Privacy and Cookie Policy

Personal data is particularly important in PA's deliveries and we are committed to protecting the integrity, accessibility and confidentiality of personal data.

These privacy policies provide supplementary information about what personal information is collected, how the information is collected and what rights you have if personal information about you is registered with us.

The general manager of PA is primarily responsible for the processing of personal data used by PA.

Personal data processed by PA:

CUSTOMER AND SUPPLIER INFORMATION

PA processes personal information about customers and suppliers in addition to any third party necessary to carry out contractual obligations.

Among the information being processed is contact information for contacts with customers and suppliers.

The personal data is stored in a separate database and deleted five years after the end of the customer relationship.

MARKETING

PA processes personal data for marketing purposes. This personal information may be shared between ProAccount ApS and other companies in the Exacta Group, but will not be disclosed to other companies without your consent.

CUSTOMER REGISTER

PA stores contact information for potential customers. The information is taken from public sources, such as the company's website, www.virk.dk, etc. The purpose of this processing of personal data is to target the marketing to potential customers of our services, as well as to coordinate this marketing work.

Personal data on potential customers will be deleted within one year of being entered into the database if no customer relationship is established - or consent to storage is provided

COOKIES

On the PA website www.pro-account.dk we log information of all visitors using Google Analytics. The information that is logged cannot be traced back to you as an individual, so the cookie does not see who you are, what you are called, where you live, or whether the computer is used by one or more people. The information is anonymous and is not linked to the individual user, nor can the cookie spread viruses or other malicious programs.

The information is collected to better understand how our users use the website, so that we can tailor the pages to you as a user. Cookies are a help to website visitors, e.g. on repeated visits to the page where settings and any information entered are remembered and therefore do not need to be entered again. Cookies are also used to collect website statistics to improve it, as well as to target ads and services for marketing purposes.

Like most other websites, we use a method where the information is stored in a cookie on your PC. Most browsers are set to automatically accept cookies from websites. You can delete stored cookies by following the instructions for deleting your browser. Information about this can be found in your browser. Restricting access to cookies may affect the functionality of our website.

If you want to know more about cookies, you can read about the legal basis at www.erhvervsstyrelsen.dk

Google Analytics

Cookies on our website are from Google Analytics (first-party cookie). Cookies delete themselves after a certain number of months (number of months may vary), but they are renewed after each visit. You can opt out of cookies from Google Analytics here: http://tools.google.com/dlpage/gaoptout

PA uses the Google Analytics analytics tool to assess website traffic, usage, and trends. The data collected is used to make the user experience correct and to customize the content of the website. According to Google's Google Analytics Policy, no personal information about users is collected. The data collected is stored on Google's servers. You can read more about how Google collects and protects data here.

Advertisment Network

PA uses the following advertisment networks:

• Facebook
• LinkedIn
• Google

Google Display Advertising

The DoubleClick cookie is a third-party cookie that causes third-party vendors, including Google, to display their own PA targeted ads on a number of websites on the Internet that are part of the Google content network. This is also known as re-marketing and you can read more about the benefits of re-marketing here.

This is used to target relevant ads to users based on interests and past website usage. This contributes to more relevant marketing for you as a user. According to Google's Privacy Policy, no information is collected or used to identify individuals. You can opt out of using targeted Google Display ads here.

DELIVERY AREAS

PA uses the personal data that the customer gives us so that we can solve the agreed task. It also includes the data that appears in the customer's tax file to the extent that the customer gives us access to it.

It is about information about the customer's financial, tax and business conditions.

We only collect, process and store the personal data necessary to solve the agreed tasks. This applies in principle to the Register of Persons, the Register of Land Registry, the Danish Business Authority, the CVR register, SKAT and the Owner's Register. In addition, it may be determined by law what type of data is needed to collect and store for our business operations. This applies, for example. the Accounting Act and the Money Laundering Act (see below)

ACCOUNTING / ADVICE

PA provides accounting and consulting services for clients. Typical personal data processed in this connection are, for example, name, address, social security number, telephone number, e-mail and salary information.

In these tasks, PA will be a data processor and therefore enter into a data processing agreement with the client as the controller. The data processing agreement will set the framework for PA's processing of personal data. The specific security measures and deletion procedures for the processing will appear in each individual data processing agreement.

WAGE / HR / ADVICE

PA does Wages / HR / ADVICE for clients. Typical personal information processed in this connection is, for example, name, address, social security number, relatives of relatives, telephone numbers, e-mail and salary information.

In these tasks, PA will be a data processor and therefore enter into a data processing agreement with the client as the controller. The data processing agreement will set the framework for PA's processing of personal data. The specific security measures and deletion procedures for the processing will appear in each individual data processing agreement. Only necessary salaried employees have access to salary data.

TRANSFER AND TRANSFER OF PERSONAL DATA

We pass on personal data to affiliates and other stakeholders if necessary to fulfill the agreement we have entered into with the customer.

We sometimes choose to use data processors, including software providers, web hosting, backup, security and storage. When using data processors, this is done for specific purposes only, and it is our responsibility to ensure that the customer's information is processed in accordance with applicable law and this privacy policy.

We do not disclose personal data for purposes that do not follow from the agreement - e.g. disclose to others for use in their marketing - unless we have agreed with the customer in connection with the collection or obtain the consent of the customer after informing the client of what the customer's data will be used for. The customer may at any time ask us to stop the transmission of personal data, regardless of whether it has been agreed or the customer has otherwise agreed to it.

However, we do not obtain the customer's consent if we are legally required to disclose personal data, e.g. as part of a statutory reporting to an authority.

INVESTIGATIONS AND CUSTOMER CHECKINGS

PA is required to carry out customer checks pursuant to the Money Laundering Act, and to conduct further investigations if there is suspicion that a transaction is related to the proceeds of a criminal offense.

Among the information that PA is required to process in this regard are name / company name, CPR number / CVR number, permanent address, family relationships and information related to any suspected criminal offense.

Processing of personal data related to customer control and any investigative duty may involve the processing of sensitive personal data, including criminal matters.

Pursuant to the Money Laundering Act, PA is required to keep documents used in connection with customer control for at least five years after the customer relationship has been completed or the transaction has been completed, unless longer deadlines follow other law or regulation.

Documents and information as mentioned in the above point are stored in a safe manner, protected from unauthorized access by unauthorized persons and deleted within one year of the termination of the storage obligation.

In certain circumstances, PA is also required to disclose information to SØIK, for example if there is a suspicion that a transaction is related to the proceeds of a criminal offense.

COLLECTION OF INFORMATION UNDER THE LAUNDRY LAW

PA is required to collect information in accordance with the rules of the Money Laundering Act and in this connection:

• Obtain identity and verification information as well as a copy of the credentials presented
• Obtain documentation and records of transactions carried out as part of a business relationship or a single transaction
• In case of suspicion that the customer is laundering or other criminal act, documents and records regarding investigations will be obtained
• Statement that the information obtained about the customer will only be used to fulfill the auditor's obligations under the Money Laundering Act and not for example. marketing purposes
• Please note that the information may be disclosed to SØIK in case of suspicion that the customer is believed to be involved in money laundering or other criminal act
• Please note that the customer has the right of access to the registered information
• Please note that the information is stored for 5 years and will usually be deleted 5 years after the last customer engagement
• Please note that the customer has the right to correct erroneous information recorded

PERSONNEL ADMINISTRATION

PA processes personal data as part of personnel management. The personal data processed in this connection include personnel, salary information, evaluations, relatives, and education / job level.

The legal basis for this processing is the Personal Data Regulation.

Personal information related to personnel administration is kept as long as he or she is employed by PA and for 5 years. Personal data on applicants for positions at PA will be deleted immediately after rejection, unless hired or given written consent for longer term retention.

Your rights

PA's processing of personal data is regulated by the Personal Data Regulation and its regulations. Below are some of the most important rights:

RIGHT TO ACCESS PERSONAL DATA

Anyone who requests it has the right to know what processing of personal data PA undertakes, as well as basic information about these treatments. This information is provided in PA's personal data policy.

If you are registered in PA's systems, you have the right to know what information has been registered about you and what security measures are available at the treatment, if such insight does not impair security. Access may therefore be restricted for reasons of privacy of other persons, for trade secrets and intellectual property rights.

You may require the controller to elaborate on the information mentioned above, to the extent necessary to enable you to take care of your own interests.

CORRECTION AND DELETION OF INACCURATE PERSONAL INFORMATION

If PA processes personal information about you that is incorrect, incomplete or where there is no legal basis to process, you may require PA to correct or delete the defective information.

Deletion must be supplemented with registration of correct and complete information. If this is not possible and the document containing the deleted information for this reason gives a manifestly misleading picture, the entire document must be deleted.

You also have the right to object to our processing of personal data. You may object to our disclosure of data for marketing purposes. If your objection is justified, we will stop processing and delete your data unless we are required by law to keep it.

If you wish to exercise your right to data portability under the Personal Data Act, you will receive personal data from PA in a commonly used format.

You have the right to receive the personal data made available to us and those we have obtained about you from other players on the basis of the customer's consent.

PA must respond to requests for access or other rights under the Personal Data Regulation without undue delay and no later than 30 days from the date of the inquiry, unless special circumstances make it impossible to respond to the inquiry before this deadline. In this case, PA must provide a preliminary answer with information on the reason for the delay and a probable time when a response can be given.

If you believe that PA has not complied with your rights under the law, you have the right to appeal to the Data Inspectorate. The Data Inspectorate's contact info: www.datatilsynet.dkProtection of personal data

According to the Data Protection Act, your personal information must be kept secure and confidential. We store your personal information on computers as well as in physical directories with restricted access, which are located in controlled facilities. Our security measures are regularly monitored to determine if our user access is properly handled and still respect your rights.

However, we note that much of our communication with customers is via email, and emails containing any form of personal data that is not encrypted are not considered secure communications.

PA therefore assumes that our customers understand that confidential information exchanged via email without encryption may be at risk of confidential information coming to the knowledge of others.

Contact Information

All inquiries about personal data can be addressed to: hsa@pro-account.dk, Smedeland 30, 2600 Glostrup

If any differences between the English and Danish version of this policies, it is the Danish version that applies.