Last updated: 14 April 2023
Weld Technologies ApS, Weld, Frederiksholms Kanal 4, 1, 1220 Copenhagen, Denmark., Business reg. no.: 41978104 (”Weld”) is the data controller for the processing of your personal data. Below, Weld has provided an overview of the processing activities in which personal data are processed, including among others the purpose thereof and the legal basis.
2. Categories of personal data, purpose and legal basis
2.1. Website visitors
When you visit Weld's website, https://weld.app/, Weld will process personal data about you, for instance, cookies and your IP-address The purpose of using cookies is to improve your user experience on Weld's website, to provide functionality, to generate statistics and to remember your preferences.
The legal basis for the processing of your personal data in that regard is your consent, which you will be asked to give when you visit the website, cf. Art. 6(1)(a) of the GDPR.
In certain cases, the legal basis for the processing of your personal data is Weld's legitimate interests and that it is Weld's assessment that our legitimate interests override your interests or fundamental rights and freedoms, cf. Art. 6(1)(f) of the GDPR. The legitimate interests pursued are to provide you with a website that works optimally, a good website experience and marketing activities.
2.2. Contact person at a customer, vendor or another business partner
As a contact person at a customer, vendor or another business partner, Weld processes your personal data when you communicate with Weld, e.g., via emails in connection with Weld's existing contractual relation with the company you are employed with or in connection with the conclusion or termination of a contract. Weld processes ordinary personal data about you, including your name, email address, telephone number, position, etc.
The legal basis for such processing of your personal data is that the processing is necessary for the purposes of legitimate interests pursued by Weld and that it is Weld's assessment that our legitimate interests override your interests or fundamental rights and freedoms, cf. Art. 6(1)(f) of the GDPR. Weld's legitimate interests are fulfilment of our contractual obligations, maintaining and enhancing customer relationships, invoicing for the services your company provides to Weld and/or vice versa, communicating with you if you have any questions related to our services or vice versa, and for documentation purposes in the event you agree on matters relating to our services in writing via email.
In some cases, processing of personal data is necessary in order to comply with a legal obligation to which Weld is subject, for instance in relation to the obligation on the preservation of accounting records pursuant to the Danish Bookkeeping Act. In such case, the legal basis for the processing is Art. 6(1)(c) of the GDPR.
2.3. Inquiries via chat function and Help Center
If you submit an inquiry relating to Weld's services via Weld's chat function or Help Center, Weld will process personal data about you e.g., your IP-address, geographic location, possible reactions to our ads and the personal data you include in your inquiry, e.g., name, email address and telephone number.
The legal basis for the processing of personal data is Weld's legitimate interests and that it is Weld's assessment that our legitimate interests override your interests or fundamental rights and freedoms, cf. Art. 6(1)(f) of the GDPR. The legitimate interests pursued are to provide customer support by answering the inquiries and business development.
3. Recipients of your personal data
Certain recipients process personal data on behalf of Weld and may only process your personal data in accordance with documented instructions given by Weld and further terms and conditions stated in a data processor agreement entered with Weld. These data processors are not permitted to process your personal data for their own purposes.
Personal data regarding your use of our website, geographic location, age etc. may be transferred to Facebook with whom we have a joint controllership with regarding to the personal data collected and processed when you visit our website and our social media. The personal data is used to analyze the use of our website and improving and developing our services.
You can read more about how Facebook processes your personal data here.
4. Transfer of your personal data to a third country (outside of EU/EEA)
Weld will in certain cases transfer your personal data to third countries outside of EU/EEA, for instance for hosting our CRM system (we use HubSpot which is US based). Weld will ensure that transfer to third countries will be carried out in accordance with applicable data protection legislation so that an adequate level of protection is ensured.
If the personal data are transferred to recipients established in so-called "unsafe" third countries that are not approved by the EU Commission, Weld ensures an adequate level of protection for instance by entering into the EU Commission's standard contractual clauses and - where necessary - by implementing additional safeguards.
5. Storage of your personal data
Weld will only store your personal data as long as it is deemed necessary to fulfil the purposes for the processing of your personal data.
Personal data collected via cookies through use of our website are stored for different periods depending on the purpose.
Personal data such as your IP address will be stored as long as deemed necessary and will be deleted at the latest 1 year from your last visit on our website.
If you are a contact person at a customer, vendor or another business partner, Weld will store personal data about you as long as Weld communicates with you because you are Weld's point of contact, 3 years after termination of the contractual relationship, or until it is no longer necessary for the establishment, exercise or defence of a legal claim.
Inquiries via chat function and Help Center
The inquiries from potential customers will be deleted 1 year from the inquiry is resolved, unless it is deemed necessary to store such inquiries for documentation purposes e.g., due to a dispute, including for the establishment, exercise or defence of legal claims.
The inquiries from existing customers will be deleted 3 years from the termination of the contractual relationship, unless it is deemed necessary to store such inquiries for documentation purposes e.g., due to a dispute, including for the establishment, exercise or defence of legal claims.
Weld will store your personal data to the extent it is necessary for bookkeeping purposes such as personal data related to invoicing. Such personal data will be stored for a period of 5 years from the end of the financial year to which the accounting records relate. The purpose is to comply with the legal obligation pursuant to the Danish Bookkeeping Act.
6. Your rights
Weld has implemented a number of measures to protect your personal data and ensure your rights. As a data subject, you can exercise the rights listed below. However, some of the rights only apply under certain circumstances.
The Danish Data Protection Agency has prepared guidelines regarding the data subjects’ rights. The guidelines can be accessed here. However, please note that the guidelines are only available in Danish.
6.1. Right of access
You have the right to request access to, including the disclosure of a copy of the personal data that Weld processes about you as well as the right to receive information on:
- the purposes of the processing;
- the categories of personal data concerned;
- the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries and in that connection the necessary measures carried out prior to the transfer;
- the envisaged storage period or the criteria used to determine that period;
- the existence of the right to request rectification, erasure, restriction or objection against processing of your personal data, including especially processing of personal data in connection with direct marketing purposes;
- the right to lodge a complaint with the Danish Data Protection Agency;
- where your personal data are obtained from if the data are not collected from you; and
- the existence of automated decision-making, including profiling, and as a minimum meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.
6.2. Right to rectification
You have the right to have inaccurate personal data about yourself rectified as well as the right to request completion of incomplete personal data concerning you.
6.3. Right to erasure ("right to be forgotten")
Under certain circumstances you have the right to obtain from Weld the erasure of personal data, for instance if the processing is based on your explicit consent and you withdraw this consent.
6.4. Right to restriction of processing
You have the right to restrict Weld's processing of your personal data, for instance, in the event you dispute the accuracy of the personal data.
6.5. Right to data portability
When our processing of your personal data is carried out automatically and is based on your consent or a contract with you, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format and the right to transmit those personal data to another data controller, if this is technically feasible.
6.6. Right to object
You have the right to object, on grounds relating to your particular situation, at any time to our processing of your personal data which is based on point (e) or (f) of Art. 6(1) of the GDPR. This applies at any time where personal data are processed for direct marketing purposes.
6.7. Right to not be subject to automated individual decision-making
You have the right not to be subject to a decision based solely on automatic processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
6.8. Right to withdraw a consent
If you have given us your consent to the processing of your personal data, you have the right to withdraw such consent at any time. However, the withdrawal of your consent will not affect the lawfulness of processing of your personal data based on consent before its withdrawal.
7. Questions and complaints
You can also file a complaint to the Danish Data Protection Agency, which is an independent public authority that is, inter alia, responsible for monitoring and enforcing the application of the GDPR. The Danish Data Protection Agency's contact information is available on its website: www.datatilsynet.dk.
If you are looking for our Data Processing Agreement (DPA) please click on this link: DPA.