Cookie and privacy policy

Data responsibility

We take your data protection seriously

We process personal data and have therefore adopted this privacy policy, which tells you how we process your personal data.

By visiting our websites you accept the content of this privacy policy and other documents mentioned in the policy. This privacy policy defines how we treat all personally identifiable information collected.

In order to protect your personal data in the best possible way, we continuously assess the risk of our data processing negatively affecting your fundamental rights. In particular, we pay attention to the risk of you being subjected to discrimination or ID theft, or suffering financial loss, loss of reputation or data confidentiality.

Contact details

Renas is the data controller and we ensure that your personal data is processed in accordance with legislation.

Contact person: RENAS ApS
Address: Peder Wessels Vej 17, 5220 Odense SØ
CVR no.: 30985974
Phone number: 70239393
Email: info@renas.dk

We ensure fair and transparent data processing

When we ask you to provide us with your personal data, we will inform you what data we process about you and for what purpose. You will receive this information at the time of collection of your personal data.

If we collect data about you from others, such as a supplier, authority or business partner, we will inform you of this within 10 days of collecting your personal data. We will also inform you of the purpose of the collection and the legal basis that gives us access to collect your personal data.

Processing of personal data

We use this type of data about you

We use data about you to improve our service and ensure quality in our products and services and in our contact with you.

The data we use includes:

• General personal data
• Criminal record/child certificate if applicable
• Health information for use when applying for reimbursement, for flex jobs, §56
• Declaration of possibility for long-term illness

In some cases, we need to combine your data with data we receive from other actors, e.g. from social media. If the combination may reveal your identity and information of a private or sensitive nature, we will obtain your consent to the processing.

Before we may combine data, we will assess whether there is a risk that the processing has a negative impact on your privacy. If this is the case, we will inform you about the processing and its purpose and ask for your consent to continue processing.

Automatically collected data

Our digital solutions are based on various technologies to ensure usability and security. These technologies may automatically collect data to provide the best possible solution, either directly by us or by a third party on our behalf.

Cookies and analyzing clickstream data are examples of this, see below.

Use of cookies

Cookies, purpose and relevance

If we place cookies, you will be informed about the use and purpose of collecting data via cookies.

We obtain your consent

Before we place cookies on your device, we ask for your consent. However, necessary cookies to ensure functionality and settings can be used without your consent.

You can find more information on our website about our use of cookies and how you can delete or reject them. If you want to withdraw your consent, please see the instructions under our cookie policy.

Clickstream data

Every visit to a digital solution results in information being sent from your browser to a server. It is through analysis of this data that we optimize the digital solutions. Data is collected via third parties on our behalf.

Data about your computer may be collected for system administration and internal marketing-related analysis. This data is statistical information about user behavior in the digital solutions.

•  Examples of data collected and analyzed
• Date and time of visit
• The pages visited in the solution
• The IP address of the visitor
• Information about the browser and computer used
• URL.

Information you actively provide

In addition to the information collected automatically, we also process data that users have actively provided to us. Examples of data that users actively provide are:

• email, phone number, address, date of birth, etc.

It may also be information that you share with us via social media, when participating in a competition, or when registering to receive our newsletters. It may also be information that we receive in connection with inquiries to e.g. customer service.

We collect and store your personal data for certain purposes

We collect and store your data for specific purposes or other legitimate business purposes. This happens, for example, when we need to: (non-exhaustive list)!

•  Content customization in digital solutions
• Completing orders in the online store, e.g. basket function, payment etc.
• Possibility to digitally participate in customer surveys, contests, sweepstakes, etc.
• Archive of registered products and associated personal information
• Membership management
• Order processing and communication related to your order or other inquiries
• Verifying your identity when communicating with us
• If we have your explicit consent, we may contact you via the contact details you have provided for marketing, sales, advertising and analytics purposes
• We can target offers and campaigns to individual customers based on behavioral history and demographic data combined with third-party solutions and data

We only process relevant personal data

We only process data about you that is relevant and adequate in relation to the purposes defined above. The purpose determines what type of data about you is relevant to us. The same applies to the scope of the personal data we use. For example, we do not use more data than we need for the specific purpose.

Before we process your personal data, we examine whether it is possible for us to minimize the amount of data about you. We also examine whether some of the data types we use can be used in anonymized or pseudonymized form. We can do this if it does not negatively impact our obligations or the service or service we offer you.

We only process necessary personal data

We collect, process and store only the personal data that is necessary to fulfill our stated purposes. In addition, the type of data that is necessary to collect and store for our business operations may be determined by law. The type and scope of the personal data we process may also be necessary to fulfill a contract or other legal obligation.

We want to make sure that we only process personal data that is necessary for each of our specific purposes. Therefore, it is embedded in our IT systems that only the necessary amount of data is collected. It is also automatically ensured that the scope of the processing is not unnecessarily large and the retention time is not too long.

To protect you from unauthorized access to your personal data, we also use solutions that automatically ensure that data is only accessible to relevant employees. There is also embedded protection against an unlimited number of people accessing data.

We check and update your personal data

We check that the personal data we process about you is not incorrect or misleading. We also make sure to update your personal data on an ongoing basis.

As our service is dependent on your data being correct and up to date, we ask you to inform us of relevant changes to your data. You can use the contact details above to notify us of your changes.

We delete your personal data when it is no longer needed

We will delete your personal data when it is no longer necessary for the purpose for which we collected, processed and stored your data. The period depends on the nature of the information and the reason for storage.

We will not disclose your personal data without your consent

If we disclose your personal data to partners and stakeholders, e.g. for marketing purposes, we will obtain your consent and inform you what your data will be used for.

You can object to this type of disclosure at any time, and you can also opt out of marketing communications in the CPR register.

We do not obtain your consent if we are legally obliged to disclose your personal data, e.g. as part of reporting to an authority. We obtain your consent before we disclose your personal data to partners in third countries. If we disclose your personal data to partners in third countries, we ensure that their level of personal data protection matches the requirements we have set out in this policy under applicable law. Among other things, we set requirements for the processing of data, for information security and for the fulfillment of the rights you have in relation to, for example, opposing profiling and filing a complaint with the Danish Data Protection Agency.

Google Analytics

We may use Google Analytics as a web analytics solution in our digital solutions. In this connection, web analytics data from our digital solutions is sent for analysis in the service provided by Google. Here, Google Analytics acts as ”Data Processor” of the data and we as ”Data Controller” of the data, and our data may only be disclosed by agreement or to comply with legal requirements.

Retargeting

Our websites may use retargeting technologies. This allows us to advertise directly to our visitors on other websites. Based on interest when visiting our websites, we believe that the display of personalized, interest-based advertising is more interesting to our customers than ads that do not have a personal connection.

Safety and security

We protect your personal data

We have adopted internal rules on information security that contain instructions and measures to protect your personal data from being destroyed, lost or altered, from unauthorized disclosure, and from unauthorized access or knowledge.

We have established procedures for granting access rights to those of our employees who process sensitive personal data and data revealing information about personal interests and habits. We control their actual access through logging and supervision. To avoid data loss, we continuously backup our datasets. We also protect the confidentiality and authenticity of your data through encryption.

In the event of a security breach that results in a high risk to you of discrimination, ID theft, financial loss, loss of reputation or other significant inconvenience, we will notify you of the security breach as soon as possible.

Your rights

You have the right to access your personal data

You have the right at any time to know what data we process about you, where it comes from and what we use it for. You can also find out how long we store your personal data and who receives data about you to the extent that we transfer data in Denmark and abroad.

If you request it, we can provide you with access to the data we process about you. However, access may be restricted for the protection of other people's privacy, trade secrets and intellectual property rights.

You can exercise your rights by contacting us. You can find our contact details at the top of this policy.

You have the right to have inaccurate personal data corrected or deleted

If you believe that the personal data we process about you is inaccurate, you have the right to have it corrected. You must contact us and inform us of the nature of the inaccuracies and how they can be corrected.

In some cases, we will have an obligation to delete your personal data. This applies, for example, if you withdraw your consent. If you believe that your data is no longer necessary for the purpose for which we collected it, you can ask to have it deleted. You can also contact us if you believe that your personal data is being processed in violation of legislation or other legal obligations.

When you contact us with a request to correct or delete your personal data, we will investigate whether the conditions are met and, if so, make the changes or deletion as soon as possible.

You have the right to object to our processing of your personal data

You have the right to object to our processing of your personal data. You can also object to our disclosure of your data for marketing purposes. You can use the contact details above to send an objection. If your objection is justified, we will ensure that we cease processing your personal data.

You have the right to receive the personal data you have provided to us and the data we have collected about you from other actors based on your consent. If we process data about you as part of a contract to which you are a party, you can also receive your data. You also have the right to transfer this personal data to another service provider.

If you wish to exercise your right to data portability, you will receive your personal data from us in a commonly used format.

If you wish to access your data, have it corrected or deleted, or object to our data processing, we will investigate whether this is possible and provide you with a response to your request as soon as possible, and no later than one month after we have received your request.

Policy update

We strive at all times to comply with applicable legislation, including principles for privacy and data protection. We therefore regularly update this policy when, for example, there are changes in legislation. Significant changes will be announced via our website.