The purpose of collecting and processing your personal data
The purpose of collecting and processing your personal data is to handle complaints submitted to NCP Denmark. Your contact information may be used to request any additional information from you relating to the issues described in your complaint, as well as in connection with other processing of your complaint by NCP Denmark.
The legal basis for the collection and use of your personal data
The legal basis for the collection and use of your personal data comes from:
- The Danish Act No. 546 of 18 June 2012, concerning a Mediation and Complaints-Handling Institution for Responsible Business Conduct (the Danish NCP Act) and the Executive Order No. 936 of 18 September 2012.
- The General Data Protection Regulation (GDPR), Article 6(1)(c) and Article 9.
Categories of personal data
We process general personal data, such as the contact information (name, email, address, phone number) you provide in connection with the submission of your complaint. We may also process sensitive personal data, if any such data appears in the complaint itself, in any attached documentation or is shared in connection with NCP Denmark’s handling of the complaint.
Recipients or categories of recipients
We disclose your personal data or make it available to the independent members of NCP Denmark, who are appointed by the Minister for Industry, Business and Financial Affairs, to the extent that is necessary for them to handle the complaint.
Sources for your personal data
We collect your personal data from your written submission of a complaint to NCP Denmark and from any documentation shared with NCP Denmark for the subsequent processing of the complaint.
Storage of your personal data
Section 15 of the Danish Access to Public Administration Files Act requires that all documents received by a public authority must be registered if the document is relevant to a case or its processing.
Complaints and supporting documentation are registered upon receipt and continuously during the processing of the case and are transferred to the Danish National Archives every five years in accordance with the rules of the Danish Archives Act.
Currently, we cannot say how long we will keep your personal data. However, we can inform you that we will emphasise how long your data is necessary for the case when determining how long the data will be kept.
Your rights
Under the General Data Protection Regulation (GDPR), you have a number of rights in relation to our processing of your personal data. If you wish to exercise these rights, please contact us.