Data Protection

We are the data controller for the processing of the personal data that we handle about our customers and partners. You can find our contact information below.

De Wøhlk

Mosegårdsvej 3
7900 Nykøbing M - Denmark

CVR-nr.: 34331006

It is not a requirement for our company to have an external ekstern DPObut if you have questions about the processing of your personal data, you can contact us via daniel@dewoehlk.dk.

Processing Activities

As the data controller under GDPR, we have the following processing activities:

Website Visits

When you visit our website, we use cookies to ensure the website functions properly, which you can read more about in our [cookie policy].

Communication with Potential Customers

When you have questions about our site or want to learn more about our services, you can contact us via:

• Email
• Phone

Through this, we will process your personal datato engage in a dialogue with you, for example, to answer questions about our services. We only process the information you provide us during our communication.

Vi vil typisk behandle følgende almindelige oplysninger: navn, email, telefonnummer, addresse.

We typically process the following general information: name, email, phone number, address. Our legal basis for processing this personal data is Article 6(1)(f) of the GDPR.

We delete our communication with you once it is clear whether you want our services or not.

In special cases, there may be a need to retain your personal data for a longer period.

Customers

We need to communicate with our customers to ensure the service is delivered correctly. Through this, we may process information such as name, address, services, special agreements, payment information, and similar. 

The legal basis for processing this personal data is Article 6(1)(b) of the GDPR.

Once the service is delivered and any outstanding issues are resolved, we will delete the personal data shortly thereafter.

Accounting

We must keep all accounting records in accordance with the Accounting Act. This means we keep invoices and similar records for accounting purposes. These may include general personal data such as name, address, and service description.

Our legal basis for processing personal data for accounting is Article 6(1)© of the GDPR.

We retain these records for at least 5 years after the current financial year ends. 

Disclosure of Personal Data 

We do not disclose your personal data to third parties.

Profiling and Automated Decisions

We do not perform profiling or automated decisions.

Transfers to Third Countries

We primarily use data processors within the EU/EEA or those who store data within the EU/EEA. 

In some cases, this is not possible, and data processors outside the EU/EEA may be used if they can provide adequate protection for your personal data.

Processing Security

We keep the processing of personal data secure by implementing appropriate technical and organizational measures. 

We have conducted risk assessments of our personal data processing and have implemented appropriate technical and organizational measures to enhance processing security.

One of our key measures is keeping our employees updated on GDPR through ongoing awareness training, GDPR courses, and reviewing our GDPR procedures with employees. 

Rights of Data Subjects

Under the GDPR, you have several rights regarding our processing of your data.

If you wish to exercise your rights, please contact us so we can assist you.

Right to Access

You have the right to access the data we process about you, as well as additional information.

Right to Rectification

You have the right to have incorrect data about yourself corrected.

Right to Erasure

In certain cases, you have the right to have data about you deleted before our general deletion occurs.

Right to Restriction of Processing

In certain cases, you have the right to restrict the processing of your personal data. If you have the right to restrict processing, we may only process the data – apart from storage – with your consent, or for the establishment, exercise, or defense of legal claims, or to protect a person or important public interests.

Right to Object

In certain cases, you have the right to object to our otherwise lawful processing of your personal data. You can also object to the processing of your data for direct marketing.

Right to Data Portability

In certain cases, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to have these personal data transferred from one data controller to another without hindrance.

You can read more about your rights in the Danish Data Protection Agency’s guidance on the rights of data subjects, which you can find at www.datatilsynet.dk.

Withdrawal of Consent

When our processing of your personal data is based on your consent, you have the right to withdraw your consent. 

Complaint to the Data Protection Agency

You have the right to file a complaint with the Data Protection Agency if you are dissatisfied with the way we process your personal data. You can find the Data Protection Agency’s contact information at www.datatilsynet.dk.

We generally encourage you to read more about GDPR to stay updated on the rules.