Privacy Policy

Copenhagen Boats ApS

Data Controller

We are the data controller for the personal data we process about our customers and business partners. Contact details below.

Copenhagen Boats ApS

CVR: 46334736

c/o Anders Sjögren, Østre Allé 85C, 3250 Gilleleje, Denmark

It is not a requirement that our company has an external DPO, but if you have questions about the processing of your personal data, you can contact us via info@cphboats.com.

Processing Activities

As data controller under the GDPR, we carry out the following processing activities.

Website Visits

When you visit our website, we use cookies so the site can function, which you can read more about in our cookie policy.

Communication with Potential Customers

If you have questions about our site, or want to hear more about our services, you can contact us via:

Form personal data

Email: info@cphboats.com

Through this we process your personal data so we can engage in dialogue with you, e.g. answer questions about our services. We only process the information you give us in connection with our communication.

We typically process the following ordinary data: name, email, phone number.

Our legal basis for processing this personal data is Article 6(1)(f) of the GDPR.

We delete our communication with you once it is clear whether you want our services or not.

Should a special case arise requiring us to retain your personal data longer, this may occur.

Customers

We need to communicate with our customers to ensure the service is delivered correctly. Through this we may process information such as name, address, services, special agreements, payment information and similar.

The legal basis for processing this personal data is Article 6(1)(b) of the GDPR.

Once the service has been delivered and any outstanding matters concluded, we will delete the personal data shortly thereafter.

Bookkeeping

We must retain all accounting records pursuant to the Danish Bookkeeping Act. This means we keep invoices and similar records for accounting purposes. These may include ordinary personal data such as name, address, description of service.

Our legal basis for processing personal data for bookkeeping is Article 6(1)(c) of the GDPR.

We retain this data for a minimum of 5 years after the end of the relevant financial year.

Job Applications

We gladly accept job applications to assess whether they match a hiring need in our company.

If you send us your job application, our legal basis for processing your personal data is Article 6(1)(f) of the GDPR.

If you have sent an unsolicited application, we will promptly assess whether it is relevant, and then delete your data if there is no match.

If you have applied for an advertised position, we will dispose of your application if you are not hired, and shortly after the right candidate has been found for the job.

If you enter a recruitment process and/or are hired, we will give you separate information about how we process your personal data in that context.

Data Processors

Few can handle everything themselves, and the same applies to us. We therefore have business partners and use suppliers, some of whom may be data processors.

External suppliers may, for example, provide systems to organize our work, services, consulting, IT hosting, or marketing.

One.com — Web hosting

It is our responsibility to ensure your personal data is handled properly. We therefore set high standards for our partners, and our partners must guarantee that your personal data is protected.

We therefore enter into agreements with companies (data processors) that handle personal data on our behalf to enhance the security of your personal data.

Disclosure of Personal Data

We do not disclose your personal data to third parties.

Profiling and Automated Decisions

We do not carry out profiling or automated decision-making.

Third-Country Transfers

As a general rule, we use data processors within the EU/EEA, or who store data within the EU/EEA.

In some cases this is not possible, and data processors outside the EU/EEA may be used if they can provide adequate protection for your personal data.

Processing Security

We keep the processing of personal data secure by implementing appropriate technical and organizational measures.

We have carried out risk assessments of our data processing and have implemented appropriate technical and organizational measures to increase processing security.

One of our most important measures is keeping our employees updated on GDPR through ongoing awareness training, GDPR courses, and by reviewing our GDPR procedures with staff.

Data Subjects' Rights

Under the GDPR, you have a number of rights regarding our processing of information about you.

If you wish to exercise your rights, please contact us so we can assist you.

Right of Access

You have the right to obtain access to the information we process about you, as well as a number of additional details.

Right to Rectification

You have the right to have inaccurate information about yourself corrected.

Right to Erasure

In special cases, you have the right to have information about you deleted before the time of our normal general deletion.

Right to Restriction of Processing

In certain cases, you have the right to have the processing of your personal data restricted. If you have the right to restriction, going forward we may only process the data — other than storage — with your consent, or to establish, exercise or defend legal claims, or to protect a person or important public interests.

Right to Object

In certain cases, you have the right to object to our otherwise lawful processing of your personal data. You can also object to processing of your data for direct marketing.

Right to Data Portability

In certain cases, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to have this personal data transferred from one data controller to another without hindrance.

You can read more about your rights in the Danish Data Protection Agency's (Datatilsynet) guidance on data subjects' rights, available at www.datatilsynet.dk.

Withdrawal of Consent

Where our processing of your personal data is based on your consent, you have the right to withdraw your consent.

Complaint to the Data Protection Agency

You have the right to lodge a complaint with Datatilsynet if you are dissatisfied with how we process your personal data. Contact details for Datatilsynet can be found at www.datatilsynet.dk.

We generally encourage you to read more about GDPR so you stay up to date on the rules.