Processing of personal data
Personal information is all types of information that to some extent can be attributed to you. This privacy policy describes how AFA JCDecaux A/S process your personal information. We only process information about you that is necessary and processed for a purpose, and we always treat your personal information confidentially.
Data Security
We have taken appropriate technical and organizational measures to protect your information from accidental or unlawful destruction, disclosure, loss, damage, access, or unauthorized processing. We ensure that the processing can only take place when all data protection principles are met.
We keep data up to date
As our service depends on your personal information being correct and up to date, we ask you to inform us of relevant changes to your personal information. You can use the contact information above to notify us of your changes, and we will make sure to update your personal information. If we become aware that data is incorrect, we will update the information and notify you.
Below you can see on what basis we process your information, for what purpose and for how long we store it.
Website Visitors
When you visit our website, we process the following personal data about you:
- Cookies, cf. our Cookie policy.
- Name, e-mail, and company if you use our form for uploading digital content or files for printing.
We process personal information about you for the following purposes:
- To ensure optimal operation of our website.
- To register information via the upload form, for processing your purchase and delivery of our services.
We process the information on the following legal bases:
- You have given consent via cookie banner (Data Protection Regulation art. 6, subsection 1, letter a).
- You have given consent via our form for uploading digital content or files for printing (Data Protection Regulation art. 6, subsection 1, letter a).
- Our legitimate interest, which is to be able to manage our website (Data Protection Regulation art. 6, subsection 1, letter f).
The personal information is deleted after 30 days with regards to cookies and after 60 days with regards to the form for uploading digital content or files for printing.
Contact and Service
When you contact us per e-mail, phone, or per ordinary letter, we process the following information about you:
- Your contact information and the content of your inquiry.
The purpose of processing your personal data is that we would like to provide good service and to process your inquiry.
We process the information on the following legal bases:
- You have given consent for us to process your information (Data Protection Regulation art. 6, subsection 1, letter a).
- We process your information to provide you with a service in connection with a contract (Data Protection Regulation art. 6, subsection 1, letter b)
- We process your information based on a legitimate interest in being able to answer your questions and possibly enter an in-depth conversation to identify your needs (Data Protection Regulation art. 6, subsection 1, letter f)
Your personal data is deleted when the purpose for storing the personal data no longer applies. This is assessed based on the specific inquiry and the nature of the inquiry. We process your personal data as long as we have ongoing correspondence with you. When the correspondence has ended and its content does not give rise to further action, information that may appear in the correspondence will be deleted.
Exchange of goods and services
When entering into an agreement with us regarding exchange of goods or services, it is necessary for us to process personal data about you. This means that we will process personal information, such as your name and your e-mail, with the aim of complying with our obligations under the agreement with you (Data Protection Regulation art. 6, subsection 1, letter b).
Information collected in connection with this will be deleted when the agreement has been fulfilled, unless there is a specific reason to retain the information for a longer period, e.g., a warranty period or if there is a need to file a complaint. We are obliged to keep accounting material for 5 years from the end of the financial year to which the purchase or sale relates.
Social Media
When you like and/or follow us on LinkedIn, Facebook, and Instagram, we process the following information about you:
- Your name, the content of a message that you send us or comments on posts.
The purpose of processing of your personal data is to keep interested followers updated on e.g., market promotion measures, events, job postings etc.
We process the information on the following legal basis:
- Our interest in marketing as well as improving our website and product (Data Protection Regulation art. 6, subsection 1, letter f)
LinkedIn
We are joint data controllers with LinkedIn for the information collected about you when you visit our site. This means that we must distribute and determine the responsibility for complying with the legislation regarding the processing of your personal data with LinkedIn. You find our agreement on joint data controllership here: https://legal.linkedin.com/pages-joint-controller-addendum
If you do not have a profile on LinkedIn, information about your device, location/geodata and information about your behavior is collected on LinkedIn's website. If you have a profile on LinkedIn, you have consented by creating your profile, to also have information such as reactions, comments and shares collected. We only receive the information that you send to us in the form of your inquiry, like or comment. In addition, we receive anonymous statistical information about the users from LinkedIn, via a function called LinkedIn Page Analytics.
If you want to delete your information at LinkedIn, you must delete your profile. If you delete your profile, it also means that your posts, pictures, and information will be deleted. If you have questions about LinkedIn Page Analytics, please contact LinkedIn.
Facebook and Instagram
We are joint data controllers with Meta for the information collected about you when you visit our pages on Facebook and Instagram. This means that we must distribute and determine the responsibility for complying with the legislation regarding the processing of your personal data with Meta.
You find our agreement on joint data controllership here: https://www.facebook.com/legal/controller_addendum
Meta uses Insights on Facebook and Instagram to collect statistical information about visitor behavior on the page, including age, gender, relationship status, work, lifestyle, areas of interest, purchase information and geographic information. For this purpose, Meta has placed cookies on your device when you visit Facebook and Instagram. Each cookie contains a unique identification code which remains active for a period of two years unless they are deleted before the expiry of this period.
Meta receives, stores, and processes your personal data through these cookies. We receive aggregated results of this information. You can read more about Facebook’s and Instagram's use of cookies here: Cookies Policy. We do not pass on information about you that we receive from Meta. However, Meta may disclose information about you to third parties. You can read more about this in Meta’s Privacy Policy.
If you want to delete your cookies, you can see how via our Cookie banner, or you can contact Meta. Meta processes information about you, even if you do not have an account with them. You can read more about this here: Meta’s privacy policy.
Newsletter
When you sign up to receive our newsletter, we process the following information about you:
The purpose is to deliver a newsletter to you that targets your interests and wishes, so that you find the content relevant.
We process the information on the following legal basis:
- You have given your consent for receiving our newsletter (Data Protection Regulation art. 6, subsection 1, letter a).
Your personal information is deleted when you withdraw your consent by unsubscribing. You are free to withdraw your consent, and you can use the contact information at the top if you wish to do so.
Recruitment
If you apply for a position with us, we will process the information that appears in your application, CV, and other attached documents. It is not necessary that to add your CPR number. The purpose of processing personal data about you in the recruitment process is to assess whether you are a qualified candidate for a vacant position with us.
We process the information on the following legal bases:
- Based on our legitimate interest, which is to assess your qualifications and competences in relation to the advertised position (Data Protection Regulation art. 6, subsection 1, letter f).
- The processing of the CPR number only takes place if you have submitted it in connection with the application or the CV. We process CPR numbers to be able to defend or assert any legal claim (Danish Data Protection Act art. 11, subsection 2, no. 4, cf. art. 7, subsection 1 and Data Protection Regulation art. 9, subsection 2, letter f). If you send personal data of a sensitive nature, we process this on the following legal basis:
- A legitimate interest, which is the interest of both parties in the assessment of a future collaboration (Data Protection Regulation art. 6, subsection 1, letter f)) and for the purpose of determining of or defense in the event of a legal claim regarding the recruitment process (Data Protection Regulation art. 9, subsection 2, letter f).
Application and attachments can be saved for up to 1 month after the recruitment process has been completed, after which your information will be deleted. The purpose of storing the documentation after the end of the recruitment process is to safeguard interests in the event of possible objections about discrimination etc. during the recruitment process.
In the case of unsolicited applications, the application and attachments are stored for a maximum of 6 months, after which they are deleted. If we wish to store your applications for a longer period than this, this will be done based on a specific consent from you. In case we want to save your application with attachments for possible future employment, this will be done based on your consent (Data Protection Regulation art. 6, subsection 1, letter a).
Video surveillance
We have video surveillance in various areas. Therefore, there is a possibility that we may record your behavior. Signs are placed in the specific areas to indicate that there is video surveillance.
The purpose of video surveillance is crime prevention.
We process the information on the following legal basis:
- To secure our areas against crime (Data Protection Regulation art. 6, subsection 1, letter f)
We store surveillance videos for 30 days unless specific conditions make it necessary to store the information longer.
Disclosure of information
We use external suppliers to store and process personal information. When we use a data processor, we have entered into a data processing agreement with them. Therefore, they only process personal data on our behalf and may not use it for their own purposes.
We prioritize suppliers from the EU, as well as from third countries, which the EU Commission has approved in terms of the level of protection around personal data, cf. Data Protection Regulation art. 45.
In relevant cases, personal information is passed on to independent data recipients, such as e.g., banks, debt collection and freight companies.
