It is our clear ambition to minimize the processing of your personal data as much as possible and to create the highest degree of transparency in relation to the information being processed.
The purpose of the new GDPR-rules is to provide better protection when companies and organizations handle your personal data. Personal information covers all information that can be used to identify a person.
MTO collects, processes and stores data about you (as a supplier) in the following situations:
- As our contact person we register your company contact information in our system (name, direct phone number, mail-address and your position in the company)
- We register the orders made by you (with your contact information in our system)
- We record mail correspondences (regarding orders, price queries, shipping arrangements, payments etc.)
- If you sign up for our newsletter, we process your personal data in Mailchimp
We only process the personal data needed to make a purchase from your company, handle shipping, product customizations, payment etc.
Your information is stored on secure servers in Denmark. We never pass your personal details to a third party, unless we have a contract with them to process data on our behalf and otherwise keep it confidential.
Correct and updated personal data
It is of vital importance for us that all personal data are correct and up to date, and that incorrect personal data is deleted or corrected. Therefore we kindly ask you to let us know if there is a change in your data (new phone number, new email address, if you get another position or if you are leaving the company).
We only keep your personal data for as long as it is required for our purpose, and we delete it, as soon as it is no longer needed. The period, in which we store data, depends on the nature and the context of the data.
In relation to our data storage, GDPR gives you the following rights:
Access: You have the right to request information on whether we process personal data about you as well as to request access to this personal data. You have the right to know why we collect the data and how we process it, what kind of personal data we process, which third party-companies receive the data and how the data is stored.
Objection to the processing: You have the right to object to personal data processing which is based on our legitimate interests. However, if we have legitimate grounds which override your interests, rights and freedoms, we may have a right to continue the processing. Where processing is based on consent, you have the right to withdraw your given consent. This will not affect the use of the information about you prior to you withdrawing the consent.
Rectification: You are entitled to request rectification of inaccurate or incomplete personal data, limitation of our processing and completion of incomplete personal data.
Erasure: You have the right to request that your personal data is deleted. This applies under certain circumstances: for example if the information is no longer necessary.
Restriction of processing: You have the right to request that the processing of your personal data is restricted. If you do so, we might be unable to provide you with our services during the time the processing is restricted.
Data portability: Under some circumstances you have the right to gain access to your personal data in a structured, commonly used and machine-readable format (data portability) and have the right to transmit those data to another controller. This right is limited to personal data that you have provided us with.
Contact us at firstname.lastname@example.org if you have any requests.
We have established both technical measures and organizational procedures to ensure that your information is never lost, misused or otherwise treated in violation with the law.
Your personal data is stored on secure network, and only accessed by relevant employees.
Data breach Procedures
All employees are familiar with MTO’s internal data procedure, which complies with articles 33 and 34 of GDPR. In the event of a data breach MTO will report the event within 72 hours after we have become aware of the breach. If the breach is likely to entail a high risk for the rights and freedoms for the data subjects, MTO shall inform the data subject.
Use of MailChimp (newsletters)
When subscribing to newsletters, your data is processed by MailChimp, which acts as our data processor.
MailChimp allows us to monitor clicked links, opened newsletters along with other parameters and thus to optimize our marketing.
In regards to GDPR, we have signed an updated data processing agreement with MailChimp in which MailChimp confirms that their handling of data is in accordance with GDPR.
MailChimp will register, store and process your name, e-mail address, company name, time and IP-address for your signup.
You may revoke your consent at any time if you no longer wish to hear from us. You can do this by clicking “Unsubscribe” at the bottom of our newsletters or by contacting us at email@example.com.
MTO electric a/s
Telefon: 75 806 310
18. september 2018 /Anne Mette Christensen