This personal data processing policy describes how AstroEnergi ApS collects and processes information about you when you communicate or enter into agreements with us.
Our services are aimed at both private individuals and businesses.
If you contact us as a private individual, your information will be processed in accordance with this policy. The information we process in relation to businesses is primarily about the company you represent.
The personal data policy applies to personal data that you provide to us. We do not collect information about you from others.
We are the data controller for the personal data we process.
What personal data do we process and for what purpose?
When you sign up for our newsletters and marketing materials, we collect information about your name, e-mail address, telephone number, and your consent. The purpose is to be able to send newsletters to you and offer courses, etc. The legal basis for the processing is Article 6(1)(a) and (f) of the General Data Protection Regulation.
When you order a service, receive an offer from us, ask questions, or otherwise communicate with us, we collect information about your name, if applicable which company you represent, telephone number, e-mail address, and information about which services you order, as well as any CPR number – see the separate section below regarding the processing of CPR numbers.
The purpose of this action is to enable us to deliver agreed services and, in general, to fulfill the agreement we have entered into with you/the company you represent. The legal basis for the processing is the ability to fulfill the agreement and deliver the ordered services, cf. Article 6(1)(b) or (f) of the General Data Protection Regulation.
When you represent a supplier, we collect information about your name, e-mail, telephone number, the company you represent, and other information that you choose to provide to us. The purpose of the processing is to be able to communicate with you, including via e-mail and telephone in connection with tasks that you, or the company you represent, perform for us as a supplier. The legal basis for the processing is Article 6(1)(f) of the General Data Protection Regulation.
When you are a contact person for a company that is a customer of ours, we collect information about your name, your e-mail, your telephone number, the company you represent, and other information that you choose to provide to us, excluding any sensitive information. The purpose of the processing is to be able to communicate with you and provide you and the company you represent with the best possible service, including taking into account special requests and needs, as well as providing us with the prerequisites to offer the company you represent relevant information. We further use this information to contact you, or the company you represent, regarding your satisfaction with our services and/or to send you information about the same or similar services that we assess may be of interest to you or your company. The legal basis for the processing is Article 6(1)(f) of the General Data Protection Regulation.
When you visit our website www.astroenergi.dk, we automatically collect information about you and your use of the website. This is, for example, information about your IP address, the type of browser you use, which pages you visit, which links you activate, and generally how you use and navigate the site. The purpose is to optimize the user experience and the website's functions as well as to be able to register, e.g., how long visitors spend on the website, and to be able to show you relevant information. The legal basis for the processing is Article 6(1)(f) of the General Data Protection Regulation.
If you apply for a position with us, we store the information you have written in your application and attachments for up to 6 months. The purpose is so that we can contact you if we have a position within the next six months for which your qualifications are a match. The legal basis for the processing is Article 6(1)(b) and (f) of the General Data Protection Regulation.
Specifically regarding CPR number
If you purchase a solar cell system, we ask you to provide your CPR number. The purpose of this is for AstroEnergi ApS to prepare an application for private individuals for permission to use their own electricity from the solar cell system.
We store the CPR number securely. The CPR number is only disclosed to the Danish Energy Agency. We send the information in an encrypted format.
We delete the CPR number from our systems no later than 1 month after the solar cell system is operational. The legal basis for the processing is Article 6(1)(a) of the General Data Protection Regulation and Section 11(2)(2) of the Danish Data Protection Act.
Who has access to your information?
Personal data is stored unencrypted and sent unencrypted over the internet. (Does not apply to CPR number – see above)
We have entered into agreements with data processors for certain operational and IT security tasks. Storage of information with our external partners (data processors) is subject to the same rules as us, and data processing agreements have been entered into with the data processors to ensure that your information is processed properly and in accordance with the rules.
Deletion of personal data
As a general rule, information is stored for 5 years. This is done, among other things, to comply with the rules on accounting records.
However, the information will be stored for a longer period if we have a legitimate interest in storing the information for a longer period, if it is necessary for legal claims to be established, asserted, or defended, or if storage is necessary for us to fulfill legal requirements.
Information in connection with sales is stored for 12 years for the purpose of ordering spare parts.
Your rights
Right of access: You can request that we disclose what information we have registered about you, for what purpose, and who we may disclose information to. You can receive a copy of the personal data that we process about you. In this connection, you must document that you are who you claim to be.
Rectification: If you become aware that there are errors in the information we have registered about you, you are encouraged to contact us in writing so that the information can be corrected.
Deletion: In certain cases, you have the right to have all or some of your personal data deleted by us, e.g., if you withdraw your consent and we have no other legal basis to continue the processing. To the extent that continued processing of your information is necessary, e.g., for us to comply with our legal obligations or for legal claims to be established, asserted, or defended, we are not obliged to delete your personal data.
Withdraw consent: You can withdraw a consent you have given us for a given processing of personal data, including in connection with registration on a waiting list.
Complaint: You can lodge a complaint with the Danish Data Protection Agency (Datatilsynet), Borgergade 28, 5., 1300 Copenhagen K, regarding our processing of your personal data.
Contact information
If you have questions or comments regarding this personal data policy, or if you wish to make use of one or more of your rights, you can contact us: AstroEnergi, Sankt Gertruds Stræde 5, 1129 Copenhagen K, tel: +4553809309, Astro@astroenergi.dk
Changes to the personal data policy
If we change the personal data policy, the new version will be available on the website. You can read more about data protection regulations on the Danish Data Protection Agency's website – www.datatilsynet.dk.
Jan 2024
