GDPR

At slate-spring, we take data protection seriously. This page provides an overview of how we comply with the EU General Data Protection Regulation (GDPR) and what rights you have as a data subject.

What is GDPR?

GDPR (General Data Protection Regulation) is the EU regulation on the protection of personal data, which entered into force on May 25, 2018. The regulation ensures that companies process personal data in a fair, lawful, and transparent manner.

Our Obligations

As the data controller, we commit to:

• Processing personal data lawfully, fairly, and transparently
• Collecting information for specified, explicit, and legitimate purposes
• Limiting collection to what is necessary
• Ensuring that information is accurate and kept up to date
• Storing information for a limited period
• Protecting information against unauthorized processing

Your Rights as a Data Subject

Right of Access

You have the right to obtain confirmation as to whether or not we are processing personal data concerning you, and, where that is the case, access to the personal data and information about the processing.

Right to Rectification

You have the right to obtain the rectification of inaccurate personal data concerning you without undue delay. You also have the right to have incomplete personal data completed.

Right to Erasure

In certain cases, you have the right to have your personal data deleted. This applies, for example, if the data is no longer necessary for the purpose for which it was collected.

Right to Restriction

In certain cases, you have the right to obtain restriction of processing of your personal data. If you have the right to restriction, we may henceforth only process the data with your consent.

Right to Data Portability

In certain cases, you have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format and transmit those data to another data controller.

Right to Object

You have the right to object to our processing of your personal data. You can also object to processing for direct marketing purposes.

Exercising Rights

If you wish to exercise one or more of the above rights, you can contact us at [email protected]. We will respond to your inquiry within 30 days.

Data Processing Agreements

When we use external data processors, we ensure that a written data processing agreement is in place that meets GDPR requirements.

Data Breaches

In the event of a personal data breach, we will notify the Data Protection Agency (Datatilsynet) within 72 hours if the breach poses a risk to the rights of data subjects. If the breach is likely to result in a high risk, we will also notify the affected individuals.

Contact

If you have questions about our processing of personal data or wish to exercise your rights, you are welcome to contact us:

slate-spring
Nørrebrogade 42, 3. sal
2200 Copenhagen N
[email protected]

Supervisory Authority

You can complain to the Data Protection Agency if you are dissatisfied with our processing of your personal data:

Datatilsynet
Carl Jacobsens Vej 35
2500 Valby
[email protected]

Last updated: September 2024