PERSONAL DATA POLICY
Personal information
Personal information is information used to identify a particular person, even if the person can only be identified if the information is combined with other information. Personal information can be, for example, name, age, gender, email address, telephone number, etc.
Likewise, personal information also contains data such as personal profiles, well-being / work environment surveys, competencies and career development wishes, which are used in the collaboration between customers and E-SENSE.
The data processing policy at E-SENSE is described below:
What personal information does E-SENSE collect and process?
As a customer of E-SENSE, we collect and process the following data; e-mail addresses, first and last name, address, telephone number and data that may be necessary to carry out a given collaboration.
E-SENSE collects and processes information about you when you:
- participate in a professional / personal development course at E-SENSE
- fill in a personal profile (DiSC) via E-SENSE
- complete a well-being / work environment survey via E-SENSE's WhiteSpace® platform
- submit personal information in another way to E-SENSE
E-SENSE only collects the personal information that is necessary to be able to perform the agreed task and only stores data for as long as it has a purpose.
When invoicing, invoicing and banking information is stored in accordance with applicable laws in the area, including the Money Laundering and Accounting Act.
Categories of information and registered
E-SENSE registers the following personal data with the consent of private customers and following instructions from corporate customers:
- Title
- Name
- Phone number
The registration takes place by e-mail under contact persons and is stated by the person himself / by the person's manager after consent with the person or in E-SENSE's WhiteSpace® platform after the customer company's acceptance of E-SENSE's data processor terms.
Depending on the purpose of the task, relevant information that is necessary for the task solution is registered. This is described below under "Purpose of storage and processing of personal data".
Purpose of storage and processing of personal data
COACHING / SPARRING
The purpose of storing and handling personal data is to have an overview of the topics of conversation in the course; including the person's challenges, competencies and development opportunities.
Data in the form of notes are used exclusively in connection with the person's desire for coaching / sparring on self-chosen topics. Personal data is stored after signed consent with the person throughout the development process and is deleted no later than after 24 months.
The person may at any time make objections and revoke consent. Personally sensitive data is deleted immediately upon such request.
COMPETENCE DEVELOPMENT
The purpose of storing and handling personal data is to have an overview of the person's / team's competencies and development opportunities.
Data in the form of notes are used exclusively in connection with the person's desire for sparring on competencies and development. Personal data is stored after consent with the person throughout the development process and is deleted no later than after 24 months. Consent is given via email correspondence.
Personal profiles are stored after consent with the person throughout the development process and are deleted no later than after 24 months. Consent is made via login in connection with filling in the DiSC profile.
The person may at any time make objections and revoke consent. Personally sensitive data is deleted immediately upon such request.
If E-SENSE has acted in accordance with instructions and personal data has been submitted to E-SENSE from the employer (customer company), the request for deletion must be made by agreement with and through the employer (customer company), who is responsible for the data.
RECRUITMENT
The purpose of storing and handling personal data is to assist / advise corporate customers in connection with. a possible recruitment of a new employee.
Person profiles are stored with the consent of the person throughout the recruitment process and are deleted within 3 months after the end of the process. Consent is made via login in connection with filling in the DiSC profile.
The person may at any time make objections and revoke consent. Personally sensitive data is deleted immediately upon such request.
WHITESPACE® EMPLOYEE SURVEYS
The purpose of storing and handling personal data is to send out online questionnaires, process and generate reports in anonymised form as well as subsequent advice. This is done solely on the basis of instructions from companies that hire E-SENSE to carry out measurement of and advice in connection with. employee well-being, stress level and core value-understanding.
Data on the WhiteSpace® platform is stored according to instructions from customer companies and for up to 5 years (according to the Danish Data Protection Agency's practice), after which they are deleted. If the employee's private email address or private mobile number is to be used for establishment / contact, it is the responsibility of the customer company to obtain the employee's consent for the purpose.
Who does E-SENSE pass on personal information to?
Your personal information submitted to E-SENSE will only be passed on to:
- Trusted and relevant third parties, if agreed in connection with the conclusion of the assignment. For example. in connection with team development and development of collaboration as well as recruitment.
E-SENSE has a data processing agreement with all partners, which must ensure the customers' interests at all times. These agreements can be presented at any time on request.
Exchange of sensitive personal data takes place as a starting point exclusively between the focus person / the data responsible corporate customer and owner Tina Skjødt Jensen, E-SENSE.
E-SENSE therefore does not share material with sensitive personal data with third parties unless the assignment requires it, e.g. receiving and exchanging personal profile analysis in connection with leadership / team development as well as recruitment for customers.
When passing on data, E-SENSE points out to the recipient that he takes over the responsibility for the subsequent personal data processing, and that personal data that comes into the recipient's possession is expected to be handled in accordance with the provisions of the Personal Data Act.
Where is your personal information stored?
All your information is stored on servers in Denmark, except DiSC personal profiles, which are stored on DiSCnordic's server in the USA.
You can withdraw your consent at any time by contacting owner Tina Skjødt Jensen at kontakt@e-sense.nu.
Upon withdrawal of consent from E-SENSE, all data you have submitted to us will be deleted. This data will not be able to be recovered.
However, if personal data has been submitted to E-SENSE from the employer (customer company), and personal data is to be deleted, this must be done by agreement with and through the employer (the customer company).
How does E-SENSE protect your information?
At E-SENSE, only owner Tina Skjødt Jensen is the recipient of and has access to the personally sensitive data. Passwords are systematically changed every 12 weeks on all devices that contain sensitive personal data.
There is also a systematic quarterly change of password for Simply mail.
Physical material containing sensitive data is stored in a locked filing cabinet.
In the event of a security breach, this is reported to the registered persons and the Danish Data Protection Agency within 72 hours. Data controller Tina Skjødt Jensen investigates the consequences of the breach and acts in relation to these.
Deletion of sensitive personal data
At E-SENSE, the digital bin is emptied once a month, ensuring that information is deleted completely. Upon revocation of consent, data is deleted immediately.
Technical and organizational measures
E-SENSE is run as a one-man company without employees, and owner Tina Skjødt Jensen is data responsible for sensitive personal data and also a data processor. Tina Skjødt Jensen is the recipient and has access to the personally sensitive data. In connection with external development tasks for companies that want the development of employees as well as employee surveys, it is the customer company that is data responsible, and thus responsible for compliance with the Personal Data Act. All corporate customers have entered into and accepted E-SENSE's data processor terms, which comply with the EU's personal data regulation and applicable Danish consequential legislation.
Personally sensitive data is stored electronically on E-SENSE devices, all of which synchronize data. The devices are protected with code that is replaced every 12 weeks.