In connection with your contractual relationship with Thursday Consulting P/S, Thursday will as a data controller collect and process your personal data for the purposes specified below. We are under an obligation to protect the confidentiality, integrity and accessibility of our customers’, suppliers’, partners’ and employees’ data, including personal data.

1. Which data do we collect, the legal basis for collection and processing personal data

We may collect and process the following types of personal data for the purposes of providing services to you; relationship management; collecting your feedback and optimizing our services to you; compliance with applicable legal or regulatory requirements and/or internal policies; documentation requirements; handling requests, complaints and claims; handling inspections and queries by supervisory authorities; receiving external audit and legal advice:

‍

Your name; age; date of birth; national identification number; nationality; gender; phone number, home address; country of residence; residence and work permit; passport; visa; family circumstances (e.g. civil status and contact details on dependents and close relatives); photo; email address; title; employment and education details (e.g. previous employment and education details); salary and pension information; leaves of absence; bank account details; tax-related information; investments; information on any criminal records; ownership of shares; voting rights; management position or similar role; and any status as or relation to a politically exposed person (if required in accordance with anti-money laundering regulation).

Data is collected and processed based on the following articles in GDPR:

- Art. 6 paragraph 1 (a) your consent

- Art. 6 paragraph 1 (b) performance of a contract with you

- Art. 6 paragraph 1 (c) compliance with legal obligation to which Thursday is subject

- Art. 6 paragraph 1 (f) Thursday’s legitimate interests

- Art. 9 paragraph 2 (a) your explicit consent

‍

The legitimate interests for collecting and processing this data is: Performance of our contractual obligations to you as well as to be aligned with internal documentation requirements, which is required in order to run an effective operation of our business.

2. Processing activities and storage of data

In relation to one of the purposes listed above your personal data may be disclosed to and shared with:

- Public authorities

- Thursdays professional advisors (e.g. auditor and legal advisors)

- Service and IT vendors

‍

Thursday may also transfer data to IT providers, external service providers, including cloud providers that process data on behalf of Thursday. If we are required, according to the purposes listed above, to transfer your personal data to recipients located in countries outside the EU/EEA it will be done according to EU’s Standard Contractual Clauses (SCC), or other applicable legal basis.

Your personal data is stored for as long as required to fulfil the purposes above.

3. Specific for recruitment

Data is processed only in relation to our HR requirement process. Proceing of personal data that has been provided by you is based on the consent by accepting this policy. We process personal data collected from references provided that you have given your specific consent. We store data for a period of twelve month. We collect the following data about you:

‍

Non-sensitive personal data, i.e. contacts details, name, current position, education, etc.

- Data from references

- Criminal record, if relevant

- Public available information, if relevant.

4. Your rights

Your rights may be summarized as follows:

1. You have the right to gain access to the personal data concerning you that we process.

2. You have the right to have incorrect personal data about yourself rectified without undue delay.

3. You have the right to have your personal data erased at an earlier point in time than when our ordinary erasure takes place, where appropriate.

4. You have the right to restrict our processing of your personal data, where appropriate. In such cases, we may only process your data with your consent or in some very specific situations as outlined in the General Data Protection Regulation.

5. The right to objection to the processing of your personal data.

6. You have the right to receive your personal data in a structured, commonly used and machine-readable format.

‍

Please note that these rights are not absolute, as they should be balanced against legal requirements and Thursday’s legitimate interests.

When we process personal data based on your consent, you have the right to withdraw your consent at any time. Please contact us to withdraw consent for our processing of your personal data.

You also have the right to file a complaint with the Danish Data Protection Agency (Datatilsynet):

Borgergade 28, 5

1300 København K

Telephone: 33 19 32 00

dt@datatilsynet.dk

Contact

Please contact us at privacy@thursday.consulting if you have any questions with regards to the protection of your personal data, or if you wish to exercise your legal rights.

Revision of data protection policy

Thursday will continually review and update this data protection policy in order to ensure our compliance with applicable personal data law from time to time.

‍

The data protection policy was updated in July 2021.

‍

‍