Privacy Policy

 

The Danish Balder Group is the data controller for the information we collect about you, and we ensure that your personal data is processed in accordance with the law. If you have any questions about the processing of your personal data, you can contact Balder using the information below.

We take your privacy seriously and have therefore adopted this Privacy Policy, which tells you how we process your personal data.

Contact details

If you wish to contact us regarding our processing of your personal data, you can do so at:

Our office: Vesterbrogade 1E, 1620 Copenhagen V
Via our mail: persondata@balder.dk

 

Processing of Personal Data

Personal data encompasses all kinds of information that, to some extent, can be attributed to you. If you do not wish for us to process this information, it may become problematic to uphold and fulfill any entered agreements and legal obligations.

As the data controller, we have implemented appropriate technical and organizational measures to prevent your information from being accidentally or unlawfully deleted, disclosed, lost, degraded, accessed by unauthorized parties, misused, or otherwise processed in violation of the law. We ensure that processing only takes place when all data protection principles are met, in accordance with Article 5 of the Data Protection Regulation.

When we act as a data processor, we process personal data in accordance with the instructions and guidelines specified in the data processing agreement entered into with the data controller. This applies, for example, to the project "Torveporten," a 50/50 joint venture between Balder and Nrep through the joint venture company Ejendomsselskabet Gl. Køge Landevej ApS, CVR no. 28702922, which owns the properties. As Balder is responsible for the leasing of the project's properties, Balder collects your personal data as a data processor on behalf of Gl. Køge Landevej ApS. Your information is processed in accordance with this privacy policy.

Below, you can see the basis on which we process your information, the purpose for which we do so, and the duration for which we retain them.

Website Visitors

In connection with your visit to our website, we will process the following personal information about you:

  • IP addresses (not accessible to Balder)
  • Language
  • Gender
  • Age
  • Demographics
  • Geography
  • Interests
  • Behavior, new and returning
  • Visiting time


We collect personal information about website visitors for the following purposes:
 

  • Optimal user experience of our website.
  • Targeted advertising.
  • Record information for contact purposes.

We retain the information for the period allowed by law and delete it when no longer necessary, typically after an annual review for information regarding website visitors.

We collect this information on the following legal basis:
 

  • Consent given via our contact form and cookie banner, according to Article 6, paragraph 1, letter a of the Data Protection Regulation.
  • Balder's legitimate interest, which is to operate our website, according to Article 6, paragraph 1, letter f of the Data Protection Regulation.

Potential Tenants

For you to be a potential tenant of an apartment/rental property with us, it is necessary for us to collect the following personal information about you:

  • Name, including first and last name
  • Email address
  • Phone number

We collect personal information about potential tenants for the following purposes
 

  • Possible future collaboration or home purchase.
  • Administration of your relationship with Balder.
     

We collect this information based on the legal basis of fulfilling the lease contract, according to Article 6, paragraph 1, letter b of the Data Protection Regulation.

We retain the information for the period allowed by law and delete it when no longer necessary, typically after the agreement's termination or when contact is no longer relevant.

Information about potential customers/tenants is deleted two years after the last contact or upon request.

Customer who is a Tenant of an Apartment/Rental Property

For you to be a customer/tenant with us, it is necessary for us to collect the following personal information about you:

  • Name, including first and last name
  • Email address
  • Phone number
  • Address
  • RKI information
  • CPR/CVR number
  • Key card information in the form of log files and tenant number
  • IP address on the phone and Unique ID for the user when using the Salto App
     

We collect personal information about customers/tenants for the following purposes:
 

  • Processing your purchase and delivery of our service.
  • Administration of your relationship between you and Balder.
  • Use of the doorphone system.
  • Use of the key card system.
     

We collect this information based on the legal basis of consent given via a consent form, fulfilling the lease contract, legal obligation (e.g., in the tenancy law), and our legitimate interest, which is the administration of the tenancy relationship, according to Article 6, paragraph 1, letters a, b, c, and f of the Data Protection Regulation.

We retain the information for the period allowed by law and delete it when no longer necessary. The storage period depends on the nature of the information and the purpose of the processing. Information about customers is deleted five years after the customer relationship has ended.

If statements or similar are published, the legal basis used is consent.

Suppliers and Business Partners

To be a supplier and business partner with us, it is necessary for us to collect the following personal information about you:

  • Names
  • Addresses
  • CVR number
  • Titles
     

We collect personal information about suppliers and business partners for the following purposes:

  • Processing our purchases/services with you.
  • Administration of your relationship between you and Balder.
     

We collect this information based on the legal basis of fulfilling the agreement, legal obligation (in the accounting law), and our legitimate interest, which is the administration and fulfillment of necessary actions, according to Article 6, paragraph 1, letters b, c, and f of the Data Protection Regulation.

We retain the information for the period allowed by law and delete it when no longer necessary. The storage period depends on the nature of the information and the purpose of the processing.

Information about suppliers is deleted when the warranty on purchased products has expired or when the agreement ends.

Recruitment

The purpose of collecting personal information about you in the recruitment process is to assess whether you are a qualified candidate for a vacant position with us.

Personal information obtained in the recruitment process includes the information in your application, CV, and other accompanying documents. It is not necessary to provide your CPR number.

Your application with attachments is shared internally with relevant personnel in the recruitment process but is not shared with individuals outside of Balder.

In relevant cases, we use external recruitment consultants to assist us in the process, which may involve them collecting information on our behalf or sharing information with them.

If you are called for a job interview, we will record information for use in the further recruitment process.

We process your information based on our legitimate interest, which is to assess your qualifications and competencies in relation to the advertised position, according to Article 6, paragraph 1, letter f of the Data Protection Regulation.

Applications and attachments can be stored for up to 6 months after the recruitment process is completed, after which your information will be deleted. The purpose of storage after the recruitment process is to safeguard interests in case of any objections about discrimination or similar during the recruitment process.

If we want to keep your application with attachments for possible future employment, this is done based on your consent, according to Article 6, paragraph 1, letter a of the Data Protection Regulation.

Unsolicited Applications

For unsolicited applications, we process your information based on our legitimate interest, which is to assess your qualifications and competencies for possible future employment, according to Article 6, paragraph 1, letter f of the Data Protection Regulation.

Unsolicited applications and attachments are stored for a maximum of 12 months, after which they are deleted. If we want to keep your application for a longer period than this, it will be based on specific consent from you.

Your consent is voluntary, and you can withdraw it at any time by contacting us using the above contact information.

Competition Participants

In connection with your participation in one of our competitions, we will process the following personal information about you:

  • Name
  • Phone number
  • Email address

We collect personal information about competition participants for the following purposes:

  • Register information for contact.
  • Create awareness of Balder.

We collect the information on the legal basis of consent given through active registration for the competition, according to Article 6, paragraph 1, letter a of the Data Protection Regulation.

We retain the information for the period allowed by law, and we delete it when a competition winner is found.
 

Other information on the processing

 

Video surveillance

As part of the security measures around our physical environment, video surveillance is used on selected properties. We will ensure at all times that any video surveillance will comply with the Danish Video Surveillance Act.

In the case where video surveillance is used on roads, streets, squares or similar areas used for general public traffic, we will register it in the police register of video surveillance cameras (POLCAM).

All recordings are stored for 30 days, after which they are automatically overwritten.

We process personal data on the following lawful bases:

  • The surveillance is based on Balder's legitimate interest, which is to ensure the physical security of the workplace and for crime prevention purposes. Our interest is deemed legitimate as the monitoring serves as an active and proportionate part of these purposes. It is considered that the interests and rights of the data subject, i.e. you, do not override the legitimate interest of the data controller. The processing is necessary for the purposes of the legitimate interest pursued by the controller, cf. Article 6(1)(f) of the GDPR.
     

Data minimisation

We process only the data necessary to fulfil our stated purposes. Also, we may be required by law to collect and store other information about you. We only keep personal data for as long as necessary or required by law. Personal data is deleted or anonymised when it is no longer necessary for us to process it.

We keep data up to date

As our service depends on your personal data being accurate, and up to date, we ask you to inform us of any relevant changes to your personal data. You can use our contact details above to notify us of your changes, and we will update your personal data. If we become aware that your personal data is not correct, we will update the information and notify you.

Newsletter

Your consent to receive our newsletter is voluntary and you can withdraw your consent at any time by contacting us at any time.
Use our contact information here: persondata@balder.dk, +45 55 55 07 07:

Information text regarding Balder Danmark A/S' processing of your information when you sign up for the newsletter
• Balder Danmark A/S is the data controller for the processing of your personal data in connection with sending out the newsletter.
The basis for processing your personal data in connection with your subscription to our newsletter is the data protection regulation. 6 pieces. 1, letter a (consent).
You can withdraw your consent at any time by unsubscribing from the newsletter. We will delete your email address if you unsubscribe from the newsletter, and thus only process your personal data as long as you are registered for the newsletter, cf. Article 5 of the Data Protection Regulation, so-called 1, letter e.
However, the fact that you withdraw your consent will not affect the legality of the processing carried out before the withdrawal of consent.

According to the data protection regulation, you have a number of rights in relation to our processing of information about you, which appears at the bottom of the page.

Transfer of data

We use several third parties to store and process the data, including IT solution providers and external suppliers etc. These process information solely on our behalf and may not use it for their own purposes. In relevant cases, personal data is disclosed to banks, debt collectors, accountants, etc.

 

We use data processors/suppliers for the processing of personal data. We give priority to suppliers from the EU and third countries approved by the EU Commission in relation to the level of protection of personal data, cf. Article 45 of the GDPR.

 

Transfer of data to unsafe third countries 

We also use some data processors/suppliers in unsafe third countries. When the legislation of third countries does not offer the same security as the EU does, we have stricter obligations regarding the protection of your data.  

  • Personal data we collect and process in connection with recruitment, marketing, etc., is transferred to Facebook, Instagram and LinkedIn, which are all based in the United States. We have ensured that there is a lawful basis for the transfer in the form of concluded SCCs, cf. Article 46(2)(a) of the GDPR, and that the data are processed under adequate safeguards. 
  • Personal data we collect and process in connection with the use of Balder's systems, such as Outlook, Office 365, etc., is transferred to Microsoft, which is also based in the United States. We have ensured that there is a lawful basis for the transfer in the form of concluded SCCs, cf. Article 46(2)(c) of the GDPR, and that the data are processed under adequate security measures.
  • Personal data we collect and process in connection with marketing and cookies is transferred to Google, USA. We have ensured that there is a lawful basis for the transfer in the form of concluded SCCs, cf. Art. 46(2)(c) of the GDPR and that the data is processed under adequate security measures.
  • Personal data we collect and process in connection with the sending of newsletters is transferred to Mailchimp (The Rocket Science Group), which is also based in the USA. We have ensured that there is a lawful basis for the transfer in the form of concluded SCCs, cf. Article 46(2)(c) of the GDPR, and that the data are processed under adequate security measures.

If you want to know more about the transfer bases that affect you, please contact us at

persondata@balder.dk,+45 55 55 07 07

Joint data control (When using social media)

We use the following social media Facebook, Instagram and Linkedin, which are categorised as joint controllers. Joint data control means that both parties are responsible for the purpose and processing of personal data.
 

Your rights

You can by contacting us at persondata@balder.dk,+45 55 55 07 07:

  • obtain access to your personal data,
  • rectify your recorded personal data,
  • have personal data about yourself deleted,
  • have your personal data handed over (data portability) in order to transfer it to another data controller,
  • object to the processing, and
  • have the processing of your personal data restricted.

When you contact us with a request to exercise the above rights, we will respond to you within one month. If we cannot accommodate your request, you will be given a reason why.

To exercise your rights, or if you have any questions about the above, please contact us at persondata@balder.dk,+45 55 55 07 07. 

If you are subsequently dissatisfied with the way we process your data, you have the right to lodge a complaint with the Danish Data Protection Agency.