Privacy Policy
1. Data controller
We are the data controller for the processing of the personal data we hold about our customers and business partners. You will find our contact details below.
Jalsa Indian Restaurant Aalborg ApS – CVR: 45979121
Ved Stranden 5, 9000 Aalborg
Jalsa Indian Restaurant Randers Ltd – CVR: 45056260
Storegade 13, 8900 Randers C
If you have any questions regarding the processing of your personal data, please contact us via
[email protected].
2. Treatment activities
2.1. Visits to the website
When you visit our website, we use cookies to ensure the website works properly; you can read more about this in our cookie policy.
2.2. Communication with potential customers
If you have any questions about our website or would like to find out more about our services, please contact us via:
Contact form
Email
Telephone
We will use this to process your personal data so that we can communicate with you, for example, to answer questions about our services. We only process the information that you provide to us in the course of our communication.
We will typically process the following standard information: name, email address, telephone number and address.
Our legal basis for processing this personal data is Article 6(1)(f) of the General Data Protection Regulation.
We will delete our correspondence with you once it is clear whether or not you wish to use our services.
Should there, in exceptional circumstances, be a need to retain your personal data for a longer period, this may be the case.
2.3. Customers
We need to communicate with our customers to ensure that the service is provided correctly. In doing so, we may process information such as names, addresses, services, special agreements, payment details and similar.
The legal basis for processing this personal data is Article 6(1)(b) of the General Data Protection Regulation.
Once the service has been provided and any outstanding matters have been resolved, we will delete the personal data immediately thereafter.
2.4. Newsletter
We have a newsletter which you can subscribe to if you wish – and you can unsubscribe at any time.
The purpose of the newsletter is to send subscribers emails containing new information from the company, which may relate to new content on the website or the promotion of our services.
We will only send you emails if you have given your active consent to do so. This requires, first of all, that you provide your email address, to which we will then send an email so that you can confirm your subscription. In this way, we ensure that you have actually signed up for the newsletter yourself, i.e. given your active consent.
Our legal basis for processing your personal data (i.e. your email address) in connection with the newsletter will be Article 6(1)(a) of the General Data Protection Regulation.
We will process your personal data for as long as you remain subscribed to the newsletter. If you unsubscribe from the newsletter, we will also stop sending it to you. If we have not sent you a newsletter for one year, your consent will lapse as a result of our inactivity.
If you unsubscribe from the newsletter, we will retain your previous consent for two years after it was last used, in accordance with the limitation period set out in section 11.3 of the Consumer Ombudsman’s spam guidelines.
2.5. Bookkeeping
We are required to retain all accounting documents in accordance with the Accounting Act. This means that we retain invoices and similar documents for accounting purposes. These may contain general personal data such as name, address and a description of the service provided.
Our legal basis for processing personal data for accounting purposes is Article 6(1) of the General Data Protection Regulation.
We retain this information for at least 5 years after the end of the current financial year.
2.6. Job applications
We are happy to receive job applications so that we can assess whether they match any recruitment needs within our company.
If you send us your job application, our legal basis for processing your personal data is Article 6(1)(f) of the General Data Protection Regulation.
If you have sent an unsolicited application, we will assess straight away whether your application is relevant, and then delete your details if there is no match.
If you have applied for an advertised vacancy, we will delete your application if you are not appointed, and as soon as the right candidate has been found for the role.
If you are involved in a recruitment process and/or are appointed to the post, we will provide you with specific information on how we process your personal data in this context.
3. Data processors
Few people can manage everything on their own, and the same applies to us. We therefore work with partners and use suppliers, some of whom may be data processors.
External suppliers may, for example, provide systems to help us organise our work, services, consultancy, IT hosting or marketing.
It is our responsibility to ensure that your personal data is processed properly. We therefore set high standards for our business partners, and they must guarantee that your personal data is protected.
We therefore enter into agreements in this regard with companies (data processors) that process personal data on our behalf, in order to enhance the security of your personal data.
4. Disclosure of personal data
We do not pass on your personal data to third parties.
5. Profiling and automated decisions
We do not carry out profiling or automated decision-making.
6. Transfers to third countries
As a general rule, we use data processors based in the EU/EEA, or who store data in the EU/EEA.
In some cases, this is not possible, and in such instances, data processors outside the EU/EEA may be used, provided they can ensure an adequate level of protection for your personal data.
7. Safety of treatment
We ensure the security of personal data processing by implementing appropriate technical and organisational measures.
We have carried out risk assessments of our processing of personal data and have subsequently implemented appropriate technical and organisational measures to enhance the security of that processing.
One of our key measures is to keep our staff up to date on the GDPR through ongoing awareness training, GDPR courses, and by reviewing our GDPR procedures with staff.
8. The rights of data subjects
Under the General Data Protection Regulation, you have a number of rights regarding our processing of your personal data.
If you wish to exercise your rights, please contact us so that we can assist you with this.
8.1. Right to access information (right of access)
You have the right to access the information we process about you, as well as a range of further information.
8.2. Right to rectification (correction)
You have the right to have any inaccurate information about yourself corrected.
8.3. Right to erasure
In certain circumstances, you have the right to have your personal data erased before our standard erasure schedule takes effect.
8.4. Right to restriction of processing
In certain circumstances, you have the right to have the processing of your personal data restricted. If you have the right to have processing restricted, we may only process the data in future – apart from storage – with your consent, or for the purpose of establishing, exercising or defending legal claims, or to protect an individual or vital public interests.
8.5. Right to object
In certain circumstances, you have the right to object to our otherwise lawful processing of your personal data. You may also object to the processing of your data for direct marketing purposes.
8.6. Right to data portability
In certain circumstances, you have the right to receive your personal data in a structured, commonly used and machine-readable format, and to have that personal data transferred from one data controller to another without hindrance.
You can read more about your rights in the Danish Data Protection Agency’s guide to data subjects’ rights, which you can find at www.datatilsynet.dk.
8.7. Withdrawal of consent
Where our processing of your personal data is based on your consent, you have the right to withdraw your consent.
9. Complaint to the Data Protection Authority
You have the right to lodge a complaint with the Danish Data Protection Agency if you are dissatisfied with the way we process your personal data. You can find the Danish Data Protection Agency’s contact details at www.datatilsynet.dk
