Personal data policy

HOW THE DANISH INSTITUTE FOR HUMAN RIGHTS PROCESSES YOUR PERSONAL DATA

In the following text you can read how and why we collect and process your personal data. You get information about our legal basis, your rights and whom to contact, if you have any questions or if you wish to complain about our processing of your data.

The DIHR is the legal entity responsible for processing your personal data. You can get in contact with the DIHR at:

Address           
Institut for Menneskerettigheder
Wilders Plads 8K
1403 København K

Telephone: +45 32 69 88 88
E-mail: info@humanrights.dk

You can contact our Data Protection Officer if you have any questions regarding information security dpo@humanrights.dk.

PURPOSE

The DIHR is constituted by Danish law. As an independent governmental institution, we have legal powers to gather and process your personal data if it happens for a statistical or scientific purposes.

The purpose with this tool is to enable organisations/individuals working at the national level to collect data on the level of implementation of the UN Guiding Principles on Business and Human Rights by filling out an online questionnaire.

PERSONAL DATA

 We process the following personal data:

• Your name
• Email
• Organisation and position
• Information about your interest in the tool

We gather/process your personal information when you create an account:

• to be able to implement some of the functionalities of the tool such as the review and co-respondent functions
• to ensure that the organisations/individuals wishing to publish the data on the DIHR website have a genuine interest in business and human rights as well as the research capacity to fill out the questionnaire in a methodologically sound manner
• to maintain an overview of the type of users interested in the tool with a view to improving functionalities and further updates.

If you decide that your answers should be published, you can decide whether all or some of your personal information such as name and organisational affiliation, should be made accessible on the website together with the answers to the questionnaire.

Only a few authorised employees at the DIHR have access to the data you enter and will process it with the purpose of publishing it on the website when permitted by the user.

LEGAL BASIS

The processing of your personal data happens as part of exercising our authority through The Act of the Danish Institute of Human Rights and The Danish Data Protection Act § 10, litra 1 and 2.

The European Union’s General Data Protection Regulation (GDPR) (2016/679/EU) art. 6 paragraph 1, litra e, is our legal basis for gathering and processing your personal data.

Our obligations as a data controller, towards you as a data subject living outside the European Union, is explained in the General Data Protection Regulation (GDPR) art. 3

STORAGE AND TRANSMISSION

We use several suppliers to store and process data. These suppliers only process data on our behalf and may not use this data for their own purposes. We only use data processors in the European Union or in countries which can provide sufficient protection of your data. We have concluded Data Process Agreements with all the suppliers we cooperate with. 

Your personal data will be erased, archived in accordance with the rules in the archives legislation or stored pursuant to other rules, when we no longer need to process it for one or more of the purposes above. However, we may process and store statistical data longer in anonymised form.

YOUR RIGHTS

According to the General Data Protection Regulation (GDPR) you have the right, in certain cases, to require deletion of your personal information before our general deletion occur.

COMPLAINTS

If you wish to complain about the DIHR’s processing of your personal data you can do so by contacting the Danish Data Protection Agency: the Data Protection Agency