Privacy policy
How we process personal data when you write to us, apply for a job with us or visit lamaleap.com.
Danish version governs. This is a translation of our Danish privacy policy, provided for convenience. In case of any discrepancy, the Danish version applies.
This privacy policy describes how LamaLeap P/S processes personal data when you contact us, apply for a job with us or visit lamaleap.com.
Data controller
LamaLeap P/S
Company reg. (CVR) no. 45101614
Vågøvej 16
8700 Horsens, Denmark
Email: info@lamaleap.com
LamaLeap P/S is the data controller for the processing of personal data described in this privacy policy.
If you have questions about our processing of personal data, or wish to exercise your rights, you can contact us at info@lamaleap.com.
When we work in your systems
This privacy policy concerns the processing for which LamaLeap is itself the data controller, for example in connection with enquiries, recruitment and use of our website.
When LamaLeap, as part of a customer project, works with personal data in the customer's Dynamics 365 solution or other systems, LamaLeap will normally process the data as a data processor on behalf of the customer.
In those situations we process the data on the customer's instructions and in accordance with the data processing agreement entered into. The customer is the data controller and is responsible for informing its own employees, customers and other data subjects.
When you contact us
If you use the contact form on the website, we may receive the following information:
- name
- company
- email address
- telephone number, if you choose to provide it
- what the enquiry concerns
- the message you send
If you contact us directly by email or by other means, we process the information you give us yourself.
Purpose
We process the information in order to:
- answer your enquiry
- hold a dialogue about possible cooperation
- prepare proposals or other material in connection with possible cooperation
- administer an existing customer or partner relationship
Legal basis
The processing is generally based on our legitimate interest in being able to answer enquiries and conduct ordinary business dialogue, cf. Article 6(1)(f) of the General Data Protection Regulation.
Where the processing is necessary in order to enter into or perform an agreement directly with the data subject, the processing may also take place under Article 6(1)(b).
Where we are legally obliged to retain information, for example accounting records, the processing takes place under Article 6(1)(c).
We do not use information from ordinary enquiries for profiling or automated decision-making.
When you apply for a job with us
If you send us an application or otherwise contact us about working at LamaLeap, we process the information you send us yourself. This may include:
- name and contact details
- CV
- application
- information about education and professional experience
- other documents you choose to send
The purpose is to assess whether there is a basis for employment or another form of cooperation.
The processing takes place as part of the steps taken at your request prior to any agreement, cf. Article 6(1)(b), and our legitimate interest in conducting and documenting a recruitment process, cf. Article 6(1)(f).
We encourage you not to send your civil registration number, health information or other sensitive or confidential information, unless it is specifically necessary and agreed with us.
If we wish to keep your information in order to contact you about future job opportunities beyond our ordinary retention period, we obtain separate consent. Such consent may be withdrawn at any time.
When you visit lamaleap.com
When you visit the website, our technical systems record ordinary information necessary to deliver and secure the website. This may include:
- IP address
- date and time
- which page is visited
- browser and device type
- technical errors and security events
The purpose is operation, troubleshooting, security and prevention of misuse. The legal basis is our legitimate interest in operating and protecting the website, cf. Article 6(1)(f).
Cookies and statistics
LamaLeap does not use cookies or similar technologies for:
- advertising
- marketing
- profiling
- tracking across websites
- visitor statistics requiring consent
If the website uses strictly necessary cookies or equivalent technologies, they are used solely to make the website, or a function requested by the user, work.
If LamaLeap later wishes to introduce statistics, marketing or other non-essential cookies, these will not be activated until the visitor has given the necessary consent. The privacy and cookie information will be updated at the same time.
Where do we get the information from?
We generally receive the information directly from you.
Technical information about use of the website is generated automatically by the browser, the web server and the website's security and operating systems.
In connection with existing or possible business cooperation, we may also receive ordinary business contact details from the company the data subject works for.
How long do we keep information?
We do not keep personal data for longer than necessary for the purpose for which it was collected. As a rule we apply the following periods:
Enquiries
Enquiries that do not develop into a customer or partner relationship are normally deleted no later than six months after the most recent contact.
Prospective customers and partners
If an enquiry develops into a genuine dialogue about possible cooperation, the information may be kept while the dialogue is active. After a longer period of inactivity, the information is generally deleted or reassessed no later than after 24 months.
Customers and partners
Information forming part of an active customer relationship or cooperation is kept for as long as the cooperation lasts, and thereafter for as long as it is necessary for documentation, contractual matters or possible legal claims.
Accounting records covered by the Danish Bookkeeping Act are kept for five years from the end of the financial year to which the material relates.
Support and project enquiries
Enquiries concerning support, projects or specific deliveries may be kept together with the relevant customer or project documentation for as long as this is necessary in order to document the delivery and the cooperation.
Job applications
Information from applicants who are not hired is generally deleted no later than six months after the end of the recruitment process.
If the applicant has given separate consent for the information to be kept with a view to future positions, we keep it for the period stated in the consent.
Technical log files from lamaleap.com
Ordinary web server and security logs are kept only for as long as they are necessary for operation and security, and generally no longer than 90 days.
If a specific log entry forms part of the investigation of a security event or possible misuse, it may be kept longer, for as long as this is necessary for that specific matter.
Other technical and security logs processed in connection with customer projects or our other systems may have longer retention periods. These are handled in accordance with the relevant agreement, our internal deletion policy and, where LamaLeap is a data processor, the customer's instructions.
Backups
Information deleted from our active systems may remain in backups for a limited period. Backups are used solely to restore systems and are deleted or overwritten in line with the ordinary backup cycle.
Security
We use appropriate technical and organisational security measures to protect personal data against loss, misuse, alteration and unauthorised access.
The website uses HTTPS, so communication between the browser and the website is encrypted in transit.
Access to enquiries received and other personal data is limited to those persons who have a work-related need for the information.
Who do we share information with?
We may use external suppliers for, among other things:
- hosting and operation of the website
- file and document handling
- backup
- IT operations and security
When suppliers process personal data on our behalf, they act as data processors and may only process the data on our instructions and in accordance with a data processing agreement.
We may also disclose information to, for example, our auditor, lawyer, public authorities or other advisers where necessary, or where we are legally obliged to do so.
We do not sell personal data, and we do not disclose information to others for their own marketing purposes.
Transfers to countries outside the EU/EEA
As far as possible, we seek to use solutions where personal data is processed within the EU/EEA.
However, some IT suppliers or their sub-processors may in certain cases process or have access to information from countries outside the EU/EEA.
If personal data is transferred to a country outside the EU/EEA, we ensure that a valid transfer basis exists under the data protection rules. This may, for example, be:
- a decision by the European Commission on an adequate level of protection
- the European Commission's standard contractual clauses
- other valid safeguards under the General Data Protection Regulation
Where relevant, supplementary security measures are applied.
You can contact us at info@lamaleap.com if you would like further information about the transfer basis and relevant safeguards.
Your rights
Under the data protection rules you have, depending on the circumstances, a number of rights. Among other things, you may have the right to:
- access the personal data we process about you
- have incorrect information corrected
- have information erased
- have the processing restricted
- object to processing carried out on the basis of legitimate interest
- data portability where the conditions for this are met
- withdraw a consent
A withdrawn consent does not affect the lawfulness of processing already carried out before the withdrawal.
The rights are not absolute, and there may be situations where we cannot or are not required by law to comply with a request in full.
If you wish to exercise a right, you can contact us at info@lamaleap.com.
We answer the request without undue delay and generally no later than one month after receipt. If the request is particularly complex, or we receive several requests from the same person, the deadline may under the rules be extended by up to a further two months. In that case we will inform you of the extension and the reason for it before the end of the first month.
Complaints to the Danish Data Protection Agency
If you are dissatisfied with our processing of your personal data, you are welcome to contact us first.
You also have the right to complain to:
Datatilsynet (the Danish Data Protection Agency)
Carl Jacobsens Vej 35
2500 Valby, Denmark
Email: dt@datatilsynet.dk
Information about how to complain can be found at datatilsynet.dk.
Changes
We update the privacy policy when our processing of personal data or our technical solutions change. The version in force at any given time can be found at lamaleap.com.