Privacy Policy

Data Controller

We are the data controller for the processing of personal data that we handle regarding our customers and business partners. You can find our contact details below:

Seoma
Parkvej 37, 3. 301, 4200 Slagelse
CVR No. 45264394

Our company is not required to have an external Data Protection Officer (DPO), but if you have any questions regarding the processing of your personal data, you can contact us at info@seoma.dk.

Processing Activities

As a data controller under the GDPR, we conduct the following processing activities:

Website Visits

When you visit our website, we use cookies to ensure its functionality. You can read more about this in our cookie policy.

Communication with Potential Customers

If you have questions about our website or wish to learn more about our services, you can contact us via:

• Contact form

• Email

• Telephone

We will process your personal data to engage in a dialogue with you, such as answering questions about our services. We only process the information that you provide to us during our communication.

Typically, we process the following general information: name, email, and phone number.

Our legal basis for processing these personal data is Article 6(1)(f) of the GDPR.

We delete our communication with you once it becomes clear whether or not you wish to use our services. In exceptional cases, we may retain your data for a longer period if necessary.

Customers

We need to communicate with our customers to ensure that our services are delivered correctly. In this process, we may handle information such as name, address, services provided, specific agreements, payment information, and similar details.

Our legal basis for processing these personal data is Article 6(1)(b) of the GDPR.

Once the service has been delivered and any outstanding matters have been resolved, we will promptly delete the personal data.

Accounting

We are required to retain all accounting records under the Accounting Act. This means we keep invoices and similar records for accounting purposes. These may contain general personal data such as name, address, and service descriptions.

Our legal basis for processing personal data for accounting purposes is Article 6(1)(c) of the GDPR.

We retain these records for a minimum of five years after the end of the financial year in question.

Job Applications

We gladly accept job applications to assess whether they match our hiring needs.

If you send us a job application, our legal basis for processing your personal data is Article 6(1)(f) of the GDPR.

If you submit an unsolicited application, our HR department will immediately assess its relevance. If there is no match, we will delete your application promptly.

If you apply for an advertised position, we will delete your application if you are not hired, immediately after the right candidate has been selected.

If you proceed in a recruitment process or are hired, we will provide you with separate information regarding the processing of your personal data in that context.

Data Processors

We rely on business partners and service providers, some of whom may be data processors.

We use the following data processors to support our business operations and ensure the best possible service for our clients:

• Framer – We use Framer to design and develop websites, ensuring a seamless and responsive user experience.

• Google Analytics – We use Google Analytics to collect and analyze data about website traffic and user behavior to improve the performance and user experience of our website.

• Google Ads – We use Google Ads to manage and optimize our online advertising campaigns, ensuring that our marketing efforts are targeted and effective.

We are responsible for ensuring that your personal data are handled securely. Therefore, we impose strict requirements on our partners and require them to guarantee the protection of your personal data.

We enter into agreements with any company (data processor) handling personal data on our behalf to enhance security.

Disclosure of Personal Data

We do not disclose your personal data to third parties.

Profiling and Automated Decision-Making

We do not conduct profiling or automated decision-making.

Transfers to Third Countries

As a rule, we use data processors located within the EU/EEA or data processors that store data within the EU/EEA.

In some cases, this may not be possible, and we may use data processors outside the EU/EEA, provided they offer an adequate level of protection for your personal data.

Data Security

We maintain the security of personal data processing through appropriate technical and organizational measures.

We have conducted risk assessments of our personal data processing activities and implemented necessary measures to enhance security.

One of our key measures is keeping our employees updated on GDPR through regular awareness training, GDPR courses, and reviews of our GDPR procedures.

Rights of Data Subjects

Under the GDPR, you have several rights regarding our processing of your personal data.

If you wish to exercise your rights, please contact us so we can assist you.

• Right of Access: You have the right to access the personal data we process about you, including additional information.

• Right to Rectification: You have the right to have incorrect information about yourself corrected.

• Right to Erasure: In certain cases, you have the right to have your data erased before our general deletion occurs.

• Right to Restriction of Processing: In some cases, you may request that we limit our processing of your personal data.

• Right to Object: In certain cases, you can object to our lawful processing of your personal data, including direct marketing.

• Right to Data Portability: In some cases, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and have them transferred to another controller.

You can read more about your rights in the Danish Data Protection Agency’s guidance on www.datatilsynet.dk.

Withdrawal of Consent

Where our processing is based on your consent, you have the right to withdraw it at any time.

Complaint to the Data Protection Agency

If you are dissatisfied with how we process your personal data, you have the right to file a complaint with the Danish Data Protection Agency. Their contact information is available at www.datatilsynet.dk.

We encourage you to stay informed about GDPR to ensure you are up to date with the regulations.