Updated_EG_Dynaway Logo_White

Privacy policy

Information on the processing of personal data

Last updated: October 18th, 2023

Your data security is important to us, and we therefore make it a high priority that your data is handled in a responsible manner. Below, you can read how Dynaway A/S (hereafter "Dynaway", "we", "us" or "our") process your personal data when we act as a data controller. You can also read about your rights in relation to our processing of your data.

  1. Dynaway's role as the data controller

Dynaway is a part of the EG group. EG is one of Scandinavia's largest suppliers of technology solutions for the private and public sectors. Through constant focus on our customers, their industries and on delivering industry-leading solutions, EG enables our customers to become leaders in their field.

In connection with our company's operation, we process an amount of personal data. We do so in order for us to service you in the best possible way. We collect and process mostly general (non-sensitive) data.

If you have any questions or complaints about our processing of your personal data, please contact EG's Data Protection Office here: 

EG A/S
Data Protection Office
Lautrupvang 24                                              
2750 Ballerup, Denmark
E-mail: dpo@eg.dk 
Phone: +45 7013 2211

  1. What personal data we collect and for what purpose

We process personal data about you in a variety of situations. Read more below about our data processing in different situations.

2.1  Visitors to Dynaway's website

When you visit Dynaway's website (www.dynaway.com), Dynaway can process information about your IP address as well as information about your computer, device and browser.

We also process information about your visit (e.g., information about the way you access our websites, how you navigate them, what pages you visit, content you view, your searches, ads you have seen, etc.). This information is collected using cookies, log files and other methods. For more information, see our Cookie Policy, the cookie banner and section 6.

We also process data that you provide to us in connection with your use of the websites, e.g., when you complete a form, participate in an online event, or register online, including your name, company name, company address, work phone number/mobile number, email address, title, and product interest.

We use your information to enable us to make relevant services and products available to you and to improve your experience of our websites and online services as well as of the services and products we offer. We also use data to show you content on our and others' web pages based on your activities and preferences and to limit the number of times you see the same content.

Our basis for processing is our legitimate interests (article 6(1), litra(f) of the General Data Protection Regulation (GDPR)) or your consent (article 6(1), litra(a) of GDPR. EG will, in some cases, be legally obliged by other applicable national legislation. 

2.2  Dynaway's customers and potential customers

When you are a customer/potential customer of Dynaway or a contact person with one of Dynaway's customers/potential customers, Dynaway processes personal data about your name, company name, company address, work phone number/mobile number, e-mail address, title, your purchases, payment information and information from publicly available sources as well as other information that you provide to us.

We process personal data for the purpose of complying with the agreement we have with our customers and partners for the purpose of providing services, invoices, run courses and webinars, statistics, and quality management, as well as for maintaining our customer records and providing overall service, marketing and sales to our customers and potential customers.

Registered users of EG authentication

We process personal data about registered users when providing EG authentication services to customers, including sharing data with other legal entities in EG when this is required to provide the relevant service(s) to the customers and partners. The information collected includes the user company e-mail, company name and other device/license/application identifiers about the user registered. We may also process your phone number/mobile phone number if two-factor authenticator is used. The information is stored no longer than necessary and will be deleted at latest upon termination of all licences connected to the registered user.

Our basis for processing is the agreement we have with you in accordance with article 6(1), litra(b) of GDPR or our legitimate interest in accordance with article 6(1), litra (f) of GDPR. Information that we have obtained for the purposes described above may also be processed by EG for compliance with the laws and regulations to which EG is subject in connection with the operation of our company or to fulfil various reporting or disclosure obligations under applicable laws and regulations (article 6(1), litra (c) of GDPR).

2.3  Visitors to Dynaway's offices

When you visit one of Dynaway's offices, we process information about your name, company name and title, the name of your Dynaway host and other information that you choose to provide to us.

We process this information for security reasons. Our basis for processing is our legitimate interests (article 6(1), point (f) of the General Data Protection Regulation).

Our registration of guests is stored at the reception for a short period of time. Our visitor register is stored securely and reviewed only if there is a specific need for it, e.g., in connection with a security breach. The register is reviewed only by persons who have a work-related reason for it.

We indicate the places where we use CCTV in accordance with section 3(1) of the Danish Act on Video Surveillance. All recordings are stored safely and are viewed only, if necessary, e.g., in case of a security breach. Recordings are viewed exclusively by people who have a work-related reason for it. The recordings are typically overwritten automatically after a short period of time unless a problem is identified that requires scrutiny, such as theft. 

2.4  Participants in Dynaway's events

When you sign up for and participate in events held by Dynaway, we process information about your name, company name, company address, work phone number/mobile number, e-mail address and the event you are attending.

We process this information for the purpose of managing the event and for security reasons as well as to send you relevant material. Our basis for processing is our legitimate interests (article 6(1), litra (f) of GDPR) or your consent (article 6(1), litra (a) of GDPR). EG will, in some cases, be legally obliged by other applicable national legislation.

2.5  Marketing recipients and contestants

When you receive marketing materials from Dynaway or participate in competitions, we process information about your name, company name, company address, work phone number/mobile number, e-mail address, title and product interest. We also process information about your marketing or communications preferences as well as your use of the marketing we send to you (including whether you have opened an e-mail from us, whether the e-mail is read and what links you have opened) and information that you provide to us.

We process your information for marketing our company and the company's products, for creating and administering you as a marketing subscriber and for managing competitions, drawing winners, etc. We use your preferences and usage data to understand the way our customers receive our marketing and to prepare marketing for you and our other customers in the future.

We also use data about you to show you content on our and others' websites based on your activities and preferences and to limit the number of times you see the same content as well as to measure the effectiveness of our content and marketing.

We only send marketing material to you by email or other electronic channels when we have obtained your consent in accordance with applicable national legislation. 

In relation to our newsletter, we have established special terms: When you sign up to receive EG’s newsletter, you give EG your consent to process your personal data solely for the purpose of receiving newsletters and marketing material. You may withdraw your consent unconditionally at any time by clicking the unsubscribe link in the newsletter. Your personal data will be deleted unless we have another legal basis to continue processing your personal data.


Our basis for processing is our legitimate interests (article 6(1), litra (f) of GDPR) and/or your consent (article 6(1), litra (a) of GDPR). EG will, in some cases, be legally obliged by other applicable national legislation.

2.6  Dynaway partners and/or suppliers

When you are a Dynaway partner or supplier or a contact person with a partner/supplier, we process information about your name, company name, company address, work phone number, e-mail address and title as well as publicly available information and other information that you provide to us.

We process the data for use in contract management as well as to receive goods and services from our suppliers and partners and, where relevant, to honor agreements with our customers.

Our basis for processing is the agreement we have with you (article 6(1), litra (b) of GDPR) or our legitimate interests (article 6(1), litra (f) of GDPR). 

2.7 Other general purposes of data processing

We may enrich the information described above with information from other sources. This may be publicly available information – including information that we obtain through generally available sources.

Information that we have obtained for the purposes described above may also be processed by Dynaway for compliance with the laws and regulations to which Dynaway is subject in connection with the operation of our company or to fulfil various reporting or disclosure obligations under applicable laws and regulations (article 6(1), point (c) of the General Data Protection Regulation).

If Dynaway sells all or part of our business or sells or transfers our assets or otherwise is involved in a merger or transfer of all or a substantial part of our business, Dynaway may transfer your information to the party or parties involved in the transfer as part of this transaction where permitted under Danish law (article 6(1), point (f) of the General Data Protection Regulation).

Finally, Dynaway may process your personal data in order to enforce or defend our or any third party's legal or legitimate interests where necessary, legal and proportional (article 6(1), litra (c) of the GDPR.

  1. Sharing your data with others

Dynaway may disclose your personal data internally within the EG group and to other suppliers and/or service providers in connection with the general operation of our business.

3.1. Public authority

Dynaway may disclose your personal data to a public authority in situations where we are specifically bound to disclose your personal data in accordance with the laws and notification obligations to which we are subject.

3.2. Legal entities, suppliers, and business partners

In order to execute our business, we depend on partners that can assist in the development, delivery, and operation of our IT systems and in connection with our marketing. Therefore, EG may disclose your personal data internally within the EG group to the extent of our legal basis and to other suppliers and/or service providers solely in connection with the general operation of our business for our purposes and on our instructions. We have entered into written data processing agreements with all our suppliers. All legal entities in EG have also entered into an intercompany data processing agreement ensuring that everyone follows the same procedures when processing personal data which guarantees the same level of security in EG.

We receive technical data from third-party analytics providers about your visit to our website. See more in the Cookie Policy, the Cookie banner or in section 6.

We try to limit the disclosure of personal data in personally identifiable form and thus the disclosure of information that can be attributed to you personally.

In general, we use the balancing of interests rule in Article 6 (1)(f) of GDPR as our processing basis

 

  1. Transfer of personal data to countries outside the EU/EEA

In connection with our processing of your personal data, we may transfer the information to countries outside the EU/EEA. This includes service providers of various IT tools, including IT tools for cooperation which may be based outside the EU/EAA. In some countries, the European Commission has determined that the data protection level is in line with the level of protection in the EU/EEA.

If we transfer personal data to countries where this is not the case, the transfer of your personal data to these countries outside of the EU/EEA will be based on Standard Contractual Clauses (SCC) drafted by the European Commission or another similar transfer basis specifically designed to ensure an adequate level of protection.

You can read more about the transfer of personal data to countries outside the EU/EEA on the European Commission's website.

You may at any time request information about what appropriate safeguards form the basis for the transfer of personal data to recipients outside the EU/EEA by writing to us. See contact information in section 1.

  1. Storage period, data integrity and security

Your personal data is stored no longer than is necessary to meet the purposes for which it has been collected. When your data is no longer necessary, we will ensure that it is deleted in a safe manner.

It is our policy to protect personal data by taking adequate technical and organisational security measures.

Information security is Dynaway's highest priority in terms of business risk. We work seriously and professionally with information security based on internationally recognized security standards – including ISO 27001/2. We have implemented security measures that will ensure data protection for all the personal data we process. We regularly conduct internal follow-ups in relation to the adequacy of and compliance with policies and measures.

6. Information about the use of cookies

To make Dynaway's websites work properly, we will sometimes place small data files called cookies on your device.

Some of Dynaway's web pages have content that can only be displayed if cookies are saved. Data from cookies is also used to collect personally identifiable information for marketing purposes.

A cookie is a small text file that is stored in the web browser on your computer, smartphone, iPad, or whatever device you use to browse when you visit websites. Cookies make it possible to recognize your device, to collect information about your online behaviour, including what websites and functions are visited with your web browser, and to ensure that it works from a purely technical standpoint.

For more information about cookies and how Dynaway uses cookies and third-party cookies, please see our Cookie Policy and the Cookie banner on the website.

7. Your rights

As a data subject, you have several rights under GDPR. Please contact us if you want to exercise your rights.

You may withdraw any consent unconditionally and at any time. This can be done by sending an email to us (see the e-mail address in section 1). Withdrawal of your consent will not have any negative impact. However, it may mean that we cannot honor specific requests from you in the future. 

Withdrawal of your consent will not affect the lawfulness of processing on the basis of your consent before it is withdrawn. Furthermore, it will not affect any processing performed on another legal basis.

In addition, you may – unreservedly and at any time – raise objections to our processing when it is based on our legitimate interest.

Your rights include the following:

  • Right to access: You have the right to gain access to the personal data we process about you.
  • Right to rectification: You have the right to have incorrect personal data about yourself corrected and incomplete personal data completed.
  • Right to erasure (right to be forgotten): Under certain circumstances, you have the right to have your personal data erased prior to the time when we normally delete it.
  • Right to restriction of processing: Under certain circumstances, you have the right to have the processing of your personal data restricted. If you are entitled to restricted processing, we will from that time on only process the data – with the exception of storage – with your consent or for the establishment, exercise, or defence of legal claims, for the protection of the rights of another natural or legal person or for reasons of important public interest.
  • Right to objection: Under certain circumstances, you have the right to object to our processing of your personal data - and always if the processing is for direct marketing purposes.
  • Right to data portability: Under certain circumstances, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit this personal data from one data controller to another.
  • Right to lodge a complaint: You can lodge a complaint with the Danish Data Protection Agency at any time regarding our processing of personal data. For more information, see datatilsynet.dk where you can also find further information about your rights as a data subject.

There may be conditions or limitations on these rights which depends on the specific circumstances of the processing activity.

8. Your right to lodge a complaint

You may also lodge a complaint or contact the data protection supervisory authority in the EU/EEA member state of your habitual residence, place of work or where the alleged infringement has taken place.

Please find the contact details for your national data protection authorities here:

9. Updates

We are continuously evaluating and updating this data notification, and we encourage you to keep yourself informed. The date of which this notification was last updated is shown above. The latest version will always be available on our website.