Privacy Policy "danmark" Erhverv

"danmark" Erhverv enters into agreements with companies, associations and organisations on dental insurance for employees/members/customers and their family members (co-insured).

This privacy policy sets out how "danmark" Erhverv processes personal data about you as insured, co-insured or group representative of a company, an association or an organisation. We always treat your data as confidential.

In this privacy policy, you find information about the personal data we process about you, and you will also find your rights in connection with "danmark" Erhverv’s processing of your data.

Who is responsible for my personal data?

"danmark" Erhverv is the data controller in respect of any data we receive and process about you. That is:

"danmark" Erhverv
Company reg. (CVR) no.: 39 43 73 92
Palægade 5 1261 Copenhagen K
Denmark

What types of data does "danmark" Erhverv process?

"danmark" Erhverv only processes data that are relevant and necessary in relation to taking out dental insurance with "danmark" Erhverv and managing such insurance.

We process and record the following types of data:
Contact details of the company/organisation/association and the group representative (name, telephone number, e-mail address)
Data about you as insured or co-insured:
- your contact details (name, address, e-mail address, telephone number, etc.)
- your civil registration number (CPR number)
- your account number for payout of compensation if you do not want to use your NemKonto account
- the co-insured’s billing information (account number etc.)
Information we receive from the dentist about the treatments covered by the insurance (information appearing from the invoice, including type and date of treatment, amount, CPR number, etc.)
Information we receive from you or your dentist about the condition of your teeth
Information about your Sygeforsikringen "danmark” membership
If you are a member of Sygeforsikringen "danmark", "danmark" Erhverv may use information recorded with Sygeforsikringen "danmark" about your dental treatments in connection with the calculation of your compensation
Any updates to your information (name and address) in the Civil Registration System. If you are registered for non-disclosure of name and address, such information will not be updated
Information about payment for the co-insured’s insurance
Information about your compensations and payouts
Information about your insurance coverage
Communication between "danmark" Erhverv and the insureds, the co-insureds, the group representative and the company, association or organisation
Information that is collected when you use the self-service site and "danmark" Erhverv’s website (click here to learn more (in Danish only): cookies)

What is the purpose of the processing?

"danmark" Erhverv processes your data for the purpose of managing your dental insurance, including to ensure correct payout of compensation.

As an insurance provider, "danmark" Erhverv is furthermore subject to a number of statutory obligations, and "danmark" Erhverv therefore also processes your data to the extent necessary to fulfil such obligations. In addition, we may use your data to prepare statistics and analyses to improve our insurance covers.

You can learn more in the overview below.

What is the legal basis for the processing?

"danmark" Erhverv must have a legal basis for processing your personal data:

Data/activity	Purpose	Legal basis for processing
Contact details (name, address, telephone number, e-mail address, employment relationship)	The information is used for "danmark" Erhverv’s communication with you as insured, co-insured or group representative of a company/an association/an organisation.	"danmark" Erhverv uses your e-mail address to notify you when there is new information about your insurance. If you have provided your mobile phone number, we use this number to send you service messages regarding your insurance. Article 6(1)(f) of the General Data Protection Regulation ("GDPR") (legitimate interest in communicating with you digitally or otherwise).
CPR number	"danmark" Erhverv records your CPR number to ensure unique identification of you in connection with your enrolment in the insurance coverage and the recording of information about treatments covered by the insurance.	Agreement on group dental insurance is entered into with the company/organisation, and your CPR number is recorded and processed in accordance with section 43b of the Danish Financial Business Act, cf. section 11(2)(1) of the Danish Data Protection Act. Processing of CPR number in connection with the co-insured’s enrolment in the scheme, see article 6(1)(b) (performance of a contract) and article 9(2)(f) (processing is necessary for the establishment of legal claims) of the GDPR and section 11(2)(3) and section 12(1)(1) and (2) of the Danish Data Protection Act.
	Name and address are updated automatically from the Civil Registration System. However, this is not the case if you are registered in the system for non-disclosure of name and address.	Section 43b of the Danish Financial Business Act, cf. section 11(2)1) and 3) of the Danish Data Protection Act.
	In connection with the calculation of your compensation, "danmark" Erhverv uses your CPR number to check whether you are a member of Sygeforsikringen "danmark".	Article 6(1)(b) (performance of a contract) and article 9(2)(f) (processing is necessary for the establishment of legal claims) of the GDPR.
	"danmark" Erhverv uses your CPR number to pay out your compensation to your NemKonto account.	Section 43b of the Danish Financial Business Act, cf. section 11(2)(1) and (3) of the Danish Data Protection Act.
	"danmark" Erhverv uses your CPR number for the establishment of communication on mit.dk.	Section 43b of the Danish Financial Business Act, cf. section 11(2)(1) and (3) of the Danish Data Protection Act.
Information about type of treatment and price (invoicing information)	"danmark" Erhverv receives information from the dentist/dental hygienist about the type of treatment and the price in order to be able to calculate the compensation.	Article 6(1)(b) (performance of a contract) and article 9(2)(f) (processing is necessary for the establishment of legal claims) of the GDPR.
Information about the condition of the teeth at the effective date of the insurance	If your insurance coverage excludes missing teeth at the effective date of the insurance or other pre-existing dental injuries, "danmark" Erhverv may acquire information about the condition of your teeth in connection with the claims handling. "danmark" Erhverv may also use information about treatments, for which you have received reimbursement from Sygeforsikringen "danmark" before the effective date of the insurance.	Article 9(2)(f) (processing is necessary for the establishment of legal claims) of the GDPR, cf. article 6(1)(b) (performance of a contract).
Information about billing (sort code and account number)	The billing information is used to issue an invoice for the co-insured persons’ insurance.	Article 6(1)(b) (performance of a contract) of the GDPR.
Information about compensation	"danmark" Erhverv transfers payout information to Danske Bank, which ensures that the compensation is paid out to your account.	Article 6(1)(b) (performance of a contract) of the GDPR.
Information about insurance coverage	"danmark" Erhverv processes information about the insurance coverage you have in order to manage your insurance.	Article 6(1)(b) (performance of a contract) of the GDPR.
Consent	"danmark” Erhverv stores documentation of the consent given to "danmark" Erhverv’s processing of personal data.	Article 7(1) of the GDPR and section 41(7) of the Danish Data Protection Act.
Recourse	"danmark" Erhverv exchanges information with other insurance companies in connection with recourse, i.e. in cases where both companies cover the same treatment. If you are also a member of Sygeforsikringen "danmark", "danmark"’s reimbursement is settled before the compensation from "danmark" Erhverv is calculated.	Article 6(1)(f) (legitimate interest in the processing of recourse claims) and article 9(2)(f) (processing is necessary for the establishment of legal claims) of the GDPR.
Disputes	"danmark" Erhverv may process any information necessary to deal with disputes concerning coverage, payment, etc.	Article 6(1)(f) (legitimate interest in the processing of a case) and article 9(2)(f) (processing is necessary for the establishment, exercise or defence of legal claims) of the GDPR.
Statistics	We process your information to prepare statistics, analyses, etc. to improve our coverage and risk calculations. The processing also takes place for the purpose of complying with the statutory requirements imposed on "danmark" Erhverv as an insurance company.	Article 6(1)(f) (legitimate interest in improving coverage and risk hedging), article 6(1)(c) (legal obligation) and article 9(2)(g) (public interest) of the GDPR and section 10 of the Danish Data Protection Act.
Auditing and control	"danmark" Erhverv performs auditing and control of the reporting of treatments by dentists/dental hygienists to ensure the correct payout of compensation.	Article 6(1)(f) (legitimate interest in controlling correct payout), article 6(1)(c) (legal obligation) and article 9(2)(f) (processing is necessary for the establishment of legal claims) of the GDPR.
Cookies	Cookies are used on sygeforsikring.dk/erhverv to improve the user experience and to collect statistical information about the use of the website. Learn more in "danmark"’s cookie policy (in Danish only) here: (cookies)	Article 6(1)(f) (legitimate interest in improving the website) of the GDPR. Article 6(1)(a) (consent) of the GDPR.

Who may receive my personal data?

"danmark" Erhverv will only disclose your data when it is necessary in order to manage your insurances, or if we are required to do so in accordance with applicable legislation.

"danmark" Erhverv will, to the extent relevant, disclose your data to the following recipients:

Billing information is disclosed to Betalingsservice (direct debit);
Payout information is disclosed to Danske Bank, which ensures that the compensation is paid out to your account;
Your CPR number is disclosed to KMD A/S, the administrator of the NemKonto solution, when paying out the compensation to your NemKonto account;
Your CPR number is disclosed to Netcompany A/S, the provider of mit.dk;
Your name and your address (unless you are registered for non-disclosure of address) are updated and validated based on your CPR number by contacting the Civil Registration System;
If the same treatment is covered by more than one insurance, the necessary information is processed and disclosed to the relevant insurance companies for the purpose of distributing the compensation claim between the insurance companies (recourse);
"danmark" Erhverv exchanges information with Sygeforsikringen "danmark" in connection with the handling of the compensation claim;
"danmark" Erhverv only discloses information about your insurance/compensations to the group representative of the company, the association or the organisation subject to your explicit consent.

If you are a member of Sygeforsikring "danmark" and have consented to other persons on your policy having access to all or some of your data, such persons will also have access to the data "danmark" Erhverv has recorded about you.

If you want to change your consents, you can do so by logging on to the self-service solution on sygeforsikring.dk and selecting what consents you would like to give to other persons on your policy. You can change the persons who have access to your data and the data they have access to at any time.

"danmark" Erhverv may make your data available to external suppliers (data processors). Sygeforsikringen "danmark" acts as data processor for "danmark" Erhverv and is responsible for any claims handling and insurance management. Sygeforsikringen "danmark" enters into data processing agreements with external suppliers if they process your data on behalf of "danmark" Erhverv.

For how long are your personal data stored?

"danmark" Erhverv stores your personal data for as long as it is necessary for the purposes stated, or for as long as it is required to comply with applicable legislation, including the financial supervisory legislation and the Danish Bookkeeping Act.

Any offers to partner/child not accepted within the deadline set out in the invitation will be erased after 90 days.

"danmark" Erhverv is under an obligation to store bookkeeping and accounting records for a period of five years from the end of the financial year which the records concern.

"danmark" Erhverv’s erasure process is also based on the general statute of limitations under Danish law.

How are your personal data protected?

"danmark" Erhverv carefully processes your data and continuously monitors that the technical and organisational measures required to protect your personal data recorded with us are taken. When you use our self-service solution on sygeforsikring.dk, your data are protected by means of a secure-communication connection. The data are subsequently stored in our IT systems, to which the access is restricted to persons who have a work-related need to access the data. Such persons have been instructed in how to adequately process your personal data.

"danmark" Erhverv enters into written agreements with the data processors used and continuously monitors that they treat your data as confidential and take the technical and organisational measures required.

Your personal data will generally not be transferred for processing in countries outside the EU.

However, countries outside the EU/EEA may be in charge of IT-technical support. Your rights are safeguarded by applying the European Commission’s standard contract Data Privacy Framework (DPF) or another legal basis of transfer.

What are your rights in connection with our processing of your personal data?

Right to withdraw your consent

If "danmark" Erhverv’s processing of your data is based on your consent, you are entitled to withdraw your consent at any time. You can do so by logging on to the self-service solution on sygeforsikring.dk. You can also call us on +45 33 46 26 55 or contact us by ordinary mail, attn.: The DPO, or send an e-mail to dpo@sygeforsikring.dk.

If you choose to withdraw your consent, it will not affect the lawfulness of our processing of your personal data based on the consent you have previously given.

Please note that a withdrawal of your consent may affect your opportunity to receive compensation from "danmark" Erhverv. Furthermore, you should note that "danmark" Erhverv may be entitled to continue the processing of your data based on another legal basis as described above.

The right to access your data (right of access)

You have the right to obtain access to the personal data we are processing about you and information about how we process your data.

Right to rectification (correction)

If it turns out that the data recorded by "danmark" Erhverv about you is not correct, you are entitled to have them rectified.

Right to erasure

In certain circumstances, you have the right to have your personal data erased prior to our usual time limit for erasure.

Right to restriction of processing

In certain circumstances, you have a right to have the processing of your personal data restricted. If you are entitled to restriction of processing, we may in future only process your personal data – with the exception of storage – with your consent, or for purposes of establishing, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest.

Right to object

In certain circumstances, you have the right to object to the processing of your personal data. You may also object to our processing of your data for direct marketing purposes.

Right to data portability

In certain circumstances, you have the right to receive your personal data in a structured, commonly used and machine-readable format and to have those data transmitted from one data controller to another without hindrance.

You can read more about your rights in the Danish Data Protection Agency’s guidance on the rights of data subjects, which is available on www.datatilsynet.dk.

Who should you contact if you have questions about "danmark" Erhverv’s processing of your personal data?

If you have any questions about "danmark" Erhverv’s processing of your personal data, or if you want to exercise the rights described above, we encourage you to log on to the self-service solution on sygeforsikring.dk and send us a message or to contact "danmark" Erhverv’s data processing officer (DPO) by e-mail: dpo@sygeforsikring.dk. You can also call us on +45 33 46 26 55 or contact us by ordinary mail, attn.: The DPO.

Right to complain

You are entitled to file a complaint with the Danish Data Protection Agency if you are dissatisfied with our processing of your personal data. You can find the contact details of the Danish Data Protection Agency on its website, datatilsynet.dk.

Changes to the privacy policy

Our privacy policy is regularly updated, most recently in October 2023.