Privacy policy

Processing of personal data at archouse Aarhus 1 Introduction 1.1 This privacy notice explains how Unity Aarhus ApS ("archouse Aarhus", "we", "us", "our") processes personal data in various situations. We provide you with this information as we are required to do so under the General Data Protection Regulation (the "GDPR"). 2 Controller and contact information 2.1 archouse Aarhus (Unity Aarhus ApS, CVR-number 12580290, C/O Cobblestone A/S, Gl. Køge Landevej 57, 3. sal, 2500 Valby) acts as a data controller for the processing of personal data in connection with the below mentioned purposes. 2.1 If you have any questions about how we process personal data, please contact us at archouse@cobblestone.dk & +45 7022 2215. 3 Description of the processing 3.1 Below, please find the specific purposes for our data processing, the categories of personal data that we process, the legal basis for such processing, and the retention periods that we have decided. 3.2 When you visit our website or app (our "Platforms") 3.2.1 Cookies Purpose To ensure the functionality of our Platforms and optimizing the design, user experience and effectiveness on our Platforms, including analysing the most popular information to ensure that the information is easily accessible. Categories Information on the use of our website, including traffic on the pages, time, what you click, pages/products visited, browser type, keywords, IP address, information about device type (computer, smartphone, etc.), as well as the features used. Legal basis According to the Danish Executive Order on Cookies, we may only use statistical and analytical cookies if you accept such cookies. When asking for your accept to use cookies, we also ask for your consent to the processing of your personal data, in accordance with Article 6(1)(a) of the GDPR. Personal data in relation to cookies that are necessary to ensure the functionality of our Platforms is processed in accordance with Article 6(1)(f) of the GDPR, as we are pursuing our legitimate interests in ensuring the functionality and security of our website. Retention Personal data collected in relation to our use of cookies are stored in accordance with our cookie declaration, which is available here: cookie policy. Purpose Tracking of website visitors for marketing purposes, including targeted advertising (profiling). Categories Information on the activity on our Platforms, including location, IP-addresses, browser used, time and date of access, operating system, pages visited, web requests and information about device type (computer, smartphone, etc.). Legal basis According to the Danish Executive Order on Cookies we are required to obtain your consent to use targeting cookies for marketing purposes. At the same time we obtain your consent to the processing of your personal data in accordance with Article 6(1)(a) of the GDPR. Retention Personal data collected in relation to our use of cookies are stored in accordance with our cookie declaration, which is available here: cookie policy. 3.2.2 Delivery and administration of our Platforms Purpose Delivery and administration of our Platforms in relation to tenants. Categories Information on name and contact information, your relationship with us, the services provided to you as well as username and password when using our app. Legal basis The legal basis for our processing of your personal data is article 6(1)(b) of the GDPR, as the processing is necessary in order for us to fulfil our agreement with you. Retention The personal data is stored for a period of up to 10 years after the end of the financial year in which our relationship has ended. 3.3 Payment via our app Purpose Delivery and administration of the payment solution regarding payment of mandatory payments under your tenancy agreement, as well as for purchasing additional services, including internet, parking, sauna, storage rooms and ordering extra access cards and reservation of room/facilities. Categories Information on name, contact information, rent, additional services bought and payment details, including payment card information. Legal basis The legal basis for our processing of your personal data is article 6(1)(b) of the GDPR, as the processing is necessary in order for us to fulfil our agreement with you regarding tenancy and additional services. Retention The personal data is stored for a period of up to 10 years after the end of the financial year in which our relationship has ended. 3.4 Communication in relation to general inquiries etc. Purpose Handling communication in relation to general inquiries, communication regarding potential tenants etc., including communication via the contact forms at our Platforms. Categories Name, contact information, including email and phone number. Information that you have included in the message/communication. Legal basis Article 6(1)(f) of the GDPR, as we are pursuing our legitimate interests in managing communications with you. Retention Up to 2 years after the last communication. 3.5 Newsletters (direct marketing) Purpose Sending newsletters (direct marketing). Categories Name, email address and the preferences you have given in connection with your subscription. Legal basis Article 6(1)(a) of the GDPR, as we obtain your consent to send newsletters. You can read more about your right to withdraw your consent in section 7 below. Retention We process the information for as long as the consent is in use. We store information regarding your name and email address for up to 180 days after the last distribution of our newsletter to you, so we can document our compliance with the Danish Marketing Act. 4 Categories of recipients 4.1 We disclose personal data public authorities under applicable legislation or following court orders from the police or other public authorities. Further, we may process and share your personal data with our partners such as our property manager, Cobblestone. You can read more about how our property manager process your personal data via their website: Cobblestone privacy. 4.2 If necessary, e.g., in relation to any disputes or when we otherwise need external advice, we may disclose information to our advisors, such as auditors and lawyers. 4.3 Further, your data will be processed by external partners who process personal data on our behalf (data processors). Such external partners include e.g. providers of hosting and support services in relation to our Platforms and IT systems. 5 Transfer to third countries 5.1 We transfer your personal data to countries outside the EU/EEA, when making data available to our processors, including The United States of America. Unless the country in question has been approved by the European Commission as having sufficient level of protection (including companies located in the US that are covered by the EU-US Data Privacy Framework), the basis for the transfer is the European Commission's Standard Contractual Clauses. 5.2 If you want additional information about our transfer of personal data to third countries, you may make a request for such additional information by contacting us via the contact information under section 2. 6 Your rights 6.1 According to the GDPR, you have the following rights when we process personal data about you: • Right of access: You have the right to have confirmed whether collection or processing your personal data has taken place, and, if so, you have the right to request a copy of your personal data in a digital format. • Right of rectification: You have the right to require that we correct any inaccurate personal data, and that we complete incomplete personal data. • Right of erasure: In certain circumstances, you have the right to request that we erase personal data concerning you; for example, if it is no longer necessary for the purposes in which it was originally collected. • Right to restrict processing: In certain circumstances, you have the right to request that we restrict the processing of your personal data, for example, if you believe that the personal data is not accurate or lawfully processed. • Right to object to the processing: In certain circumstances, you have the right to request that we stop processing your personal data. • Right to data portability: In certain circumstances, you have the right to receive the personal data you have provided us with in a structured, commonly used, machine readable format, and the right to have us transmit the data to another entity, where technically feasible. 6.2 You can read more about your rights in the Danish Data Protection Agency's guidelines on data subjects' rights, which is available at datatilsynet.dk (English). Please contact us if you wish to exercise any of your rights. The relevant contact details are stated above. 7 Right to withdraw consent 7.1 If you no longer wish to receive our newsletters, you can withdraw your consent at any time via the newsletter emails that you receive. 7.2 Consent provided for the use of cookies can be withdrawn via our cookie policy. 7.3 If you withdraw your consent, the withdrawal will not affect the lawfulness of processing that has already been carried out based on your consent. 8 Complaint to a supervisory authority 8.1 If you want to lodge a complaint with a supervisory authority about our processing of your personal data, you can do so by contacting the Danish Data Protection Agency via their website: www.datatilsynet.dk.