Privacy Notice – Visitors and users of www.deloitte.dk and related services

In connection with Deloitte’s processing of your personal data for the above purposes, profiling may take place, for example to tailor the content of our website to provide you with a more personalised experience and to improve your experience on our website based on the preferences you yourself define. Please be informed that you are entitled to object to the profiling. In such case, we may not be able to provide you with our services. Please see relevant contact details in clause 9.

We collect your personal data

• From you when you sign up for newsletters, reports, marketing materials, or participation in an event of Deloitte or if you provide feedback to us
  
• From cookies and similar tracking technologies when you visit our website (or our service providers’ websites), unless you have declined cookies not classified as strictly necessary. Additional information on how we use cookies and other tracking technologies and how you can manage these (consent or decline hereto) can be found in our cookie notice which form part of this privacy notice.
  
• From your profiles on social media, provided that they are publicly available.

Please note that the other country and regional websites available within www.deloitte.com are provided by other entities within the Deloitte Network. Such websites, as well as other websites that may be linked to www.deloitte.dk, are not governed by this privacy notice. We encourage you to review the privacy statements on these other websites, before disclosing any personal information. 

In most situations Deloitte will be the controller of the data collected. Thus, we are required by law to set out in this privacy notice the legal grounds on which we rely, in order to process your personal data.

We collect and process your data based on the following articles of GDPR: 

• Art. 6 paragraph 1 (b) performance of a contract with you (e.g., when you sign up for participation in an event of Deloitte or request to receive our newsletters or reports)
• Art. 6 paragraph 1 (c) legal obligation to which Deloitte is subject, and
• Art. 6 paragraph 1 (f) the legitimate interests of Deloitte

The legitimate interests pursued by Deloitte include the following purposes:

Provision of effective delivery of our services to you; coordination of marketing activities towards registered persons in our CRM system, including sending and tracking invitations for events and newsletters; planning and administration of an event including feedback to improve our services and products; provision and administration of our website; compliance with legal and regulatory obligations, to which we are subject; compliance with internal policies and documentation requirements. These purposes are necessary for the effective operation of our business and require collection and processing of your personal data.

In connection with one or more purposes outlined above, your personal data may be disclosed to and shared with the following recipients: Public authorities, our professional advisors (e.g. auditor and legal advisors), service providers; event speakers; participants in Deloitte events (elaboration of list of participants without contact details); IT-providers including cloud services providers; and other Deloitte entities.

 

If you do not want your name, title or any employment details to be included in a list of participants to be disclosed to speakers and other participants to a Deloitte event, for which you have signed up, please contact Deloitte.

 

Our Website hosts various blogs, forums, wikis and other social media applications or services that allow you to share content with other users (collectively “Social Media Applications”). Importantly, any personal information that you contribute to these Social Media Applications can be read, collected and used by other users of the application. We have little or no control over these other users and, therefore, we cannot guarantee that any information that you contribute to any Social Media Applications will be handled in accordance with this privacy notice. 

Transfer of personal data to data processors
We may transfer your personal data to other Deloitte entities. We may also transfer your data to IT providers, including cloud service providers, or to external service providers, who process and/or store the personal data on our behalf.

Transfer of personal data to recipients in countries outside the EU/EEA
We may transfer your personal data to recipients located in countries outside the EU/EEA for the purposes listed in section 1. In such case, the legal basis for the international transfer will be EU’s Standard Contractual Clauses (SCC), or other applicable legal basis. 

We will hold your personal data on our systems for the longest of the following periods: (i) as long as is necessary for the relevant activity or services; or (ii) any retention period that is required by law. In relation to our newsletter, you may require deletion of your personal data in our systems at any time by applying the opt-out facility on www.info.deloitte.dk/nyheder. 

Subject to the conditions set out in the applicable data protection legislation, you have the following rights:

• The right to request access to your personal data
• The right to rectification of your personal data
• The right to erasure of your personal data
• The right to restriction of processing of your personal data
• The right to data portability
• The right to objection to the processing of your personal data

Please note that these rights are not absolute, as they should be balanced against legal requirements and Deloitte’s legitimate interests.

You also have the right to file a complaint with the Danish Data Protection Agency (Datatilsynet):

Borgergade 28, 5
1300 København K

Telephone: 33 19 32 00
dt@datatilsynet.dk

Please contact us at dkdatabeskyttelse@deloitte.dk if you have any questions regarding the protection of your personal data, or if you wish to exercise your legal rights.

Deloitte Statsautoriseret Revisionspartnerselskab
CVR-nr. 33 96 35 56
Weidekampsgade 6
2300 Copenhagen S
Denmark
CVR-no. 33963556

We keep our privacy notice under regular review and thus the notice may be subject to changes from time to time. The date of the latest revision of the privacy notice can be found at the top of the document.