Data Controller

We are the data controller for the processing of personal data that we handle regarding our customers and business partners. You can find our contact details below:

Sales by Krüger
Østervang 51, 4000 Roskilde

Our company is not required to have an external Data Protection Officer (DPO), but if you have any questions regarding the processing of your personal data, you can contact us at dorte@krüger.dk.

Processing Activities

As a data controller under the GDPR, we conduct the following processing activities:

Website Visits

When you visit our website, we use cookies to ensure its functionality. You can read more about this in our cookie policy.

Communication with Potential Customers

If you have questions about our website or wish to learn more about our services, you can contact us via:

• Contact form

• Email

• Telephone

We will process your personal data to engage in a dialogue with you, such as answering questions about our services. We only process the information that you provide to us during our communication.

Typically, we process the following general information: name, email, and phone number.

Our legal basis for processing these personal data is Article 6(1)(f) of the GDPR.

We delete our communication with you once it becomes clear whether or not you wish to use our services. In exceptional cases, we may retain your data for a longer period if necessary.

Customers

We need to communicate with our customers to ensure that our services are delivered correctly. In this process, we may handle information such as name, address, services provided, specific agreements, payment information, and similar details.

Our legal basis for processing these personal data is Article 6(1)(b) of the GDPR.

Once the service has been delivered and any outstanding matters have been resolved, we will promptly delete the personal data.

Accounting

We are required to retain all accounting records under the Accounting Act. This means we keep invoices and similar records for accounting purposes. These may contain general personal data such as name, address, and service descriptions.

Our legal basis for processing personal data for accounting purposes is Article 6(1)(c) of the GDPR.

We retain these records for a minimum of five years after the end of the financial year in question.

Data Processors

We rely on business partners and service providers, some of whom may be data processors.

External providers may supply systems for organizing our work, services, consultancy, IT hosting, or marketing.

We use the following data processors:

• Seoma – A web and marketing agency that provides website maintenance and digital marketing services.

• Framer – IT hosting services for our website infrastructure.

We are responsible for ensuring that your personal data are handled securely. Therefore, we impose strict requirements on our partners and require them to guarantee the protection of your personal data.

We enter into agreements with any company (data processor) handling personal data on our behalf to enhance security.

Disclosure of Personal Data

We do not disclose your personal data to third parties.

Profiling and Automated Decision-Making

We do not conduct profiling or automated decision-making.

Transfers to Third Countries

As a rule, we use data processors located within the EU/EEA or data processors that store data within the EU/EEA.

In some cases, this may not be possible, and we may use data processors outside the EU/EEA, provided they offer an adequate level of protection for your personal data.

Data Security

We maintain the security of personal data processing through appropriate technical and organizational measures.

We have conducted risk assessments of our personal data processing activities and implemented necessary measures to enhance security.

One of our key measures is keeping our employees updated on GDPR through regular awareness training, GDPR courses, and reviews of our GDPR procedures.

Rights of Data Subjects Under the GDPR, you have several rights regarding our processing of your personal data.

If you wish to exercise your rights, please contact us so we can assist you.

• Right of Access: You have the right to access the personal data we process about you, including additional information.

• Right to Rectification: You have the right to have incorrect information about yourself corrected.

• Right to Erasure: In certain cases, you have the right to have your data erased before our general deletion occurs.

• Right to Restriction of Processing: In some cases, you may request that we limit our processing of your personal data.

• Right to Object: In certain cases, you can object to our lawful processing of your personal data, including direct marketing.

• Right to Data Portability: In some cases, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and have them transferred to another controller.

You can read more about your rights in the Danish Data Protection Agency’s guidance on www.datatilsynet.dk.

Withdrawal of Consent

Where our processing is based on your consent, you have the right to withdraw it at any time.

Complaint to the Data Protection Agency

If you are dissatisfied with how we process your personal data, you have the right to file a complaint with the Danish Data Protection Agency. Their contact information is available at www.datatilsynet.dk.

We encourage you to stay informed about GDPR to ensure you are up to date with the regulations.