Privacy Policy

At Emply ApS ("Emply", "we", "us" or "our") we prioritize confidentiality and data security. This Privacy Policy applies to our processing of personal data, including on our website, www.emply.com, and sets out guidelines for Emply's processing of your personal data and provides you with the information you are entitled to receive under applicable data protection legislation. You must read the privacy policy before you provide your personal data to Emply.

This privacy policy covers Emply's activities as a data controller. When Emply processes personal data about our customers' employees in Emply's HR system, Emply acts as a data processor and is subject to the terms and conditions set out in the data processing agreement we have entered into with our customers. You can read more about our role as a data processor, download a copy of our standard data processing agreement and read more about the security measures we have taken to safeguard your employees' personal data.

1. Data Controller and Contact Details

The controller of your personal data:
Emply ApS, Lyngbyvej 2, 2100 København Ø, CVR no. 31430747, telephone +45 70 28 60 50, email support@emply.com

2. Types of Personal Data

The types of personal data we collect include:

• Your name
• Your email address
• Your telephone number
• Your address
• Your date of birth
• Your CPR number
• Possibly your gender
• Payment information
• Information about your order
• Your IP address
• Information you provide when creating an account/profile
• Communication with you
• The type of browser you use
• Username
• Password
• Digital footprints
• Job description
• The individual equipment code
• Equipment name
• Location data
• Date and name of registration of a new user
• Statutory documentation according to the Danish Anti-Money Laundering Act
• Interests

Your personal data is collected in one or more of the following cases:

• When you use the website
• When you sign up for our newsletter
• When you contact us via the customer service
• Contacting us via contact forms or by email, phone or regular mail
• When you contact us to receive support for the use of our products
• When you register for a course by yourself or by others

When you contact us on our website, you will see that you can fill in text in so-called free text fields where you can express yourself freely so that we can best help you answer your inquiry.

We encourage you to share only what is necessary for us to respond to your inquiry so that you do not share sensitive or confidential personal data with us.

3. Use of Personal Data

Personal data may be collected and used for the following purposes:

• To enter into a contract with you
• Signing up for and receiving newsletters
• To register as a customer
• Customer service and general communication
• Fulfillment of requirements under applicable law
• To establish, exercise or defend legal claims
• Personalization (profiling) of our marketing to you, including based on your click behavior in relation to the marketing received using cookies
• Research, statistics, development and protection of our services
• Sending out customer satisfaction surveys
• Invoicing and other collection of payment
• Enforcement of Emply terms of use
• Registration in our CRM system as a potential lead or representative of a company so that we can contact you with information and offers on our products
• Conducting training courses

4. Basis for the Processing of Your Personal Data

Our legal basis for processing your personal data for the above purposes is as follows:

• Performance of contract for the provision of services (Article 6(1)(b) of the GDPR)
• Consent in relation to the sending of newsletters (Article 6(1)(a) of the GDPR)
• Legitimate interest in being able to compile statistics, conduct surveys, improve and develop our services and products (Article 6(1)(f) of the GDPR)
• Legitimate interest in being able to send out service notifications (Article 6(1)(f) of the GDPR)
• Legitimate interest in being able to send customer satisfaction surveys (Article 6(1)(f) of the GDPR)
• Legitimate interest in the establishment, defense and exercise of legal claims (Article 6(1)(f), possibly Article 9(2)(f) of the GDPR)
• Legitimate interest in being able to collect and manage your personal data, including via your click behavior in relation to sent marketing and via cookies on our website (Art.
  6(1)(f) of the GDPR)

5. Disclosure to other Controllers and Entrustment to Data Processors

To fulfill the above purposes, we may give third parties access to your personal data who, based on a contractual relationship with Emply, provide relevant services. These may be, for example, IT providers, customer contact centers, billing providers, and email providers. Such service providers will only process personal data in accordance with our instructions under data processing agreements.

In connection with Emply's development, the company structure may change, e.g. through a full or partial sale of Emply. In the case of a partial transfer of assets containing personal data, the legal basis for the related transfer of personal data is in principle Article 6(1)(f) of the GDPR, as Emply has a legitimate interest in transferring parts of its assets and making commercial changes.

Under certain circumstances and in accordance with the law, it may also be necessary to disclose your personal data to:

• The Police
• Lawyers
• Accountants
• Courts
• Public authorities

We may also share your contact and preference information with our affiliated companies, if necessary for internal administrative purposes or, for example, if you have consented to this in connection with signing up for newsletters, etc.

If your personal data is transferred to data processors or data controllers established in countries outside the EU/EEA that do not have an adequate level of protection, such transfer will always be based on appropriate safeguards as defined in Article 46 of the GDPR, such as in particular the EU Commission's standard data protection clauses. You can contact us for a copy of these standard contracts. You can contact us for a copy of these standard protection clauses.

6. Deletion of Personal Data

We will delete your personal data when we no longer need to process it for one or more of the purposes listed above. However, the data can be processed and stored longer in anonymized form. See the table below for specific deletion deadlines:

7. Cookies

We use cookies on our website. You can read more about the use of cookies in our cookie policy.

8. Security

We protect the confidentiality, integrity and availability of your personal data. Therefore, we have implemented security measures to ensure that our internal procedures meet the established security standards and applicable legal requirements.

We have internal information security rules that contain instructions and measures to protect your personal data against destruction, loss, alteration, unauthorized disclosure, access or knowledge by unauthorized persons. Sensitive and/or confidential personal data will only be sent in encrypted form in accordance with the guidelines of the Danish Data Protection Agency.

9. Your Rights

• You have the right to obtain access to the personal data held about you (Article 15 of the GDPR).
• You have the right to object to the our collection and further processing of your personal data (Article 21 of the GDPR).
• You have the right to rectification and deletion of your personal data, subject to certain statutory exceptions, including the Danish Bookkeeping Act and the Danish Money Laundering Act (Article 16 of the GDPR).
• You have the right to request us to restrict your personal data (Article 18 of the GDPR).
• Under certain circumstances, you can also request to receive a copy of your personal data as well as the transmission of the personal data you have provided to us to another controller (data portability) (Article 20 of the GDPR).
• You can withdraw any consent you may have given at any time. We will then delete your personal data unless we can continue processing on another basis.

10. Questions and Complaints

If you have any questions about this privacy policy or if you wish to complain about the way we process your personal data, you are welcome to contact us via telephone +45 70 28 60 50 or email support@emply.com.

You can also contact our Data Protection Officer (DPO), DPO Denmark, via telephone +45 77 34 46 00 or email dpo@dpo-danmark.dk.

If your complaint is not resolved by us and you want to take the matter further, you can complain to the Danish Data Protection Agency:

Datatilsynet
Carl Jacobsens Vej 35
DK-2500 Valby
Telephone: +45 33 19 32 00
Email: dt@datatilsynet.dk