Global 
Germany Eve by Eraneos Denmark
At Eve by Eraneos Denmark, we are committed to transparency, integrity, and the protection of personal data. On this page, you can access our whistleblower reporting channel and review our Privacy Policy.
Find our whistleblower reporting channel here.
1. Introduction
The privacy policy of Eraneos Eve Denmark A/S (hereinafter referred to as the “Policy”) describes the governing principles for how Eraneos Eve Denmark A/S (hereinafter referred to as “Eve by Eraneos Denmark”) processes personal data pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council concerning the processing of personal data.
The Policy explains what personal data is, the types of personal data we collect, the purposes for which the data is collected, how it is processed and the rights you have in this connection. You can be confident that your personal data is processed with due care and in accordance with applicable principles.
1.1 Purpose
The purpose of the Policy is to establish the framework for how we process personal data relating to our clients, employees, business partners and others.
1.2 Target group
The Policy applies to all employees and business partners performing tasks on our behalf. If the Policy conflicts with local requirements or needs, any deviation must be approved by the person responsible for data protection, who must also inform the relevant parties.
2. What is personal data?
Personal data means any information relating to an identified or identifiable natural person, such as your contact details.
3. General principles for the processing of personal data at Eve by Eraneos Denmark
At Eve by Eraneos Denmark, we have eight governing principles for the processing of personal data:
- Our clients and employees feel confident about how we process their personal data.
- We only process personal data when we have a clearly defined purpose for doing so.
- We comply with the General Data Protection Regulation (GDPR).
- Our employees are trained to process personal data securely.
- We process personal data securely in our IT systems.
- We endeavour to ensure that personal data is always kept up to date and retain personal data only for as long as necessary for the relevant purpose and/or to comply with applicable legislation.
- We ensure that our business partners comply with the General Data Protection Regulation (GDPR).
- We are well prepared to manage a personal data breach should one occur.
Principle 1: Our clients and employees feel confident about how we process their personal data
This means that:
- We are a trustworthy business partner to our clients and employees.
- Our clients and employees can trust that we process personal data in accordance with the General Data Protection Regulation (GDPR) and only when we have a clearly defined purpose for doing so.
Principle 2: We only process personal data when we have a clearly defined purpose for doing so
This means that:
- All processing of personal data has a clearly defined and documented purpose.
- Everyone who works with personal data at Eve by Eraneos Denmark is aware of the purpose of the processing.
- If data is to be used for a new purpose, we ensure that the processing complies with the General Data Protection Regulation (GDPR).
Principle 3: We comply with the General Data Protection Regulation (GDPR)
This means that:
- We can demonstrate to clients, employees and business partners that we comply with the requirements governing the processing of personal data.
- We maintain a consolidated record of the personal data we process and the purposes for which it is processed.
- We have clear guidelines concerning the retention of our documentation.
Principle 4: Our employees are trained to process personal data securely
This means that:
- We ensure that our employees know and remain continuously aware of their responsibilities in relation to personal data.
- We provide tools and training to enable them to fulfil their responsibilities regarding the correct processing of personal data.
- If we identify an error in personal data or in the processing thereof, we take responsibility for rectifying the error.
Principle 5: We process personal data securely in our IT systems
This means that:
- Appropriate access controls have been established for our IT systems, and we pay particular attention to IT systems in which special categories of personal data are processed.
- We endeavour to minimise the number of systems in which personal data is processed and protect those systems against unauthorised access.
Principle 6: We endeavour to ensure that personal data is always kept up to date and retain personal data only for as long as necessary for the relevant purpose and/or to comply with applicable legislation
This means that:
- Processes and controls have been established to ensure that personal data is updated on an ongoing basis and remains consistent across IT systems.
- Personal data is deleted in accordance with established deletion rules based, among other things, on statutory retention requirements, including, for example, the Danish Bookkeeping Act.
- Personal data relating to employees is retained for as long as there is an objective need to retain it, including where this is necessary to fulfil obligations, such as the payment of salary pursuant to an employment contract, or to comply with applicable legislation.
- In relation to external business partners, we retain personal data for as long as the contract remains in force and/or for as long as there is an objective need to retain it.
Principle 7: We ensure that our business partners comply with the General Data Protection Regulation (GDPR)
This means that:
- Our business partners meet our requirements and expectations of them in their capacity as data processors.
- New business partners are assessed on whether they can process personal data securely and demonstrate their ability to do so.
- We monitor on an ongoing basis whether our business partners comply with the General Data Protection Regulation (GDPR).
Principle 8: We are well prepared to manage a personal data breach should one occur
This means that:
- Your personal data is protected by us, and we comply with an internal IT security policy.
- Each employee knows how to act in the event of an IT security breach or a suspected IT security breach.
- We ensure prompt and effective communication with clients and employees during any breach and immediately notify the Danish Data Protection Agency.
4. Your rights
A. Right to information
You have the right to receive information about the personal data we process concerning you.
B. Right of access
You have the right to access and receive the personal data concerning you that you have provided to Eve by Eraneos Denmark.
You have the right to receive certain information concerning the processing operation or operations carried out by Eve by Eraneos Denmark in respect of your personal data.
C. Right to rectification and erasure
You have the right to have inaccurate information concerning you corrected.
In certain circumstances, you have the right to have information concerning you erased before the date on which it would otherwise be deleted in accordance with our general deletion procedures.
Where your personal data has been disclosed to a third party, that third party will be informed of any rectification or erasure.
D. Right to withdraw your consent
Some of Eve by Eraneos Denmark’s processing activities may be based on your consent. In such cases, you have the right to withdraw your consent at any time. The withdrawal of your consent does not affect the lawfulness of any processing carried out before such withdrawal.
If you withdraw your consent, Eve by Eraneos Denmark and any third parties involved in the processing of personal data will cease processing your personal data, unless and to the extent that continued processing or retention is permitted or required under the General Data Protection Regulation (GDPR) or other applicable laws and regulations.
E. Right to lodge a complaint
If you wish to complain about the processing of your personal data, please contact Eve by Eraneos Denmark by sending your complaint to hr-on.dk@eraneos.com.
You also have the right to lodge a complaint concerning the processing of your personal data with the Danish Data Protection Agency. The Danish Data Protection Agency’s contact details can be found at datatilsynet.dk.
Requests relating to any of the above rights should be directed to Eve by Eraneos Denmark’s contact person specified below.
Privacy policy for recruitment
You can read our privacy policy for recruitment here.
Contact details and responsibility for personal data
Data controller
Eve by Eraneos Denmark is the data controller and may be contacted using the following details:
ERANEOS EVE DENMARK A/S
Akson | Kalkværksvej 16, 16th floor | DK-8000 Aarhus C
eve.eraneos.com
CVR no. 38 02 48 92
Contact person
If you have any questions concerning this Policy or Eve by Eraneos Denmark’s processing of your personal data, you may contact us by email at hr-on.dk@eraneos.com