Privacy Policy
Data Controller
We are the data controller responsible for processing the personal data we handle about our customers and business partners. You can find our contact details below.
Fine Chaos ApS
Møntergade 10, kl., 1116 København K
CVR No.: 42918695
It is not a requirement that our company has an external Data Protection Officer (DPO), but if you have questions regarding the processing of your personal data, you can contact us via [email address].
Processing Activities
As the data controller in accordance with the General Data Protection Regulation (GDPR), we carry out the following processing activities, which we manage in our GDPR compliance software.
Website Visits
When you visit our website, we use cookies to ensure that the website functions properly. You can read more about this in our [cookie policy].
Communication with Potential Customers
If you have questions about our website or want to hear more about our services, you can contact us via:
Contact form
Email
Phone
Through these channels we process your personal data in order to communicate with you, for example to answer questions about our services.
We typically process the following information:
Name
Email
Phone number
Our legal basis for processing this personal data is Article 6(1)(f) of the GDPR.
We delete our communication with you once it is clear whether you wish to use our services or not.
Customers
We need to communicate with our customers to ensure that our services are delivered correctly. For this purpose we may process:
Name
Address
Services provided
Special agreements
Payment information
The legal basis for processing this personal data is Article 6(1)(b) of the GDPR.
When the service has been delivered and any outstanding matters are resolved, we delete the personal data.
Newsletter
We have a newsletter that you can voluntarily subscribe to and unsubscribe from at any time.
The purpose of the newsletter is to send information from the company, such as:
New content on the website
Announcements of our services
We only send emails if you have given your explicit consent.
Our legal basis for processing your email address is Article 6(1)(a) of the GDPR.
We process your personal data as long as you are subscribed to the newsletter.
If you unsubscribe, we stop sending newsletters.
Your consent expires if we have not sent a newsletter for one year.
We store documentation of your consent for two years after it was last used due to legal limitation requirements.
Accounting
We store accounting documents in accordance with the Danish Bookkeeping Act.
This includes:
Invoices
Accounting documents
These may contain personal data such as:
Name
Address
Description of services
The legal basis is Article 6(1)(c) of the GDPR.
We store these records for at least 5 years after the financial year ends.
Disclosure of Personal Data
We do not disclose your personal data to third parties.
Profiling and Automated Decisions
We do not carry out profiling or automated decision-making.
Transfers to Third Countries
We primarily use data processors located within the EU/EEA or who store data in the EU/EEA.
If this is not possible, processors outside the EU/EEA may be used if they ensure an adequate level of protection.
Processing Security
We protect personal data by implementing appropriate technical and organizational security measures.
We conduct risk assessments and implement security measures such as:
GDPR awareness training
Employee GDPR training
Internal GDPR procedures
Data Subject Rights
Under the GDPR, you have several rights regarding our processing of your personal data.
If you wish to exercise your rights, please contact us.
Right of Access
You have the right to access the personal data we process about you.
Right to Rectification
You have the right to have incorrect personal data corrected.
Right to Erasure
In certain cases, you have the right to have your personal data deleted.
Right to Restrict Processing
In certain cases, you have the right to restrict the processing of your personal data.
Right to Object
You have the right to object to certain processing activities, including direct marketing.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
You can read more about your rights at www.datatilsynet.dk
Withdrawal of Consent
If processing is based on consent, you may withdraw your consent at any time.
Complaint to the Danish Data Protection Agency
You have the right to file a complaint with Datatilsynet if you are dissatisfied with how we process your personal data.
Contact details can be found at www.datatilsynet.dk