This privacy policy describes how Grape A/S processes your personal data.
1. Data Controller
The legal entity responsible for the processing of your personal data is:
Grape A/S
CVR no.: 26079926
Gladsaxevej 376.2
2860 Søborg
Tel. + 45 70 10 20 48
info@grapenordic.com
2. Description of the treatment
2.1 Purpose: Provision of our services
We process your personal data in connection with the delivery of our e-learning, training, consulting and coaching services to a company or organization you act as a contact person for or representative on behalf of.
- E-learning
In connection with our e-learning services, we collect user information for the purpose of user creation in the LMS platform and transmission of e-learning. We also use personal data to compile statistics on e-learning completion.
- Training, consulting and coaching
In connection with our training, consulting and coaching services, we process personal data for the purpose of sending email messages with assignments, follow-up and materials.
Sources
We collect your personal data from the following sources:
- Direct from you
- From the company or organization you are acting as a contact person for, or representative on behalf of
- Through your use of our digital platforms
Categories of personal data
We process the following categories of personal data about you:
General personal data
- Contact information, including name, position, company, professional email, work address and work phone number
- User information, including name and email
- Use of digital services, including the implementation of e-learning
Treatment basis
We process your personal data based on the following processing bases:
-
- Article 6(1)(b) of the GDPR (necessary for the performance of a contract to which you are a party)
- Article 6(1)(f) of the GDPR (necessary for the pursuit of legitimate interests of GRAPE).
Description of the legitimate interest:
-
- Grape’s legitimate interest is to provide our services to a company or organization you are acting as a contact or representative on behalf of.
Recipients
We may share your personal data with:
- IT suppliers etc. that we work with to assist our business.
Storage
We will retain personal data for as long as necessary for the purposes mentioned.
- We will generally retain your personal data for as long as we have a business relationship with the company or organization you are acting as a contact person for or representative on behalf of. Personal data is deleted 6 months after the end of the customer relationship.
2.2 Purpose: Administration of Grape’s business relationships
We process your personal data in connection with managing our business relationship with a company or organization you act as a contact person for, or representative on behalf of.
This may be in connection with the conclusion of an agreement for the provision of a service or in connection with service regarding an already established customer relationship.
In this context, personal data is processed for the following sub-purposes:
- Inquiries and communication
We process your personal data when you, on behalf of a company or organization, contact GRAPE or ask us to contact you to inquire about our services.
We process your personal data so that we can communicate with you, including serving you regarding the customer relationship, and so that we can respond to your inquiries and provide the best possible service.
- Entering into commercial agreements
We process your personal data in connection with entering into commercial agreements for the provision of our services.
- Invoicing, bookkeeping, etc.
We process your personal data for accounting purposes, including issuing invoices and other bookkeeping necessary for the business relationship.
- Documentation purposes
We process your personal data for documentation purposes, including to be able to document the services we provide.
Categories of personal data
We process the following categories of personal data about you:
General personal data
- Contact information, including name, position, company, professional email, work address and work phone number
- Enquiries and communication
- Signatures when signing commercial agreements that you sign on behalf of the company
Treatment basis
We process your personal data based on the following processing bases:
General personal data
- Article 6(1)(b) of the GDPR (necessary for the performance of a contract to which you are a party).
- Article 6(1)(c) of the GDPR (necessary for Grape to comply with a legal obligation).
The legal obligation:
Chapter 5 of the Bookkeeping Act regarding rules for storage of accounting material.’
- Article 6(1)(f) of the GDPR (necessary for the pursuit of legitimate interests of GRAPE).
Description of the legitimate interest:
Grape’s legitimate interest is to manage our business relationship with a company or organization that you are acting as a contact or representative on behalf of. Our legitimate interest is also to be able to contact you and respond to your inquiry, including communicating with you regarding the customer relationship. Finally, Grape has a legitimate interest in documenting our services and communication with the company or organization.
Recipients
We may share your personal data with:
- IT suppliers etc. that we work with to assist our business.
Storage
We will retain personal data for as long as necessary for the purposes mentioned.
- We will generally retain your personal data for as long as we have a business relationship with the company or organization you are acting as a contact person for or representative on behalf of.
Communication
- We store personal data in connection with inquiries and communication about the customer relationship for documentation purposes. The data is deleted 5 years after the end of the customer relationship.
- If a customer relationship has not been established, we process your personal data for up to 2 years from registration.
Commercial agreements
- We retain personal data included in commercial documents for as long as the commercial documents are retained. Commercial documents are kept for 5 years after termination or expiration.
Accounting material
- We store personal data included in accounting material, including invoice information, in accordance with the Danish Bookkeeping Act’s rules on the storage of accounting material, i.e. we store personal data for 5 years from the end of the financial year to which the registration relates.
-
2.3 Use of our website
When you visit Grape’s website, personal data about your behavior is collected, including through the use of “cookies”.
Among other things, we use the information to optimize the user experience on our website and the services we offer.
In the cookie policy you will find detailed information about our use of cookies, including third-party cookies. Third-party cookies are cookies that are set by parties other than Grape when you visit our website.
The purpose of third-party cookies is to collect information for marketing purposes. (In the cookie policy you will also find a link to the third parties’ own privacy policies).
You can read more about the use of cookies in our cookie policy and revoke or change your consent by deselecting cookies in the cookie overview, and you can block cookies in your browser.
Especially regarding third-party cookies and joint data responsibility:
For this kind of processing, Grape is a joint controller with the provider of the relevant third-party cookies.
Categories of personal data
We process the following categories of personal data about you:
General personal data
- Name
- User information
- IP address
- Use of our digital services
- Information collected through the use of cookies, as described in the cookie policy
Sources
We collect your personal data from the following sources:
- Direct from you
- Online sources e.g. social media that are publicly available
- Third parties, as described in our cookie policy.
Treatment basis
We process your personal data based on the following processing bases:
General personal data
- Article 6(1)(a) of the GDPR (consent).
- Article 6(1)(f) of the GDPR (necessary for the pursuit of Grape’s legitimate interests).
Description of the legitimate interest:
Grape’s legitimate interest is to be able to optimize the user experience on the website and the services offered by Grape.
Recipients
We may share your personal data with:
- IT suppliers, etc. that we work with to assist our business.
- Third parties as described in our cookie policy
Storage
We will retain personal data for as long as necessary for the purposes mentioned.
- Personal data is stored for 6 months or as described in our cookie policy.
- For the deletion of cookies set by third parties, please refer to the privacy policies of these third parties.
2.4 Statistics
Your personal data is used to compile statistics on the use of our website and our services.
In this context, static personal data is processed for the following sub-purposes:
Manage user accounts, service usage and billing
In connection with a customer’s use of Grape’s e-learning programs, Grape collects statistical information about how many of the customer’s employees access the e-learning in question through the customer’s own LMS. This is done in order to manage user accounts, document delivery and to ensure that Grape can correctly bill its customers, as billing is based on the number of end users.
Categories of personal data
We process the following categories of personal data about you:
General personal data
- Name
- Usage history on our website
- IP address
Sources
We collect your personal data from the following sources:
- Direct from you
- Through your use of our digital platforms
Treatment basis
We process your personal data based on the following processing bases:
General personal data
- Article 6(1)(f) of the GDPR (necessary for the pursuit of legitimate interests of Grape).
Description of the legitimate interest:
Grape’s legitimate interest is to conduct statistical surveys in order to optimize our services and services and to better understand our customers. In addition, Grape’s legitimate interest is to be able to bill its customers correctly.
Recipients
We may share your personal data with:
- IT suppliers etc. that we work with to assist our business
Storage
We will retain personal data for as long as necessary for the purposes mentioned.
- Personal data is stored for 1 year.
2.5 Marketing
We use your personal data for marketing purposes, including to target our communication with you based on your interests and focus areas and to send you relevant marketing in the form of e.g. newsletters.
You can unsubscribe from our newsletters at any time by clicking on a link in the newsletter itself.
Categories of personal data
We process the following categories of personal data about you:
General personal data:
- Name, address, email and phone number
- Areas of interest and focus
- Usage history on our website
- IP address
Sources
We collect your personal data from the following sources:
Treatment basis
We process your personal data based on the following processing bases:
General personal data:
- Article 6(1)(a) of the GDPR (consent).
- Article 6(1)(f) of the GDPR (necessary for the pursuit of legitimate interests of Grape).
Description of the legitimate interest:
Grape’s legitimate interest is to be able to market its business and products, including by sending marketing and newsletters.
Recipients
We may share your personal data with:
- IT suppliers etc. that we work with to assist our business
Storage
We will retain personal data for as long as necessary for the purposes mentioned.
- We store your personal data for as long as you wish to receive marketing and newsletters from us and for 5 years after you have unsubscribed.
-
3. Your rights
You have the following rights:
- You have the right to request access to, rectification or erasure of your personal data.
- You also have the right to have the processing of your personal data restricted.
- If the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time. Your withdrawal will not affect the lawfulness of the processing carried out prior to your withdrawal of consent. You can withdraw your consent and exercise your rights as stated below.
- You have the right to receive the personal data you have provided in a structured, commonly used and machine-readable format (data portability).
- You can always lodge a complaint with a data protection supervisory authority, such as The Danish Data Protection Agency.
In addition, you have the right to object to our processing of your personal data in the following cases:
- If our processing of your personal data is based on Article 6(1)(f) (balancing of interests), see above under legal basis for processing, you have the right to object to such processing at any time on grounds relating to your particular situation.
- Likewise, you have an unconditional right to object to our processing of your personal data if we process your data for direct marketing purposes.
You can exercise your rights by sending an email to info@grapenordic.com.
There may be conditions or limitations to these rights. It is therefore not certain that you have a right to data portability, for example, in the specific case – this depends on the specific circumstances of the processing activities.
Last updated: January 2024
