Privacy Policy

CM Holding A/S
CVR: 27276024
Pakhus 48, Klubiensvej 22
DK-2150 Nordhavn, Copenhagen

Phone: +45 39 96 53 00

Types of data

• Technical Data: IP address, device type, operating system, browser type, and behavior on our site.

• Communication Data: Emails, inquiries, or feedback sent to us.

Purpose

• To improve our services, ensure website functionality, and provide relevant communication and services.

• Enhancing user experience and personalization.

• Marketing and statistical analysis.

• To answer inquiries sent to us.

Types of data

• Identification Data: Name, job title, business email address, phone number.

• Professional Data: Company name, business address, department, primary responsibilities.

• Contractual Data: Purchase orders, invoices, agreements, and communication records.

• Verification Data: Copies of identity documents for compliance purposes (e.g., "Know Your Customer" requirements).

Purpose

• Contract Management: To negotiate, execute, and manage agreements and services.

• Operational Coordination: Ensuring efficient collaboration and communication.

• Compliance: Fulfilling legal requirements such as anti-money laundering obligations or fraud prevention.

• Billing and Payments: Processing invoices and managing financial transactions.

We process personal data under these GDPR bases:

• Legitimate Interests (Art. 6(1)(f)): For improving services, marketing where applicable, and analytics.

• Contractual Obligations (Art. 6(1)(b)): When delivering requested services.

• Legal Compliance (Art. 6(1)(c)): As required by law.

We retain data only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable laws and regulations.

The specific retention period depends on the nature of the data and the reason for storage. While it is not possible to define a universal timeframe for all data, the following guidelines apply:

• General Retention: Data associated with active interactions will be retained as long as there is activity.

• Request-Based Deletion: Upon request of deletion of data, we will aim to process and fulfil the request within 30 days, provided no legal or contractual obligations prevent the deletion.

• Legal and Compliance Requirements: Certain data, such as financial records or data subject to anti-money laundering laws, may be retained for longer periods as mandated by law.

You have the right to:

• Access your data

• Request correction or deletion

• Restrict processing

• Object to processing

• Data portability

For more information, visit www.datatilsynet.dk

To exercise any of these rights, please contact us at gdpr@copmer.com.

If you believe your rights have been violated, you can lodge a complaint with the relevant Data Protection Authority in your country. In Denmark, this is Datatilsynet (The Danish Data Protection Agency).

We share data only to the extent necessary and in compliance with applicable data protection regulations. Below is an overview of how and why your data may be shared:

Sharing for advertising and analytics

• Data about your usage of our website, including pages visited, geographical location, gender, age group, and interactions with ads (e.g., which ads you see or click), may be shared with third parties to enhance targeted advertising.

• Details about the specific third parties involved can be found in our Cookie Declaration.

• This data is used exclusively to improve our services and personalize your experience.

 Third-party processors

• We work with trusted third-party service providers for data storage, processing, and analysis. These third parties act solely on our behalf and are contractually obligated to handle your data securely and in accordance with our instructions. They are prohibited from using your data for their purposes.

• Examples include providers of IT infrastructure, customer service systems, and analytics tools.

Legal compliance

• In certain cases, we may share your data to comply with legal obligations, court orders, or requests from regulatory authorities.

In the case of corporate restructuring, mergers, or acquisitions, your data may be shared with affiliated companies or buyers as part of the transaction.

Third countries

• If business data is transferred outside the EU/EEA to countries that do not have an adequate level of data protection, we ensure that such transfers are based on valid safeguards, such as the EU Commission’s Standard Contractual Clauses.

We only work with data processors and third parties that comply with the requirements of applicable data protection laws, including the General Data Protection Regulation (GDPR).

For a complete list of data processors and more details about their functions, please contact us at gdpr@copmer.com

We only collect the data necessary for the purposes outlined above. We encourage users to provide only essential personal information when interacting with our services.

Changes to this policy will be reflected here with a new effective date.

Version: 2.0
Effective Date: 26/11/2024