1. Data Controller

The legal entity responsible for the processing of your personal data is:

Grape A/S
CVR no.: 26079926
Aldersrogade 1, 8. tv
2100 Copenhagen Ø
Tel. + 45 70 10 20 48
info@grapenordic.com

2. Description of the treatment

2.1 Purpose: Provision of our services

We process your personal data in connection with the provision of our services within e-learning, teaching, consulting and coaching to a company or organization for which you act as a contact person or representative.

• E-learning
  In connection with our e-learning services, we collect user information for use in user creation in the LMS platform and sending e-learning. We also use personal information to compile statistics on the implementation of e-learning.
• Teaching, consulting and coaching
  In connection with our teaching, consulting and coaching services, we process personal data for the purpose of sending messages via email with assignments, follow-up and materials.

Sources

We collect your personal information from the following sources:

• Directly from you
• From the company or organization you are acting as a contact for, or representative on behalf of
• Through your use of our digital platforms

Categories of personal data

We process the following categories of personal data about you:

General personal information

• Contact information, including name, position, company, professional email, work address and work phone number
• User information, including name and email
• Use of digital services, including implementation of e-learning

Basis of processing

We process your personal data based on the following processing grounds:

• • Article 6(1)(b) of the General Data Protection Regulation (necessary for the performance of a contract to which you are a party)
  • Article 6(1)(f) of the General Data Protection Regulation (necessary for the pursuit of legitimate interests of GRAPE).

Description of the legitimate interest:

• • Grape’s legitimate interest is to be able to provide our services to a company or organization for which you act as a contact person or representative.

Recipients

We may share your personal information with:

• IT suppliers, etc., with whom we collaborate to assist our business.

Storage

We will retain personal data for as long as necessary for the purposes mentioned.

• We generally store your personal data for as long as we have a business relationship with the company or organization for which you act as a contact person or representative. Personal data is deleted 6 months after the customer relationship ends.

2.2 Purpose:  Administration of Grape’s business relationships

We process your personal data in connection with the administration of our business relationship with a company or organization for which you act as a contact person or representative.

This may include in connection with entering into an agreement for the provision of a service or in connection with service regarding an already established customer relationship.

In this context, personal data is processed for the following sub-purposes:

• Enquiries and communication
  We process your personal data when you, on behalf of a company or organization, contact GRAPE or ask us to contact you, with a view to hearing about our services.
  We process your personal data so that we can communicate with you, including serving you regarding the customer relationship, and so that we can respond to your inquiries and provide and provide the best possible service.
• Conclusion of commercial agreements
  We process your personal data in connection with the conclusion of commercial agreements for the provision of our services.
• Invoicing, accounting, etc.
  We process your personal data for accounting purposes, including issuing invoices and other forms of accounting that are necessary in relation to the business relationship.
• Documentation purposes
  We process your personal data for documentation purposes, including to be able to document the services we provide.

Categories of personal data

We process the following categories of personal data about you:

General personal information

• Contact information, including name, position, company, professional email, work address and work phone number
• Inquiries and communication
• Signatures in connection with the signing of commercial agreements that you sign on behalf of the company

Basis of processing

We process your personal data based on the following processing grounds:

General personal information

• Article 6(1)(b) of the General Data Protection Regulation (necessary for the performance of a contract to which you are a party).
• Article 6(1)(c) of the General Data Protection Regulation (necessary for Grape to comply with a legal obligation).

The legal obligation:
Chapter 5 of the Danish Accounting Act regarding rules for the storage of accounting material.’

• Article 6(1)(f) of the General Data Protection Regulation (necessary for the pursuit of legitimate interests of GRAPE).

Description of the legitimate interest:

Grape’s legitimate interest is to be able to administer our business relationship with a company or organization for which you act as a contact person or representative. Our legitimate interest is also to be able to contact you and respond to your inquiry, including communicating with you regarding the customer relationship. Finally, Grape has a legitimate interest in being able to document our services and communication with the company or organization.

Recipients

We may share your personal information with:

• IT suppliers, etc., with whom we collaborate to assist our business.

Storage

We will retain personal data for as long as necessary for the purposes mentioned.

• We generally store your personal data for as long as we have a business relationship with the company or organization for which you act as a contact person or representative.

Communication

• We store personal data in connection with inquiries and communication about the customer relationship for documentation purposes. The information is deleted 5 years after the customer relationship ends.
• If a customer relationship has not been established, we will process your personal data for up to 2 years from registration.

Commercial agreements

• We retain personal data included in commercial documents for as long as the commercial documents are retained. Commercial documents are retained for 5 years after termination or termination.

Accounting material

• We store personal data that is included in accounting material, including invoice information, in accordance with the Danish Accounting Act’s rules on the storage of accounting material, i.e. we store personal data for 5 years from the end of the financial year to which the registration relates.
•  

2.3 Use of our website

When you visit Grape’s website, personal information about your behavior is collected, including through the use of “cookies”.

We use the information, among other things, to optimize the user experience on our website and the services we offer.

In the cookie policy you will find detailed information about our use of cookies, including third-party cookies. Third-party cookies are cookies that are set by parties other than Grape when you visit our website.

The purpose of third-party cookies is to collect information for marketing purposes. (In the cookie policy you will also find a link to the third parties’ own privacy policies).

You can read more about the use of cookies in our  cookie policy and revoke or change your consent by opting out of cookies in the cookie overview, and you can also block cookies in your browser.

Specifically regarding third-party cookies and joint data responsibility:

For this type of processing, Grape is a joint data controller with the supplier of the third-party cookies in question.

Categories of personal data

We process the following categories of personal data about you:

General personal information

• Name
• User information
• IP address
• Using our digital services
• Information collected through the use of cookies, as described in the cookie policy

Sources

We collect your personal information from the following sources:

• Directly from you
• Online sources such as social media that are publicly available
• Third parties, as described in our cookie policy .

Basis of processing

We process your personal data based on the following processing grounds:

General personal information

• Article 6(1)(a) of the General Data Protection Regulation (GDPR) (consent).
• Article 6(1)(f) of the General Data Protection Regulation (necessary for the pursuit of Grape’s legitimate interests).

Description of the legitimate interest:

Grape’s legitimate interest is to be able to optimize the user experience on the website and the services that Grape offers.

Recipients

We may share your personal information with:

• IT suppliers, etc., with whom we collaborate to assist our business.
• Third parties, as described in our cookie policy

Storage

We will retain personal data for as long as necessary for the purposes mentioned.

• Personal data is stored for 6 months, or as described in our cookie policy .
• Regarding the deletion of cookies set by third parties, please refer to these third parties’ own privacy policies.

2.4 Statistics

Your personal information is used to compile statistics on the use of our website and our services.

In this context, static personal data is processed for the following sub-purposes:

Administration of user accounts, use of services and billing

In connection with a customer’s use of Grape’s e-learning programs, Grape collects statistical information about how many of the customer’s employees access the e-learning in question through the customer’s own LMS. This is done for the purpose of administering user accounts, documenting delivery and to ensure that Grape can correctly bill its customers, as billing is based on the number of end users.

Categories of personal data

We process the following categories of personal data about you:

General personal information

• Name
• Usage history on our website
• IP address

Sources

We collect your personal information from the following sources:

• Directly from you
• Through your use of our digital platforms

Basis of processing

We process your personal data based on the following processing grounds:

General personal information

• Article 6(1)(f) of the General Data Protection Regulation (necessary for the pursuit of legitimate interests of Grape).

Description of the legitimate interest:

Grape’s legitimate interest is to conduct statistical surveys in order to optimize our services and to better understand our customers. Grape’s legitimate interest is also to be able to correctly bill its customers.

Recipients

We may share your personal information with:

• IT suppliers, etc., with whom we collaborate to assist our business

Storage

We will retain personal data for as long as necessary for the purposes mentioned.

• Personal data is stored for 1 year.

2.5 Marketing

We use your personal information for marketing purposes, including to target our communication with you based on your areas of interest and focus and to send you relevant marketing in the form of newsletters.

You can unsubscribe from our newsletters at any time by clicking on a link referred to in the newsletter itself.

Categories of personal data

We process the following categories of personal data about you:

General personal information:

• Name, address, email and telephone number
• Areas of interest and focus
• Usage history on our website
• IP address

Sources

We collect your personal information from the following sources:

• Directly from you

Basis of processing

We process your personal data based on the following processing grounds:

General personal information:

• Article 6(1)(a) of the General Data Protection Regulation (GDPR) (consent).
• Article 6(1)(f) of the General Data Protection Regulation (necessary for the pursuit of legitimate interests of Grape).

Description of the legitimate interest:

Grape’s legitimate interest is to be able to market its business and products, including by sending out marketing and newsletters.

Recipients

We may share your personal information with:

• IT suppliers, etc., with whom we collaborate to assist our business

Storage

We will retain personal data for as long as necessary for the purposes mentioned.

• We retain your personal information for as long as you wish to receive marketing and newsletters from us, and for 5 years after you have unsubscribed.

3. Your rights

You have the following rights:

• You have the right to request access to, correction of, or deletion of your personal data.
• You also have the right to have the processing of your personal data restricted.
• If the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time. Your withdrawal will not affect the lawfulness of the processing carried out before your withdrawal of your consent. You can withdraw your consent and exercise your rights as set out below.
• You have the right to receive the personal data that you have provided in a structured, commonly used and machine-readable format (data portability).
• You can always file a complaint with a data protection supervisory authority, such as the Danish Data Protection Authority.

In addition, you have the right to object to our processing of your personal data in the following cases:

• If our processing of your personal data is based on Article 6(1)(f) (balancing of interests), see above under processing grounds, you have the right to object to such processing at any time on grounds relating to your particular situation.
• You also have an unconditional right to object to our processing of your personal data if we process your information for direct marketing purposes.

You can exercise your rights by sending an email to info@grapenordic.com.

There may be conditions or limitations to these rights. Therefore, it is not certain that you, for example, have the right to data portability in your specific case – this depends on the specific circumstances of the processing activities.

Last updated: January 2024