|
Who is it?
|
Categories of personal data
|
Purposes of the processing
|
Legal basis
|
Storage times
|
|
Customers and their employees
|
First and last name, gender, address, phone number, e-mail address, job title, and place of work.
|
To carry out ordinary customer relationship i.e.: administration of payments, general communication, management of day-to-day operations in accordance with legitimate and fair business practice (incl. planning, execution. and management of the cooperation; statistics, analyses).
|
Performance of a contract (Article 6(1)(b) of the GDPR).
|
10 years after the last purchase of our products or services.
|
|
To provide general customer service and support (including follow-up surveys).
|
Legitimate interest in ensuring customer satisfaction and improving our products and services (Article 6(1)(f) GDPR).
|
|
To gain customer insights and knowledge about how our products and services are used (e.g. by sending satisfaction surveys or market research).
|
|
To prevent fraud.
|
Legitimate interests to protect the interests of the company (Article 6(1)(f) of the GDPR).
|
|
To establish, defend or assert legal claims.
|
|
Prospective Customers and their employees
|
First and last name, gender, address, telephone number, e-mail address, title and place of work.
|
To create business leads.
|
Legitimate interest to promote ROCKWOOL and sell our products and services (Article 6(1)(f) GDPR).
|
5 years from obtained or your last interaction.
|
|
For statistical purposes.
|
Legitimate interest in measuring the effectiveness of our activities (Article 6(1)(f) of the GDPR).
|
|
To pursue business leads.
|
Take steps before concluding a contract (Article 6(1)(b) of the GDPR).
|
|
Suppliers and their employees
|
First and last name, company phone number, e-mail address, title and workplace
|
To carry out ordinary supplier relationship, i.e. administration of payments, general communication, management of day-to-day operations in accordance with legitimate and fair business practice (incl. planning, execution, and management of the cooperation, performing credit ratings, as well as carry out statistics, and analyses).
|
Performance of a contract (Article 6(1)(b) of the GDPR) - if you are self-employed, legitimate interest in performing the contract concluded with your employer (Article 6(1)(f) of the GDPR).
|
5 years from the end of the financial year to which the information relates, if the information is considered to be accounting material.
5 years from obtained for non-accounting material if there was no activity with the supplier.
|
|
To source and locate suppliers.
|
Legitimate interest in meeting business needs and conducting regular business activities (Article 6(1)(f) GDPR).
|
|
Visitors to physical locations
|
First and last name, telephone number, e-mail address, place of work, license plate number, if applicable, date and time of your visit.
|
To ensure the security of our physical locations and to prevent and solve crimes in our physical locations.
|
Legitimate interest in ensuring the security of the premises and protecting employees, visitors and property (Article 6(1)(f) GDPR).
|
30 days from the registration
|
|
CCTV recordings (photos and videos) of your activity at our physical locations.
|
Legitimate interest in ensuring the security of premises/physical places and, if necessary, protecting ROCKWOOL's interests in criminal offence cases (Article 6(1)(f) GDPR) and Section 8(3) of the Danish Data Protection Act.
|
30 days from the date of the visit or as long as necessary in an ongoing case.
|
|
Receiver of e-mail and/or SMS - direct marketing.
|
First and last name, gender (salutation), job title, place of work, e-mail address and/or phone number.
|
To distribute marketing communications based on the information collected and consent given.
|
Legitimate interest in providing interested parties with direct marketing consent based on valid e-communication consent (Article 6 (1) (f) GDPR).
|
Until the marketing consent has been withdrawn. A copy of the marketing consent will be stored 2 years after the withdrawal for evidentiary purposes.
|
|
Users of contact forms
|
First and last name, email address, phone number, what your inquiry is about, date of your inquiry.
|
To communicate with you to market, promote and sell ROCKWOOL products and services and to provide support.
|
If your request concerns the (potential) conclusion of a contract, the legal basis will be to take steps necessary for the conclusion of a contract or the performance of an existing contract (Article 6(1)(b) GDPR).
If your request does not concern a contract, the legal basis will be our legitimate interest to handle your request, communicate with you, market, promote and develop our products and services (Article 6(1)(f) GDPR).
|
2 years after receipt or from your last interaction if your personal data has not been used in connection with a purchase of our products or services.
|
|
Account users
|
First and last name, email address, username, digital footprints, password and/or your profile activity.
|
To deliver our services on our websites or in our apps to you.
|
Performance of a contract for the provision of electronic services (Article 6(1)(b) of the GDPR).
|
Until closing of the account.
|
|
To manage created user accounts; for statistical and analytical purposes.
|
Legitimate interest to carry out statistics and analysis in order to improve the user experience (Article 6(1)(f) GDPR).
|
Until closing of the account.
|
|
Visitors of social media profiles
|
Information available on your profile, including your name, gender, civil status, workplace, interests, image, and your city; whether you “like” or have applied other reactions to our profile; comments you leave on our posts; content your shared with ROCKWOOL with intention of interacting; that you have visited our profile; IP address.
|
To improve our products and services, including our social media profiles and pages;
for statistical and analytical purposes; to
communicate with you if you engage with our content (comments, reviews, messages); to re-share content shared with us.
* platform providers may process your personal data for their own purposes – please keep in mind this is outside of our control
|
Legitimate interests in being able to communicate with and direct marketing communication to you on our social media profiles, as well as our legitimate interest in improving our products and services (Article 6 (1) (f) GDPR).
|
Retention periods are set by social media platform providers and can be found in their privacy policies:
Meta (Instagram, Facebook)
Google (YouTube)
LinkedIn
X (formerly Twitter)
|