As a customer you have a number of rights to your own data

Article 15 of the General Data Protection Regulation gives you right of access.

As a person, you have the right to obtain confirmation as to whether personal data about you is being processed and if so get access to the personal data and the following information:

• The purpose of the processing
• The categories of information being processed
• The recipients of data and potential recipients
• When the data are expected to be erased
• Possibility of having data rectified or erased
• Possibility of complaining to the Danish Data Protection Agency
• If the personal data are not colllected form you, any available information as to their source

If you are a customer, you can find most of the data we have about you in Netpension.

If you did not find what you were looking for in Netpension, please do not hesitate to contact our Data Protection Officer DPO.

Article 16 of the General Data Protection Regulation gives you right of rectification of data.

You have the right to rectification of inaccurate data about you. You also have the right to have your data supplemented by additional information if this will make your personal data more complete and/or up-to-date.

If you find that the data we have about you are inaccurate, please do not hesitate to contact our DPO.

Article 17 of the General Data Protection Regulation gives you the right to be forgotten. 

In certain cases, you have the right to have data about you erased before the time at which we would otherwise generally erase data.

If you are a customer, we erase your data when they are no longer relevant.

Most data are collected for the direct performance of the pension agreement we have with you. Therefore, the erasure follows the ultimate time-limit for notifying claims under the pension agreement. The ultimate time for notifying claims under the pension agreement is 10 years after termination of the agreement. 

Certain data have been collected on the basis of legislation or consent from you. Such data are deleted in accordance with the basis of the collection. You can withdraw your consent for the processing of data at any time. 

If you have any questions, please do not hesitate to contact our Data Protection Officer DPO.

Article 18 of the General Data Protection Regulation gives you right to restriction of processing. 

In some cases, you have the right to have the processing of your personal data restricted. If you have the right to restricted processing, in future we may only process the data – except for storage – with your consent or if required for the establishment, exercise or defence of legal claims or for the protection of a person or important public interest.

If you have any questions regarding the restriction of your data or if you want to restrict such data, please do not hesitate to contact our Data Protection Officer DPO.

Article 20 of the General Data Protection Regulation gives you right of data portability. 

As a data subject:

• You have the right to receive data from the company in a readable format

Conditions:

• Own data which you have provided to the controller
• Data processed on the basis of your consent or contract
• Data processed by automated means
• May not adversely affect the rights of others

The data you have provided to us will often include your contact details and your civil registration number and any information about beneficiaries and the choices you have made in relation to risk and investment. 

You may benefit from data portability in those cases where you want to transfer your scheme from another company to us or where you want to transfer your data registered with us to another provider. 

The Danish Insurance Association has developed a solution for the industry which transfers data between the companies via EDI when you as a customer want to transfer your scheme. The transferred data include all data required in order for you as a customer to establish a scheme on the basis of the same data as those you have already provided. In some cases, the common industry solution also transfers data provided by your employer. This will happen in cases where your scheme is established as a mandatory company pension agreement. 

If your need for data portability is not warranted by a need to move data from one pension company to another, please do not hesitate to contact our Data Protection Officer DPO.

Article 21 of the General Data Protection Regulation gives you a right to object. 

In some cases, you have the right to object to our otherwise lawful processing of your personal data. This includes the right to object to the processing of your information for direct marketing purposes.  

It also includes the right to object to processing if such processing is based on Article 6(1)(e) (in the public interest) or Article 6(1)(f) (to pursue a legitimate interest) of the General Data Protection Regulation. In that case, it will be a balance of interests. 

You have the right to demand that the processing stops, unless we as the controller can a) demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or b) if the processing is necessary for the establishment, exercise or defence of legal claims.

If you have any questions regarding your right to object or if you want to object, please do not hesitate to contact our Data Protection Officer DPO.

Article 22 of the General Data Protection Regulation gives you the right not to be the subject of a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

If you have any questions, please do not hesitate to contact our Data Protection Officer DPO.