Privacy Policy

Contact and Data Controller

Web2Media is the data controller for the personal data processed when you are a client of ours or use our services, including the website, newsletters, social media, etc. You may contact us at any time using the details below. If your enquiry concerns access, erasure, rectification, restriction, objection or data portability, please read the section on “Your rights” first.

 

Company
Web2Media
Bülowsgade 68, 2nd floor
8000 Aarhus C

 

Data Controller
Peter Jensen
Email: pet@web2media.dk

What personal data do we process, and for what purposes?

Depending on your relationship with us, we process your personal data in different ways and for different purposes. Below, you can expand the headings to read what applies to each specific area.

Purpose
When you visit our website, we collect information about the visitor’s behaviour for the purpose of compiling statistics on the use of the website, as well as for the purpose of carrying out targeted marketing. This only takes place if you have accepted the use of cookies on the website.

Legal basis for our processing of personal data
The processing of personal data is based on legitimate interest (the balancing of interests rule in the General Data Protection Regulation), as we assess that the collection and disclosure of behavioural data on our website does not infringe upon the visitor’s fundamental rights.
You may at any time opt out of such disclosure by changing the settings for third-party cookies under our cookie policy.

Categories of personal data and their source
Only personal data in the form of IP address and behaviour (clicks on various subpages of the website) is collected. Only personal data that the visitor provides themselves is collected.

Recipients of personal data
We disclose personal data, directly and indirectly, to HubSpot, YouTube, Google, LinkedIn and Facebook. All five companies are located in the United States. Data processing agreements have been entered into with all five, and data transfers are carried out on the basis of Standard Contractual Clauses (SCCs).

Storage of personal data
The data we collect for statistical purposes is stored for 26 months in Google Analytics, after which it is automatically deleted. Other data disclosed to third parties is controlled by those parties, and we therefore have no control over when such data is deleted.

Automated decisions and profiling
The collected personal data is not used for automated decision-making; however, it should be expected that Google (including YouTube), LinkedIn and Facebook extensively use visit behaviour for their internal profiling.

Links to other websites
The website may contain links to other websites or partners. We cannot be held responsible for the content of such websites or for their collection of personal data.

Purpose
When you use a contact form on our website, we process the personal data provided for the purpose of responding to your enquiry. The personal data provided will not be linked to the company’s newsletter. The email address will only be used in accordance with the applicable rules of the Danish Marketing Practices Act. In some cases, Web2Media may use the data for marketing purposes on Google, LinkedIn or Facebook.

Legal basis for our processing of personal data
The processing of personal data is based on legitimate interest (the balancing of interests rule in the General Data Protection Regulation), as the visitor has voluntarily provided the information for the purpose of being contacted.

Categories of personal data and their source
General contact information is collected in the form of name, email address, company and phone number. In addition, we request a message elaborating on the nature of the enquiry. Only personal data that the visitor provides themselves is collected.

Recipients of personal data
The personal data provided will not be disclosed outside the company. The personal data is transferred (not disclosed) to HubSpot in the United States, where it is used for the distribution of newsletters. HubSpot may not use the personal data for its own purposes and therefore acts solely on our instructions. A data processing agreement has been entered into with HubSpot, and data transfers are carried out on the basis of Standard Contractual Clauses (SCCs).

Storage of personal data
If the enquiry leads to a collaboration, client relationship or otherwise creates a closer relationship, the personal data will be stored in accordance with that relationship. If not, the personal data will be automatically deleted within 6 months from the most recent correspondence.

Automated decisions and profiling
The collected personal data is not used in connection with automated decision-making or profiling.

Purpose
When you subscribe to the newsletter on our website, we process the personal data provided for the purpose of sending emails with news, offers, new products and services, invitations to events, and other marketing initiatives. In some cases, Web2Media may use the data for marketing purposes on Google, LinkedIn or Facebook.

Legal basis for our processing of personal data
The processing of personal data is based on consent. Please note that you may withdraw your consent at any time.

Categories of personal data and their source
Contact information is collected in the form of name and email address. Only personal data that the visitor provides themselves is collected.

Recipients of personal data
The personal data provided will not be disclosed outside the company. The personal data is transferred (not disclosed) to HubSpot in the United States, where it is used for the distribution of newsletters. HubSpot may not use the personal data for its own purposes and therefore acts solely on our instructions. A data processing agreement has been entered into with HubSpot, and data transfers are carried out on the basis of Standard Contractual Clauses (SCCs).

Storage of personal data
The personal data is stored for as long as the subscription to the newsletter is active or until consent is withdrawn. The personal data is also deleted if technical receipt of emails is refused (e.g. if the email account is closed).

Automated decisions and profiling
The collected personal data is not used in connection with automated decision-making or profiling.

Purpose
When you register for a physical event (via a contact form) or an online webinar (via a third-party link), we process the personal data provided for the purpose of registering participants and for sending service-related emails about the event/webinar before and immediately after it takes place. The personal data provided will not be linked to the company’s newsletter unless you actively give your consent in connection with the registration. In some cases, Web2Media may use the data for marketing purposes on Google, LinkedIn or Facebook.

Legal basis for our processing of personal data
The processing of personal data is based on consent. Please note that you may withdraw your consent at any time. If you do so, you will also lose your place at the event/webinar.

Categories of personal data and their source
Contact information is collected in the form of name and email address. Only personal data that the visitor provides themselves is collected.

Recipients of personal data
The personal data provided will not be disclosed outside the company. The personal data is transferred (not disclosed) to HubSpot in the United States, where it is used for the distribution of newsletters. HubSpot may not use the personal data for its own purposes and therefore acts solely on our instructions. A data processing agreement has been entered into with HubSpot, and data transfers are carried out on the basis of Standard Contractual Clauses (SCCs).

Storage of personal data
The personal data is stored until 3 months after the event and is then deleted. If you reply to or ask questions via email, the data will generally be stored for 6 months. Please also refer to “When using our contact form on the website.”

Automated decisions and profiling
The collected personal data is not used in connection with automated decision-making or profiling.

Purpose
When you are a client in our consultancy business, we process the personal data provided for the purpose of invoicing in accordance with the Danish Bookkeeping Act and sending the invoice by email.
The personal data provided will not be linked to the company’s newsletter. The email address will only be used in accordance with the applicable rules of the Danish Marketing Practices Act. In some cases, Web2Media may use the data for marketing purposes on Google, LinkedIn or Facebook.

Legal basis for our processing of personal data
The processing of personal data is carried out in order to fulfil an agreement relating to the purchase.

Categories of personal data and their source
Contact information is collected in the form of name, address and email address. Only personal data that the visitor provides themselves is collected.

Recipients of personal data
The personal data provided will not be disclosed outside the company.

Storage of personal data
Personal data processed for the purposes of the Danish Bookkeeping Act is stored for up to 5 years after the end of the financial year, cf. section 10 of the Danish Bookkeeping Act, and is subsequently deleted. If you reply to or ask questions via email, the data will generally be stored for 3 months. Please also refer to “When using our contact form on the website.”

Automated decisions and profiling
The collected personal data is not used in connection with automated decision-making or profiling.

Purpose
We may collect and process contact information from third parties such as LinkedIn, Facebook or similar platforms for sales purposes.
We comply with the duty to provide information under Article 14 by providing the relevant information in connection with the processing as soon as possible and no later than 30 days after the personal data has been processed.

Legal basis for our processing of personal data
The processing of personal data is based on legitimate interest, following a balancing of interests where the interest in carrying out the processing outweighs the interest in refraining from such processing.

Categories of personal data and their source
Contact information is collected in the form of name, username and similar details.

Recipients of personal data
The personal data provided will not be disclosed outside the company. The personal data is transferred (not disclosed) to HubSpot in the United States, where it is used for the distribution of newsletters. HubSpot may not use the personal data for its own purposes and therefore acts solely on our instructions. A data processing agreement has been entered into with HubSpot, and data transfers are carried out on the basis of Standard Contractual Clauses (SCCs).

Storage of personal data
Personal data will be deleted when it is no longer relevant, but no later than 6 months after processing if no ongoing dialogue exists. If you reply to or ask questions via email, the data will generally be stored for 6 months. Please also refer to “When using our contact form on the website”.

Automated decisions and profiling
The collected personal data is not used in connection with automated decision-making or profiling.

Purpose
We and Facebook collect and process personal data when you visit the company’s Facebook pages (“fan pages”). The purpose of the processing is to enable us to market ourselves to potential customers, retain inquiries, and for similar related purposes.
The specific Facebook pages administered by Web2Media are:
https://www.facebook.com/Web2Media/

We comply with the Danish Data Protection Agency’s applicable guidelines regarding joint data controllership and strive to ensure that visitors to our Facebook page receive information about personal data. At present, this includes, among other things, that we continuously seek to engage in dialogue with Facebook regarding the regulation of joint data controllership and the allocation of responsibilities. As mentioned below in this policy, visitors to our Facebook pages also have the opportunity to exercise their rights, such as the right of access, the right to object, and the right to erasure.

Legal basis for our processing of personal data
The processing of personal data is based on legitimate interest following a balancing of interests. No data requiring consent is processed.

Categories of personal data and their source
Contact information is typically collected in the form of a name. If we receive sensitive data/special categories of data, these will be deleted as soon as they come to our attention.

Recipients of personal data
The personal data provided will not be disclosed outside the company.

Storage of personal data
As the personal data provided on the Facebook pages is submitted by the individual themselves on our publicly accessible page, the data will, as a general rule, remain on the page for as long as it exists. As the provider of the data, you may at any time object to the balancing of interests in order to have any posts deleted.

Automated decisions and profiling
We assume that Facebook carries out automated decisions and profiling on the part of the personal data for which Facebook is the data controller. We do not use automated decisions or profiling.

Please note! If you do not wish your data to be processed, please refrain from visiting our Facebook pages, as it is currently not possible for us to change Facebook’s settings for data collection.

Purpose
We and LinkedIn collect and process personal data when you visit the company’s LinkedIn Company Pages. The purpose of the processing is to enable us to market ourselves to potential clients, handle enquiries and other related purposes.
The specific LinkedIn page managed by Web2Media is:
https://www.linkedin.com/company/2807617

We follow the current guidelines of the Danish Data Protection Agency regarding joint controllership and strive to ensure that visitors to our LinkedIn page receive information about personal data processing. At present, this includes, among other things, our ongoing efforts to engage in dialogue with LinkedIn regarding the regulation of joint data controllership and the allocation of responsibilities. As stated below in this policy, visitors to our LinkedIn page also have the opportunity to exercise their rights, such as the right of access, the right to object and the right to erasure.

Legal basis for our processing of personal data
The processing of personal data is based on legitimate interest following a balancing of interests. No personal data requiring consent is processed.

Categories of personal data and their source
Contact information is typically collected in the form of a name. If we receive sensitive data or special categories of personal data, such data will be deleted as soon as it comes to our attention.

Recipients of personal data
The personal data provided will not be disclosed outside the company.

Storage of personal data
As the personal data provided on the LinkedIn pages is submitted by the individual themselves on our publicly available page, the data will generally remain on the page for as long as it exists. As the data subject, you may at any time object to the balancing of interests in order to have any posts deleted.

Automated decisions and profiling
We assume that LinkedIn carries out automated decision-making and profiling with regard to the personal data for which LinkedIn is the data controller. We do not carry out automated decision-making or profiling.

Please note! If you do not wish for your personal data to be processed, please refrain from visiting our LinkedIn company page, as it is currently not possible for us to change LinkedIn’s data collection settings.

We use a number of external companies and services that process personal data on our behalf. These parties act as data processors for us. For all of our data processors, we have entered into data processing agreements that ensure our requirements for the protection of personal data are met. Common to all of these is that we only transfer data, meaning that the data we transfer remains our property and is not used for the external party’s own purposes.

To the greatest extent possible, we use data processors located within the EU/EEA to avoid transferring personal data to unsafe third countries. In certain cases, however, we use data processors located in the United States and Canada, but only where they meet the applicable requirements under the GDPR. In such cases, a data processing agreement is entered into with the company, and data transfers are carried out on the basis of Standard Contractual Clauses (SCCs).

In certain situations, we may disclose personal data to external parties based on legitimate interest or a legal obligation. This may include insurance companies, the Danish Tax Agency (SKAT) and similar authorities. In such cases, these parties act as independent data controllers for the personal data they receive from us, as they themselves determine the purpose and means of the processing.

If you know or suspect that we process personal data about you, you have a number of rights in relation to the processing. The individual rights are described in more detail below.
If you choose to exercise any of your rights, e.g. by requesting access to the personal data we process about you, please contact us by email at hej@web2media.dk. Once we have received the email and subsequently verified your identity – to ensure that we do not disclose personal data to unauthorised parties – we will initiate the process.

Right of access
You have the right to request access to the personal data we process about you. If we process personal data about you, we will provide information about such data, as well as the purpose and legal basis for the processing.

Right to object
You have the right to object if you disagree with our processing of your personal data. Whether an objection is upheld is assessed on a case-by-case basis.

Right to request restriction
You have the right to request that we restrict the processing. In certain cases, you may request that the processing be restricted if you do not wish for all registered data to be included in the processing.

Right to request erasure
You have the right to request erasure of your personal data. This right is not absolute, as certain data cannot be deleted due to other legislation or where an agreement and purpose entitle the company to retain the personal data.

Right to request rectification
If the personal data we process is inaccurate, you have the right to have it corrected with accurate information.

Right to data portability
You have the right to receive your personal data in a machine-readable format. Please note that this only applies to the personal data that you have provided to us.

Right to withdraw consent
If the processing of personal data is based on consent, such consent may be withdrawn at any time, after which the processing will cease.

Right to lodge a complaint
You are always welcome to contact Web2Media if you have questions or wish to lodge a complaint regarding the processing of your personal data. If you are not satisfied with our response, you may lodge a complaint with the Danish Data Protection Agency. See more at the Danish Data Protection Agency’s website.