Personal data
policy

We are the data controller for the information we process about you as a Qatchr user and can be contacted as follows:

Qatchr A/S
Abildager 11
2605 Brøndby
CVR.nr. 20015381
GDPR@qatchr.dk
Tlf.nr.: 77407887

Questions regarding this privacy policy and GDPR in general should be sent to GDPR@qatchr.dk.(Our DPO can be contacted at dpo@sixtus-compliance.dk).

As a credit information agency, we are obliged to store information on those who make inquiries in our information register. This is to know exactly who has received what information, to ensure that our service is provided correctly according to the terms of use of our service, and to be able to inform if any information provided turns out to be incorrect or misleading.

Our retention obligation is at least 6 months. We delete on an ongoing basis, but not necessarily daily, and therefore deletion will not necessarily occur on the 6th month day. There may also be specific reasons why we will extend the storage of the data, for example if a complaint or objection against our processing is pending or expected.

Your data may also be processed in connection with any customer service and customer support.

Our basis for processing is therefore both for the purpose of fulfilling a contract/agreement in relation to your user information, cf. Article 6(1)(b) of the GDPR, but also as a result of a legal obligation to retain information about those who collect information, cf. Article 6(1)(c) of the GDPR. If our legal obligation to retain the data expires, but we assess that there is still a need to retain the data about you, it will be on the basis of a legitimate interest, cf. Article 6(1)(f) of the GDPR.

In addition, we use your data in connection with your newsletter subscription. The processing is based on your consent and in accordance with Article 4(11), cf. Article 7 and Article 6(1)(a) of the GDPR. You can unsubscribe from the newsletter at any time.

We only process general personal data about you. As a starting point, the information we log will be on the company you are acting on behalf of, but we will also process your name and possibly your address if this information appears in the CVR register and is associated with the company. We expect that your contact information is not private, but belongs to your employer/workplace.

The data is collected or received in the following ways:

• From the data subject itself (including management, ownership, employees)
• In connection with the data subject's newsletter subscription
• Via the CVR register
• Via social media, advertising and analytics providers and various publicly available databases/registers
• via browser cookies when using the website (read more about our cookie handling policy at the following link: https://qatchr.dk/cookiepolitik)

As a credit reference agency, we are obliged to register and log information for at least 6 months about those who request credit information, as well as who and what the request concerns. There may be specific reasons for keeping the information for a longer period of time, for example, if complaints are received about the disclosure of the information, or if processing is pending or expected under the rights of the data subject.

If you are a registered user or newsletter recipient, your data will be stored for at least as long as your user is active.

We ensure that there is an adequate level of security, both technical and organizational, in connection with our data processing, based on, among other things, ongoing risk and impact assessments.

We continuously maintain and reassess our procedures and check that the security level remains adequate.

As a data subject, you have legal rights in relation to the processing of your data.

• You have the right to access the data processed about you
• You have the right to have incorrect information corrected
• In certain situations, you have the right to have data about you deleted
• In certain situations, you have the right to restrict the data processed about you
• You have the right to object to the processing of your data
• You have the right to data portability in certain situations
• You have the right to complain to the Danish Data Protection Agency

If you want to know more about the rights, we refer to the Danish Data Protection Agency at the following link, www.datatilsynet.dk.

Contact us if you wish to exercise your rights. This can be done by phone, but we believe that written contact is more likely to minimize any misunderstandings. Regardless, we will endeavor to respond to your request within 1 month. We need to verify your identity in order to respond to your request.

Complaints about the processing in accordance with this personal data policy can be made to the Danish Data Protection Agency, which is the supervisory authority. You can find the Danish Data Protection Agency's contact details on the following link, www.datatilsynet.dk.

Complaint form: www.datatilsynet.dk/media/7766/klage-til-datatilsynet

Email: dt@datatilsynet.dk

Danish Data Protection Agency
Carl Jacobsens Vej 35
2500 Valby