Processing of personal data in staff relations

In accordance with Article 14 of the General Data Protection Regulation, we must provide you with a number of details when we process personal data about you.

We must provide you with the following information:

Contact details
The purposes of and legal basis for the processing
Categories of personal data
Recipients or categories of recipients
Transfer to recipients in third countries or international organisations
Sources
Storage
Automated decision-making and profiling
Your rights
Lodging of a complaint with the Danish Data Protection Agency

Below, you will find further information about the data that you are entitled to receive.

If you have any questions about our processing of your personal data, please feel free to contact us via the contact details provided below.

Contact

Danske Fragtmænd A/S is the data controller for the processing of the personal data we have received about you. You can find our contact details below.

Danske Fragtmænd A/S
CENTRAL BUSINESS REG. NO. 30611756
Tomsagervej 18
DK-8230 Aabyhøj
+45 72 52 00 00
fragt@fragt.dk

Questions about our processing of personal data

If you have any questions about our processing of your personal data, please feel free to contact the department responsible for compliance.

You can contact the Compliance Department by email compliance@fragt.dk or telephone +45 72 52 16 62.

The purposes of and legal basis for the processing

We process your personal data for the following purposes:

Maintenance of the employment.
Personnel administration.
Internal risk management.
Performance of statutory obligations.

The legal basis for our processing of your ordinary personal data follows from:

Article 6(1)(a) of the General Data Protection Regulation, in accordance with which we may process your ordinary personal data if you have given your consent to this.
Article 6(1)(b) of the General Data Protection Regulation, in accordance with which we may process your ordinary personal data if this is necessary to perform a contract you have entered into with us.
Article 6(1)(c) of the General Data Protection Regulation, in accordance with which we may process your ordinary personal data if this is necessary for compliance with a legal obligation.
Article 6(1)(f) of the General Data Protection Regulation, in accordance with which we may process your ordinary personal data if this is necessary to pursue a legitimate interest and this is not overridden by your interests or fundamental rights and freedoms.
Section 12(1) of the Danish Data Protection Act (Databeskyttelsesloven), in accordance with which we may process your ordinary personal data in connection with your employment if this is necessary to comply with labour law obligations or rights laid down in other legislation or collective agreements.
Section 12(2) of the Danish Data Protection Act, in accordance with which we may process your ordinary personal data in connection with your employment if this is necessary to pursue a legitimate interest and this is not overridden by your interests or fundamental rights and freedoms.

The legal basis for our processing of your sensitive personal data follows from:

Article 9(2)(a) of the General Data Protection Regulation, in accordance with which we may process your sensitive personal data if you have given your explicit consent to this.
Article 9(2)(b) of the General Data Protection Regulation, in accordance with which we may process your sensitive personal data if this is necessary to carry out obligations in the field of employment, health and social security and social protection law .
Article 9(2)(h) of the General Data Protection Regulation, in accordance with which we may process your sensitive personal data if this is necessary for the assessment of your working capacity.
Section 12(1) of the Danish Data Protection Act, in accordance with which we may process your sensitive personal data in connection with your employment if this is necessary to comply with labour law obligations or rights laid down in other legislation or agreements.
Section 12(2) of the Danish Data Protection Act, in accordance with which we may process your sensitive personal data in connection with your employment if this is necessary to pursue a legitimate interest arising out of other legislation or agreements and this is not overridden by your interests or fundamental rights and freedoms.

Legitimate interests pursued by the processing

As mentioned above, our processing of your personal data are partially based on the rules on the weighing of interests in Article 6(1)(f) of the General Data Protection Regulation.

The legal basis is used in connection with video surveillance at our locations. You are informed about the video surveillance, including through clear displaying of signs, and you can therefore reasonably expect that such processing takes place. Seeing that you are an employee with us, the requirement for a relevant and appropriate condition has been met. The purposes of the processing include prevention and investigation of fraud and accidents, which is regarded as a legitimate interest.

Categories of personal data

We process the following categories of ordinary personal data about you:

Data about behaviour analyses.
Data about address.
Data about work email addresses.
Data about work telephone numbers.
Data about picture.
Data about use of the budget.
Data about use of identification card or personal code.
Data about use of IT.
Data about use and location of motor vehicles.
Data about use and location of PDA.
Data about physical location (office).
Data about loans of material.
Data about when you arrive at and leave work.
Data on driving and rest periods.
Data about pay conditions.
Data about names.
Data about pension companies.
Data about position in the organisational hierarchy.
Data about private telephone numbers.
Data about private email addresses.
Data about job title.
Data about on education and training.
Data about video surveillance material.

We process the following categories of sensitive personal data about you:

Data about civil registration numbers.
Data about health.
Data about offences.
Data about criminal convictions.

We do not process other sensitive personal data about you than those listed above. However, if you yourself provide sensitive personal data to us, we will regard it as your consent for us to store the data. The data will not be used in other contexts.

Recipients or categories of recipients

We disclose or transfer your personal data to the following recipients:

Employers’ Central Holiday Register (ACF).
Labour Market Supplementary Pension (ATP) scheme.
Insurance companies.
Intragroup companies.
Municipalities.
Pension companies.
Staff associations.
The Danish Customs and Tax Administration (SKAT).
Data processors. You can see the list of data processors by clicking on the link below:

Data processors

Transfer to recipients in third countries or international organisations

We do not disclose or transfer your personal data to recipients outside the EU or the EEA.

Sources

You will yourself have provided us with most of the data in connection with the establishment of your employment.

In connection with reimbursements from the public sector, for example for sickness benefits for absence due to illness, we may have received data from your municipality.

Storage

We keep your personal data while the employment relationship exists. Personal data are stored for up to 5 years from the end of the year of termination of employment.

We store video surveillance material for 30 days.

Automated decision-making and profiling

We do not use automated decision-making or profiling.

Right to withdraw consent

You have the right to withdraw your consent at any given time.

You can withdraw your consent by contacting us via the contact details listed above.

Your rights

Under the General Data Protection Regulation, you have a number of rights in relation to our processing of your personal data.

You may exercise your rights by contacting us via the contact details listed above.

Right of access

You have a right of access to the data we process about you as well as to a number of additional information.

Right to rectification

You have the right to have any inaccurate data about you rectified.

Right to erasure

In special cases, you have a right to have data about you erased before the date on which we generally erase data.

Right to restriction of processing

In some cases, you have the right to have the processing of your data restricted. If you have the right to have the processing of your data restricted, we will, with the exception of storage, in the future only process the data with your consent or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person or for reasons of important public interest.

Right to object

In some cases, you have the right to object to our otherwise lawful processing of your data. You may also object to the processing of your data for direct marketing.

Right to data portability

In certain cases, you have the right to receive your data in a structured, commonly used and machine-readable format and to transmit those data to another controller without hindrance from the controller to which the personal data have been provided.

You can read more about your rights in the Danish Data Protection Agency’s guidance on the rights of data subjects, which you can find at https://www.datatilsynet.dk.

Lodging of a complaint with the Danish Data Protection Agency

You have the right to lodge a complaint with the Danish Data Protection Agency if you are dissatisfied with the way in which we process your personal data.

You can find the Danish Data Protection Agency’s contact details at https://www.datatilsynet.dk.

The document was last updated on 8 October 2018.