PRIVACY POLICY
North Media A/S
Gladsaxe Møllevej 28
2860 Søborg
DK
Business Registration No: 66590119
This is version 2, last updated on 02.07.2022 13:30.
1. INTRODUCTION
1.1 This personal data policy (the "Policy") describes how North Media A/S ("us", "we" or "our") processes your personal data on the website.
1.2 The Policy has been formulated and made available to comply with the General Data Protection Regulation (2016/679 of 27 April 2016) ("GDPR") and its rules on information obligations.
2. TYPES OF PERSONAL DATA PROCESSED
2.1. Website
When you visit our website www.northmedia.dk, the browser you use on your device automatically sends the IP address of the internet-connected device visiting the website:
1. Date and time of access
2. Name and URL of the file being downloaded
3. The website/application that was used to access (referrer URL), the browser you use and, if applicable, the operating system of your internet-connected computer and the name of your internet service provider
If you are a customer/partner/supplier, we collect and process the following personal data about you:
- General contact details of customers/partners/suppliers and their contact persons and other customer/supplier enquiries. Contact information can be provided by the employer or by yourself. In addition, we record statutory information about business partners and their employees.
If you apply for a job with us, we collect and process the following personal data.
When you apply for a job at North Media, we will process some personal data about you. We will process the personal data contained in your application, CV and other supporting documents you have attached to your application. We will also process the information that you provide during any interview.
In some cases, you will be asked to complete a personality and skills test as part of the recruitment process. We use the results as a
element in our assessment of whether you have the right profile for the specific position.
North Media do not wish to process your personal data or other particularly sensitive data (health data, sexual orientation, etc.) in
recruitment process. We therefore ask you to delete your social security number and other particularly sensitive information if they appear in the documents you want to send us.
2.2 If we need to collect and process additional personal data than indicated above, we will inform you at the time of collection. Such disclosure may also be made when updating this Policy.
3. PURPOSES OF THE PROCESSING OF PERSONAL DATA
3.1. We will only process your personal data if we have a legitimate purpose and, if so, in accordance with the rules of the GDPR. Personal data may be processed for the following purposes, as appropriate:
a) To prevent fraud and deception or misuse of our products, services and website, including the processing of personal data for use in
in connection with legal proceedings.
Homepage
On our website's server, the information is temporarily stored in a so-called log file for the following purposes:
1. Ensuring a smooth establishment of the connection
2. System security and stability analysis
Job applicants:
The purpose of the processing is to assess and respond to your application.
4. LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
4.1. We will only process your personal data where we have a lawful basis for doing so in accordance with the GDPR. The processing of personal data is carried out on the basis of the following processing grounds, depending on the specific circumstances:
(a) the processing is necessary for the performance of a contract with the data subject
person, in accordance with Article 6(1)(b), first indent, GDPR.
Homepage
Our legitimate interest follows the purposes of the data processing activities stated above, as well as the consent you have given us via the cookie consent you encounter when you start browsing our website, in accordance with Article 6(1)(a) of the Data Protection Regulation.
You decide about your data. We need your consent to use/set cookies (i.e. place cookies on your tablet/computer/phone). You therefore have the option, when browsing the website, to consent or decline the cookies we may place on your device. You can refuse all types of cookies except necessary cookies, which are necessary technical cookies that make our website work on your PC/tablet/mobile phone.
Customer/partner/supplier:
The legal basis for the processing of personal data originating from customers/suppliers/co-operators is found in Article 6(1)(b) of the GDPR, where processing is necessary/lawful for the performance of a contract to which you are party or for the implementation of measures taken at the request of the data subject prior to entering into a contract, as well as the pursuit of a legitimate interest of North Media, Article 6(1)(f) of the GDPR, which consists in going about its business.
Job applicants:
The legal basis for processing your personal data, our legitimate interest, in the recruitment process is found in Article 6(1)(f) of the Data Protection Regulation. Our legitimate interest is justified by finding the best possible candidate for the job. In those cases, we will obtain references, etc., which will be done on the basis of your written consent, as described in Article 6(1)(a) of the GDPR.
4.2. Physical visitors to our location. TV surveillance
North Media conducts TV surveillance of a number of areas, outdoors and indoors, at our locations in Søborg. This involves recording (processing)
personal data of employees, guests and others who are in the monitored areas. We are able to do this, among other things, as a result of the rules in the Television Surveillance Act. The purpose of television surveillance is to prevent and solve crime.
There is no monitoring of areas with general traffic. Surveillance shall be carried out by means of cameras operating 24 hours a day. Appropriate signage is posted at reception and at entrances to our sites, as well as at the indoor areas being monitored. Only a few, relevant staff members have access to the recordings relevant to their area.
The legal basis for TV monitoring
The legal basis for the processing is the Law on Television Surveillance and Article 6(1)(f) of the Data Protection Regulation. North Medias is thus pursuing the legitimate interest that it is necessary to process the personal data concerned for the purpose of preventing and investigating crime and for the establishment, exercise or defence of legal claims.
5. DISCLOSURE AND TRANSFER OF PERSONAL DATA
5.1 We will only disclose personal data to others where permitted or required to do so by law, including where relevant and at your and/or the controller's specific request, if any.
5.2. Data processors
In order to provide you with the best service, we use the following data processors:
- Hosting provider
- IT systems for the operation of North Media A/S (recruitment system, e-mail distribution)
- G4S (TV monitoring)
5.3 We generally use various external and professional organisations as suppliers and partners to provide or assist us in providing our services and products. The external organisations will not receive or process personal data unless the law permits its transfer and processing. If the external organisations or partners are data processors for us, their processing of personal data will always be carried out under a data processing agreement that complies with the requirements of the law. If the external organisations or partners are independent data controllers, their processing of personal data will be in accordance with their own privacy, data protection or personal data policy, which the external organisations will make known, unless otherwise required by law.
5.4 We do not transfer personal data to countries or international organisations outside the EU/EEA unless it is necessary at your specific request
6. DELETION AND STORAGE OF PERSONAL DATA
6.1. Visitors to our website:
Data about your online behaviour on our website is deleted when it is no longer relevant for its purpose and, as a rule, within 24 months of collection.
Customers/collaborators/suppliers and contacts:
Information about customers and their contacts is deleted within 2 years after the end of the customer relationship, unless there is a legitimate reason for longer retention, including pending litigation. However, accounting information is kept for 5 years plus the current financial year
7. YOUR RIGHTS
7.1. As a registered person, you have a number of rights:
7.1.1 You have the right to request access to what personal data we process about you, the purposes of the processing and whether we disclose the personal data to others.
7.1.2 You have the right to have inaccurate personal data about you rectified.
7.1.3 In certain cases, you have the right to have certain of your personal data deleted.
7.1.4 In certain cases, you have the right to restrict the processing of your personal data so that we only retain your personal data for a given period.
7.1.5 In certain cases, you have the right to object to our processing of your personal data on the basis of reasons and circumstances relating to your particular situation.
7.1.6 You have the right not to be subject to an automatic decision without human intervention, unless the decision is necessary for your employment with us or the making of the decision is permitted by law or your express consent.
7.1.7 If we have obtained your consent to any part of our processing of your personal data, you have the right to withdraw your consent at any time. If you choose to withdraw your consent, this will not affect the lawfulness of the processing based on the consent prior to the withdrawal.
7.2 In certain cases, you have the right to so-called data portability of the personal data you have provided to us.
7.3 You can always lodge a complaint with the Data Protection Authority.
7.4 There may be conditions or limitations to these rights. It is therefore not certain that you have a right to data portability in the specific case, for example - this depends on the specific circumstances of the processing activities.
8. CHANGES TO THIS POLICY
8.1. We reserve the right to update and amend this Policy. If we change the Policy, we will change the date and version at the top of the document. In the event of material changes, we will notify you by means of a visible notice on our website, email or by using other means of communication.
9. CONTACT INFORMATION
9.1. You are welcome to contact us at the contact email below if you:
- disagree with our processing or you believe that our processing of your personal data breaches the law
- have questions or otherwise comment on this Policy, or
- wish to exercise one or more of your rights as a data subject. If you have any questions or comments about this policy, or if you wish to exercise one or more of your rights, please contact us at Info@northmedia.dk.
9.1.1 We will endeavour to accommodate your requests regarding our processing of your personal data. If, despite this, you wish to lodge a complaint, you may do so by contacting the Data Protection Supervisor. You can read more about your rights in the Data Protection Authority's guide to data subjects' rights, which can be found at www.datatilsynet.dk.
