grape

Privacy Policy

This privacy policy describes how Grape A/S handles personal data.

1. Data Controller

The legal entity responsible for processing your personal data is:

Grape A/S
VAT no.: 26079926
Gladsaxevej 376,2
2860 Søborg
Phone: + 45 70 10 20 48
info@grapenordic.com

Note: This version of our privacy policy is an unofficial translation. Only the Danish version has legal validity.

2. Data processing description

 

2.1 Purpose: Delivery of our services

We process your personal data when delivering services within e-learning, workshops, counselling and coaching to a company or organisation that you are the contact person or representative on behalf of.

  • E-learning
    In connection with our e-learning services, we collect user information (name, e-mail etc.) to create users in the LMS platform. We also use personal data to compile statistics.
  • Workshops, counselling and coaching
    In connection with our workshops, counselling and coaching services, we process personal data for the purpose of sending messages via email with tasks, follow-ups and forwarding of materials.
Data Sources

We collect your personal data from the following sources:

  • Directly from you
  • From the company or organisation that you are the contact person or representative on behalf of
  • Through the use of our digital platforms
Categories of personal data

We process the following categories of personal data about you:

General Personal Data

  • Contact details including name, position, company, business e-mail, company address and work phone number
  • User credentials including name and e-mail
  • Use of digital services including e-learning progress
Lawful basis for processing

We process your personal data based on the following lawfulness of processing:

    • Article 6 (2) of the Data Protection Regulation 1 (b) (need to take into account the use of a contract of which you are part)
    • Article 6 (2) of the Data Protection Regulation 1 (f) (necessary for the pursuit of legitimate interests in Grape).

Description of legitimate interest:

    • Grape’s legitimate interest consists of delivering our services to a company or organisation that you are the contact person or representative on behalf of
Recipients

We can share your personal data with:

  • IT-contractors etc., that we cooperate with when assisting you and your company.
Data Storage

We will not store personal data longer than necessary for the purpose mentioned.

  • As a general rule, we store your personal data as long as we have a business relationship with the company or organisation that you are the contact person or representative on behalf of. Personal data is deleted 6 months after the end of the business relationship.

 

2.2 Purpose: Managing Grape’s business relations

We process your personal data in connection with the administration of our business relations with the company or organisation that you are the contact person or representative on behalf of.

E.g. when we enter an agreement about delivery of a service or in connection with a formerly established business relation.

In this context, personal data is processed with following purposes:

Inquiries and communication
We process your personal data, when you contact Grape or request to be contacted on behalf or your company or organisation, to hear more about our services.
We process your personal data, to communicate with you and support you in regards to the business relation, answer your inquiries and give you the best service.

Conclusion of contract
We process your personal data in regards to conclusion of contract regarding delivery of our services.

Invoices, Accounting etc.
We process your personal data for accounting purposes including issuing of invoices and other forms of accounting which are necessary in relation to the business relation.

The purpose of documentation
We process your personal data for the purpose of documentation including documentation of the services we deliver.

Categories of personal data

We process the following categories of personal data about you:

General Personal Data

  • Contact details including name, position, company, business e-mail, company address and work phone number
  • User credentials including name and e-mail
  • Signatures in connection with signing of contracts, that you sign on behalf of your company
Lawful basis for processing

We process your personal data based on the following lawfulness of processing:

General personal data

  • Article 6 (2) of the Data Protection Regulation 1 (b) (necessary for the fulfillment of a contract to which you are a party).
  • Article 6 (1) of the Data Protection Regulation 1 (c) (necessary for Grape to comply with a legal obligation).

The legal obligation:
Chapter 5 of the Danish Accounting Act regarding rules for storing accounting records.

  • Article 6 (2) of the Data Protection Regulation 1 (f) (necessary for the pursuit of legitimate interests in Grape).

Description of legitimate interest:

Grape’s legitimate interest consists in being able to manage our business relationship with a company or organisation that you act as a contact or representative on behalf of.

Our legitimate interest is also to be able to contact you and answer your inquiry, including communicating with you regarding the customer relationship. Finally, Grape has a legitimate interest in being able to document our services and communication with the company or organization.

Recipients

We can share your personal data with:

  • IT-contractors etc., that we cooperate with when assisting you and your company.
Data Storage

We will not store personal data longer than necessary for the purpose mentioned.

  • As a general rule, we store your personal data as long as we have a business relationship with the company or organisation that you are the contact person or representative on behalf of.

Communication

  • We store personal data in connection with inquiries and communication in regards to the customer relation for the purpose of documentation. The information is deleted 5 years after the termination of the customer relation.
  • If no customer relation has been established, we process your personal data for up to 2 years from the date of registration.

Conclusion of contract

  • We store personal data that is included in contracts as long as the contract is stored. Contracts are stored for 5 years after termination.

Accounting

  • We store personal data that is included in accounting material, including invoice information, in accordance with the Accounting Act’s rules on storing accounting material, ie. we keep personal data for 5 years from the end of the financial year to which the registration relates.

 

2.3 Use of our website

When you visit our website, personal information about your behaviour is collected through the use of “cookies”.

We use this information to optimise the user experience on our website and the services we offer.

In the cookie policy, you will find detailed information about our use of cookies, including third-party cookies. Third-party cookies are cookies set by anyone other than Grape when you visit our website.

The purpose of third party cookies is to collect information for marketing purposes. (In the cookie policy, you will also find a link to the third party’s own privacy policies).

You can read more about the use of cookies in our cookie policy as well as revoke or change your consent in regards to cookies, by deselecting cookies in the cookie overview (lower left corner), as well as blocking cookies in your browser.

Particularly regarding third party cookies and shared data responsibility:

Grape is jointly responsible for this kind of processing with the supplier of the third-party cookies.

Categories of personal data

We process the following categories of personal data about you:

General Personal Data

  • Name
  • User credentials
  • IP-address
  • Use of our digital services
  • Information collected by the use of cookies, as per described in the cookie policy.
Data Sources

We collect your personal data from the following sources:

  • Directly from you
  • Online sources such as social media, which are publicly available
  • Third Party, as described in the cookie policy
Lawful basis for processing

We process your personal data based on the following lawfulness of processing:

General personal data

  • Article 6 (2) of the Data Protection Regulation 1 (a) (consent).
  • Article 6 (1) of the Data Protection Regulation 1 (f) (necessary for the pursuit of Grape’s legitimate interests).

Description of the legitimate interest:

Grape’s legitimate interest consists of being able to optimise the user experience on the website and services offered by Grape.

Recipients

We can share your personal data with:

  • IT-contractors etc., that we cooperate with when assisting you and your company.
  • Third Parties, as per described in our cookie policy.
Data Storage

We will not store personal data longer than necessary for the purpose mentioned.

  • Personal data is stored for up to 6 months, as per described in the cookie policy.
  • In regards to deletion of cookies set by third parties, please refer to the third parties’ own privacy policies.

2.4 Statistics

Your personal data is used to gather statistics about the use of our website and our services.

In this context, static personal data is processed for the following purposes:

Administration of user accounts, use of services and settlement

In connection with a client’s use of Grape’s e-learning programs, Grape collects statistical information about how many of the employees access the e-learning through the client’s own LMS.

This is done in order to manage user accounts, document delivery and ensure that Grape can properly invoice its customers as the settlement is based on the number of end users.

Categories of personal data

We process the following categories of personal data about you:

General Personal Data

  • Name
  • Visit history on our website
  • IP-address
Data Sources

We collect your personal data from the following sources:

  • Directly from you
  • Through the use of our digital platforms
Lawful basis for processing

We process your personal data based on the following lawfulness of processing:

General personal data

  • Article 6 (2) of the Data Protection Regulation 1 (f) (necessary for the pursuit of legitimate interests for Grape).

Description of legitimate interest:

Grape’s legitimate interest consists of conducting statistical surveys in order to optimise our services as well as gaining more knowledge about our customers. In addition, Grapes’ legitimate interest consist of being able to make correct settlements for our clients.

Recipients

We can share your personal data with:

  • IT-contractors etc., that we cooperate with when assisting you and your company.
Data Storage

We will not store personal data longer than necessary for the purpose mentioned.

  • Personal data is stored for 1 year

 

2.5 Marketing

We use your personal data for marketing purposes, including targeting our communication based on your areas of interest, and to send you relevant marketing in the form of newsletters.

You can unsubscribe from our newsletters at any time by clicking the unsubscribe link in the bottom of any newsletter you receive from us.

Categories of personal data

We process the following categories of personal data about you:

General Personal Data

  • Name, address, e-mail og phone number
  • Interest- and focus areas
  • Visit history on our website
  • IP-address
Data Sources

We collect your personal data from the following sources:

  • Directly from you
Lawful basis for processing

We process your personal data based on the following lawfulness of processing:

General personal data:

  • Article 6 (2) of the Data Protection Regulation 1 (a) (consent).
  • Article 6 (2) of the Data Protection Regulation 1 (f) (necessary for the pursuit of legitimate interests for Grape).

Description of legitimate interest

Grape’s legitimate interest consists of being able to market its business and products through marketing activities and newsletters.

Recipients

We can share your personal data with:

  • IT-contractors etc., that we cooperate with when assisting you and your company.
Data Storage

We will not store personal data longer than necessary for the purpose mentioned.

  • We store your personal data as long as you wish to receive marketing material and newsletters from us. We store your data for 5 years after you have unsubscribed.

3. Your rights

You have the following rights:

  • You have the right to request access to, rectification or deletion of your personal data.
  • You also have the right to restrict the processing of your personal data.
  • If the processing of your personal data is based on your consent, you have the right to revoke your consent at any time. Your revocation will not affect the legality of the treatment made prior to your revocation of your consent. You may revoke your consent and exercise your rights as set out below.
  • You have the right to receive the personal data you have provided yourself in a structured, commonly used and machine-readable format (data portability).
  • You can always file a complaint with a data protection regulatory authority, e.g. Data Protection Agency.

In addition, you have the right to object to our processing of your personal data in the following cases:

  • If our processing of your personal data is based on Article 6 (2). 1 (f) (balance of interests), see under lawful basis of processing, you have the right, at any time, to object to such treatment on grounds that may relate to your particular situation.
  • You also have an unconditional right to object to our processing of your personal data if we process your data for direct marketing purposes.

You can exercise your rights be sending an e-mail to: info@grapenordic.com.

There may be conditions or restrictions that apply to these rights. You may not be entitled to data portability in a specific case – this depends on the specific circumstances of the processing activities.

Last updated: May 2020