The data we obtain and collect about you are stored within the European Economic Area (‘EEA’), but the data may also be transferred to and processed in a country outside the EEA. Any such transfer of your personal data will be done in accordance with GDPR.

SCIM only transfers personal data to third countries (outside the EEA) if certain conditions have been met. For example, a transfer can only take place if the EU Commission has decided that the third country in question ensures adequate safeguards or has provided the necessary guarantees, for example by concluding an agreement that comprises the EU standard contractual clauses with the recipient of the personal data.

We usually store your personal data for five years after the financial year in which your agreement has expired.  In some cases, there is no legal basis for storing data for five years and, in such case, we will not store your data for longer than necessary in relation to the purposes of the processing.  If you do not enter into an agreement with us, we will not store your data unless there is an express legal basis for this in other legislation.

According to the General Data Protection Regulation, you have a number of rights in relation to our processing of data about you.  You must contact us if you want to exercise your rights.

Your rights are:

Right of access (right to see data). You have a right of access to the data that we process about you as well as to a number of other data.
Right to rectification (correction). You have the right to have inaccurate data about you rectified.
Right to erasure. In special cases, you have the right to have data about you erased before the time at which our ordinary general erasure occurs.
Right to restriction of processing. In certain cases, you have the right to have the processing of your personal data restricted. If you have the right to have the processing restricted, we may in future only process such data – with the exception of storage – with your consent, or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest.
Right to object. In certain cases, you have the right to object to our otherwise lawful processing of your personal data. You may also object to the processing of your data for direct marketing purposes.
Right not to be subject to decisions based on automated processing. SCI does not use automated decisions.
Right to data portability (transmission of data). In certain cases, you have the right to receive your personal data in a structured, commonly used and machine-readable format and to have such personal data transmitted from one data controller to another without hindrance.

You can read more about your rights in the Danish Data Protection Agency’s guidance on the rights of data subjects, which you can find on www.datatilsynet.dk.