Cookie & Privacy Policy

Introduction

When you visit our website, information about you is collected and used to customize and improve our content and enhance the value of the ads displayed on the page. If you do not want information to be collected, you should delete your cookies (see instructions) and refrain from further use of the website. Below, we have provided details on the information collected, its purposes, and the third parties who have access to it.

Cookies

The website uses “cookies,” which are text files stored on your computer, mobile device, or similar, with the purpose of recognizing you, remembering settings, performing statistics, and targeting ads. Cookies cannot contain malicious code such as viruses.

It is possible to delete or block cookies. See instructions: http://minecookies.org/cookiehandtering

If you delete or block cookies, ads may become less relevant to you and appear more frequently. Additionally, you may experience suboptimal website functionality and may be unable to access certain content.

Privacy Policy

Data Controller

We are the data controller for the processing of personal data that we process about our customers and business partners. You can find our contact information below.

Whistle Service ApS

Nyboesgade 27, 4. 7100 Vejle

CVR no.: 43795406

It is not a requirement for our company to have an external Data Protection Officer (DPO), but if you have any questions regarding the processing of your personal data, you can contact us via hello@whistleservice.com.

Processing Activities

As the data controller under the GDPR, we have the following processing activities:

Website Visits

When you visit our website, we use cookies to ensure the functionality of the website, which you can read more about in our cookie policy.

Communication with Potential Customers

When you have questions about our website or want to learn more about our services, you can contact us via:

• hello@whistleservice.com

• +43 31538342

Through this communication, we will process your personal information so that we can engage in a dialogue with you, such as answering questions about our services. We only process the information you provide to us in connection with our communication.

We typically process the following common information: name, email, phone number.

Our legal basis for processing this personal data is Article 6(1)(f) of the General Data Protection Regulation (GDPR). We will delete our communication with you when it becomes clear whether you are interested in our services or not. If there is a specific need to store your personal information for a longer period, this may be the case.

Customers

We need to communicate with our customers to ensure the proper delivery of services. Through this communication, we may process information such as name, address, services, special agreements, payment information, and similar.

The legal basis for processing this personal data is Article 6(1)(b) of the GDPR. Once the service has been provided and any outstanding matters are resolved, we will immediately delete the personal information.

Newsletter

We have a newsletter that you can voluntarily subscribe to, and you can always unsubscribe.

The purpose of the newsletter is to send subscribed emails with new information from the company, which may include new content on the website or advertisements for our services.

We will only send you emails if you have given your active consent. Initially, you need to provide your email address, to which we will send a confirmation email for you to confirm the subscription. This way, we ensure that you have actively consented to subscribing to the newsletter.

Our legal basis for processing your personal information (i.e., the email address) in connection with the newsletter is Article 6(1)(a) of the GDPR.

We will process your personal information as long as you remain subscribed to the newsletter. Upon unsubscribing from the newsletter, we will also stop sending it to you. If we have not sent you a newsletter in 1 year, your consent will expire due to our inactivity.

Upon unsubscribing from the newsletter, we will store your previously given consent for 2 years, as per the expiration requirements outlined in section 11.3 of the Consumer Ombudsman’s spam guidelines.

Accounting

We are required to retain all accounting documents in accordance with the Accounting Act. This means that we store invoices and similar documents for accounting purposes. These may contain common personal information such as name, address, and service descriptions.

Our legal basis for processing personal data for accounting purposes is Article 6(1)(c) of the GDPR.

We retain this information for a minimum of 5 years after the end of the current accounting year.

Job Applications

We gladly accept job applications in order to assess if they match our company’s employment needs. If you send your job application to us, our legal basis for processing your personal information is Article 6(1)(f) of the General Data Protection Regulation. If you have submitted an unsolicited application, our HR department will immediately assess if your application is relevant, and if not, your information will be deleted. If you have applied for a posted job, we will dispose of your application in the event that you are not hired, and immediately after the right candidate has been found for the position. If you are involved in a recruitment process and/or hired for the job, we will provide you with separate information on how we process your personal information in this regard.

Data Processors

Few can do everything themselves, and the same goes for us. Therefore, we have partners and vendors who may act as data processors. External vendors, for example, may provide systems to organize our work, services, consulting, IT hosting, or marketing. It is our responsibility to ensure that your personal information is processed properly. Therefore, we have high standards for our partners, and our partners must guarantee the protection of your personal information. We enter into agreements with companies (data processors) that handle personal information on our behalf to enhance the security of your personal information.

Disclosure of Personal Information

We do not disclose your personal information to third parties.

Profiling and Automated Decisions

We do not engage in profiling or automated decision-making.

Transfers to Third Countries

As a general rule, we use data processors in the EU/EEA or those that store data in the EU/EEA. In some cases, this may not be possible, and in such instances, data processors outside the EU/EEA may be used if they can provide appropriate protection for your personal information.

Processing Security

We ensure the security of personal information by implementing appropriate technical and organizational measures. We have conducted risk assessments of our processing of personal information and have subsequently implemented suitable technical and organizational measures to enhance processing security. One of our key measures is keeping our employees updated on GDPR through ongoing awareness training, GDPR courses, and reviewing our GDPR procedures with employees.

Rights of the Data Subjects

Under the General Data Protection Regulation, you have a number of rights regarding our processing of information about you. If you wish to exercise your rights, please contact us so that we can assist you with this.

Right of Access

You have the right to access the information we process about you, as well as additional information. Right of Rectification You have the right to have inaccurate information about yourself corrected.

Right to Erasure

In special cases, you have the right to have information about you deleted before the time of our normal general deletion occurs.

Right to Restriction of Processing

In certain cases, you have the right to have the processing of your personal information restricted. If you have the right to have processing restricted, we may only process the information – apart from storage – with your consent, or for the establishment, exercise, or defense of legal claims, or for the protection of a person or important public interests.

Right to Object

In certain cases, you have the right to object to our otherwise lawful processing of your personal information. You can also object to the processing of your information for direct marketing purposes.

Right to Data Portability

In certain cases, you have the right to receive your personal information in a structured, commonly used, and machine-readable format, and to have this personal information transferred from one data controller to another without hindrance. You can read more about your rights in the Danish Data Protection Agency’s guidance on the rights of data subjects, which you can find at www.datatilsynet.dk.

Withdrawal of Consent

When our processing of your personal information is based on your consent, you have the right to withdraw your consent.

Complaint to the Danish Data Protection Agency

You have the right to file a complaint with the Danish Data Protection Agency if you are dissatisfied with the way we process your personal information. You can find the contact information for the Danish Data Protection Agency at www.datatilsynet.dk.