MDC Nordic ApS (the “Company”) is committed to protecting your privacy. In this privacy state-ment, you can read how we handle the personal data about you that we come into possession of.

To the extent that we collect personal data about you, the Company will process it in full accord-ance with the national legislation’s rules on the processing of personal data and the General Data Protection Regulation (GDPR).

1. DATA CONTROLLER
1.1 The Company is the data controller for the processing of your personal data. If you have any questions regarding the Company’s processing of your personal data, you are welcome to contact us:

MDC Nordic ApS
CVR No. 37417793
Bregnerødvej 94E
3460 Birkerød
Tel. +45 5356 5353
E-mail: info@mdcnordic.com

2. GENERAL PRINCIPLES FOR THE PROCESSING OF PERSONAL DATA
2.1 The GDPR provides a framework to ensure that personal data is processed properly. The Company will at all times ensure that personal data are:

a) Treated fairly, lawfully and transparently.
b) Appropriate, relevant, and not excessive.
c) Accurate and up-to-date – inaccurate or incomplete personal data will be corrected or deleted, or further processing will be suspended.
d) Only processed for a specific, explicit and lawful purpose and only processed in accordance with the purpose for which they were collected.
e)Not stored longer than necessary to fulfill the purpose for which the information was collected in accordance with our deletion policy.
f) Secure.

3. TYPES OF PERSONAL DATA
3.1 We collect and process your personal data in a number of ways to the extent necessary for us to be able to provide, optimize and market our services and operate our business.

3.2 The personal data we collect and process in connection with this can generally be divided into the following categories.

3.3 General information

3.3.1 Name, title, address, telephone number, correspondence, notes relevant to the collaboration or delivery of the Company’s services or services, as well as personal data that you provide to us, e.g. job applications and C.V., as well as any other general personal data that we collect or that you or a third party provide to the Company in its capacity as a supplier, business partner, customer or potential employer.

3.4 Sensitive information

3.4.1 Special categories of personal data (Sensitive data) are not collected or processed unless you specifically provide such data to us, e.g. in connection with a job application or similar. If we receive such special categories of information about you, we will delete such information immediately when the processing of such information is no longer nec-essary, e.g. when an employee recruitment is completed.

3.5 Cookies

3.5.1 Please refer to the Company’s Cookie Policy, available at www.mdcnordic.com.

4. OUR PURPOSE FOR PROCESSING YOUR PERSONAL DATA
4.1 We will only process your personal data in connection with a legitimate purpose and, in general, we will only process your personal data if:

a) You are a customer of or supplier to us, or you are a contact person in a company that is a customer of or supplier to us, or we have had a dialogue with you in con-nection with a collaboration, including by providing products or services to you or the company you are associated with.
b) You are the contact person for a potential customer or business partner.
c) You have applied for a job with us.
d) You are the recipient of our newsletter.
e) The processing is necessary for compliance with a legal obligation to which we are subject
f) The processing is necessary for the purposes of the legitimate interests pursued by us or by a third party
g) The processing is necessary for us to provide our products and services, or
h) You have consented to this.

5. DISCLOSURE, TRANSFER AND DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES
5.1 Our disclosure and transfer of your personal data to third parties is kept to a minimum and is subject to an adequate level of data protection. We may disclose or make available personal information to third parties, if necessary, in the following circumstances:

a) Third parties who perform services on our behalf, e.g. subcontractors, hosting, IT support, marketing services, administrative services, etc. Such third parties are only allowed to process the personal data in accordance with our instructions and in accordance with the written data processing agreement entered into between the Company and the third party in question.
b) To comply with applicable laws, regulations and public orders, including when trans-ferring personal data to public authorities, courts and the like.
c) To establish, exercise or defend our legal rights.

5.2 If the recipient of personal data is located in a country outside the EU/EEA that does not ensure an adequate level of data protection, we will only transfer your personal data to such recipient after having provided an adequate basis for transfer, for example after having entered into a written transfer agreement based on the EU Commission’s stand-ard contractual clauses.

6. YOUR CONSENT
6.1 As mentioned above, some of our processing activities may be based on your consent. In that case, you have the right to withdraw your consent at any time.

6.2 If you withdraw your consent, we will cease to process your personal data unless and to the extent that the continued processing or storage is permitted or required by applica-ble data protection laws or other applicable laws and regulations.

6.3 Please note that withdrawing your consent does not affect the lawfulness of the pro-cessing before you withdrew it. As a result of the withdrawal of your consent, we may not be able to fulfill your requests or provide our products or services to you.

7. SECURITY
7.1 The Company commits to having the necessary security measures in place to guarantee the security of your Personal Data, and the Website has implemented security measures to protect against the loss, misuse, and alteration of Personal Data under our control.

8. YOUR RIGHTS
8.1 Subject to statutory exceptions, you have the right to access the personal data we pro-cess about you. You can also object to the collection and further processing of your personal data, and you have the right to correct your personal data if necessary. You can also request us to restrict processing.

8.2 We will delete your personal data without undue delay in accordance with our deletion policy.

8.3 To exercise any of the above rights, please contact us.

8.4 In relation to such requests, please provide us with the relevant information for us to handle your request, including your full name and email address, so that we can identify you. We will respond to your request as soon as possible and within one month at the latest.

8.5 If you disagree with the processing of your personal data, please note that you can file a complaint with the Danish Data Protection Agency.

9. COMPLAINTS
9.1 If you have any complaints about the processing of personal data by the Company, you are welcome to contact us at any time. See section 1.

9.2 We will review and assess your complaint and, if necessary, we will contact you for further information.