GDPR Compliance Policy
Last Updated: 2024-08-05
At DH Consulting, we are fully committed to protecting your personal data and ensuring that your privacy is safeguarded in compliance with the General Data Protection Regulation (GDPR). This policy outlines how we collect, use, and manage your personal data, as well as the rights you have under the GDPR.
1. Data Collection and Processing
We collect and process personal data that is necessary for the purposes outlined in this policy. The types of personal data we may collect include, but are not limited to, your name, email address, phone number, and payment details. We process personal data based on one or more of the following legal grounds:
Consent: Where you have provided clear consent for us to process your personal data for specific purposes.
Contractual Necessity: Where processing is necessary for the performance of a contract with you, or to take steps at your request prior to entering into a contract.
Legal Obligation: Where processing is necessary to comply with a legal obligation to which we are subject.
Legitimate Interests: Where processing is necessary for the purposes of legitimate interests pursued by DH Consulting, except where such interests are overridden by your rights and freedoms.
2. Your Rights Under GDPR
As a data subject under GDPR, you have the following rights regarding your personal data:
Right to Access: You have the right to request access to the personal data we hold about you and obtain information about how it is processed.
Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data.
Right to Erasure (Right to be Forgotten): You have the right to request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected or if you withdraw your consent.
Right to Restrict Processing: You have the right to request the restriction of processing of your personal data under certain conditions.
Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to have it transmitted to another controller.
Right to Object: You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent: If processing is based on your consent, you have the right to withdraw your consent at any time.
To exercise any of these rights, please contact us at [Contact Information].
3. Data Security
We take the security of your personal data seriously. DH Consulting has implemented appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. However, please be aware that no method of transmission over the internet, or method of electronic storage, is 100% secure, and we cannot guarantee absolute security.
4. Data Retention
We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. The specific retention period will vary depending on the type of data and the purposes of processing.
5. No Third-Party Sharing
At DH Consulting, we do not share your personal data with any third parties. Your data is processed exclusively by us, and we ensure that it is used solely for the purposes outlined in this policy.
6. No Data Transfers Outside the EU
We do not transfer your personal data outside the European Union (EU). All data processing activities are conducted within the EU, in compliance with GDPR, to ensure the highest level of data protection.
7. Cookies and Tracking Technologies
We use cookies and similar tracking technologies on our website to enhance your user experience and collect information about your usage patterns. You can control the use of cookies through your browser settings. Please refer to our Cookies Policy for more detailed information.
8. Reporting Data Breaches
In the event of a data breach that poses a risk to the rights and freedoms of individuals, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. Affected individuals will also be informed without undue delay if the breach is likely to result in a high risk to their rights and freedoms.
9. Changes to This Policy
We may update this GDPR Compliance Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.
10. Contact Us
If you have any questions or concerns about this GDPR Compliance Policy or your rights under GDPR, please contact us at:
DH Consulting
e-Mail: info@dh-consulting.se
Tel: +46 762 35 3284