Gehl is committed to protecting the privacy and security of the personal information that we receive from our clients, collaborators, and other stakeholders. Gehl’s Privacy Policy explains the types of personal information we collect, how we collect and process that information, who we may share it with, along with your rights and choices.
Gehl Architects ApS (CVR: 25309529) and Gehl Architects Finance & Communications ApS (CVR: 37453331) (together referred to as “Gehl”) are responsible for your personal data.
Contact details
Vesterbrogade 24, 5.
1620 København V
E-mail: mail@gehlpeople.com
Telephone: +45 32 95 09 51
Gehl may collect personal data about you:
When you or your organization contacts Gehl
When you or your organization offers to provide, or provides, services to Gehl
When you correspond with Gehl by phone, email or other electronic means, or in writing, or when you provide other information directly to Gehl, including conversations with our staff
When you apply for a position at Gehl
When you are employed with Gehl
Your personal data may be used for the following purposes:
To register you as a client of Gehl
To administer and manage our relationship with you, including processing payments, accounting, auditing, billing and collection and taking other steps linked to the performance of our business relationship
To comply with our legal obligations, including maintaining records, compliance checks or screening and recording. This may include automated checks of personal data you provide about your identity against relevant databases and contacting you to confirm your identity, or making records of our communications with you for compliance purposes
To manage access to the Gehl premises and for security purposes
To protect the security of Gehl communications and other systems and to prevent and detect security threats, frauds or other criminal or malicious activities
For insurance purposes
To process applications for employment
For personnel administration purposes, including payment of salaries, administration of employee benefits, employee development, business travel, and termination of employment
For marketing purposes, including website and newsletters
To exercise or defend our legal rights, or to comply with court orders
The personal data collected about you may comprise the following:
contact information (e.g. telephone no. and e-mail address)
salary information
ordinary personal data from job applications and CV
health data
We may process your personal data in connection with any of the purposes set out above on one or more of the following legal grounds:
Because it is necessary for us to do so in order to undertake your requests or another contract with you or your organization, cf. Article 6(1)(b) GDPR
To comply with our legal obligations, including keeping records of our compliance processes or tax records, cf. Article 6(1)(c) GDPR
Because our legitimate interests, or those of a third-party recipient of your personal data, make the processing necessary, provided that those interests are not overridden by your interests or fundamental rights and freedoms, cf. Article 6(1)(f) GDPR
Because you have expressly given us your consent to process your personal data in that manner, cf. Article 6(1)(a) GDPR.
We will only provide you with ‘marketing’ related information after you have, where legally required to do so, opted in to receive those communications and have provided the opportunity for you to opt-out at any time. We will not use your personal data for making any automatic decisions affecting or creating profiles other than as described above.
Gehl will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements and, where required for Gehl to assert or defend against legal claims, until the end of the relevant retention period or until the claims in question have been settled. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. Upon expiration of the applicable retention period, we will securely destroy your personal data in accordance with applicable laws and regulations. As a main rule we will delete personal data within the following deadlines:
5 years after end of employment
2 years after delivery of product
upon conclusion of recruitment round, unless the candidate is relevant for a position: 3 months ahead or unless consent for longer storage has been obtained
If you provide Gehl with information about any person other than yourself, your employees, counterparties, your advisers or your suppliers, you must ensure that they understand how their information will be used, and that they have given their permission for you to disclose and for you to allow Gehl, and our outsourced service providers, to use it.
We do not sell your personal data or share it with irrelevant third parties. We only share your personal data when needed to realize the purposes described above. The main categories of recipients are:
Other companies within the Gehl Group
Business partners of Gehl (e.g. suppliers, sales and marketing partners (including social media platforms), partners for digital offerings and IoT, logistics partners, event organisers, customers of Gehl, etc.
IT service providers and data processors on behalf of Gehl, e.g. hosting services, IT support, cloud services, user administration services, etc.
Other recipients supporting Gehl’s business operations, e.g. consultants and advisers of Gehl, etc.
Other authorized third parties who may need to access or store personal data if required or permitted by applicable law (e.g. governmental authorities or other competent public bodies, courts, arbitral tribunals, attorneys, etc.).
In certain cases, your personal data may be transferred to countries outside of the EU/EEA. Gehl ensures that such transfer will be carried out in accordance with the applicable data protection laws. This entails that any party outside of the EU/EEA (and countries subject to an EU adequacy decision) which comes in possession of your personal data must ensure an adequate level of protection, for example by entering into the EU standard contractual clauses.
If you are located outside the EU/EEA, your personal data may be transferred to countries within the EU/EEA or otherwise outside your country of residence. We take great care to ensure compliance with local requirements when transferring data across borders.
Gehl has put in place the appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. We have also put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so. How do we update personal data about you? If there are changes to any of the personal data, for example change of email address, cancellation of any request you have made to Gehl, or if you become aware of any inaccuracies on your personal data, please let us know by contacting us at mail@gehlpeople.com.
You have the rights as described below which you can exercise by contacting us at the above contact information. Your request will be answered free of charge, as soon as possible and no later than one month after receipt, however, up to two months if necessary due to the complexity or number of the request. In the event of unfounded or excessive requests, we have the right to reject it or charge a reasonable fee for answering it.
Withdraw consent. To the extent processing is based on your consent, you may at any time withdraw your consent by contacting us at the above information or as otherwise explained when you provided your consent. This will not affect the lawfulness of the processing before its withdrawal. To withdraw your consent please follow the opt-out links on any marketing and/or Gehl LIVE news, blogs, announcements, etc. or via mail@gehlpeople.com.
Access. You have the right to access the personal data that we process about you, as well as certain information about how the processing takes place. No access is granted to information which must remain confidential because of public or private interests, including your own interests.
Rectification. You have the right to have incorrect personal data corrected or to have incomplete personal data about you completed.
Erasure. You have the right to have personal data about you deleted in the circumstances specified in Article 17 of the GDPR. This may be the case, for example, if the information is no longer necessary for the fulfillment of our obligations and exercising of our rights or if the information is processed on the basis of your consent which has been withdrawn.
Restriction. In the circumstances mentioned in Article 18 of the GDPR, you have the right to have the processing of your personal data restricted, eg if the accuracy of the data is disputed, in the period until we have had the opportunity to determine whether the personal data is correct or if we no longer need for the personal data for the processing but they are necessary to establish, exercise or defend a legal claim.
Object. You have the right to object to the processing of personal data which we process on the basis of Article 6(1)(f) of the GDPR (the legal basis for processing in our legitimate interest) and always if the processing is for the purpose of direct marketing
Data portability. If the processing is based on your consent or contract, you have the right to receive the information in a plain and readable format and to transmit the information to another data controller. If you wish and if technically possible, we will transmit the information directly to this data controller.
Automatic decisions. You have the right not to be the subject of an automatic decision that has legal effect or similarly significantly affects you which is based solely on automatic processing, including profiling.
Lodge a complaint. You may at any time complain about the processing of your personal data by contacting us. In addition, you can always lodge a complaint to the Danish Data Protection Agency (http://datatilsynet.dk, dt@datatilsynet.dk, +45 33 19 32 00), to the supervisory authority in the country where you reside or in the country where you believe the violation of the GDPR or the Danish Data Protection Act has taken place.
We reserve the right to update and change this Notice from time to time in order to reflect any changes to the way in which we process your personal data or changing legal requirements. Any changes we may make to our Privacy Policy in the future will be posted on this page and, where appropriate, notified to you by email. Please check back frequently to see any updates or changes to our Policy.
If you have any questions, comments or requests regarding Gehl’s Privacy Policy please contact us at mail@gehlpeople.com or send a letter to Gehl Architects Aps, Vesterbrogade 16 5.sal. 1620 KBH V Denmark.