Privacy policy

1. Data controller

The legal entity responsible for the processing of your personal data is Xtbc

2. Contact us

If you have any questions concerning our processing of personal data, please contact us by email Info@Xtbc.io

3. Description of processing

We describe the purposes for which we process personal data below.

3.1 Provision of our services

In connection with our provision of services to a customer we always create a case file in our document management system. One or several parties who are involved in the matter in different ways will be named as contacts. If you are such a person, we will process personal data about you. We will use the personal data to communicate with you.

We will process basic personal data about you, including contact details such as name, title or position, email address, telephone and address of your place of employment.

We will keep your personal data as long as they are necessary for the purpose or purposes for which they are being processed. As a general rule, we will keep your personal data as long as we have a business relationship with the customer in question.

3.2 Courses and seminars

When you attend one of our courses or seminars, we will use your personal data to keep in touch with you before, during and after the event in question.
If you are employed by one of our customers and you have registered for a course or seminar, we will keep your personal data as long as we have a business relationship with the customer in question.

For the purposes of a course or a seminar we will only process basic personal data, including name, title or position, email address, telephone and your place of employment.

The personal data may also be processed based on Article 6(1)(f) (the rule on balancing of legitimate interests) where the legitimate interest is to administer seminars and send out evaluation forms etc.

We will keep your personal data as long as they are necessary for the purposes of the course or seminar in question and for the evaluation of such course or seminar. A course may be one of a number of related courses or networking activities described in advance, and in such situations we will keep your personal data until the entire process or networking activities have been completed and evaluated. If you are employed by one of our customers, we will keep your data as long as we have a business relationship with the customer in question. In case of an event that is subject to an attendance fee, we will keep invoicing data during the relevant financial year plus five years, as laid down in the Bookkeeping Act.

3.3 Marketing

We will use your personal data for the purposes of marketing, including for the purposes of being able to target communication specifically to you. Targeted communication includes newsletters.

For this end we will only use basic personal data, including name, title or position, email address, telephone and your place of employment. We will also register the language in which you wish to receive such material.

The personal data we use are provided by you or are collected from publicly accessible sources, for example your LinkedIn profile. The information may also be obtained through your use of our website.

The legal basis for our processing of the data is the rule on balancing of legitimate interests (Article 6(1)(f)). The legitimate interests pursued are our interest in carrying out marketing activities and our interest in targeting the material we send out. We will not disclose your personal data to third parties.

If you have registered for one or several of our newsletters, we will keep your personal data for as long as you wish to receive material from us and for two succeeding years. If we have collected publicly accessible information about you for the purpose of being able to carry out marketing activities, we will keep such data for as long as the relevant activity is ongoing and for two successive years.

3.4 Use of our website

When you use our website, cookies are used to collect personal data about your behavior. This includes various social media plugins, which makes it easier for you to share content from ExtBC.com´ website on Facebook, LinkedIn etc. Xtbc and the provider of such third-party cookies act as joint data controllers. You may read more about this and locate a link to the privacy policies of such third party providers in the cookie overview, which may be accessed through Xtbc

We process your personal data in connection with your use of our website as described above and as further described in the cookie overview, which may be accessed through Xtbc cookie policy based on Article 6(1)(f) of the General Data Protection Regulation, where the legitimate interest is to provide you an interesting website that works optimally.

4. Recipients

We will treat the data as confidential and we will not disclose the data to third parties. Data may, however, be disclosed to authorities and/or courts.

The data will not be transferred to countries outside the EEC/EEA unless such transfer is made to a specific client, court or the like. In that case, such transfers will made based on Article 49(1)(b)-(e) of the General Data Protection Regulation.

The data may be passed on to external suppliers, including any IT service providers that are assisting Xtbc

5. Your rights

You have the following rights:

• You are entitled to request access to, rectification or erasure of your personal data.
• You are also entitled to oppose the processing of your personal data and to request restriction of the processing of your personal data.
• You have in particular an unconditional right to oppose the processing of your personal data for direct marketing purposes.
• If the processing of your personal data is based on your consent, you are entitled to revoke such consent at any time. Revocation of your consent will not affect the lawfulness of the processing carried out prior to your revocation of consent.
• You are entitled to receive personal data which you have provided to us in a structured, commonly used and machine-readable format (data portability).
• You can always lodge a complaint with a data protection authority, for example the Danish Data Protection Agency.