Privacy Policy for Viktech
If you choose to share your personal data with us, we will process it in accordance with this Privacy Policy and applicable data protection legislation.
At Viktech, we are committed to protecting your personal data – whether you are an applicant, employee, customer, or business partner. We handle all data with the utmost care in compliance with the General Data Protection Regulation (GDPR) and the Danish Data Protection Act.
This Privacy Policy explains how we collect, use, disclose, and store personal data.
1. Data Controller
Viktech PS
Runetoften 18
8210 Aarhus V
Denmark
Phone: +45 70 20 90 43
CVR: 34046603
E-mail: kontakt@viktech.dk
2. Processing Activities and Purposes
2.1 Website visits and cookies
When you visit our website, we collect information via cookies.
Purpose: To analyze traffic, improve user experience, and target advertising.
Legal basis: Your consent (cookie settings), GDPR Article 6(1)(a). Necessary cookies are always used under Article 6(1)(f) (legitimate interests).
Read more in our Cookie Policy.
2.2 Communication with potential customers and candidates
When you contact us via contact form, e-mail, or phone, we collect information such as your name, company, e-mail, and phone number.
Purpose: To respond to inquiries and establish a dialogue about our services.
Legal basis: GDPR Article 6(1)(f) (legitimate interests).
Retention: Deleted once it has been clarified whether you wish to engage in a collaboration.
2.3 Job applicants
When you send us an application, CV, and related documents, we process information such as your name, contact details, education, experience, and references.
Purpose: Recruitment, assessment of qualifications, and communication regarding employment.
Legal basis: GDPR Article 6(1)(f) (legitimate interests).
Special categories of data: If you voluntarily provide sensitive information (e.g., health data), we process it under GDPR Article 9(2)(f) (legal claims).
Criminal records: Processed only if relevant, under the Danish Data Protection Act § 8.
CPR number: Processed only when necessary for identification, under the Danish Data Protection Act § 11.
Retention: Applications are normally stored for up to 6 months after the recruitment process, unless you consent to longer storage.
2.4 Employees and temporary workers (upon employment)
We process employee information such as CPR number, bank details, tax, salary, pension, holidays, sick leave, certificates/authorizations, and health and safety data.
Purpose: To administer the employment relationship, pay salary, and comply with legal obligations.
Legal basis: GDPR Article 6(1)(b) (contract), Article 6(1)(c) (legal obligation), and Article 6(1)(f) (legitimate interests). For sensitive data: GDPR Article 9(2)(b) and (f).
Retention: Employment data is stored for 5 years after the end of employment in accordance with the Danish Bookkeeping Act, unless longer storage is necessary due to legal claims (e.g., work injuries).
2.5 Customers and business partners
We collect data on customers and partners, including name, e-mail, phone number, address, agreements, and payment details.
Purpose: To provide services, fulfill contracts, and handle invoicing.
Legal basis: GDPR Article 6(1)(b) (contract) and Article 6(1)(f) (legitimate interests).
Retention: Stored for 5 years after the end of the business relationship in accordance with the Danish Bookkeeping Act.
3. Disclosure of data
We only disclose personal data when necessary or with your consent. Typical recipients include:
Customers (for job matching).
Public authorities such as SKAT (tax authorities), ATP, Feriekonto, municipalities (reimbursements).
Pension funds and insurance companies.
External auditors and legal advisors.
Social media/Google (if you have consented to marketing cookies).
All suppliers processing data on our behalf are bound by data processing agreements.
4. Security
We have implemented appropriate technical and organizational measures to protect personal data against unauthorized access, misuse, loss, or disclosure.
Access control and logging on systems.
Regular data backups.
Data processing agreements with IT suppliers.
Procedures for managing data breaches.
In case of a data breach involving high risk to you, we will notify you and the Danish Data Protection Agency in accordance with GDPR Articles 33–34.
5. Retention periods (overview)
Job applicants: 6 months (or longer with consent).
Employees/temporary workers: 5 years after end of employment (Bookkeeping Act).
Customers/partners: 5 years after end of business relationship (Bookkeeping Act).
General communication: Deleted once the purpose has been fulfilled.
6. Your rights
You have the following rights under GDPR Articles 15–22:
Right of access (Article 15): To know which data we process about you.
Right to rectification (Article 16): To have incorrect data corrected.
Right to erasure (Article 17): To have data deleted in certain circumstances.
Right to restriction (Article 18): To restrict processing in special cases.
Right to data portability (Article 20): To receive your data in a structured, machine-readable format.
Right to object (Article 21): To object to processing, including direct marketing.
Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.
To exercise your rights, contact us at kontakt@viktech.dk or +45 70 20 90 43.
7. Complaints
If you are dissatisfied with our processing of your personal data, please contact us.
You also have the right to lodge a complaint with the Danish Data Protection Agency, under the Danish Data Protection Act § 41(2):
Datatilsynet
Carl Jacobsens Vej 35
2500 Valby
Denmark
Phone: +45 33 19 32 00
E-mail: dt@datatilsynet.dk
Web: www.datatilsynet.dk
8. Changes
We may update or change this Privacy Policy at any time, for example due to legislative changes or updates to our business processes. The latest version is always available at www.viktech.dk.
