Privacy policy
We take your data protection seriously. We process personal data and have therefore adopted this privacy policy, which tells you how we process your data.
Mirra (CVR no. 32311261) is the data controller for the information we collect about you on our website, the information we hold about our suppliers and partners, and the applications we receive. We act as data processor for the information we receive about you from our customers who use our systems.
If you wish to contact us regarding our processing of personal data, you can do so at: info@mirra.io or +45 7199 8283.
Processing of personal data
Personal data is any kind of information that can be attributed to you in any way.
Customers, suppliers and partners.
As a customer, supplier, or partner with us, we collect contact and payment information to fulfil any agreement you enter into with us. The legal bases are performance of a contract (GDPR art. 6(1)(b)) and legitimate interest (GDPR art. 6(1)(f)).
We delete your data when we are no longer required to retain it under bookkeeping legislation.
Visitors to our website
When you use our website, we collect and process a range of information via cookies, provided you give your consent. We use the information to improve our content. We typically collect and process the following types of information: a unique ID and technical information about your computer, tablet or mobile phone, your IP address, geographic location, and which pages you click on (interests). The legal basis is consent (GDPR art. 6(1)(a)). You can read more about cookies in our cookie declaration.
Job applicants
When we receive an application and attachments, the submitted material is reviewed by the relevant manager in order to respond to and assess the content in relation to a defined job. The legal basis is legitimate interest (GDPR art. 6(1)(f)).
Applications and attachments are stored until the right candidate has been found and the recruitment process is complete. The application and attachments will then be deleted.
For unsolicited applications, the application and attachments are retained for up to 6 months, after which they are deleted.
If an application and attachments are stored for more than 6 months, separate consent is obtained from the candidate.
Our solutions
If you are registered in, or use, one of our solutions, we process your data in the role of data processor and in accordance with the data processing agreement entered into. We refer you to the data controller if you have further questions about the processing of your personal data.
Security
We have implemented appropriate technical and organisational measures to prevent your information from being accidentally or unlawfully deleted, published, lost, degraded, disclosed to unauthorised parties, misused or otherwise processed in breach of the law. We are certified annually under ISAE 3000 by an independent auditor.
Disclosure of information
We use a number of third parties for the storage and processing of data, including providers of IT solutions and hosting centres. These parties process information solely on our behalf and may not use it for their own purposes. In relevant cases, data is disclosed to, for example, banks and debt collection agencies.
We only use data processors in the EU or in secure third countries, as well as companies in countries that can provide adequate protection of your information. As a data processor outside the EU we use Google (for data collected via cookies), which is certified under the Data Protection Framework.
Your rights
You have the right at any time to be informed of what data we process about you, where it originates from and what we use it for. You can also be informed of how long we store your personal data and who receives data about you, to the extent that we disclose data in Denmark and abroad.
Right of access
If you request it, we can inform you of the data we process about you. Access may, however, be limited out of consideration for the privacy of other people, trade secrets and intellectual property rights.
You can exercise your rights by contacting us. You will find our contact details at the top of this page.
Right to rectification
If you believe that the personal data we process about you is inaccurate, you have the right to have it corrected. Please contact us and tell us what the inaccuracies consist of and how they can be corrected.
Right to erasure
In some cases we have an obligation to delete your personal data. This applies, for example, if you withdraw any consent you have given. If you believe that your data is no longer necessary for the purpose for which we collected it, you can ask to have it deleted. You can also contact us if you believe that your personal data is being processed in breach of the law or other legal obligations.
Here you also have the option of lodging a complaint with the Danish Data Protection Agency (Datatilsynet).
When you contact us with a request to have your personal data corrected or deleted, we investigate whether the conditions are met and, if so, carry out the changes or deletion as quickly as possible.
Right to object
You have the right to object to our processing of your personal data. You can also object to our disclosure of your data for marketing purposes. You can use the contact details at the top of this page to submit an objection. If your objection is justified, we will ensure that we cease processing your personal data.
Right to data portability
You also have the option of making use of data portability, should you wish your information to be moved to another data controller or data processor.
Contact us
Mirra A/S
Mileparken 22
2740 Skovlunde
Phone: +45 7199 8283
info@mirra.io