Privacy policy for Companyspace.com

This Privacy Policy describes Companyspace.com's processing of personal data of the Users personal data (the "User") in connection with Use of Companyspace.com and its sub-pages ("The Service").

1. Data controller and contact details
1.1 The data controller responsible for the processing of the Users personal data is: Companyspace: CSP Medier ApS, Mynstersvej 3, DK-1827 Frederiksberg C, Central Business Register (CVR) no: DK32147496.
1.1.1 Companyspace.com can be contacted on email  [email protected]

2. Processing activities
2.1 Processing of personal data in connection with the creation of a User profile
2.1.1 In connection with the creation of a User profile, the following personal data about the User will be processed: 

  • Information if the User is a premise owner or premise seeker
  • IP-address
  • E-mail

2.1.2 In addition, the User may choose to add various additional personal data to the User profile, including name, company name and phone number. 
2.1.3 When creating a User profile via Facebook, the following information is collected and processed: Name and e-mail and possibly profile picture from the User's Facebook profile. When creating a User profile through Google, the following information is collected and processed: Name and email from the User's Google Account. The collected information is used for creation of user profile and search ad and can be viewed on the User's profile page when the User is logged in.
2.1.4 The legal basis for the processing of the User's personal data is the pursuit of The Service's legitimate interests, cf. Article 6(1)(f) of the General Data Protection Regulation. The legitimate interests of The Service consist in being able to identify the User in regards to creating a User profile.

2.2 Processing of personal data in connection with the User’s use of The Service
2.2.1 In connection with the User’s use of The Service, The Service collects and processes the following personal data abóut the User:

  • Name.
  • Company name.
  • E-mail.
  • Telephone number.
  • Organization number/VAT number
  • IP-address.
  • Images.
  • Information as to whether the User is a premise owner or premise seeker.
  • Information about which ads or search ads the User potentially has requested more information about.
  • Information about the potential search agents that the User has created.
  • Information about which searches the User potentially has created in the ad database or search ad database.
  • Information about and data from the ads or search ads potentially created by the User.
  • Information about and data from the User’s potential company profile.
  • Information about which IP-addresses the User has registered from.
  • Information about which IP-addresses the User is logged in from when they buy.
  • Information about which country the User has registered from.
  • E-mail correspondence with the User.
  • Copies of important confirmation emails that the User receives from The Service.
  • Log of the User's visits, including data about IP address, access times, the websites linked, the websites visited, the features used, the contents visited, etc.
  • Cookie data and tracking data connected to the use of The Service.
  • Data about the User's consents, preferences and settings.
  • Invoices, credit notes and information of failed purchase attempts.
  • Information about the purpose and the result of the Users' use of The Service, including if the user found a new premise, and a possible invitation to review the service of The Service.

2.2.2 In this context, the legal basis for The Service’s processing of the User’s personal data is to pursue The Service’s legitimate interests, cf. Article 6(1)(f) of the General Data Protection Regulation. The Service’s legitimate interests are to be able to identify the User and provide and improve the services of The Service to the User, communicate with and provide service to the User and prevent and investigate misuse of The Service.

2.3 Processing of personal data in connection with purchases
2.3.1 In connection with the User’s creation and upgrade to PremiumUser, The Service, or The Service’s payment service provider, will collect and process the following personal data about the User for the following purposes:

  • "Name", “Company name”, “Organization number”, “VAT number” and "Address" for the purpose of identification and completion of a purchase.
  • “Email” and “IP-address” for the purpose of identification and completion of a purchase. 
  • "Credit card information", “Order number” and “Invoice number” for the purpose of completing the purchase.

2.3.2 The legal basis for the processing of this personal data is Article 6(1)(b) of the General Data Protection Regulation. The processing is necessary for the completion and performance of the contract that the User enters into with The Service, and fulfillment of potential statutory documentation requirements, in order to meet requests from authorities, in accordance with Article 6(1)(c) of the General Data Protection Regulation. 

2.4 Processing of personal data in connection with individual optimization of the User’s use
2.4.1 The Service can use the User’s personal data to inform the User about optimized use of the service and about new User-generated content that matches the User’s search pattern. In connection with this, the following personal data is processed:

  • Name.
  • Company name.
  • E-mail.
  • Telephone number.
  • Organization number/VAT number.
  • IP-address.
  • Images.
  • Information as to whether the User is a premise owner or premise seeker.
  • Information about which ads or search ads the User potentially has requested more information about.
  • Information about the potential search agents that the User has created.
  • Information about which searches the User potentially has performed in the ad database or search ad database.
  • Information about and data from the ads or search ads potentially created by the User.
  • Information about and data from the User’s potential company profile.
  • Information about which country the User has registered from .
  • E-mail correspondence with the User.
  • Copies of important confirmation emails that the User receives from The Service.
  • Log of the User's visits, including data about IP address, access times, the websites linked, the websites visited, the features used, the contents visited, etc.
  • Cookie data and tracking data connected to the use of The Service.
  • Data about the User's consents, preferences and settings.
  • Information about invoices, credit notes and information of failed purchase attempts.

2.4.2 Certain user behavior can be used to offer price differentiation to one or more specific groups of users.
2.4.3 The legal basis for the above processing is the pursuit of The Service's legitimate interests, cf. Article 6 (1)(f) of the Data Protection Regulation. The legitimate interests of The Service consist in being able to provide the User with the best and most efficient use of the service.

2.5 Processing of personal data in connection with statistics, improvement and further development of The Service, as well as services offered
2.5.1 The Service use the below stated personal data for the purpose of (1) collection of statistics, (2) improvement and optimisation of The Service and the services offered, and (3) further development of The Service and offer of new services:

  • Name.
  • Company name.
  • E-mail.
  • Telephone number.
  • Organization number/VAT number
  • IP-address.
  • Images.
  • Information as to whether the User is a premise owner or premise seeker.
  • Information about which ads or search ads the User potentially has requested more information about.
  • Information about the potential search agents that the User has created.
  • Information about which searches the User potentially has created in the ad database or search ad database.
  • Information about and data from the ads or search ads potentially created by the User.
  • Information about and data from the User’s potential company profile.
  • Information about which IP-addresses the User has registered from.
  • Information about which IP-addresses the User is logged in from when they buy.
  • Information about which country the User has registered from.
  • E-mail correspondence with the User.
  • Copies of important confirmation emails that the User receives from The Service.
  • Log of the User's visits, including data about IP address, access times, the websites linked, the websites visited, the features used, the contents visited, etc.
  • Cookie data and tracking data connected to the use of The Service.
  • Data about the User's consents, preferences and settings.
  • Information about invoices, credit notes and information of failed purchase attempts.

2.5.2 The legal basis for this processing is to pursue The Service’s legitimate interests, cf. Article 6(1)(f) of the General Data Protection Regulation. The Service’s legitimate interests are that The Service can gain understanding and insight into the potential optimization and development opportunities for The Service's offered services, as well as any improvement measures for The Service's website in order to improve the Service and the User's experience of the Service.

2.6 Processing of User Information in connection with statutory documentation requirements
2.6.1 The Service stores copies of important confirmation emails to the User, dialogues between The Service and the User as well as invoices and credit notes.
2.6.2 In connection with the above, the following information about the User is processed (only to the extent necessary in relation to the relevant documentation requirements

  • Name.
  • Company name.
  • E-mail.
  • Telephone number.
  • Organization number//VAT number.
  • IP-address.
  • Images.
  • Information as to whether the User is a premise owner or premise seeker.
  • Information about which ads or search ads the User potentially has requested more information about.
  • Information about the potential search agents that the User has created.
  • Information about which searches the User potentially has created in the ad database or search ad database.
  • Information about and data from the ads or search ads potentially created by the User.
  • Information about and data from the User’s potential company profile.
  • Information about which IP-addresses the User has registered from.
  • Information about which IP-addresses the User is logged in from when they buy.
  • Information about which country the User has registered from.
  • E-mail correspondence with the User.
  • Copies of important confirmation emails that the User receives from The Service.
  • Log of the User's visits, including data about IP address, access times, the websites linked, the websites visited, the features used, the contents visited, etc.
  • Cookie data and tracking data connected to the use of The Service.
  • Data about the User's consents, preferences and settings.
  • Information about invoices, credit notes and information of failed purchase attempts.

2.6.3 The legal basis for this processing is the pursuit of The Service's legitimate interest, cf. Article 6 (1)(f) of the Data Protection Regulation, in being able to fulfill its legal obligations and, where appropriate, meet the authorities' request for appropriate documentation, including but not limited to compliance with the rules of the Accounting Act, the Marketing Act and the data protection law rules, cf. Article 6 (1)(c). 

2.7 Processing of personal data in connection with optimizing the relevance of marketing
2.7.1 If the User has given consent to this by accepting marketing cookies, The Service or advertising media that The Service collaborates with (Google and Facebook), collects and processes information about IP-numbers as well as activity such as page views, User creation, purchases, etc. to ensure that The Service's advertising is as relevant as possible to the User. The information may be combined by the advertising media with other personal information they have registered about the User.
2.7.2 The legal basis for the above processing is the pursuit of The Service's legitimate interests, cf. Article 6 (1)(f) of the Data Protection Regulation. The Service's legitimate interests consist of being able to target The Service's marketing on social media and search engines so that it becomes more relevant to the User.

2.8 Processing of User Information in connection with the identification of a company 
2.8.1 When entering an organization number or VAT number, information about the User's company is obtained and stored from the EU system for exchanging VAT information (VIES). The information obtained is potentially added to the User's User Profile. In connection with the above, the following information about the User is potentially processed: 

  • Company name 
  • Company address
  • The company's possible VAT number

2.8.2 The legal basis for this processing is the pursuit of The Service's legitimate interest, cf. Article 6 (1)(f) of the Data Protection Regulation, in being able to identify the User as well as fulfillment of a legal obligation and, where relevant, meet the authorities' request for appropriate documentation in accordance with the Accounting Act, cf. Article 6 (1)(c) of the Data Protection Regulation.

3. Storage and deletion of personal data
3.1 The Service collects, processes and stores only the personal data that is necessary for each of the above purposes, in accordance with section 2. When the User's personal information is no longer necessary in relation to the stated purpose of The Service, the User's personal information is deleted. As long as the User is active, The Service does not delete data from the User's profile, as data is necessary for the profile to function optimally.
3.2 If a User deactivates their profile, the personal data will be deleted or anonymised no later than 1 year after the account is closed, e.g. so that the User can revert, restore the profile and access data again and so that The Service can investigate fake profiles. 
3.3 Personal information related to purchases and credit notes on The Service will, however, be stored for as long as is required to comply with the applicable legal requirements, as well as in connection with statutory storage of accounting material, and to make all necessary information available to the national tax authorities. 
3.4 Important emails in the form of copies of any important confirmation emails as well as any dialogues between The Service and the User will also be stored for as long as is necessary to resolve any inquiries from the User, handle potential complaints and disputes and respond to the supervisory authorities 'requests for documentation, for example, for the processing of the Users' personal data, handling of subscriptions or compliance with the rules of the Marketing Act. 
3.5 As an alternative to deletion, The Service may instead choose to anonymise the personal data in question, which means that the personal data falls outside the scope of the data protection legislation and thus the storage restriction.

4. Sharing of personal data, and categories of recipients
4.1 In connection with the processing, the following categories of recipients will receive the User’s personal data:

  • Data processors such as The Service’s IT suppliers, that provide technical services to the Platform in order for the website to function, providers of plugins, The Service’s payment service providers, providers of marketing services,  email system providers and The Service’s externally hosted finance system.
  • The service uses features and content from Google Maps. Use of these functions is subject to Google Maps' terms in force at any time (https://maps.google.com/help/terms_maps.htm) and privacy policy (https://www.google.com/policies/privacy).
  • Advertisement media, according to section 2.7.1.
  • Auditing and bookkeeping company.
  • Group companies to Companyspace.com which handles support and maintenance of The Service's systems and assists with any other potential tasks related to data processing.

Recipients may in some cases be located outside the EEA. However, The Service only transfers personal data to organizations or countries that provide an adequate level of data protection, either by means of a decision of the European Commission on adequacy or otherwise, such as by using EU standard contracts for the transfer of personal data.
4.2 To the extent this is in accordance with the applicable rules, Companyspace.com shares the User's personal information with other companies in the same group (ie other companies that are ultimately owned by Digital Disruption Media ApS).
4.3 The User's personal information may also be shared with other Users on The Service in connection with the User's use of The Service and as part of the actions taken by the User. See the terms.
4.4 The Service's services may contain links to other websites which have their own policies concerning personal data. The Service is not responsible for data protection conditions of third parties who do not provide services or have any affiliation with The Service.

5. The user's rights
5.1 Under the data protection legislation, the User has the following rights in connection with The Service's processing of the User's personal data. The User has: 

  • The right to see information and receive information about its processing: The User has the right to gain insight into the information that The Service processes about the User.
  • Right to rectify: The User has the right to have incorrect information about the User corrected. 
  • Right of deletion: In special cases, the User has the right to have information about the User deleted before the time of The Service's general deletion, in accordance with section 3.5. The User may request deletion by sending an email to [email protected].
  • Right to restrict processing: The User has in certain cases the right to have the processing of the User's personal data restricted. If the User has the right to have the processing restricted, The Service may in the future only process the information - apart from storage - with the User's consent, or for the purpose of legal claims being established, asserted or defended.
  • Right to objection: The User has at any time the right to object to the processing of the User's personal data for direct marketing, including to object to profiling when this occurs in connection with direct marketing.
  • The right to transmit information (data portability): The User has in certain cases the right to to receive the User's personal information in a structured, commonly used and machine-readable format and to have this personal information transferred from one data controller to another without hindrance.

5.2 The User is entitled to withdraw their consent at any time if The Service’s processing of the User’s personal data is based on this (without affecting the lawfulness of The Service’s processing before withdrawal of consent).
5.3 The User has the right to ask The Service to stop using personal information for direct marketing. 
5.4 In certain cases, the User's desire to delete personal information will mean that The Service can no longer provide services to the User.

6. Complaints regarding the processing of personal data
6.1 If a User is not satisfied with The Service's processing of the User's personal data, wishes to gain insight into their information or has another question, the User can always contact The Service via email at [email protected] or at the address specified in section 1.1.1.
6.2 If the User wishes to complain to a supervisory authority, the User may choose to contact the Danish Data Protection Agency (www.datatilsynet.dk), Carl Jacobsens Vej 35, 2500 Valby, DK-Denmark, telephone number: +45 33 19 32 00, email: [email protected].