In connection with the processing of an application for co-funding from Bornholms Erhvervsfond and the subsequent establishment and administration of the co-funding, the Erhvervsfonden collects personal data in your capacity as:

• Business owner seeking co-financing.
• Entrepreneur looking for co-financing.
• Guarantor for a company seeking co-financing.
• Member of the management board of the applicant company.
• Contact person within the applicant company.

The Business Foundation also collects personal data if you have contacted the Business Foundation. The purpose of collecting this information is to answer your enquiry and, where applicable, establish a point of contact between you and the Business Foundation.

The Business Foundation is the data controller when we process your personal data, and under the UK GDPR, we are obliged to inform you that we collect personal data about you.

Collection of personal data
In connection with the application and – if the application is granted – the subsequent establishment and administration of the co-financing, you will be requested to provide personal data, which will be registered and processed by the Business Foundation.

It is voluntary whether you want to share your information with Erhvervsfonden. However, certain information, including - but not limited to - name, address and CPR number may be necessary for Erhvervsfonden to process the application. If the information you have provided is not sufficient for Erhvervsfonden to process the application, you will be informed of this and given the opportunity to provide supplementary information. If the application is granted and an agreement is offered by Erhvervsfonden, a condition of the agreement may be that you present and make relevant information available to Erhvervsfonden. Failure to comply with such obligations may lead to Erhvervsfonden terminating the agreement and demanding the redemption of any disbursed loans.

Furthermore, the Commercial Foundation will collect personal data via partners, including credit reference agencies, financial institutions, security providers, other lenders, and other relevant sources including, amongst others, www.virk.dk.

The Business Foundation processes your information for the following purposes:

• Assessment of the application in order to decide whether and to what extent the application can be granted, as part of which a credit assessment is carried out, among other things.
• Check of whether you have previously received a refusal of an application.
• Administration of the co-financing arrangement, should one be established, including ongoing updating of the information.
• Management and recovery of non-performing loans.
• Bookkeeping and accounting activities as well as the compilation of statistics and archiving.

Disclosure of personal data
As the co-financing forms part of an overall financing solution which simultaneously secures funding from others, it may be necessary, for the purpose of processing the application and administering the co-financing arrangement, to exchange the collected information with the other funding sources. The Business Foundation will therefore, to the extent necessary, exchange information with the other funding sources. The exchange of personal data will not take place for marketing purposes unless you have received separate information about this and given your consent. The Business Foundation entrusts parts of the processing to data processors, but the Business Foundation remains the data controller for the processing.

Safety
As the data controller, the Commercial Foundation has implemented the necessary technical and organisational security measures to ensure that your personal data is not destroyed, lost or degraded, and to prevent it from coming to the knowledge of unauthorised persons, being misused or otherwise processed in breach of applicable data protection law.

Storage and deletion
The information that the Business Foundation has registered about you will be deleted when we no longer have a need for it
for the information, including that we have no legal or administrative need. In cases where the co-financing is established, the information is deleted no later than 18 months after it has been completed
(for example loan repayment). Information included in financial statements and the like will
be kept in an unaltered form as long as required under applicable rules. As a general rule, enquiries are deleted after 18 months unless a co-financing relationship is established.

Right of access, complaints procedure, etc.
You have a number of rights in relation to the information that the Commercial Foundation processes about you, including, among others:

• You have the right to access the information that the Business Foundation processes about you.
• You have the right to have any inaccurate personal data about you corrected.
• At any time, you have the right to object to the Business Foundation's processing of your personal data,
  if the processing is for direct marketing purposes.
• If you have given consent for your personal data to be processed for marketing purposes,
  you have the right to withdraw your consent. The withdrawal does not affect the lawfulness of the processing carried out by the Business Foundation before you withdrew your consent.

You are always welcome to contact the Business Foundation if you wish to exercise your rights. In addition, you have the option to lodge a complaint with the Danish Data Protection Agency regarding the Business Foundation's processing of your data. The contact details for the Danish Data Protection Agency can be found at www.datatilsynet.dk.

The Business Foundation's contact details
Bornholm Business Foundation
Landemærket 26, 3700 Rønne
CVR no.: 29979391

Fund administrator Henrik Kofod
Tel. 21 64 52 81
E-mail: hk@bornholm.biz

This privacy policy was revised on 25 May 2018