Privacy policy
Privacy policy
How IAM Group ApS processes personal data. Data controller: IAM Group ApS, Arnold Nielsens Boulevard 77, 2650 Hvidovre, Denmark, CVR no. 44729164. Contact: privacy@iamgroup.dk.
1. Purpose and scope
Why do we process personal data?
We process personal data to deliver our IT consulting services, serve customers, fulfill contracts and legal requirements, and improve our internal processes.
This policy applies to the processing of data about customers, prospective customers, business partners, employees, freelancers, and other data subjects.
2. Types of personal data
What data do we process?
- Name, title, and company
- Contact details: email, phone, and address
- Company registration and identification data, where relevant
- Role and job title
- Project and contract data
- Invoicing and payment details
- Technical data, log files, IP address, and system usage
- Communication: emails, meeting notes, and support requests
- Employment data: CV, references, salary, etc.
3. Legal basis
What do we base the processing on?
We base the processing on the performance of a contract (GDPR Article 6(1)(b)), legal obligations (statutory requirements, accounting, and audit), legitimate interests (such as customer care and case management), and consent where required.
4. Recipients and processors
Who may the data be shared with?
Personal data may be shared with subcontractors and data processors (hosting, IT services, backup, etc.), with auditors, lawyers, and authorities where required by law, and with project partners – but only the necessary data.
We ensure that data processing agreements are in place, setting requirements for security and accountability.
The details you enter in the contact forms on this website are forwarded to our email using the external service FormSubmit. If you would prefer to avoid an external service, you can contact us by email at contact@iamgroup.dk or by telephone on +45 59 59 26 50.
When you download a whitepaper or a one-pager, we ask for your name, work email, and company. We use the details to send the file and to follow up if you ticked the box about being contacted. They are sent through FormSubmit in the same way as the contact form, kept in our mail system, and not passed on. You can ask us to delete them at any time by writing to contact@iamgroup.dk.
Along with the details, we note where you came from, such as a link in a LinkedIn post, so we can see which material is being used. It appears as one line in the email we receive. We store nothing on your computer, neither cookies nor any other storage, and the information disappears as soon as you leave the website.
5. Transfers to third countries
Is data transferred outside the EU/EEA?
If data is transferred outside the EU/EEA, appropriate protection is ensured, for example through the EU Commission's standard contractual clauses or another approved mechanism.
6. Retention period
How long do we keep the data?
We keep personal data for as long as necessary for the purpose, or as required by law. When data is no longer needed, it is deleted or anonymized.
7. Security
How we protect the data
- Access control and role-based access
- Encryption in transit and at rest, where relevant
- Secure backup and contingency plans
- Logging and monitoring
- Internal policies and employee training
8. Data subject rights
Your rights
- Access to your personal data
- Rectification of inaccurate data
- Erasure, where the conditions are met
- Restriction of processing
- Objection to processing
- Data portability
- Withdrawal of consent
- Complaint to the Danish Data Protection Agency (Datatilsynet)
9. Data breaches
If something goes wrong
In the event of a personal data breach posing a risk to data subjects, we will notify the Danish Data Protection Agency without undue delay and – where relevant – the affected individuals.
10. Review and updates
Ongoing review of this policy
This policy is reviewed at least once a year and whenever there are significant changes in legislation or in the company's activities.