Privacy policy

TransportTender ApS
Birk Centerpark 40
DK-7400 Herning, Denmark

CVR no. (company reg. no.): 43846116

Version 1 – last updated 26.01.2023 10:02.

1. Introduction

1.1 This privacy policy (the “Policy”) describes how TransportTender ApS (“us”, “we” or “our”) collects and processes personal data in connection with the purchase of services, memberships, products or general use of our website.

1.2 The Policy has been drawn up and made available to comply with the General Data Protection Regulation (Regulation (EU) 2016/679 of 27 April 2016) (“GDPR”) and its rules on the duty to provide information.

2. Collection of information through cookies

2.1 When you visit and use our website(s), cookies are collected and used on the basis of consent. The information in these cookies includes browser type, IP address and location at login (“Cookie Data”).

2.2 Cookie Data is used to improve our website and the user experience.

2.3 The use of cookies to collect information and data otherwise takes place in accordance with the Danish Cookie Order (no. 1148 of 9 December 2011), section 3.

2.4 If you wish to reject or limit the cookies placed on your computer when you visit our website, you can always do so by changing the settings in your browser. Please note, however, that rejecting or limiting cookies affects the functionality of the website, and some features on the website will not be visible to you. All browsers allow you to delete cookies collectively or individually. How to do this depends on the browser you use.
If you use several different browsers, remember to delete cookies in all of them.

2.5 We share Cookie Data with Google Analytics.

3. Types of personal data processed

3.1 We process personal data about you when relevant and in accordance with applicable law. Depending on the specific circumstances, the personal data processed may include the following types: name, address, telephone number, email, purchase history, invoicing and accounting records, username, password, account status (balance, customer points etc.), shipment tracking information (e.g. tracking number), bank details (card or account details), IP address and customer number.

3.2 If we need to collect and process more personal data than stated above, we will inform you when it is collected. Such information may also be provided by updating this Policy.

4. Purposes of processing personal data

4.1 We only process your personal data for legitimate purposes in accordance with the GDPR. Depending on the circumstances, personal data may be processed for the following purposes:

a) To deliver or offer the services or products and/or sales offers that we provide.

b) To respond to enquiries and/or complaints from users, customers or members.

c) To deliver service messages and information to users, customers or members.

d) To store personal data to the extent required by applicable law, including the retention of accounting and bookkeeping records in accordance with applicable law.

e) To prevent fraud and misuse of IT systems and/or products or services provided via the IT systems.

f) To send newsletters by email.

g) To receive and disclose information to public authorities where required by law.

h) To provide support and service messages, including answering questions or complaints and sending updates about our products and services.

i) To prevent fraud or unlawful use of our products, services and website, including processing personal data in connection with legal proceedings.

5. Legal basis for processing personal data

5.1 We only process your personal data when we have a lawful basis for doing so in accordance with the GDPR. Depending on the specific circumstances, processing takes place on the following legal bases:

a) The processing is necessary for the purposes of a legitimate interest, where the interests or fundamental rights and freedoms of the data subject that require protection of personal data do not override it, cf. GDPR Article 6(1)(f).

b) If we have asked for your consent to the processing of specific personal data, the legal basis for processing that data is your consent, cf. GDPR Article 6(1)(a). Consent can always be withdrawn by contacting us via the contact details at the end of this Policy. If consent is withdrawn, the personal data processed on the basis of consent will be deleted, unless it can or must be processed, for example to comply with a legal obligation.

c) The processing is necessary for the performance of a contract with the data subject, cf. GDPR Article 6(1)(b), first part.

d) The processing is necessary to comply with applicable law, cf. GDPR Article 6(1)(c).

6. Disclosure and transfer of personal data

6.1 We only disclose personal data to others when the law permits or requires it, including where relevant and at your and/or the data controller's specific request.

6.2 We disclose personal data to the following recipients within the EU/EEA:

a) Data processors

b) Suppliers

c) The Danish Tax Agency, SKAT (in connection with bookkeeping etc.)

d) Banks (in connection with payouts, receipt of payments etc.)

6.3 We generally use various external, professional organisations as suppliers and partners to deliver, or help us deliver, our services and products. These external organisations will not receive or process personal data unless the law permits the transfer and processing.
Where the external organisations or partners act as data processors for us, their processing of personal data always takes place under a data processing agreement that meets the legal requirements. Where the external organisations or partners are independent data controllers, their processing takes place in accordance with their own privacy, data protection or personal data policy, which they will make you aware of, unless the law provides otherwise.

6.4 We transfer personal data to countries or international organisations outside the EU/EEA. We transfer personal data to the following countries that have not received an adequacy decision under Article 45: USA (Amazon Web Services). Such transfers are based on standard data protection clauses adopted or approved by the European Commission and possibly adopted by a supervisory authority, with any supplementary measures, ensuring a level of protection for the specific transfer that is essentially equivalent to that guaranteed within the EU.

6.5 You can contact us for more information, including questions about our use of data processors, cooperation with other data controllers including subsidiaries, or the transfer of personal data to third countries, and to receive a copy of the documentation for the transfer basis.

7. Deletion and retention of personal data

7.1 We make sure personal data is deleted when it is no longer relevant for the processing purposes described above. We always retain personal data for the period required by applicable law, including to document compliance with bookkeeping legislation. If you have questions about the retention and processing of personal data, you are welcome to contact us at the email address in the last section of this Policy.

8. Rights of data subjects

8.1 Data subjects have a number of rights that we can help with. If you, as a data subject, wish to exercise your rights, please contact us. The rights include:

a) Right of access: Data subjects have the right to access the information processed about them, as well as a range of additional information.

b) Right to rectification: Data subjects have the right to have inaccurate information about themselves corrected.

c) Right to erasure: In special cases, data subjects have the right to have information about themselves deleted before our ordinary, general deletion takes place.

d) Right to restriction of processing: In certain cases, data subjects have the right to have the processing of their personal data restricted. If so, we may in future only process the data – apart from storing it – with consent, for the establishment, exercise or defence of legal claims, or to protect a person or important public interests.

e) Right to object: In certain cases, data subjects have the right to object to our otherwise lawful processing of their personal data.

f) Right to data portability: In certain cases, data subjects have the right to receive their personal data in a structured, commonly used and machine-readable format, and to have this data transferred from one data controller to another without hindrance.

8.2 You can read more about your rights in the guidance from the Danish Data Protection Agency (Datatilsynet) at www.datatilsynet.dk.

If you wish to exercise your rights as described above, please use the contact details at the end of this Policy.

We do our utmost to meet your wishes regarding our processing of personal data and your rights as a data subject. If, despite our efforts, you wish to file a complaint, you can do so by contacting Datatilsynet (www.datatilsynet.dk).

9. Changes to this policy

9.1 We reserve the right to update and amend this Policy. If we change the Policy, we will change the date and version at the top of the document. In the event of significant changes, we will notify you by a visible notice on our website, by email or by other means of communication.

10. Contact

10.1 If you have questions or comments about this policy, or wish to invoke one or more of your rights, you can contact us at info@transporttender.dk.