Privacy Policy

How does Flex4Business ApS process personal data

Privacy Policy

This is the privacy policy for Flex4Business ApS. Here you can read about how we handle personal data from the website and app in accordance with the current guidelines in the field.

Company and Data Controller

Flex4Business ApS
Nåleskovvej 3, 4291 Ruds Vedby
CVR: 42497762

Data Controller/DPO: Glen Nielsen - glen@flex4b.com

What is covered by personal data?

Personal data refers to data of physical individuals and sole proprietorships. Information about other types of companies – for instance, limited companies – are not protected by the data protection regulation. The same applies to information about authorities. Portrait images of individuals, on the other hand, are covered by the regulation. We always follow the rules currently in force about what personal data covers.
Read more about the subject on the Danish Data Protection Agency's website.

Confidentiality

Flex4business ApS is the data controller in accordance with EU General Data Protection Regulation when you use our own websites and apps. We are therefore obligated to handle your personal data confidentially.

What data?

Our website is set up to only receive and store ordinary personal data etc. This involves, for instance, contact forms, where we need a minimum of information to be able to offer you a quote, contact you, or help you in another way. This could be your name, phone number and/or email.
Also in our apps, we collect information needed to use the app.

Our site may log IP addresses in connection with troubleshooting, attacks, security, and the like.

Furthermore, we ask you on the website for permission to collect data for statistics and marketing. This could be through Google Analytics, Meta Pixel and similar to the extent possible and legal.
This type of data is only collected if you accept this type of cookies in our cookie box, and you can always change your choice via the link at the bottom of the page.
Our cookies are described on the cookies page

Email communication

When you visit our website, you can choose to receive newsletters and other types of information with offers and relevant information. You will only receive these types of information if you have actively chosen it. If you no longer wish to receive newsletters or other information from us, you can opt out at any time via the link in the newsletter or by contacting us at the email: mail@flex4b.com

Credit card security

We never store credit card information – we use a solution from NETS and gateways such as Bambora/WorldLine/Epay, Quickpay, or similar, where credit card information is entered in a secure environment (SSL), and is sent in encrypted form onwards to NETS without us having access to the credit card data. We always use approved acquirers and gateways

Data security

The information we receive is stored in a database that is protected by multiple levels of access controls, and is on a server that is secured and located in a large data center with several layers of protection. The information is not stored in encrypted form – with a few exceptions including passwords which are always stored in encrypted form. We use an SSL certificate on our website, and information is therefore transmitted in encrypted form according to the certificate's regulations. Information sent from the form is sent to us via email via an SSL encrypted connection.

We naturally also have described protocols to increase security - including:

- IT security policy

- Procedure for dealing with data breaches

- Procedure for handling the rights of the registered
- IT risk assessment

We never pass on information to third parties as a rule. We share information internally in the company as needed to be able to solve the task, and here it can also be shared with other companies that help solve the task. These are either companies we have a contract with and where personal information is protected through it, or companies that you as a customer have approved.
If you are a customer of Flex4Business ApS, the companies are described in the data processing agreement.


What information do I have access to?

As a registered user, you always have the possibility of access, and you can object to a registration in accordance with the rules of the Personal Data Act.
You always have the rights described in the GDPR as a user.

If you wish to have information corrected or deleted, you can contact Flex4Business ApS in writing at mail@flex4b.com, and we will promptly handle your request.

You also always have the option of filing a complaint with the Danish Data Protection Agency

How long are my data stored?

The personal data you provide to Flex4Business ApS through the website and app are stored for a minimum of 5 years if they are
of an accounting nature, as the bookkeeping law requires the storage of
accounting materials for 5 years.
Data submitted in forms are stored as long as it is relevant, or there is a customer relationship.
As a private individual, you can always contact us to have any information that is not required to be stored
according to law, deleted.

How do we manage the systems we operate for other companies?

Flex4Business' main business, as stated on the website, is selling SaaS systems.
In such a customer relationship, our role is to be the data processor while the customer is the data controller.
As a data processor, we must handle personal sensitive data under instructions from the data controller.
Thus, it is essentially the data controller's responsibility to handle inquiries from individuals regarding sensitive personal data.
We establish a data processing agreement between us and the customer. This describes the allocation of responsibilities between the data controller (the customer) and the data processor (Flex4Business ApS) very precisely.
In this connection, it can be mentioned that, according to the Data Protection Regulation, the customer should prepare a
Data Protection Policy similar to this document.


Updating of the Data Protection Policy

We can update the data protection policy as needed - for instance, in case of new regulations.
The Data Protection Policy will always be available in the latest version on our website.