Cookie and Personal Data Policy

Last updated January 15, 2021

Cookie Policy

The Cookie Policy describes the data we collect on our website through cookies. The collection, as well as the processing of the data, which is collected through cookies, is regulated by the ePrivacy Directive, soon to be replaced by the ePrivacy Regulation

Personal Data Policy

The Personal Data Policy concerns all other personal information that is collected without the use of cookies. The collection and processing of these data is regulated by the General Data Protection Regulation as implemented in Denmark

Cookie Policy

Introduction

When you visit a Geomatic website, we collect information about you, which is used to adapt and improve the content of Geomatic.dk, as well as to increase the value of the sites you use on our website.

Processing of personal data using cookies

Geomatics' use of cookies may entail the processing of personal data, and we therefore recommend that you also read our privacy policy, which describes our processing of personal data and your rights.

Consent

By using the Website and pressing ‘Yes to all cookies’ or selecting individual cookies the first time you visit the Website, you consent to Geomatic using cookies for the purposes set out in the cookie overview. You can revoke or change your consent by deselecting cookies in the cookie overview, just as you can block cookies in your browser.

In the section Avoid cookies , you will find a guide that describes how you can, completely or partially, avoid receiving cookies, and how you can delete the ones that might already be attached to you.

Geomatic owns and publishes the following sites, where cookies are collected:

Storage of cookies

Some cookies are deleted as soon as you leave our website, while others are stored longer. Most cookies have a lifetime of 12-24 months. Every time you visit our website, this period is extended.

How we use cookies

We use cookies to provide our website users with the best possible experience as well as for marketing purposes.

When you visit Geomatic’s website, we collect information for analytical purposes. We analyse your device and adapt the website design accordingly, so that you for instance get a mobile adapted site, when you visit our website on your phone, we remember your login information on our product platforms, we also analyse the length of your visit and other information, which improves your experience and provides us with the knowledge necessary to adapt and improve our sites’ content and design.

We use Google Analytics, which places cookies with the purpose of creating statistics about the use of the website, but not the user itself. We place cookies that describe whether your browser can show JavaScript or not. We also use Google Analytics to collect statistics about user behaviour as well as to observe if our content performs as intended.

Moreover, we use cookies for marketing purposes.

We use cookies from partners (Third-Party cookies). We use anonymised data in our analysis, but the third parties may also have collected personally identifiable data.

You can click on the cookie overview that will generate a cookies consent pop-up and get information about which cookies the Website uses, for what purposes the individual cookies are used, who sets the individual cookie and how long cookies are stored on your equipment.

Avoid cookies

If you wish to avoid cookies, you can either block all cookies, delete existing cookies, or receive a warning before any cookies are stored. Click on the relevant browser and receive instructions on how this is installed.

You can opt out of cookies from Google Analytics here: http://tools.google.com/dlpage/gaoptout

Remember, if you choose to opt out of cookies, you might lose the many user-friendly advantages. For instance, the site will not remember the information, you want to send us.

You can always use the ‘Help’ function in your browser to get more information about cookie settings.

1. Personal Data Policy

1.1. Purpose

Privacy is a fundamental right, which is why we continuously strive to protect your personal data and that of others in the best possible way.

The purpose of Geomatic's privacy policy is to provide information on how we process and protect personal data, when you are our client, use our services, or contact us as a citizen.
If you are a job seeker or candidate to a position within Geomatic, may we refer you to our specific person data policy on this area.

The personal data policy’s purpose is to generate transparency of the Geomatic's data processing activities, as well as, data rights of registered persons. The personal data policy concerns all personal data collected without the use of cookies.

The collection and handling of personal data, which this privacy policy refers to, is governed by the Data Protection Act and GDPR (General Data Protection Regulation), also referred to as the Personal Data Regulation.

1.2. Data controller and DPO contact information

Geomatic A/S is the data controller for personal data processed when you are a client of ours or make use of our services for marketing purposes as well as when we store and use publicly available data on citizens to develop our products and solutions.

Company:

Geomatic A/S

Sankt Gertruds Stræde 10

1129 Copenhagen K

VAT: 28862245

Mail: legal@geomatic.dk

1.3. Personal data

Personal data is any kind of information which, to an extent, can be identified or assigned to you.

For example, when you use our website, we collect and process a number of such information.This is done, for example, through content browsing, if you sign up for our newsletter, register as a user or subscriber, or otherwise use our services.

1.4. What personal data we process and for what purpose

Geomatic processes the following personal data in connection with customer relations, use of services, development of products and solutions and/or marketing purposes:

When visitors are on our website

Purpose

When you visit our website, we collect information about your behaviour for the purpose of optimize you visit on our website, hereunder to ensure functionalities, generate statistics about the use of our website, remember your preferences as fx choice of language, as well as for the purpose of being able to make targeted marketing via social media.

Categories of personal data and their source

We collect and process the following types of personal data: unique id and technical information about your computer, tablet or mobile phone, your ip-address, geographic location, as well as which pages you click on our website. We collect personal data provided by website visitors themselves as well as data collected through third parties.

The legal basis for our processing of personal data

The processing of necessary cookies takes place on the basis of the Data Protection Regulation article 6.1., litra f), where the legitimate interest is to offer you an interesting website that works optimally. Remaining types of cookies are collected and disclosed on the basis of your consent based on Article 6.1 litra a) of the Data Protection Regulation.

You can withdraw your consent at any time. See more under our cookies policy.

Recipients of personal data

If you have submitted your consent, personal data will be disclosed to third parties.

Retention of personal data

The data we collect for statistics is stored for 26 months at Google Analytics, after which it is automatically deleted. However, Cookies are automatically deleted after 7 days if the browser includes Intelligent Tracking Prevention (ITP) 2.1. Chrome, Firefox, iOS, or Safari currently include ITP 2.1.

Automatic decisions and profiling

The personal data collected is not used in connection with automated decisions and profiling, but Google is expected to significantly use visitor behaviour data for their internal profiling.

You can read more about the collection, use and opting out of cookies in our cookie policy.

When data is collected from publicly available sources

Purpose:

Geomatic collects publicly available data for the development of products and web solutions for our customers, which are also used in combination with our client’s own customers data. For the latter case, Geomatic acts as a data processor, as it is the client, as the data controller who determines the purpose and the means of such the data processing.

Categories of personal data and their source

For persons appearing in public accessible sources, only ordinary non-sensitive personal data is collected and processed.

The information is obtained lawfully through public data sources.

The legal basis for our processing of personal data

The processing of personal data is based on a legitimate interest, where the processing interest has been considered, and concluded to outweigh a wish of no processing. For example, the following activities: update, enrichment, marketing.

Recipients of personal data

The personal data collected will be disclosed to our customers who pursue legitimate purposes, such as validating and/or updating their customer database or for marketing.

Retention of personal data

Geomatic retains the public data that is continually updated and stored for as long as there is a lawful and legitimate purpose for its processing.

Historical telephone subcriber information is stored for up to 5 years, after which the information is erased.

Further information can be found under the special section on publicly available data.

Automated decisions and profiling

The personal data collected is not used in connection with either automated decisions or profiling.

When you are Geomatic's client

Purpose:

When you are Geomatic's client, we process contact information to manage our customer relationship, invoicing, and marketing.

Categories of personal data and their source

For those who have a commercial relationship with Geomatic, only ordinary non-sensitive personal data is recorded and processed. We only collect personal data made available by clients and which are necessary to achieve the set purpose.

The legal basis for our processing of personal data

The processing of personal data is done in order to comply with a purchase agreement.

The processing of personal data for marketing purposes is based on a legitimate interest, from an interest consideration where the wish for carrying out the data treatment outweighs not doing so.

If you are Geomatic’s client, and you have provided us with your e-mail address, we may send you e-mails with marketing content without your consent, if our e-mail contains information about the products and services – or equivalent products and services – which you buy from us. You can unsubscribe from future marketing e-mails at any time.

Recipients of personal data

The personal data provided will not be disclosed outside the company.

Retention of personal data

Personal data for the purposes of accounting follows financial laws, these are kept up to 5 years after the end of the financial year, accordingly to the finance law article 10 and deleted accordingly.

Personal data about you is recorded partly in an accounting system and partly in a CRM system.

Automated decisions and profiling

The personal data collected is not used in connection with neither automated decisions or profiling.

When using our contact form on the website

Purpose

When using the contact form on the Geomatic website, we process the personal data provided for the purpose of being able to return the enquiry.

The legal basis for our processing of personal data

The processing of personal data takes place on the basis of a legitimate interest, after which we consider, that the person has provided the information himself for the purpose of being contacted.

Categories of personal data and their source

General contact information such as name, company, e-mail and telephone number is collected. In addition, we ask for information elaborating on what the enquiry is about. Only personal data provided by the visitor himself is collected.

Recipients of personal data

The personal data provided will not be disclosed outside the company.

Retention of personal data

If, on the basis of the enquiry, a cooperation, customer relationship or other relationship is established, the personal data will be stored according to the relationship.

If not, the personal data will be stored as long as there is a lawful and legitimate purpose for the processing.

Automated decisions and profiling

The personal data collected is not used in connection with neither automated decisions or profiling.

When you sign up for our newsletter on the website

Purpose

When you sign up for the newsletter on our website, we process the personal data you provide for the purpose of sending e-mails with news, offers, new products and services, invitations to events, and other marketing initiatives.

The legal basis for our processing of personal data

The processing of personal data is based on consent. You can withdraw your consent at any time.

Categories of personal data and their source

Contact information is collected in the form of name and e-mail. Only personal data provided by the visitor itself is collected.

Recipients of personal data

The personal data provided will not be disclosed outside the company.

Retention of personal data

The personal data is stored as long as you are an active subscriber of the newsletter or until you withdraw your consent. The personal data is also deleted if the technical receipt of the e-mail is denied (e.g. if the e-mail account is cancelled)

Automated decisions and profiling

The personal data collected is not used in connection with neither automated decisions or profiling.

When you are registered on the Robinson list

Purpose:

Geomatic and their clients are obliged to respect individuals’ request and right to not to receive unsolicited direct marketing, which is why it is considered that the data processing is also in the data subject’s interest. Personal data from the Robinson list is used to remove individuals who have chosen not to receive personally addressed letters and telephone calls.

The legal basis for our processing of personal data

The processing of personal data takes place on the basis of a legitimate interest, cf. GDPR art. 6.1, litra f), after which Geomatic has a legitimate interest in using information from the Robinson list for the removal of persons who appear on the list. In addition, Geomatic is obliged to investigate in CPR whether a consumer has refused inquiries for marketing purposes, cf. section 13 (4) of the Danish Data Protection Act.

Categories of personal data and their source

The data subjects are the persons who appear on the Robinson list and the personal data collected are ordinary non-sensitive personal data. The Robinson list is received from CPR office (Ministry of Social Affairs).

Recipients of personal data

Geomatic uses the Robinson list to remove persons, which is why personal data registered in the Robinson list is not disclosed to clients or partners and therefore not transmitted outside Geomatic’s IT- environment.

Retention of personal data

The Robinson list is updated every quarter by the CPR office, which Geomatic collects every time a new updated Robinson list is available. When Geomatic has recieved an updated Robinson list, the older version is deleted.

Automated decisions and profiling

The personal data collected is not used in connection with either automated decisions or profiling.

When you use Geomatics product websites (with log-in)

Purpose:

We log relevant events and transactions in our own solutions in order to fulfill the following purposes:

to be able to troubleshoot the solutions,
to investigate abuses of the solutions,
in some cases: to settle customers' use of services,
Logging also includes systems that are based on services provided by third parties and where there may be special logging requirements.

Categories of personal data and their source

We collect and process the following types of personal information: user information, service / function the user has called and transaction data. Personal information is collected based on the user's use of services.

The legal basis for our processing of personal data

The processing of personal data takes place on the basis of a legitimate interest, cf. GDPR art. 6.1, litra f).

Recipients of personal data

The information is generally not passed on unless Geomatic is subject to special legislation that requires the authorities access.

Retention of personal information

Logged data is stored and deleted based on internal deletion procedures.

Automated decisions and profiling

The personal data collected is not used in connection with either automated decisions or profiling.

1.5. Security of processing

We have established appropriate technical and organisational measures to prevent your information from being accidentally or unlawfully erased, published, lost, degraded or disclosed, misused or otherwise treated in contravention of the law.

We continually update our procedures to ensure that our systems are safe and protected. Only persons who have a legitimate need to process personal data for specific purposes have access to them.

Geomatic is ISAE 3402- as well as 3000- revised, which imposes requirements on IT security, and that the processing of personal data is carried out in accordance with applicable data protection laws.
We store your personal information on secure and certified IT systems with restrictive access, that are located in controlled facilities in Denmark. Our security measures are continually checked to determine if your user information is handled securely and follows your rights as a user.

1.6. Who do we transfer and disclose personal data to?

We use some external companies to process personal data on our behalf, these are data processors for us. We have entered into a data processing agreement with all of them to ensure that our privacy requirements are followed. The personal data transferred will not be used for the external company’s own purpose.

We rely only on data processors in the EU or in countries approved by the European Commission, and so are able to guarantee your personal information sufficient data protection.

1.7. Special section on publicly available data

Geomatic collects and uses a range of publicly available data related to product and service solutions, our clients' legitimate interests and publications.

These public data are as follows, distributed from the respective registry owners:

Telephone subcriber information- distributed from telecommunication companies
CVR data - distributed from the Danish Business Authority (Erhvervsstyrelsen)
OIS data - distributed from the Dabish Tax Authority (SKAT)
Swedish telephone subcriber information– distributed from IDM
Udbudsdata – distributed from Boliga.dk
Personal data distributed from Statstidende

Geomatic processes the above information within the applicable regulatory framework including, amongst others, GDPR, the Data Protection Act, and Marketing regulations.

For example, for telephone subcriber information, the telecommunications companies must make the data available to those who request it, accordinly to paragraph 31 of the Telecommunications’ law.

TDC, the registry owner, is responsible for the data collection from its telecommunications companies, processes the telephone subcriber informationfor their own purposes and resell to data distributors, including Geomatic. In relation to the storage of telephone subcriber information, your telecommunications company, TDC 118 and Geomatic are data controllers. The final customer, purchasing telephone subcriber information, are also data controllers.

You can read more about the use of telephone subcriber informationfor unsolicited marketing purposes here: https://geomatic.dk/dk/til-borgere/

Since Geomatic is a data distributor of publicly available data, we recommend that all inquiries concerning personal information are directed to the registe owner; these are listed above under each data source, or to the company you are a client with.

Otherwise, it requires contact to a very large number of additional data distributors and end-users, each of which is the data controller for their processing of the personal data contained in the publicly available information.

1.8. Rights of the data subject

You may contact Geomatic if you believe that we are processing personal data about you. If you choose to assert one of your rights, you must send your request by e-mail to: legal@geomatic.dk. Once we have received thr e-mail, we will verify the sender’s identity to ensure that we do not disclose personal data to unauthorised persons, and subsequently initiate the requested process.

You have the following rights in relation to the processing of your personal data:

Right of access: You have the right to gain access to your personal data processed by Geomatic.
Right to rectify: You have the right to rectify inaccurate personal data about you.
Right to erase (right to be forgotten): Under certain circumstances, you have the right to request erasure of your personal data prior to the Geomatics standard procedure for deletion of your personal data.
Right to restriction of processing: Under certain circumstances, you have the right to restrict Geomatics processing of your personal data.
Right to data portability: You are entitled to receive an (electronic) copy of your personal data processed by Geomatic.
Right to object: Under certain circumstances you have the right to object to Geomatics processing of your personal data.
Right to complain to the data protection agency if you believe that Geomatics processing does not comply with applicable data privacy laws.