Privacy Policy for Viktech
If you share your personal data with us, we will process it in accordance with this privacy policy and applicable data protection legislation.
At Viktech, we pay close attention to the protection of your personal data, whether you are an applicant, employee, customer or business partner. We handle data with the utmost care in accordance with the General Data Protection Regulation (GDPR) and the Danish Data Protection Act.
This privacy policy describes how we collect, use, disclose and store personal data.
1. Data Controller
Viktech PS
Runetoften 18
8210 Aarhus V
Telephone: 70 20 90 43
CVR no.: 34046603
Email: kontakt@viktech.dk
2. Processing Activities and Purposes
2.1 Visits to the Website and Cookies
When you visit our website, we collect information through cookies.
Purpose: Analysis of traffic, improvement of the user experience and targeted advertising.
Legal basis: Your consent through the cookie settings pursuant to Article 6(1)(a) of the GDPR. Necessary cookies are always used pursuant to point (f), legitimate interests.
Read more in our cookie policy.
2.2 Communication with Potential Customers and Candidates
When you contact us via a contact form, email or telephone, we collect information such as your name, company, email address and telephone number.
We may record telephone conversations with you when this is necessary to document the content of the conversation or to ensure correct registration and follow-up of your enquiry. Recordings may be processed using AI-based tools for transcription and extraction of relevant information, such as contact details, including name and address, or information about qualifications, experience, work preferences and availability if you are a candidate. Information that is not relevant to the fulfilment of these purposes will not be stored.
Purpose: To respond to enquiries, enter into dialogue about our services, document relevant information from telephone conversations and ensure correct registration and follow-up, including in connection with candidate and job matching.
Legal basis: Article 6(1)(b) of the GDPR when the processing is necessary to enter into or perform a contract with you, and otherwise Article 6(1)(f) of the GDPR when the purpose of the processing is to pursue our legitimate interests in responding to, documenting and following up on enquiries.
Retention: Deleted once it has been clarified whether you wish to enter into a business relationship.
2.3 Job Applicants
When you submit an application, CV and any other documents, we collect information including your name, contact details, education, experience and references.
We may also process relevant information that you provide to us by telephone, including through the use of AI-based tools. This includes contact details, education, qualifications, experience, preferred working hours, availability and special considerations that are relevant for assessing or proposing a suitable job match.
Purpose: Recruitment, assessment of qualifications and dialogue concerning employment.
Legal basis: Article 6(1)(b) of the GDPR when the processing is necessary to process your application or take steps prior to possible employment, Article 6(1)(f) for our legitimate interests in recruitment, job matching and follow-up, and Article 6(1)(a) if you consent to the longer retention of your application.
Special categories of personal data: As a general rule, we do not request special categories of personal data. If you provide information concerning health or similar matters yourself, we will only register it if this is necessary and there is a separate legal basis under Article 9(2)(e) or (f), or Article 9(2)(b), cf. section 12 of the Danish Data Protection Act, if the processing is necessary in connection with employment-law obligations or rights.
Information concerning criminal offences: Processed only if relevant to recruitment or employment, for example where it is necessary to assess suitability for specific positions, cf. section 8 of the Danish Data Protection Act.
Civil registration number: Processed only when unambiguous identification is necessary, cf. section 11 of the Danish Data Protection Act.
Retention: As a general rule, six months after the recruitment process has ended, unless you consent to longer retention.
2.4 Employees and Temporary Workers During Employment
We process information about employees in connection with employment, including civil registration numbers, bank details, tax, salary, collective agreements, pension, holidays, sickness, certificates and authorisations, occupational injuries, and information necessary for the working environment and HR administration.
If you contact us by telephone as an employee or temporary worker, we may register relevant information from the conversation, including through the use of AI-based tools, for example information about absence, availability or other matters necessary for the administration of the employment or temporary employment relationship. We do not register more information than is necessary for the purpose.
Purpose: To administer the employment relationship, pay salaries and comply with legal requirements.
Legal basis: Article 6(1)(b) of the GDPR, contract, point (c), legal obligation, and point (f), legitimate interests, for example in connection with HR administration. For special categories of personal data, including health data, we process the information pursuant to Article 9(2)(b) of the GDPR, cf. section 12 of the Danish Data Protection Act, if the processing is necessary in connection with employment-law obligations or rights, or Article 9(2)(f) if the processing is necessary in connection with a legal claim.
Retention: Personal data is stored for five years after the end of employment due to the Danish Bookkeeping Act, unless there is a legal claim, for example concerning occupational injuries.
2.5 Customers and Business Partners
We collect information about customers and business partners, including names, email addresses, telephone numbers, addresses, agreements and payment information.
If you call us, the information may be transcribed using AI-based tools and processed for the purpose of documenting and following up on your enquiry.
Purpose: To provide services, fulfil contracts and invoice correctly.
Legal basis: Article 6(1)(b) of the GDPR, contract, and point (f), legitimate interests.
Retention: Information is stored for five years after the end of the business relationship due to the Danish Bookkeeping Act.
3. Disclosure of Information
We only disclose personal data when this is necessary or when you have given your consent. Typical recipients are:
Customers in connection with job matching.
Public authorities, for example the Danish Tax Agency, ATP, FerieKonto and municipalities in connection with reimbursement of unemployment benefits.
Pension providers and insurance companies.
Auditors and legal advisers.
Social media platforms and Google where consent has been given to marketing cookies.
IT suppliers, including suppliers of AI tools for transcription and registration.
All suppliers that process data on our behalf are subject to data processing agreements.
4. Transfers to Third Countries
If personal data is transferred to countries outside the EU or EEA, this will only take place on the basis of a valid transfer mechanism under the GDPR, for example the European Commission’s adequacy decisions, the EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework. You may contact us if you would like further information about the transfer mechanism.
5. Security
We have implemented appropriate technical and organisational measures to protect personal data against unauthorised access, misuse, loss or disclosure.
Access control and logging in systems.
Ongoing data backups.
Data processing agreements with external IT suppliers.
Procedures for handling security breaches.
In the event of a personal data breach that results in a high risk to you, we will notify you and the Danish Data Protection Agency in accordance with Articles 33–34 of the GDPR.
6. Retention Periods Overview
Retention periods overview
Applicants: Six months, or longer with consent.
Employees and temporary workers: Five years after the end of employment under the Danish Bookkeeping Act.
Customers and business partners: Five years after the end of the business relationship under the Danish Bookkeeping Act.
Communication: Deleted when the purpose has been fulfilled.
7. Your Rights
You have the following rights under Articles 15–22 of the GDPR:
Access, Article 15: The right to see which information we process about you.
Rectification, Article 16: The right to have inaccurate information corrected.
Erasure, Article 17: The right to have information erased in certain cases.
Restriction, Article 18: The right to restrict processing in certain cases.
Data portability, Article 20: The right to receive information in a structured, machine-readable format.
Objection, Article 21: The right to object to processing, including direct marketing.
Withdrawal of consent: If the processing is based on your consent, you may withdraw it at any time.
Contact us at kontakt@viktech.dk or by telephone on 70 20 90 43 to exercise your rights.
8. Right to Lodge a Complaint
If you are dissatisfied with our processing of your personal data, you may contact us.
You also have the right to lodge a complaint with the Danish Data Protection Agency, cf. section 41(2) of the Danish Data Protection Act:
The Danish Data Protection Agency
Website: www.datatilsynet.dk
The latest privacy policy can be read at any time at www.viktech.dk. This version was revised in June 2026.