Privacy policy
For OSVB (Open Social Value Bank), secure processing of personal data is important. When OSVB's customers use OSVB, the customer is the data controller. This means that you as a customer own the personal data that is processed in OSVB. OSVB processes this personal data on the instructions of the customer, who is the data controller.
For more information and to receive OSVB's standard data processing agreement, please contact
johan@opensocialvaluebank.com.Notification of personal data collection
1. We are the data controller - how do you contact us?
OSVB is the data controller for the processing of the personal data we have received about you. You can find our contact information below.
2. Contact details of the Data Protection Officer
OSVB does not employ a data protection officer and therefore we ask you to contact us directly with any inquiries. Our contact details can be found in section 1.
3. The purposes and legal basis for processing your personal data
We process your personal data for the following purposes and with the following legal basis:
Purpose 1
- Provide services, including applications and websites.
- Send notifications to users of OSVB's solutions.
- Enable communication with and provide the necessary service in connection with our services.
Legal basis
Article 6(1)(b) of the GDPR. That is, when the processing is necessary for the performance of a contract to which you are a party or necessary prior to a contract that you have requested to enter into.
Purpose 2
- Organize events and presentations etc.
- Send out newsletters
- Fulfill requests
Legal basis
Article 6(1)(f) of the GDPR.
- The legitimate interests we pursue are running and communicating about events.
- The legitimate interests we pursue are our interest in providing the best service to our clients and managing client relationships.
- The legitimate interests we pursue are our interest in communicating with stakeholders, targeting the material we send out and our marketing interest. In cases where the newsletter or subscription is delivered with the help of an external or technical partner, we share your data with the partner. This could be, for example, a technical supplier, a web agency, a printing company or a distributor.
Purpose 3
Processing of sensitive personal data in connection with the provision of services, etc. and in connection with total and irrevocable annonymization.
Legal basis
Article 6(1)(b) and Article 9(1)(a) of the General Data Protection Regulation.
As a general rule, we never process sensitive personal data about you. If you voluntarily submit or register such information in our systems, we process information to the extent that this is both a) necessary to provide the service for which you have submitted the information and b) within the framework of what you voluntarily, specifically and informedly anticipated and consented to by submitting the information.
This also includes that we anonymize sensitive personal data about you so that it is no longer personally identifiable, as anonymization in itself is processing.
When data is totally and irrevocably anonymized, it is no longer personal data, can no longer be used to identify you, and is therefore not covered by the personal data rules. Such data sets can be used by OSVB for statistical and other purposes, and therefore we are the data controller for the anonymization process.
4. Categories of personal data
We process the following categories of personal data about you:
- Basic personal data (email address, postal code, country of residence, first name, last name, gender, date of birth, etc.)
- Contact information (e.g., email, phone numbers)
- User data for website usage etc.
- Users of OSVB's solutions (In this respect OSVB's customers are data controllers, OSVB is data processor)
- Pseudonymous identifiers, (e.g. a fictitious username)
- Video, audio and text, including in chat format. Video conversations are not stored in the solution, however, video conversations are processed in the Solution
- User data for use of the Solution, e.g. Authentication data (username, password, security questions, audit trail, Device ID to be able to send push notifications to users who cannot track the data subject)
- Wellbeing data (e.g. mental health, progression in mental health and well-being challenges, etc. and similar). If the citizen chooses to provide sensitive personal data via the Solution, this data will be processed and stored in the Solution.
- Employment and social conditions, including job status data / information on public benefits, education, etc.
- Other categories of information that you voluntarily and without request from OSVB choose to provide for the provision of our services, which at your choice may be sensitive personal data or information about criminal offenses.
5. Recipients or categories of recipients
OSVB uses data processors, but does not disclose your personal data to other third parties without your separate and explicit consent.
OSVB uses Google and Amazon Web Services as subcontractors, and therefore also as data processors. These subcontractors are used solely to support OSVB's applications and are not used for marketing purposes. Personal data is processed within the EU/EEA via AWS and Google services located in AWS Region eu-central-1 Frankfurt and Google Region europe-west3 Frankfurt, respectively.
OSVB uses Webflow as a subcontractor for OSVB's websites, which is used as a tool for building websites. Information submitted via OSVB's website is therefore processed by Webflow, including for marketing purposes, such as sending material and information, as well as sending newsletters.
Impactly
- Name: Impactly ApS
- CVR: 40988750
- Address: Kronprinsensgade 13, 1. tv, 1114 Copenhagen, Denmark
Impactly is a technical subcontractor to Open Social Value Bank and provides software in which email addresses related to Open Social Value Bank can be processed.
Amazon
- Name: Amazon Web Services, Danish branch of Amazon Web Services EMEA SARL, Luxembourg c/o Azets Insight A/S
- CVR: 39009323
- Address: Lyskær 3C, 1. tv, 2730 Herlev Denmark
Amazon Web Services provides cloud infrastructure that is used for computation and processing, storage, databases, networking, as well as handling general software development. This is used to provide stability, security and availability. Location: AWS Region eu-central-1 Frankfurt.
Google
- Name: Google LLC
- Address: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Google provides an administrative system for the Open Social Value Bank through Google Suite. Location: Google Region europe-west3 Frankfurt.
Webflow
- Name: Webflow
- Address: 398 11th Street, 2nd FloorSan Francisco, CA 94103
Webflow provides software used to build websites, including contact forms on websites. The purpose of using Webflow is to maintain a good level of service for visitors to OSVB's website and to collect information for dialog between you and OSVB or newsletters. Location: Webflow servers, cached at the nearest location for accessing the website.
6. Transfers to recipients in third countries, including international organizations
We will not transfer your personal data to recipients outside the EU and EEA.
7. Where your personal data originates from
Personal data originates either from you or from the organization you are affiliated with when using OSVB's applications. If you are a customer or business partner, the organization could be your employer. If you are a citizen or other user in an application, the organization may be, for example, the municipality or organization that has assigned you a course and referred you to use our application in that connection.
8. Storage of your personal data
Your personal data will be deleted at the latest after your user has been inactive for 2 years. If you do not have an account, the data will generally be deleted no later than 2 years after our last contact with you. We reserve the right to delete your personal data at an earlier point in time if you request this or if we no longer have a legitimate purpose for processing the personal data.
9. Automated decisions, including profiling
OSVB does not make automated decisions based on your personal data.
10. The right to withdraw consent
You have the right to withdraw your consent at any time. You can do this by contacting us using the contact details provided above in section 1. If you choose to withdraw your consent, it does not affect the lawfulness of our processing of your personal data based on your previously given consent and up to the time of withdrawal. Therefore, if you withdraw your consent, it will only take effect from that point in time.
11. Your rights
Under the General Data Protection Regulation, you have a number of rights in relation to our processing of information about you.
If you wish to exercise your rights, please contact us.
Right to see information (right of access)
You have the right to access the information we process about you, as well as a range of additional information.
Right to rectification (correction)
You have the right to have inaccurate information about yourself corrected.
Right to restriction of processing
In certain cases, you have the right to restrict the processing of your personal data. If you have the right to restrict processing, we may in future only process the data - except for storage - with your consent, or for the establishment, exercise or defense of legal claims, or for the protection of a person or important public interests.
Right to object
In certain cases, you have the right to object to our or lawful processing of your personal data. You can also object to the processing of your data for direct marketing purposes.
You can read more about your rights in the Danish Data Protection Agency's guide on the rights of data subjects, which you can find at
www.datatilsynet.dk.
12. Complaint to the Danish Data Protection Agency
You have the right to file a complaint with the Danish Data Protection Agency if you are dissatisfied with the way we process your personal data. You can find the Danish Data Protection Agency's contact information at www.datatilsynet.dk.
.png){kind=icon}
