of personal data.
- If data is not collected from you, where we got the personal data from.
- If applicable, the details and impact of profiling or automated decisions on your personal data.
- If applicable, the security measures in place for international transfers.
6.2 Right to data portability
As a customer, you have the right to have your personal data disclosed. To protect your personal data, we must verify your identity in an official manner before we give you access to the personal data.
The personal data that we can export to you depends on which services and products you use. In the event that JH Packman processes personal data relating to you, we may, upon request, export the information you have provided in connection with the use of our services, including contact and login information and any usage history.
Requests for data portability can be made orally or in writing. All requests will be processed without undue delay and within one month you will receive an update with confirmation of the transfer or an estimated time of completion of the export.
6.3 Right of rectification
JH Packman strives to ensure that the personal data stored and collected is accurate. In cases where you have become aware that information is inaccurate or incomplete, you are encouraged to contact JH Packman to rectify the inaccurate or incomplete personal data.
JH Packman retains the right to deny requests for rectification if the request is unfounded or excessive. In such cases, JH Packman reserves the right to request a reasonable fee to fulfil the request to compensate for administrative costs.
Requests for rectification may be made orally or in writing. All requests will be processed without undue delay and within one month you will receive an update with confirmation of the rectification or an expected time for the rectification to be finalised.
6.4 Right to deletion
JH Packman is legally required to follow Danish and EU laws regarding the collection and storage of specific types of data, for example, contracts and invoices. For personal data that falls outside the scope of these laws, JH Packman has created a standard erasure policy to cover specific types of data to ensure that no personal data is kept longer than necessary. Under certain circumstances, as a data subject you have the right to be forgotten and you can contact JH Packman if you want your personal data deleted.
You have the right to have your personal data erased by JH Packman if:
- The personal data is no longer necessary (i.e. you are no longer a customer of JH Packman and it is not lawful to retain the data – see below).
- You withdraw consent.
- You object and there are no legitimate grounds to process your personal data.
- The data has been processed unlawfully.
- It must be deleted due to legal obligation (Danish or EU law).
You do not have the right to delete personal data when the processing is necessary:
- To exercise the right to freedom of expression and information.
- To comply with a legal obligation under Danish or EU law.
- For reasons of public interest.
- For archiving purposes related to public interest, scientific, historical or statistical purposes.
- For the establishment, exercise or defence of legal claims.
Requests for erasure can be made orally or in writing. All requests will be processed without undue delay and within one month you will receive an update with confirmation of the deletion or an estimated time when the deletion will take place.
6.5 Right to suspend processing
Under certain circumstances, you as a data subject have the right to restrict (suspend) the processing of your personal data by JH Packman.
You have the right to have your personal data processing suspended if:
- You contest the accuracy of the personal data (JH Packman will suspend the processing until verification of the validity of the personal data has occurred).
- The processing is unlawful, but instead of erasing the personal data, you request the suspension of the processing.
- JH Packman no longer needs the personal data for the decided purpose of the processing, but must retain the data for the establishment, exercise or defence of legal claims.
- You object to the processing pursuant to Article 21 of the GDPR.
When your personal data is restricted or suspended, there are certain cases where processing can continue (see below). In these cases, personal data will only be processed:
- With your consent; or
- For the establishment, exercise or defence of legal claims, or
- For the protection of the rights of another natural or legal person; or
- For reasons of important public interest of the European Union or Member State.
If you have suspended the processing of personal data, JH Packman will inform you before the suspension of processing is lifted.
7. Complaints
Complaints about JH Packman’s processing of personal data can be directed to:
Datatilsynet Borgergade 28,5 1300 Copenhagen K
dt@datatilsynet.dk
www.datatilsynet.dk
8. changes to this policy
This policy will be reviewed regularly and updated if there are changes to the data processing. Any changes will be published here and, if significant, notified to JH Packman’s customers via email and other means of communication.