Personal information Personal information

Personal data protection policy

General Data Protection Regulation

TDC collects and processes personal information via our services. When we do so, we comply with the applicable legislation, including the EU’s new General Data Protection Regulation (GDPR), which came into effect on 25 May 2018. Here we have gathered information on how we comply with the regulation.

Data controller

When we process your data, we can have two roles: we can be the data controller or the data processor.

Usually TDC Erhverv is the data controller, which means we have the overall responsibility for ensuring that we process only the information that is necessary for providing products or services to our business customers.

Our role as the data controller also means that, in addition to the General Data Protection Regulation, we are regulated by special rules in the telecommunications legislation, which means that we must, for example, meet stricter requirements for security and logging, which is a greater responsibility than a data processor has.

It is therefore up to us to ensure that the personal data is processed in a secure way, that the data subject can access the data processed, and that personal data is erased when we no longer need it to provide the product or service.

Our processing of personal data and thus our role as data controller is described in more detail in TDC Erhverv’s Personal Data Protection Policy

Data processor

In some cases, TDC Erhverv is the data processor. For example when it comes to information storage and when our services entail storing information for our customers. The services in question include handling customer emails and recording telephone conversations.

In this overview, you can see which products require a data processing agreement.

To make things easier for our customers, the necessary data processing agreements are incorporated into our terms and conditions. Business customers who need a data processing agreement will receive it through updated terms and conditions.

If you represent the company and have questions about, for example, data processing agreements, please contact your account manager. If you do not know who this is, please contact TDC Erhverv’s customer service centre.

Division of roles between the data controller and the data processor

The data controller decides:

  • The personal data to be processed.
  • The legal basis on which processing can take place.
  • The purpose of processing.
  • The personal data in question.
  • Who will receive the personal data.
  • Whether requests to exercise the data subject’s rights are met and to what extent.
  • How long the personal data will be stored.
  • Which third parties are allowed to access the personal data.

The data processor decides:

  • Which IT systems or methods are used to process personal data.
  • How and where the personal data is stored, e.g. the location of the servers.
  • What technical and organisational security must be implemented.
  • How the personal data is collected.
  • How the personal data is passed to third parties.
  • What procedures are followed to erase the personal data by the specified time limits.
  • How subcontracted data processors are audited.

Your rights

The General Data Protection Regulation gives you some rights in relation to personal data that we have about you.

As an employee of a company (private as well as public, organisation, associations, etc.) and user of our subscriptions, your most important rights are:

  • The right to access your personal data (right of access)
  • The right to receive information about the processing of your personal data (our obligation to notify)
  • The right to have incorrect personal data rectified (right to rectification)
  • The right to have incorrect personal data deleted (right to erasure)
  • The right to object to personal data being used for direct marketing
  • The right to object to automated individual decision-making, including profiling
  • The right to move your personal data (right to data portability).

Request for access and other rights

If you wish to exercise one of the above rights, please fill out the form below.

We will then ask you to send the requested information to us within two working days, after which we will start processing the case.

All enquiries have a processing time of up to 30 days.

1. If you are employed by a company that is a customer of TDC Erhverv, you can request insight by filling in the form.

Please note that when we receive your request, an email will be sent to the legal owner asking them to verify that you are the user of the subscription you are seeking insight into.

  • Once we verify this verification, we cna process your request for insight.

Request insight here

The TDC Group has a Data Protection Officer

Do you have any questions about the TDC Group’s handling of personal data? For more information, see TDC Group.
If you wish to contact TDC Erhverv regarding our privacy policy and your rights in relation to the General Data Protection Regulation, you can also read more here.