When we process personal data on data subjects, either for ourselves or on behalf of others, the data subjects have a number of rights in accordance with the Act on Processing of Personal Data. We have therefore drawn up this policy to tell you about your rights if we process personal data on you.

You can send a request concerning one of your rights to persondata@newsec.dk. When sending a request, place state your full name and relationship to Newsec Property Asset Management.

Once we have received your request, we will check whether we can identify you, and whether the conditions for the right are fulfilled. If so, we or the Data Controller (if we are not the Data Controller) will ensure that your rights are fulfilled.

You can in principle exercise your legal rights without restriction and free of charge. But if you ask for extra copies of your personal data, we can charge a fee. We can also charge a fee for providing details or implementing/rejecting a request that is openly groundless or exaggerated. Exercising your legal rights cannot infringe the rights of others, and we can therefore refuse to fulfil your rights in whole or full if applicable.

The right to withdraw consent 

You have the right to withdraw your consent if our processing of your personal data is based on your consent. In such instances, we will delete your personal data if there are no other legal grounds for processing. See also 'Right to deletion'. Withdrawing your consent will not affect the legality of the processing we have already performed with your consent. 

Right of access

You have the right to be told which personal data we process on you, the purpose of processing, recipients or categories of recipients the personal data is or will be disclosed to, how long we store personal data, or if this is not possible, the criteria we apply to determining the period we gathered personal data from if not gathered from you, details on automatic decision-making if we use it, and details on transfer for processing outside the EU or EEA and on the necessary guarantees for such transfer.

Right to correct

You have the right to have incorrect personal data corrected or supplemented by us. In such instances, you must contact us to tell us what is incorrect and how to correct it.

Right to deletion

You have the right to demand that your personal data we hold are deleted if no longer needed to fulfil the purpose for which they were gathered; if our processing of your personal data is based on your consent and you withdraw that consent and there are no other legal grounds for the processing; if you make a justified objection to processing in the interests of society or other groups; if processing is related to direct marketing; if processing is illegal or if deletion is required by Danish law. However, you are not entitled to demand deletion of personal data we hold if processing such data is necessary to fulfil a contract to which you are party, to exercise the right to freedom of expression, to comply with a legal obligation we are subject to in accordance with Danish law, or to serve, apply or defend a legal claim.

Right to restriction of processing

You have the right to have our processing of your personal data restricted if you contest the correctness of that data, until we have determined whether it is correct; if the processing is illegal, but you want personal data use to be restricted instead of it being deleted; if we no longer have use for the data for processing, but the data are necessary to serve, apply or defend a legal claim, or if you have objected to processing in the interests of society or others until it is established whether the relevant interests take precedence over your own. In the event of a restriction on processing of personal data, we can only process your personal data (apart from storage) with your consent or with regard to serving, applying or defending a legal claim, or to protect another physical or legal data subject, or with regard to important social interests.

Dansk

Right to be informed

You have the right to be informed of all recipients to whom we have disclosed or shared your personal data, and that such recipients are informed of a correction, deletion or restriction of your personal data, unless impossible or disproportionately difficult to do.

Right to data portability

You have the right to receive the personal data on yourself you have given us in a structured, commonly used and machine-readable format, and the right transmit such data to another Data Controller when processing is based on consent or a contract, and is performed automatically. If it is technically possible, you also have the right to demand that we transmit your personal data directly to the other Data Controller.

Right to object

You have the right to object to processing of your personal data in the interests of society or others, and such personal data can no longer be processed, unless we can prove weighty legitimate grounds for doing so that take precedence over your interests, rights and freedoms, or processing is necessary to serve, apply or defend a legal claim. You also have the right to object to processing of your personal data with regard to direct marketing, and personal data can no longer be processed thereafter for such purposes.

Right to not be the object of automatic processing

You have the right to not be the object of a ruling that is solely based on automatic processing, including profiling, which has legal effect or can in some other way seriously affect you. This shall not, however, apply if the ruling is necessary for entering into or fulfilment of a contract you are party to, if the ruling is based on your consent, or arises from Danish law.

Right to notification of a breach of security

You have the right to be notified of any breaches we have of our personal data security that will imply high risk to your rights and freedoms. The right will not, however, apply if we have used suitable technical and organisational preventive measures for personal data affected by the breach, e.g. measures that make your personal data illegible to anyone with no authorised access to them; if we have subsequently put in place measures that ensure that any high risk to your rights and constitutional rights is no longer actual, or if directly informing you will require disproportionate effort. In the event of the latter, a public announcement or similar will be made instead, whereby you will be informed in a similarly effective manner.
The right to complain to the Danish Data Protection Agency You have the right to complain to the Danish Data Protection Agency if you believe that our processing of your personal data infringes the Act on Processing of Personal Data.

Complaints should be sent to:

The Danish Data Protection Agency
Borgergade 28
1300 Copenhagen K.

We would appreciate receiving a copy of any complaint submitted to the Danish Data Protection Agency, to allow us to consider its ramifications.