PRIVACY POLICY
This privacy policy explains how Sociuu ApS (“we”, “us” or “Sociuu”) processes your personal data in relation Sociuu’s services, recruitment, marketing and/or when you visit the website sociuu.com.
1. Data controller
The legal entity responsible for the processing of your personal data:
Sociuu ApS
Company reg. (VAT) no.: 37652210 Ryesgade 3B
2200 Copenhagen
Email: hello@sociuu.com
Phone: +4531721935
2. Introduction
It is important to Sociuu that your personal data are collected and processed in a secure and lawful manner.
We have prepared this privacy policy (the “Privacy Policy”), which describes how we collect and process your personal data.
Below, you can read about how we collect and process your personal data.
3. Description of the processing
3.1 Marketing & Website administration
– 3.1.1 Purpose
This includes the following:
Subscription to and distribution of newsletters
We use personal data for marketing purposes, including to target our communication with you based on your interests and focus areas and to send you relevant marketing information in the form of newsletters etc.
Optimization of user experience on the website
We collect personal data when you visit our website. We use the data, for instance, to optimize the user experience on our website and the services we offer. You can read more about this in our Cookie Policy.
Business and product development
Preparation of statistics regarding our services and improvement of our services. You can read more about this in our Cookie Policy.
– 3.1.2 Categorizing personal data
We process the following categories of personal data about you:
General personal data
Contact details in the form of first name*, last name* and email address*.
Information collected in connection with your use of our website
IP address, cookies and other information about your use of our website.
– 3.1.3 Sources
We collect personal data from the following sources: Directly from you on subscription to our newsletter In connection with your use of the website
– 3.1.4 Basis for processing
We process personal data for this purpose on the following basis:
Legitimate interests
Article 6(1)(f) (necessary for the purposes of the legitimate interests pursued by us). Legitimate interests are to be able to provide the services requested by you, to distribute marketing information and to improve the services, on both the user side (website) and the system side (functionality etc.)
– 3.1.5 Recipients
We share personal data with:
Suppliers
We disclose personal data to suppliers and distributors, including IT suppliers, communication platform providers and advertising agencies.
– 3.1.6 Storage
We process personal data for as long as is necessary to fulfil the above-mentioned purposes. This means
that we will process the following personal data as described below:
We will keep your personal data for up to two years from the time of withdrawal of your consent.
3.2 Surveys and benchmarks
– 3.2.1 Purpose
This includes the following:
Surveys and benchmarks
Personal data may be used to follow up on your experience when conducting interviews with or market surveys of platform/campaign usage.
– 3.2.2 Categorizing personal data
We process the following categories of personal data about you:
General personal data
Contact information: Name, address, email, telephone number and other contact details provided by you. The reply that you submit in connection with a user or market survey.
– 3.2.3 Sources
We collect personal data from the following sources: Directly from you.
– 3.2.4 Basis for processing
We process personal data for this purpose on the following basis:
Legitimate interests
Article 6(1)(f) (necessary for the purposes of the legitimate interests pursued by us). Legitimate interests are to optimize the user experience, to optimize business operations and to ensure the quality of the services we provide.
– 3.2.5 Recipients
We share personal data with:
Suppliers
We share the information with suppliers with whom we cooperate and who assist our business (meaning service providers, IT providers, support companies and market analysis businesses).
– 3.2.6 Storage
We process personal data for as long as is necessary to fulfil the above-mentioned purposes. This means
that we will process the following personal data as described below:
Results of surveys and benchmark testing:
The information will be stored for three months and will then be anonymized.
3.3. Recruitment of employees
We process personal data, when you apply for a position at Sociuu.
– 3.3.1. Categorizing personal data
We process the following personal data:
Name, email address, phone number, home address, date of birth, marital status, information about next of kin, CPR number or similar, nationality, gender, information about previous employment and references, educational information, professional qualifications, language and other competencies, results from a personality type and skill set test, photos and video clips, linguistic and business preferences, as well as other personal information which is included in applications, statements and CVs.
In addition, for applicants under the age of 18, information on custodian or guardian is processed.
Sensitive information:
Information regarding trade union affiliation and health information.
Personal information regarding offenses and penalties:
Information on violation of criminal law and information on criminal record.
– 3.3.2. Sources
We collect information from the following sources:
Directly from you, Online sources e.g. social media, which is publicly accessible.
From third parties, which may include:
References. Former employees, or other third parties, including background check agencies, security clearance agencies, and recruitment agencies.
– 3.3.3. Basis for processing
We process your personal data as described based on the following processing bases: Consent
Article 6(1)(a) (Consent)
Conclusion and fulfillment of an agreement
Article 6(1)(b) (necessary for the fulfillment of a contract to which you are a party or for the implementation of measures taken at the request of the data subject prior to the conclusion of a contract).
Legitimate interests
Article 6(1)(f) (necessary for the purposes of the legitimate interests pursued by us). Our legitimate interest in this regard is to ensure the selection and appointment of suitable candidates for positions in the company
Labor, health and social obligations and rights
Article 9(2)(b) (necessary for the purpose of complying with or enforcing labor, health and social law obligations and rights), cf. § 12 of the Data Protection Act.
§ 8 in the Data Protection Act
Article 10, cf. § 8 in the Data Protection Act regarding information about criminal offenses and convictions.
§ 11 in the Data Protection Act
§ 11 in the Data Protection Act regarding CPR numbers.
– 3.3.4. Recipients
We can share your information with:
Business partners and suppliers, including IT suppliers. Group companies. Referents. Public authorities.
– 3.3.5. Storage
We store personal data for as long as is necessary to fulfil the above mentioned purposes.
Data on applicants, who are not hired, is stored for up to six months after final rejection, unless the applicant has given consent to a longer storage time.
Data on applicants who are hired, is transferred to the personal file of the person in question and stored in accordance with the deadlines described in our privacy policy for employees.
4. Transfer to countries outside the EU/EEA
We may transfer your personal data to countries outside the EU/EEA, including:
USA
We use Google services – such as Google G Suite and Google Analytics, so personal data may be transferred to countries outside the EU. You can see the list of locations where Google may process your personal data [here].
In some cases, the European Commission has recognised the country as a so-called “secure third country”, and otherwise the transfer is made on the basis of the European Commission’s standard contractual clauses. You can obtain a copy of the standard contractual clauses by contacting us using the contact details stated above.
5. Data processer
This chapter explains how Sociuu processes the Personal Data of customers and other individuals through the Sociuu Employee Advocacy Platform (the “Services”).
– 6.1 Processing personal data through the Sociuu platform.
At customers’ authorization, Sociuu runs the Employee Advocacy Platform on behalf of the customer. Customers are the data controllers and responsible for establishing the legal basis for the use of the Sociuu Employee Advocacy Platform. Sociuu provide and require a concluded data processing agreement with each customer, before starting any processing activity on behalf of the customer.
Personal data processed on the Sociuu Employee Advocacy Platform is at all times limited to the following categories of data:
Name, work e-mailaddress, job title, group/department affiliation
– 6.2 Sources
We collection information from the following sources: The customer
– 6.3 Legal basis for processing
The customer acts as the data controller and determines the legal basis. Sociuu acts as data processor and processes Personal Data on behalf of customer on the basis of a contractual relationship for the purpose of providing its services to the customer.
– 6.4 Recipients
– 6.5 Storage
We process personal data for as long as is necessary to fulfill our contract with the customer or until
otherwise instructed by the customer.
6. Your rights
You have the following rights: