1: Introduction

This privacy policy aims to describe how Business Center Bornholm (we, the company, us, our) processes personal data in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC) and the Data Protection Act (Act No. 502 of 23 May 2018 supplementing the provisions of the Regulation on the protection of natural persons with regard to the processing of personal data and on the free movement of such data).

The following is part of our obligation to provide information pursuant to Articles 13 and 14 of the UK GDPR.

2: The Company

The data controller for the collected personal data is:

Business Centre Bornholm
Landemærket 26,
3700 Rønne
CVR: 31124816
Telephone 56957300

All questions regarding our processing of personal data should be directed to the data controller.

3: What personal data do we collect and for what purpose?

3.1: Business Center Bornholm collects personal data for various purposes, as our services span multiple areas. In the following, we will describe how we process personal data when you use our various services.

3.2: Guidance of businesses – your business as a client

3.2.1: When you as a business contact Business Center Bornholm for guidance or a guidance programme, we will collect the following personal data about you and your business:

Name, address, CVR, email address, telephone number, and optionally CPR number.

The legal basis for our processing of personal data is Article 6(1)(e) of the UK GDPR.

Section 11 of the Data Protection Act will be the legal basis for obtaining unique identification by means of the CPR number.

3.2.2: The purpose of our processing of the above personal data is to enable us to guide your business in the best possible way to meet the needs requested by your business.

 3.2.3: We store your personal data for as long as we have a legitimate purpose or if we are required by law to store the personal data. We delete (anonymise) the personal data 1 year after the guidance process has been brought to an end; this is in order to be able to document the process. We delete personal data if you as the data subject request it, though there will be situations where our interests override those of the data subject, and the personal data will not be deleted.

3.3: Participation in events organised by Business Center Bornholm

 3.3.1: When you register for events held by Business Center Bornholm, we will collect the following personal data: Name, email, CVR number, telephone number, and possibly allergen information (if food is served at the event).

 3.3.2: The purpose is that we can hold events which will benefit your business, as part of our task execution.

 3.3.3: The legal basis is Article 6(1)(a) of the UK GDPR, as you are registering as a business and thereby giving your consent.

 3.3.4: We store your personal data for as long as we have a legitimate purpose or if we are required by law to store the personal data. We delete (anonymise) the personal data 1 year after the event has been brought to a close; this is in order to be able to document participation in the event. We delete personal data if you as a data subject request it, although there will be situations where our interests override those of the data subject, and the personal data will not be deleted.

3.4: When you use our website

3.4.1: When you use our website, we will collect the following information: IP address, how long you are active on our website.

3.4.2: The purpose is to be able to give you a better user experience when you use our website.

3.4.3: The legal basis is Article 6(1)(f) of the UK GDPR – our legitimate interests.

3.5: When you sign up for the newsletter

3.5.1: When you sign up for our newsletter, we collect the following information: Name and email address

3.5.2: The purpose is to be able to send you news and other relevant content.

3.5.3: The legal basis is Article 6(1)(a) of the UK GDPR – consent. The consent may be withdrawn at any time.

3.5.4: We store your information as long as we have your consent, and as long as we have a legitimate purpose.

3.6: Disclosure of your information

3.6.1: We work with several different partners, which is why your information may be disclosed in order to carry out a task for us. Our partners are our data processors, and they work under our instruction, which is set out in a data processing agreement. We have data processors both within and outside the EU.

3.6.2: Data processors outside the EU are primarily from the USA and are subject to the Data Privacy Framework, which makes the USA a safe country to send information to. Examples of data processors in the USA include: Google, Microsoft, Mailchimp et al.

3.6.3: Business Center Bornholm also supervises all data processors.

3.7: Safety

3.7.1: Business Center Bornholm has implemented the necessary technical and organisational measures to ensure a high level of protection.

4: Your rights

As a data subject, you have rights, and these are:

4.1: The right of access
You are entitled at any time to request information from us regarding, amongst other things, what information we have registered about you, the purpose of the registration, what categories of personal data and recipients of data there may be, as well as information on where the data originates.

You have the right to be provided with a copy of the personal data that we process about you. If you wish to have a copy of your personal data that we are in possession of, you must send a written request to info@bornholm.biz.

You may be asked to prove that you are who you claim to be.

The request will not be met unless we can verify your identity, as stated in Article 12(2), second sentence of the Data Protection Regulation.

4.2: The right to rectification
You have the right to have inaccurate personal data about yourself rectified by us. If you become aware that there are errors in the information we have registered about you, you are encouraged to contact us in writing at info@bornholm.biz, so the information can be corrected.

4.3: The right to erasure
In certain cases, you have the right to have all or some of your personal data erased by us, for example if the personal data are no longer necessary for the purposes for which they were collected or otherwise processed.

To the extent that continued processing of your information is necessary, for example, for us to comply with our legal obligations, or for legal claims to be established, exercised or defended, we are not obliged to erase your personal data.

If you wish to have your data deleted, please send a written request to info@bornholm.biz.

4.4: The right to restriction of storage
In certain cases, you have the right to obtain the restriction of the processing of your personal data so that it consists only of storage, for example if you believe that the data we process about you is not correct.

4.5: Rright to data portability
In certain cases, you have the right to receive personal data that you have provided to us in a structured, commonly used and machine-readable format and have the right to transmit those data to another data controller.

4.6: Right to object
You have the right at any time, on grounds relating to your particular situation, to object to the processing of your personal data that we carry out based on our legitimate interests or for the performance of a task carried out in the public interest.

If, on the basis of a qualified balancing of interests, we can demonstrate compelling legitimate grounds for the processing, we are entitled to continue processing your personal data.

4.7: The right to complain
You have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) at any time regarding our processing of your personal data.

A complaint can be submitted by email, among other methods dt@datatilsynet.dk or phone +45 33 19 32 00.

This privacy policy was revised in September 2023