This privacy policy explains how CO-industri processes your personal data, the categories of personal data covered by the processing, and the purposes and legal bases for the processing. It also describes the circumstances in which your data is disclosed to a third party and the rights that you may exercise as a data subject.

1. DATA CONTROLLER
The Central Organisation of Industrial Employees in Denmark is the data controller for the processing of your personal data.

2. CONTACT DETAILS
Centralorganisationen af industriansatte i Danmark
CVR no.: 51892119
Molestien 7, 3rd floor
2450 Copenhagen SV
Denmark
Email: co@co-industri.dk
Telephone: +45 33 63 80 00

If you wish to contact us regarding our processing of your personal data, you may also contact:
Trine Rathleff Jensen
Data Protection Officer (DPO)
Telephone: +45 7174 7336 (DPO number for data subjects only: 2523 2318)
Email: trj@gapsolutions.dk

3. PROCESSING
Courses, meetings and conferences at CO-industri
Purpose: Course administration. To support and administer the FIU system, it is necessary to transfer personal data about you when you participate in a course administered by FIU.
Categories of personal data: In addition to ordinary personal data such as name, postal address, employer, workplace, education, job title and elected union positions, sensitive personal data is also processed, including information about trade union membership.
To ensure unambiguous identification in the system, your Danish civil registration number (CPR number) is also processed.
Sources: CO-industri receives personal data directly from you when you use the registration page for FIU courses and mitfiu, or from your trade union.
Legal basis: The data is processed pursuant to Article 9(2)(b).
Recipients: CO-industri uses external system suppliers and business partners that provide systems, support and operations and, by virtue of these services, will have access to personal data. CO-industri enters into data processing agreements with these parties.
Retention: We retain the data for as long as necessary for the above-mentioned purposes, after which it will be deleted.
Data relating to accounting records is deleted after five years plus the current year in accordance with the Danish Bookkeeping Act.
Industrial relations case handling
Purpose: The trade union of which you are a member may ask CO-industri to provide assistance in connection with any industrial relations cases in which you may be involved.
Categories of personal data: In connection with the conduct of industrial relations cases, both ordinary and sensitive personal data will be processed, including, but not limited to, name, employer, CPR number, pay details, employment documents, photographs and health data.
Sources: CO-industri receives personal data from CO-industri’s member unions, the Confederation of Danish Industry (Dansk Industri), the Danish Trade Union Confederation (FH), and from you.
Legal basis: The personal data referred to above is disclosed by your trade union, Dansk Industri, FH and you pursuant to Article 9(2)(b) of the General Data Protection Regulation and the legal claims provision in Article 9(2)(f). CO-industri also processes the data on these legal bases and pursuant to Article 9(2)(d) of the General Data Protection Regulation.
Recipients: Data will be disclosed to relevant parties in the case, potentially including the Labour Court, parties and arbitrators in industrial arbitration proceedings, the Dismissals Board, the Equal Pay Board and pension providers.
Retention: As a case may be reopened, your data may be retained on the basis of a specific assessment and pursuant to Chapter III of the Danish Limitation Act.
Use of AI
We use AI for text analysis and summarisation in connection with our industrial relations work. We have strict guidelines and quality controls governing the use of AI. We never leave decisions to AI. We never use your data to further train AI tools.
When we use AI in our case-handling process in this way, we ensure that all information is processed internally and therefore pursuant to Article 9(2)(d) of the General Data Protection Regulation.
TR-web
Purpose: Payment of remuneration to union representatives and invitations to CO-industri activities.
Categories of personal data: In connection with registering your enrolment in TR-web, both ordinary and sensitive personal data will be processed, including, but not limited to, name, postal address, telephone number, email address, employer, CPR number and trade union membership.
Sources: CO-industri receives personal data from CO-industri’s member unions, Dansk Industri and you.
Legal basis: The personal data referred to above is disclosed by your trade union and you pursuant to Article 9(2)(b) and the legal claims provision in Article 9(2)(f). CO-industri also processes the data on these legal bases.
Recipients: The data will be disclosed to Dansk Industri and your trade union.
Retention: CO-industri retains the data for as long as necessary for the above-mentioned purposes.
Processing of cases in committees and boards
Purpose: CO-industri is represented on various occupational committees and boards by appointed or nominated members. These may include the Working Environment Appeals Board, the Employment Committee of the Danish Appeals Board and the Occupational Diseases Committee.
Categories of personal data: In connection with the processing of these cases, both ordinary and sensitive personal data will be processed, including, but not limited to, name, employer, CPR number, pay details, employment documents, photographs, health data and trade union membership.
Sources: CO-industri receives the personal data from public authorities, its member unions and you.
Legal basis: Committee members may be appointed by the Minister for Employment following nomination by CO-industri. In other cases, appointed or nominated participants derive their authority from, among other legislation, the Danish Working Environment Act.
Recipients: Cases will be discussed at committee and board meetings.
Retention: Information from meetings at which individual cases are considered is retained afterwards because the cases may become the subject of an appeal. The data will be retained on the basis of a specific assessment and pursuant to the limitation periods in Chapter III of the Danish Limitation Act.
Use of AI
We use AI for text analysis and summarisation in connection with our industrial relations work. We have strict guidelines and quality controls governing the use of AI. We never leave decisions to AI. We never use your data to further train AI tools.
When we use AI in our case-handling process in this way, we ensure that all information is processed internally and therefore pursuant to Article 9(2)(d) and Article 9(2)(f) of the General Data Protection Regulation.
Newsletters
Purpose: Publication of newsletters and press releases.
When you subscribe to our newsletter, it is necessary to process your personal data. This includes ordinary personal data under Article 6 of the General Data Protection Regulation, including your name, email address and IP address. The purpose is to send you our newsletter and to collect information about your use of newsletters in order to optimise them in the future.
When we process your personal data in order to send you our newsletter, the processing is based on your consent pursuant to Article 6(1)(a) of the General Data Protection Regulation, which you provided when subscribing to our newsletter.
When we collect information about your use of newsletters in order to optimise them, this is also based on your separate consent pursuant to Article 6(1)(a). If you have given such consent, we may collect information about when you opened the newsletter, where you clicked in it, the type of device from which you opened it, and the region in which you are located.
When you consent to newsletters as described above, your data is disclosed to the supplier responsible for distributing the newsletters, with whom we have entered into a data processing agreement.
You may withdraw your consent and unsubscribe from the newsletter at any time. You can do so by clicking the “Unsubscribe newsletter” link at the bottom of your most recent newsletter or by contacting us using the contact details at the top of this page and informing us that you wish to unsubscribe.
Website
When you visit our website, www.co-industri.dk, personal data about you is collected. This includes, among other things:
•    IP address
•    Network location
•    Information about the device you use
•    Search terms you use on the website
•    Information about the browser you use
We collect personal data about website visitors for the following purposes:
•    To target advertisements that you see on our website
•    Optimal administration and operation of our website
We collect the data on the basis of the consent that you provide via the cookie banner, pursuant to Article 6(1)(a) of the General Data Protection Regulation.
Data collected as part of the administration and operation of the website, where this is necessary for use of the website, is processed on the basis of our legitimate interests pursuant to Article 6(1)(f) of the General Data Protection Regulation.
We retain the data for the period permitted by law and delete it when it is no longer necessary. The retention period depends on the nature of the data and the reasons for retaining it. Your consent is voluntary, and you may withdraw it at any time by contacting us. Please use the contact details above if you require further information.
CO-industri has a restricted members’ area to which employees of CO-industri’s member unions and elected union representatives have special access. The area contains no personal data but provides exclusive information and tools. CO-industri uses cookies to monitor website traffic in order to improve the user experience. Users are informed about the use of cookies when they visit the website and may restrict their use.

Categories of personal data: Access to the restricted section of CO-industri’s website takes place using NemID. A CPR number, password and code from a key card/key app are therefore provided when logging in. Cookies record pages visited, browser type, time of visit and IP address.
Sources: CO-industri receives personal data from its member unions.
Legal basis: CO-industri creates and processes data about users of the restricted section of its website only with the user’s consent when the user logs in.
Recipients: CO-industri’s website is hosted by an external supplier with whom CO-industri enters into a data processing agreement.
Retention: Your data is retained until you withdraw your consent. It will subsequently be anonymised, and the anonymised data will be used for statistical purposes.
On the website https://co-industri.leadfamly.com/, CO-industri runs quizzes for users of the site. The purpose of processing your personal data, including your IP address, is to target information to you. The processing is based on your consent pursuant to Article 6(1)(a) of the General Data Protection Regulation, which you have provided via the cookie banner on our website. Your personal data is deleted when you withdraw your consent or no later than five days after you participate in the quiz. You are free to withdraw your consent and may do so using the contact details at the top of this page. The quiz module collects user statistics, but only in anonymised form that cannot identify individual users. CO-industri has entered into a data processing agreement with the provider, Playable ApS.
Cookies: We use cookies to personalise our content and advertisements, provide social media features and analyse our traffic. We also share information about your use of our website with our social media, advertising and analytics partners. Our partners may combine this data with other information that you have provided to them or that they have collected from your use of their services. You consent to our cookies if you continue to use our website.
Cookies are small text files that websites can use to make a user’s experience more efficient.
The law permits us to store cookies on your device if they are strictly necessary to provide a service that you have expressly requested. For all other types of cookies, we must obtain your consent.
This website uses different types of cookies. Some cookies are placed by third-party services displayed on our pages.
You may change or withdraw your consent at any time via the Cookie Declaration on our website.
Learn more about who we are, how to contact us and how we process personal data in our Privacy Policy.

Ordering printed materials
Purpose: CO-industri offers the option of ordering printed materials via the website co-industri.dk.
Categories of personal data: When printed materials are ordered, the name, email address, postal address, telephone number and trade union membership of the person placing the order are processed.
Sources: CO-industri receives the personal data from the person placing the order.
Legal basis: CO-industri processes the data on the basis of consent.
Recipients: The data is stored in CO-industri’s brochure module, which is hosted by an external supplier with whom CO-industri enters into a data processing agreement. CO-industri then processes the data in order to dispatch the printed materials ordered.
Retention: The data is deleted no later than one month after the printed materials ordered have been dispatched.
Job applications
Purpose: Recruitment of employees to CO-industri, including assessment of job applicants.
Categories of personal data: Name, date of birth, sex, postal address, email address, telephone number, application, photograph, CV, transcripts of grades, diplomas and any references and recommendations.
Sources: CO-industri processes only the data that you provide to us or consent to us obtaining.
Legal basis: CO-industri processes this data on the basis of the consent obtained when you submit your application.
Recipients: Your data will not be disclosed to third parties and will be processed only internally within CO-industri.
Retention: If you are not offered a position, your application and any attachments will be deleted when the recruitment process for the position in question has concluded.

4. RIGHTS OF DATA SUBJECTS

The General Data Protection Regulation gives you the following rights:
Right of access: You may ask us for access to the data we hold about you and receive a copy of that data.
Right to rectification: You have the right to have inaccurate data corrected.
Right to erasure: You have the right to have data that we process about you deleted. Exceptions may apply, including where we are legally required to retain the data or where it is needed to establish or exercise legal claims.
Right to restriction of processing: You have the right to restrict the processing of your data if you consider the data to be inaccurate or if it is processed unlawfully. You also have a right to restriction where the data must be retained in order to establish or exercise legal claims, or where you have objected to processing.
Right to object: You may object to processing where your data is used for direct marketing.
Right to data portability: You may receive the data that you have provided in a structured, commonly used and machine-readable format in order to transfer it to another entity.
You may also withdraw your consent at any time where the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a).
You also have the right to lodge a complaint with the Danish Data Protection Agency.
Please note that conditions and exceptions apply to the exercise of the rights described above. Your request will therefore always be assessed on a case-by-case basis. For further information, see Chapter III of the General Data Protection Regulation.

5. SECURITY
Through an internal security policy, guidelines for the processing of personal data and ongoing attention, CO-industri has ensured that your personal data is processed securely and confidentially. We have also implemented the necessary technical and organisational measures intended to protect against unauthorised access and destruction.

6. COMPLAINTS
You may lodge a complaint with us or contact our Data Protection Officer if you are dissatisfied with our processing. You may also lodge a complaint with the Danish Data Protection Agency, Borgergade 28, 5th floor, 1300 Copenhagen K, Denmark – www.datatilsynet.dk.

7. LEGISLATION
•    General Data Protection Regulation (GDPR)
•    Danish Data Protection Act