Processing of your personal data in BEC

It is important for BEC to process your personal data properly.

Last updated May 1, 2024.

Below you can read more about how BEC processes your personal data when you contact us or sign up for a newsletter/service announcement/user panel and what rights you have when we process your personal data:

how we collect your personal data,
for what purposes we use them,
how and for how long we store your personal data,
how you make use of your rights, and
how to contact us if you have questions about how we process your personal data.

1. BEC as data processor for your bank

BEC is an IT company that offers IT solutions to banks and other customers in the financial sector in Denmark. In this connection, we are data processors, and our customers are data controllers. As a data processor, we only process your personal data on behalf of the data controller for their purposes and according to a data processor agreement.

You may have seen that BEC subscribes to your CPR number or similar and would therefore like to know what personal data we process about you and for what purposes. As we only process this information on behalf of the data controller, you must contact the bank for which we process information.

Find a list of most banks/data controllers on whose behalf we process information here.

2. BEC as data controller – how to contact u

BEC is responsible for the personal data we process about you that are described in this document:

BEC Financial Technologies a.m.b.a.
Havsteensvej 4
4000 Roskilde
Denmark
CVR no. DK13088810
(+45) 46 38 24 00

Contact information for data protection officer (“DPO”)

If you have any questions about BEC’s processing of your personal data, you are always welcome to contact our DPO

BEC Financial Technologies a.m.b.a.
Att. data protection officer
Havsteensvej 4
4000 Roskilde
Denmark
dpo@bec.dk

3. Why do we process your personal data?

We process your personal data for the following purposes:

Cookies and recruitment

You can read about the processing of website visitors’ cookies and the processing of personal data in connection with recruitment on the sites below.

You can read more about our processing of cookies at bec.dk here.
You can read more about our processing of your personal data if you send a job application or a CV to BEC, at the bottom of the application form for the individual position.
You can read more about our processing of personal data when you sign up with our job agent here.

Contact with BEC

If you are a business partner, customer, or other third party we are in dialogue with:

Purpose: To communicate with you and answer your inquiries
Processing authority: GDPR art.6(1)(f) “legitimate interest”
Deletion period: When you communicate with us, we generally store your personal data for as long as is necessary to be able to serve you in the best possible way.
Origin of personal data: Directly from you or your employer.

You can read more about our various communication channels here.

Newsletters

If you, as an employee of a BEC customer or by other means, are signed up to receive our service announcements/newsletters:

Purpose: So that we can fulfill our obligation in relation to the customer relationship, between you as an employee of a customer and us as a supplier by sending you service messages
Processing authority: GDPR art.6(1)(f) “legitimate interest”
Deletion: When you receive written material from us, we generally store your personal data for as long as you wish to receive the material.
Origin of personal data: Your employer or directly from you.

You can always unsubscribe from receiving service messages/newsletters by following the instructions at the bottom of the service message/newsletter.

BEC User Panel

If you have registrered for BEC User Panel, BEC processes your personal data in connection with the conducting system tests.

Purpose: To invite you to tests in BEC User Panel.
Legal basis: GDPR art.6(1)(f) “legitimate interest”
Deletion period: We generally keep the information you provide for two years or until you request deletion. A reminder will be sent to you after one year.
Origin of personal data: In connection with your registration for the user panel.

You can always opt out of receiving invitations or participating in BEC User Panel at any time. There is an opt-out email address in the emails you receive.

4. Categories of personal data we process about you

We primarily process contact information about you as described below.

Contact information

Name
Email
Telephone number
Job title
Content of the inquiry

Sensitive personal data

We ask that you leave out sensitive personal data when contacting us. This concerns the following types of information:

health information
racial or ethnic origin
political, religious, or philosophical beliefs
trade union affiliation
genetic and biometric data
sexual matters or sexual orientation

5. Recipients of your personal data

We disclose your personal data to the following recipients, when needed or if relevant:

Providers of services: In connection with the processing of your personal data, we use various providers.
Authorities and other relevant third parties: For example, in connection with authority requests, or if it is necessary to establish or defend a legal claim.

We enter into data processing agreements with all suppliers of services that process personal data on our behalf. The data processor agreements continue the level of security that BEC has defined as sufficient for the processing of your personal data.

Transfer to recipients in third countries, including international organizations

In certain situations, BEC may transfer your personal data to countries outside the EU/EEA on the following transfer basis:

Secure third countries: Countries assessed by the EU as having an adequate level of security for the processing of personal data
Unsecure third countries: Countries that are not assessed to have a sufficient level of security for the processing of personal data. Here, BEC will use the European Commission’s standard contractual clauses to ensure the necessary guarantees.

6. Storage of your personal data

When do we delete your personal data?

Your personal data will be deleted or anonymized when we no longer need to process it to fulfill one or more of the above purposes, or if we are obliged to do so according to legislation or a legal requirement.

Security

We do our utmost to ensure the confidentiality, quality, and integrity of your personal data. We have implemented appropriate technical and organizational security measures to ensure an adequate level of security.

7. Your rights

When BEC processes your personal data, as data controller, you have the following rights below. If BEC is not the data controller, please contact your financial institution as stated in section 1.

The right to see what information we process about you

You have the right to request access to the personal data that we process about you with certain exceptions stipulated by law.

The right to have your information corrected

You have the right to request that the personal data that we process about you be corrected.

The right to be forgotten

In special cases, you have the right to have information about you deleted before the time of our normal deletion.

The right to restriction of processing

In certain cases, you have the right to have the processing of your personal data restricted. If you have the right to have the processing restricted, we may in future only process the information – apart from storage – with your consent, or for legal claims to be established, asserted, defended, or to protect a person or important public interests.

The right to object

In certain cases, you have the right to object to our processing of your personal data.

The right to have your personal data provided

In certain cases, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to have this personal data transferred from one data controller to another without hindrance (data portability).

You can exercise your rights by contacting us as stated in section 2.

8. Complaints

You are also welcomed to contact our data protection advisor directly at dpo@bec.dk if you are dissatisfied with our processing of your personal data or have questions or suggestions for improvements to the processing in general.

You also have the right to complain to the local data protection authority if you are dissatisfied with the way we process your personal data:

Denmark:

The Danish Data Protection Agency
www.datatilsynet.dk
dt@datatilsynet.dk
(+45) 33 19 32 00

Poland:

Urząd Ochrony Danych Osobowych (Personal Data Protection Office)
uodo.gov.pl
mkancelaria@uodo.gov.pl
(+48) 606-950-000

9. Changes to this information text

We reserve the right to change this information text, for example due to changes in legislation, new/better technical solutions, or new/better services.

You will always have access to the latest updated version here on our website.