Website Information notice

Information notice

Information on the processing of personal data

Your data security is important to us, and we therefore make it a high priority that your data is handled in a responsible manner. Below, you can read how Umbraco A/S (hereafter "Umbraco", "we", "us" or "our") process your personal data when we act as a data controller. You can also read about your rights in relation to our processing of your data.

Umbraco’s Role as the data controller

In connection with our company’s operation, we process an amount of personal data. We do so in order for us to service you in the best possible way. We collect and process mostly general (non-sensitive) data.

If you have any questions about our processing of your personal data, please contact Umbraco here:

Umbraco A/S

Company registration number: 35866582

Buchwaldsgade 35, 2nd floor

5000 Odense C

Denmark

gdpr@umbraco.com

What personal data we collect and for what purpose

We process personal data about you in a variety of situations. Read more below about our data processing in different situations.

Visitors to Umbraco websites and users of Umbraco’s online services

When you visit Umbraco’s websites, (e.g. www.umbraco.com or use our other online services (such as our.umbraco.com, community.umbraco.com), Umbraco can process information about your IP address as well as information about your computer, device and browser.

We also process information about your visit (e.g. information about the way you access our websites, how you navigate them, what pages you visit, content you view, your searches, ads you have seen, etc.). This information is collected using cookies, log files and other technologies. For more information, see our cookie banner here https://umbraco.com/about-us/trust-center/privacy-and-umbraco/cookie-information/

We also process data that you provide to us in connection with your use of the website, e.g. when you complete a form or register online, including your name, company name, company address, title, work phone number/mobile number, address, e-mail address, title, product interest and other information that you provide to us.

We use your information to enable us to make relevant services and products available to you and to improve your experience of our websites and online services as well as of the services and products we offer. We also use data to show you content on our and others' web pages based on your activities and preferences and to limit the number of times you see the same content.

Our basis for processing is our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation) or your consent (Article 6(1)(a) of the General Data Protection Regulation and Section 3 of the Danish Cookie Order).

Umbraco’s customers and potential customers

When you are a customer/potential customer of Umbraco or a contact person with one of Umbraco’s customers/potential customers, Umbraco processes personal data about your name, company name, company address, work phone number/mobile number, title, your purchases, payment information and information from publicly available sources as well as other information that you provide to us – e.g. in connection with your purchase of our products on our webshop and other situations related to this.

We process personal data for the purpose of complying with the agreement we have with our customers, for the purpose of providing services, invoicing, statistics and quality management, as well as for maintaining our customer records and providing overall service, marketing and sales to our customers and potential customers.

Our basis for processing is the agreement we have with you (Article 6(1)(b) of the General Data Protection Regulation) or our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).

Marketing recipients

When you receive marketing materials from Umbraco, we process information about your name, company name, company address, work phone number/mobile number, title and product interest. We also process information about your marketing or communications preferences as well as your use of the marketing we send to you (including whether you have opened an email from us, whether the email is read and what links you have opened) and information that you provide to us.

We process your information to market our company and our products and for creating and administrating you as a marketing subscriber. We use your preferences and usage data to understand the way our customers receive our marketing and to prepare marketing for you and our other customers in the future.

We only send marketing material to you by e-mail or other electronic channels when we have obtained your consent as required by the provisions of the Danish Marketing Practices Act.

We also use data about you to show you content on our and others' web pages based on your activities and preferences and to limit the number of times you see the same content as well as to measure the effectiveness of our content and marketing. In this matter, we can upload your email address to advertising tools at e.g., Google or Facebook for the purpose of sending targeted marketing.

Our basis for processing is our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation) and/or your consent (Article 6(1)(a) of the General Data Protection Regulation and Section 10 of the Danish Marketing Practices Act).

Umbraco partners and/or suppliers

When you are a Umbraco partner or supplier or a contact person with a partner and/or supplier, we process information about your name, company name, company address, work phone number, e-mail address and title as well as publicly available information and other information that you provide to us.

We process the data for use in contract management as well as to receive goods and services from our suppliers and partners and, where relevant, to honour agreements with our customers.

Participants in events, conference etc.

When you register and participate in events organised by Umbraco, we process personal data about your name, address, phone number, e-mail address, company and the event you are participating in. We process your personal data for the purpose of managing the event and for

security reasons, as well as to be able to send you relevant material. The legal basis for processing is our legitimate interests in conducting events according to Article 6(1)(f) of the General Data Protection Regulation. We store personal data about participants in events in the event

period and up to 1 year after the event has ended.

Pictures and videos from events, conferences etc.

When participating in events organised by Umbraco and/or in collaboration with Umbraco, pictures and videos are taken for the purpose of marketing our business and services, for example on social media. Pictures and videos material can also be used at conferences or similar events with Umbraco as a participating business.

We process your personal data for the purpose of marketing of our business and services.

The legal basis for processing is our legitimate interests in marketing our business with the use of situational photos and videos etc. in accordance with Article 6(1)(f) of the General Data Protection Regulation. The legal basis for processing could also be your consent in accordance with

Article 6(1)(a) of the General Data Protection Regulation, when we use close-up photos or similar in articles, marketing material etc.

When your personal data is no longer needed for the intended purpose, we will ensure that it is deleted in a secure manner.

Pictures and videos are stored as long as they are relevant in marketing of similar events etc. and will be processed in a period up to 5 years .

Other general purposes of data processing

We may enrich the information described above with information from other sources. This may be publicly available information – including information that we obtain through generally available sources.

Information that we have obtained for the purposes described above may also be processed by Umbraco for compliance with the laws and regulations to which Umbraco is subject in connection with the operation of our company or to fulfil various reporting or disclosure obligations under applicable laws and regulations (Article 6(1)(c) of the General Data Protection Regulation).

If Umbraco sells all or part of our business or sells or transfers our assets or otherwise is involved in a merger or transfer of all or a substantial part of our business, Umbraco may transfer your information to the party or parties involved in the transfer as part of this transaction where permitted under Danish law (Article 6(1)(f) of the General Data Protection Regulation).

Finally, Umbraco may process your personal data in order to enforce or defend our or any third party's legal or legitimate interests where necessary, legal and proportional (Article 6(1)(c) of the General Data Protection Regulation).

Sharing your data with others

Umbraco may disclose your personal data internally within the group, to suppliers and/or service providers in connection with the general operation of our business.

Umbraco may also disclose your personal data to a public authority in situations where we are specifically bound to disclose your personal data in accordance with the laws and notification obligations to which we are subject.

We try to limit the disclosure of personal data in personally identifiable form and thus the disclosure of information that can be attributed to you personally.

Umbraco also entrusts your personal data to data processors, e.g. in connection with the administration of our IT systems and in connection with our marketing. Our data processors process your personal data solely for our purposes and on our instructions. We enter into data processor agreements with our data processors to ensure that the required security is in place and to protect the data and comply with our data protection obligations.

Transfer of personal data to countries outside the EU/EEA

In connection with our processing of your personal data, we may transfer the information to countries outside the EU/EEA. Data protection legislation in these countries may be less restrictive than it is in Denmark and the rest of the EU/EEA. In some countries, however, the European Commission has determined that the data protection level is in line with the level of protection in the EU/EEA. If we transfer personal data to countries where this is not the case, the transfer of your personal data to these countries outside of the EU/EEA will be based on the standard transfer contracts drawn up by the European Commission or another similar transfer basis specifically designed to ensure an adequate level of protection.

You can read more about the transfer of personal data to countries outside the EU/EEA on the European Commission's website.

For further information about our transfer of personal data to countries outside EU/EEA, please contact gdpr@umbraco.com.

Storage period, data integrity and security

Your personal data is stored no longer than necessary to meet the purposes for which it has been collected. When your data is no longer necessary, we will ensure that it is deleted in a safe manner.

Marketing recipients

The personal data processed for the purpose of sending marketing material is deleted when you withdraw your consent, unless we have another basis for processing your personal data. In accordance with the guidelines and demands from the Consumer Ombudsman, we store documentation of your consent (in order to send you marketing material via email) in until two years after we last used your consent.

Depending on the user's browser version/ and the software provider cookies are stored for a maximum of 30 days. Meaning that visitors will after 30 days be prompted to accept cookie data again. It is possible to read more about which cookies we use on our platforms underneath the cookie consent on our website when prompted - this will at all-time be updated to the newest version according to our setup. You can all also read more about cookies here https://umbraco.com/about-us/trust-center/privacy-and-umbraco/cookie-information/

Potential customers

We store personal data on our market leads in our CRM system; zoho. Personal data is anonymised in CRM after a 2-year period if a customer relationship has not been formed.

Terminated customers, partners, and suppliers

We store personal data on terminated customers, partner and terminated suppliers for a period of up to 5 years in accordance with applicable financial rulings and regulations.

It is our policy to protect personal data by taking adequate technical and organizational security measures.

We have implemented security measures that will ensure data protection for all the personal data we process. We regularly conduct internal follow-ups in relation to the adequacy of and compliance with policies and measures.

Your rights

As a data subject, you have a number of rights under the General Data Protection Regulation. Please contact us if you want to exercise your rights.

You may withdraw any consent unconditionally and at any time. This can be done by sending an email to us (see the email address above). Withdrawal of your consent will not have any negative impact. However, it may mean that we cannot honour specific requests from you in the future. Withdrawal of your consent will not affect the lawfulness of processing on the basis of your consent before it is withdrawn. Furthermore, it will not affect any processing performed on another legal basis.

In addition, you may – unreservedly and at any time – raise objections to our processing when it is based on our legitimate interest.

Your rights also include the following:

Right to access: You have the right to gain access to the personal data we process about you.

Right to rectification: You have the right to have incorrect personal data about yourself corrected and incomplete personal data completed.

Right to erasure (Right to be forgotten): Under certain circumstances, you have the right to have your personal data erased prior to the time when we normally delete it.

Right to restriction of processing: Under certain circumstances, you have the right to have the processing of your personal data restricted. If you are entitled to restricted processing, we will from that time on only process the data – with the exception of storage – with your consent or for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person or for reasons of important public interest.

Right to objection: You have the right to object to our processing of your personal data under certain circumstances – and always if the processing is for direct marketing purposes.

Right to data portability: Under certain circumstances, you have the right to receive your personal data in a structured, commonly used and machine-readable format and to transmit this personal data from one data controller to another.

Right to lodge a complaint: You can lodge a complaint with the Danish Data Protection Agency at any time regarding our processing of personal data. For more information, see www.datatilsynet.dk where you can also find further information about your rights as a data subject.

Updates

We are continuously evaluating and updating this data notification. It is, therefore, a good idea to keep yourself regularly updated. You can see above when the notification was last updated. The latest version will always be available on our websites.