Privacy Policy
Keystone Investment Management A/S is the data controller with regard to any personal information we gather about you, and we make sure that your information is processed in compliance with the law.
We take data protection seriously. To inform you of how we process your personal information, we have adopted this privacy policy.
Contact information
If you wish to get in touch with us about our processing of your personal information, you can get hold of us at:
Keystone Investment Management A/S
CVR: 32318827
Havnegade 25, 2nd floor
DK-1058 Copenhagen K
JG@keystoneim.dk
Processing of Personal Data
Personal data are all types of information that relate to an identifiable person. If you do not want us to process your data, it may be difficult for us to comply with some contracts and obligations.
As data controller, we have implemented suitable technical and organisational measures to prevent your data from being accidentally or illegally deleted, publicised, lost, corrupted, leaked, misused, or otherwise treated in non-compliance with applicable law. We ensure that processing only takes place in adherence with the principles of data protection, cf. GDPR art.5.
Please see below, the legal basis upon which we process your information, for what purpose and for how long we retain it.
Tenants
As a tenant, on one of our properties, it is necessary for us to collect your personal data. This includes your general personal data, cf. GDPR article 6, and in some cases, we will process your confidential personal data, including your social security number.
We process your personal data on the purpose of administering the tenancies and related contracts. If we process your social security number, we do this on the purpose of ensuring your financial solidity and creditworthiness, as a tenant.
We process your personal data on the legal basis of performance of the lease, cf. GDPR art. 6(1)(b), and for pursuing our legitimate interest, cf. GDPR art. 6(1)(f), which necessitated by our interest in administrating your tenancy. When processing your social security number, we do this on the legal basis of Databeskyttelseslovens §11 (2).
We retain the information no longer than legislation permits, and we will delete it, once it is no longer necessary for our purposes stated above. The retention period depends on the type of information and the purpose of the processing. Typically, Information about you as a tenant is deleted 5 years after the end of the contractual relationship.
Investors, costumers, and business partners (later named “Stakeholders”)
For you, as a contact person or another physical person of interest, working as a representative, at one of our Stakeholders, it is necessary for us to process your personal data. This includes your general personal data, cf. GDPR article 6, and in some cases, we will process your confidential personal data, including your social security number.
We process your personal data on the purpose of administrating your relation to us and to fulfil our contractual obligations. If we process your social security number, we do this on the purpose of complying with our obligations within national money laundering acts.
We process your personal data on the legal basis of performance of our contractual obligations, cf. GDPR art. 6(1)(b), and for pursuing our legitimate interest, cf. GDPR art. 6(1)(f), which necessitated by our interest in administrating your relation to us. When processing your social security number, we do this on the legal basis of Databeskyttelseslovens §11 (2).
We store the data in the period established by legislation and deletes the data when they are no longer relevant. The period depends on the character of the data and the reason for the processing. Typically, data regarding clients will be deleted at the end of the agreement.
Data processed to comply with the Accounting Act (Danish, LBK. 648 af 15/06/2006), is being stored (processed) within a 5-year period, after the post has been recorded.
Job applicants
When we receive your application, it will be read and processed by the following procedures:
The application with attachments is shared between the relevant employees in the recruiting process. We only process the data given in your application and in other attachments given by you.
Personal data that appears in the recruiting process will be processed as follows:
We gather the data about you based on our legitimate interest, cf. GDPR article 6(1)(f)), which is to find the most qualified candidate. This necessitates the processing of these personal data, and the company assures that meeting this legitimate interest will not hurt the data subjects’ rights.
If we collect references, from former employers, we use the legal basis of consent cf. GDPR article 6 (1)(a), from the former employer.
We store your application with attachments until we find the right candidate for the job, and the recruiting process has ended. Then your application with attachments gets deleted.
We store unsolicited applications with attachments in 6 months whereafter they get deleted.
If we want to store your application with attachments in more than 6 months, we will contact you to get you consent. Your consent is voluntary, and you can withdraw it at any time by contacting us using the contact information above.
Website Visitors
Our purpose in collecting cookies on our website is only for necessary and security reasons, which is why we do not set cookies other than technical cookies. We do not use any third-party cookies and do not share data with third parties.
We process the information on the following legal basis:
- The legitimate interest of the enterprise, i.e., optimal administration of the website, cf. GDPR art. 6(1)(f).
We retain the information no longer than legislation permits, and we will delete it, once it is no longer necessary for our purposes stated above. The retention period depends on the type of information and the purpose of the processing. Typically, personal data on website visitors will be deleted at an annual revision.
Data minimisation
We only process the information necessary for the fulfilment of our stated purposes. Beyond those, we may be required by law to collect and retain certain information about you. We only retain personal information for the necessary retention period or as required by law. The personal information is deleted or anonymised when it is no longer necessary for us to process it.
We keep data up-to-date
As our services depend on your personal information being correct and updated, we request that you inform us of any relevant changes in your personal information. As tenant you can inform us of changes to your personal information via Taurus Ejendomsadministration A/S by email to reception@taurus.dk (please include lease number).
Otherwise you can use Udlejning@Keystoneim.dk or the contact point noted above to inform us of the changes. We will then make sure to update your information in our databases. If it comes to our attention that our information about you is incorrect, we will update it and notify you of this.
Transmission of your information
We use a number of third parties to store and process information, among them IT-solutions. They only process your information on our behalf and are not permitted to use the information for their own purposes. When relevant, your information may be disclosed to banks, public authorities etc.
We prioritize data processors from within the EU and from third countries approved by the European Commission with regards to an adequate level of protection of personal data, cf. GDPR art. 45.
Transmission of information to third countries
We use data processors in unsafe third countries. When legislation in these third countries does not offer the same protection of personal data as the EU does, we have an increased responsibility to ensure the protection of your information. This includes entering of SCC’s into in accordance with GDPR art. 46(2)(c).
If you would like to know more about the transfer mechanisms that apply to your information, you can contact us by the above information.
Your rights
By contacting us at the contact point at the top, you may:
- achieve access to the personal information we have on you
- rectify any faulty personal information
- have your personal information erased
- receive a copy of your personal information (data portability) for the purpose of moving it to another data controller
- object to the processing
- have the processing of your personal information restricted
When you contact us, requesting to exercise your abovementioned rights, we will respond within a month. If we cannot honour your request, you will receive an explanation.
In order to exercise your rights, or if you have questions about our processing of your information, you can always contact us. Our contact information is at the top.
If, after having been in touch, you are dissatisfied with how we process your information, you have the right to file a complaint with Datatilsynet.
Copenhagen, 05-01-2024