Privacy Policy

 

The Danish Balder Group is the data controller for the information we collect about you, and we ensure that your personal data is processed in accordance with the law. If you have any questions about the processing of your personal data, you can contact Balder using the information below.

We take your privacy seriously and have therefore adopted this Privacy Policy, which tells you how we process your personal data.

Contact details

If you wish to contact us regarding our processing of your personal data, you can do so at:

  • Our office: Vesterbrogade 1E, 1620 Copenhagen V
  • Via our mail: persondata@balder.dk

If you are a tenants or potential tenants


Personal data is any information that can be attributed to you in one way or another. If you do not want us to process this information, it may be difficult to maintain and fulfil any agreements and legal obligations.

As the data controller, we have taken appropriate technical and organisational measures to prevent your data from being accidentally or unlawfully deleted, published, lost, deteriorated, disclosed to third parties, misused or otherwise processed in breach of the law. We ensure that processing can only occur when all data protection principles are met, cf. Article 5 of the General Data Processing Regulation (GDPR).

When we are the data processor, we process personal data in accordance with the instructions and guidelines set out in the data processor agreement concluded with the data controller.

Below you can see on what basis we process your data, for what purpose, and for how long we keep it.

Website visitors

In connection with your visit to our website, we will process the following personal data about you:

  • Ip addresses (not available to Balder)
  • Language
  • Gender
  • Age
  • Demography
  • Geography
  • Interests
  • Behaviour, new and returning
  • Time visiting

 

We collect personal data about website visitors for the following purposes:

  • The optimal user experience of our website.
  • Targeting of ads.
  • Record information for contact purposes.

 

We collect the data on the following legal basis:

  • Consent has been given via our contact form and cookie banner, cf. Article 6(1)(a) of the GDPR.
  • Balder's legitimate interest is to operate our website, cf. Article 6(1)(f) of the GDPR.

 

We store the data for the period allowed by law and delete it when it is no longer needed. The period depends on the nature of the data and the reason for storage. Typically, personal data relating to website visitors will be deleted after an annual review.
 

Potential tenants

In order for you to be a potential tenant of an apartment/tenancy with us, it is necessary that we collect the following personal data about you:

  • Name, including first and last name
  • E-mail address
  • Telephone number

 

We collect personal data about potential tenants for the following purposes:

  • Possible future cooperation or house purchase
  • Managing your relationship with Balder

We collect this information on the following processing bases:

  • To be able to contact potential customers/landlords regarding available apartments/leases.
  • The processing is carried out on the basis of compliance with the rental contract, cf. Article 6(1)(b) of the GDPR.

 

We store the data for the period allowed by law and delete it when it is no longer needed. The storage period depends on the nature of the information and the purpose of the handling. Typically, information about potential customers/tenants will be deleted after the agreement has ended or when it is no longer relevant to have contact.

Information on potential customers is deleted 2 years after the last contact or upon request.

 

Customer who is a tenant of an apartment/tenancy

In order for you to be a customer/tenant with us, it is necessary that we collect the following personal data about you:

  • Name, including first and last name
  • E-mail address
  • Telephone number
  • Address
  • RKI information
  • CPR/CVR no.
  • Key fob information in the form of log files and tenant numbers,
  • IP address of the phone and Unique ID of the user when using the Salto App

 

We collect personal data about customers/tenants for the following purposes:

  • Processing your purchase and providing our service.
  • Managing your relationship with Balder.
  • Use of entry door phone system.
  • Use of key fob system.

We collect this information on the following legal bases:

  • Consent has been given by means of a consent form, cf. Article 6(1)(a) of the GDPR.
  • The processing is carried out on the basis of the performance of the rental contract, cf. Article 6(1)(b) of the GDPR.
  • The processing is based on a legal obligation, e.g. in the Tenancy Act, cf. Art. 6(1)(c) of the GDPR.
  • Our legitimate interest, which is the management of the rental relationship, makes it necessary to process these personal data. We assure you that the fulfilment of the legitimate interest will not go beyond your rights, cf. Article 6(1)(f) of the GDPR.

 

We store the data for the period allowed by law and delete it when it is no longer needed. The storage period depends on the nature of the information and the purpose of the processing. You have received an information document when signing your rental contract, which describes the processing of your data in more detail.

  • Information about customers is deleted 5 years after the customer relationship has ended.

 

 

If opinions or similar are published, the legal basis for this is consent. 

 

Suppliers and partners

In order to be a supplier and partner of ours, we need to collect the following personal data about you:

  • Names
  • Addresses
  • CVR no.
  • Titles

 

We collect personal data about suppliers and business partners for the following purposes:

  • Processing of our purchases/services from you
  • Managing your relationship with Balder

We collect this information on the following legal bases:

  • The processing is carried out on the basis of a contract, cf. Article 6(1)(b) of the GDPR.
  • The processing is based on a legal obligation in the Danish Accounting Act, cf. Article 6(1)(c) of the GDPR.
  • Our legitimate interest, which is the administration and management, necessitates the processing of these personal data. We assure you that meeting the legitimate interest will not go beyond your rights, cf. Article 6(1)(f) of the GDPR.

 

We store the data for the period allowed by law and delete it when it is no longer needed. The storage period depends on the nature of the information and the purpose of the processing.

  • Information on suppliers is deleted when the warranty on purchased products has expired, or the agreement is terminated.

 

Recruitment

The purpose of collecting personal data about you in the recruitment process is to assess whether you are a qualified candidate for a vacancy with us.

Personal data obtained in the recruitment process is the information contained in your application, CV and other documents submitted, which will be recorded. It is not necessary to write your CPR number.

Your application and supporting documents will be shared internally with relevant staff in the recruitment process but will not be shared with anyone outside Balder.

Where appropriate, we use external recruitment consultants to assist us in the process, and your information may be collected by them on our behalf or shared with them.

If you are called for an interview, we will record information and details for use in the recruitment process.

We process your data on the basis of our legitimate interest, cf. Article 6(1)(f) of the GDPR, which is to assess your qualifications and competencies in relation to the vacancy.

The application and supporting documents may be stored for up to 6 months after the recruitment process has been completed, after which your data will be deleted. The purpose of storage after the recruitment process is to safeguard interests in the event of any allegations of discrimination, unequal treatment etc., during the recruitment process.

If we wish to store your application with supporting documents, with a view to possible future recruitment, this will be done on the basis of your consent, cf. Article 6(1)(a) of the GDPR.

Unsolicited applications

In the case of unsolicited applications, we process your data on the basis of our legitimate interest, cf. Article 6(1)(f) of the GDPR, which is to assess your skills and competencies in relation to possible future employment.

For unsolicited applications, the application and supporting documents are stored for a maximum of 12 months, after which they are deleted. If we wish to keep your applications for longer than this, this will be done based on specific consent from you.

Your consent is voluntary, and you may withdraw

Other information on the processing


Video surveillance

As part of the security measures around our physical environment, video surveillance is used on selected properties. We will ensure at all times that any video surveillance will comply with the Danish Video Surveillance Act.

In the case where video surveillance is used on roads, streets, squares or similar areas used for general public traffic, we will register it in the police register of video surveillance cameras (POLCAM).

All recordings are stored for 30 days, after which they are automatically overwritten.

We process personal data on the following lawful bases:

  • The surveillance is based on Balder's legitimate interest, which is to ensure the physical security of the workplace and for crime prevention purposes. Our interest is deemed legitimate as the monitoring serves as an active and proportionate part of these purposes. It is considered that the interests and rights of the data subject, i.e. you, do not override the legitimate interest of the data controller. The processing is necessary for the purposes of the legitimate interest pursued by the controller, cf. Article 6(1)(f) of the GDPR.

 

Data minimisation

We process only the data necessary to fulfil our stated purposes. Also, we may be required by law to collect and store other information about you. We only keep personal data for as long as necessary or required by law. Personal data is deleted or anonymised when it is no longer necessary for us to process it.

We keep data up to date

As our service depends on your personal data being accurate, and up to date, we ask you to inform us of any relevant changes to your personal data. You can use our contact details above to notify us of your changes, and we will update your personal data. If we become aware that your personal data is not correct, we will update the information and notify you.

Newsletter

Your consent to receive our newsletter is voluntary, and you can withdraw it by contacting us at any time. Please use our contact details above if you would like further information.

Transfer of data

We use several third parties to store and process the data, including IT solution providers and external suppliers etc. These process information solely on our behalf and may not use it for their own purposes. In relevant cases, personal data is disclosed to banks, debt collectors, accountants, etc.

 

We use data processors/suppliers for the processing of personal data. We give priority to suppliers from the EU and third countries approved by the EU Commission in relation to the level of protection of personal data, cf. Article 45 of the GDPR. 

 

Transfer of data to unsafe third countries 

We also use some data processors/suppliers in unsafe third countries. When the legislation of third countries does not offer the same security as the EU does, we have stricter obligations regarding the protection of your data.  

  • Personal data we collect and process in connection with recruitment, marketing, etc., is transferred to Facebook, Instagram and LinkedIn, which are all based in the United States. We have ensured that there is a lawful basis for the transfer in the form of concluded SCCs, cf. Article 46(2)(a) of the GDPR, and that the data are processed under adequate safeguards. 
  • Personal data we collect and process in connection with the use of Balder's systems, such as Outlook, Office 365, etc., is transferred to Microsoft, which is also based in the United States. We have ensured that there is a lawful basis for the transfer in the form of concluded SCCs, cf. Article 46(2)(c) of the GDPR, and that the data are processed under adequate security measures.
  • Personal data we collect and process in connection with marketing and cookies is transferred to Google, USA. We have ensured that there is a lawful basis for the transfer in the form of concluded SCCs, cf. Art. 46(2)(c) of the GDPR and that the data is processed under adequate security measures.
  • Personal data we collect and process in connection with the sending of newsletters is transferred to Mailchimp (The Rocket Science Group), which is also based in the USA. We have ensured that there is a lawful basis for the transfer in the form of concluded SCCs, cf. Article 46(2)(c) of the GDPR, and that the data are processed under adequate security measures.

If you want to know more about the transfer bases that affect you, please contact us at 

persondata@balder.dk,+45 88 13 61 51

 

Joint data control (When using social media)

We use the following social media Facebook, Instagram and Linkedin, which are categorised as joint controllers. Joint data control means that both parties are responsible for the purpose and processing of personal data.

Your rights

You can by contacting us at persondata@balder.dk,+45 88 13 61 51:

  • obtain access to your personal data,
  • rectify your recorded personal data,
  • have personal data about yourself deleted,
  • have your personal data handed over (data portability) in order to transfer it to another data controller,
  • object to the processing, and
  • have the processing of your personal data restricted.

 

When you contact us with a request to exercise the above rights, we will respond to you within one month. If we cannot accommodate your request, you will be given a reason why.

 

To exercise your rights, or if you have any questions about the above, please contact us at persondata@balder.dk,+45 88 13 61 51. 

 

If you are subsequently dissatisfied with the way we process your data, you have the right to lodge a complaint with the Danish Data Protection Agency.