Rights of the Data Subject
When we are processing personal data on data subjects in connection with our services and legal counselling, the data subjects have a number of rights under Danish data protection law. Therefore, we have adopted this policy, informing you about your rights in case we are processing personal data about you.
In order to exercise one of your rights, you can send a request to firstname.lastname@example.org or to the relevant partner at Labora Legal. In connection with submitting such request, please inform us of your full name and your relation to Labora Legal.
After receipt of your request, we will investigate whether we can identify you and whether the preconditions for exercising the particular right are fulfilled. In the affirmative, we will ensure to comply with your request.
Basically, you are entitled to exercise your rights freely and free of charge. However, if you ask for additional copies of the information in question, we may charge a fee in this respect. For requests that are manifestly unfounded or exaggerated we may either charge a fee for supplying the information in question or take measures to meet the request or reject to meet the request.
Nor may the exercise of your rights infringe the rights of any third parties or the rights of freedom. Also, the information in question may be subject to a duty of confidentiality, in which case we may refuse to comply with your request in whole or in part.
Right to withdraw consent
In general, Labora Legal will not process your personal data on the basis of your consent, but on another legal basis. If you are asked to give your consent, you are entitled to withdraw such consent in the event that our processing of your personal data is based on your consent in this respect. In that case, we will erase your personal data, unless there is another legal basis for the processing, also see the section regarding “Right to erasure”. However, the withdrawal of consent will not affect the lawfulness of the processing that has already taken place on basis of your consent in this respect. Consent can be withdrawn by contacting email@example.com.
Right to access
You are entitled to receive information regarding the personal data we are processing about you, the purpose of the processing, the recipients or categories of recipients to whom the personal data are or will be disclosed, the duration of the storage of the personal data or, if possible, the criteria used for determining this duration, from which source we have obtained the personal data, if not from you, information on automated decisions if we apply such decisions, as well as information on transfer of data for processing in countries outside the EU and EEA, and about the necessary guarantees provided in connection with such transfer.
Right to rectification
You are entitled to have inaccurate personal data rectified or supplemented by us. In that case, please contact us and inform us about the inaccuracies and how they are to be rectified.
Right to erasure
You are entitled to require that we erase your personal data if the personal data in question are no longer necessary to fulfil the purpose for which they were collected, provided that our processing of your personal data is based on your consent and you withdraw such consent without there being any other legal basis for the processing; if you raise relevant and reasoned objections against a processing for reasons of public or other interests; if the processing takes place for the purpose of direct marketing; if unlawful processing is involved, or if erasure is required pursuant to Danish law. However, you are not entitled to require that we erase personal data if the processing of the personal data in question is necessary for the performance of a contract to which you are a party; for exercising the right to freedom of expression and information; for the compliance with a legal obligation imposed on us under Danish law; or for the establishment, exercise or defence of a legal claim.
Right to limitation of the processing
You are entitled to have our processing of your personal data limited, if
(i) you contest the accuracy of the personal data, until we have established whether the personal data are accurate or not; or
(ii) the processing is illegal, but instead of erasure you wish the use of the personal data to be limited;
(iii) we no longer need your personal data for processing, but the personal data are necessary for establishing, exercising or defending a legal claim; or
(iv) you have raised objections against a processing for reasons of public or other interests, until we have established whether the interests in question override your interests.
In connection with a limitation of the processing of personal data, we may only process personal data, except from the storage thereof, with your consent or for the purpose of the establishment, exercise or defence of legal claims or for the purpose of protecting another natural or legal person or for reasons of important public interests.
Right to information
You are entitled to be informed about all recipients to whom we have disclosed or with whom we have shared your personal data, and to require that the recipients in question are informed about any rectification, erasure or limitation of your personal data, unless this is impossible or disproportionably difficult.
Right to data portability
You are entitled to a structured, commonly used and machine-readable format to receive the personal data about you that you have provided to us, and you are entitled to transmit these data to another data controller, when the processing is based on consent or on a contract, and the processing is carried out by automated means. Where technically feasible, you are also entitled to require that we transmit personal data directly to another data controller.
Right to object
You are entitled to object to a processing of your personal data for reasons of public or other interests, after which the personal data may no longer be processed, unless we are able to prove that compelling legitimate reasons for the processing override your interests, rights and freedom rights, or the processing is necessary to establish, exercise or defend a legal claim. Furthermore, you are at any time entitled to raise objections against a processing of your personal data for the purpose of direct marketing, after which the personal data may no longer be processed for such purpose.
Right not to be subject to automatic processing
You have the right to object to being subject to a decision that is solely based on automatic processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. However, this does not apply if the decision is necessary for the conclusion or performance of a contract to which you are a party, if the decision is based on your consent or if the decision is based on Danish law.
Right to notification in the event of a security breach
You are entitled to be notified in the event of a breach of our personal data security, involving a high risk for your rights and freedom rights. However, this right does not apply if we have taken adequate technical and organisational safety precautions for the personal data affected by the breach, for instance measures that render your personal data unintelligible to any person not authorised to have access to such data; if we have implemented subsequent measures ensuring that the high risk for your rights and freedom rights most likely no longer exists; or if direct notification to you would involve a disproportionate effort. In the latter case, there must, however, be made a public notification instead or a similar measure be taken by which you are notified in a correspondingly efficient manner.
Right to complain about a processing of your personal data
You are entitled to file a complaint with the Danish Data Protection Agency if you think that our processing of your personal data violates the Danish data protection law. However, we hope that you will first contact us via firstname.lastname@example.org. Also, we would appreciate to receive a copy of your complaint if you decide to file a complaint with the Danish Data Protection Agency. In that case, your complaint can be submitted to:
1300 København K