Verdo’s policy for processing personal data (version 2 of 3 May 2018)
1. Data controllers
Depending on the services that Verdo provides to you, the following company is the data controller for your personal data:
District heating: Verdo Varme A/S, CVR no. 25482026
Water: Verdo Vand A/S, CVR no. 31600359
Electricity: Verdo Go Green A/S, CVR no. 25481941
Heatlets wood pellets: Verdo Trading A/S, CVR no. 10125421
Technical infrastructure: Verdo Teknik A/S, CVR no. 25481992
2. Contact details
If you have any questions about the processing of your personal data, you are always welcome to contact:
Agerskellet 7, DK-8920 Randers NV
Telephone: +45 89 11 48 11
3. Verdo’s processing of your data
Verdo collects and uses personal data to deliver services, products or information to you. No matter which service or product Verdo is delivering to you, Verdo generally processes the following data about you:
• Telephone number and email address
• Meter/installation number and consumption data (only applies to power/water/heating supply)
3.1. Processing of civil registration number
If you buy electricity from Verdo, or if you are connected to the electricity grid, we will process your civil registration (CPR) number. This is necessary to register you as a customer in the data hub and to supply/distribute electricity to you.
The data hub is owned and managed by Energinet.dk, which, pursuant to the Danish Electricity Supply Act (Elforsyningsloven), requires the customer’s civil registration number for creation of the customer as an electricity/electricity grid customer in the data hub.
Therefore, Verdo has a legal obligation to obtain your civil registration number, and it is thus not possible to supply/distribute electricity to you without your civil registration number.
You can read more about the data hub at www.energinet.dk.
e-Boks and NemKonto:
If you buy electricity, water or heating from Verdo, we may also process your civil registration number to send letters, annual statements etc. to you via e-Boks and/or to disburse any amounts to you via NemKonto.
Verdo will only process your civil registration number for use for e-Boks and NemKonto if you have voluntarily disclosed your civil registration number to Verdo for this purpose and thus consented to Verdo using e-Boks and/or NemKonto.
If you have consented to Verdo processing your civil registration number for use of e-Boks and/or NemKonto, you can withdraw your consent at any time by contacting Verdo using the above contact details.
Verdo will immediately stop using your civil registration number for e-Boks and NemKonto if you withdraw your consent.
3.2. Processing of personal data for direct marketing purposes
In order to optimise the services that Verdo offers, Verdo may want to use your personal data for direct marketing purposes.
Out of respect for you, Verdo will only use your personal data for this purpose if you have consented to this.
If you have consented to Verdo processing your personal data for direct marketing purposes, you can withdraw your consent at any time by contacting Verdo using the above contact details or at firstname.lastname@example.org.
If you withdraw your consent, Verdo will immediately stop using your personal data for direct marketing purposes.
4. Erasure and/or anonymisation
We will process the information about you for as long as Verdo delivers services or products to you, and we will erase/anonymise your personal data when we no longer need them, to the extent that this is technically possible.
Generally, this means that your personal data will be erased/anonymised five years after
- you have moved away from Verdo’s supply area or have terminated all agreements with Verdo, and
- all outstanding balances/unresolved disputes between you and Verdo have been settled.
There may be specific exceptions to these time limits for erasure.
5. Disclosure of personal data
The individual Verdo companies acting as data controllers will disclose your personal data to Verdo’s parent company, which processes information about you on behalf of the companies.
In addition, we will disclose your personal data to others to the extent that we are required to do so by law, as well as to our suppliers to the extent necessary to deliver a service which involves you.
At Verdo, we have a high standard for our suppliers’ processing of personal data, and we are committed to ensuring that everyone we disclose information to complies with the data protection legislation.
6. Your rights
As part of Verdo’s processing of your personal data, you have the following rights:
- Right to receive information about how and for what purposes we process your personal data
- Right of access to the personal data we process about you
- Right to have inaccurate personal data rectified
- Right to have your personal data erased
- Right to restricted processing of your personal data
- Right to transmit data (data portability)
- Right to object to the processing of your personal data
- Right not to be subject to a decision based solely on automated processing, including profiling
If you have any questions about your rights or want to exercise your rights, please contact Verdo using the above contact details.
You can read more about your rights in the Danish Data Protection Agency’s guide on the rights of data subjects, which is available at www.datatilsynet.dk.
7. Complaints guideline
You have the right to lodge a complaint with the Danish Data Protection Agency if you are dissatisfied with the way in which Verdo processes your personal data.
You can find the Danish Data Protection Agency’s complaints guideline (in Danish) and contact details at www.datatilsynet.dk.
8. Safety standards and addressing data breaches
Verdo has implemented a number of technical and organisational measures to ensure protection of your personal data against accidental or unlawful destruction, loss or alteration and against unauthorised disclosure, abuse or other processing in violation of applicable law.
If we identify security breaches or are informed that the security in connection with processing of personal data becomes – or is at risk of becoming – compromised to such an extent that it poses a high risk to your rights or freedoms, we will immediately inform you about this.
Verdo has also implemented a special procedure for how any personal data breaches must be handled, including how the Danish Data Protection Agency and Verdo’s customers are to be informed.
9. Control and changes
Verdo carries out ongoing control to ensure that the processing of personal data is in compliance with the data protection law at all times.
Verdo will consider on an ongoing basis whether this policy for processing personal data should be revised. If the policy is revised, you will be able to see the revised policy at www.verdo.com.