Data controller

As an organization, we are responsible for controlling the personal data we receive concerning collaboration partners. Our contact information is available below.

Aarhus Centre for Regenerative Building
Europaplads 8, st. th.
8000 Aarhus C

Aarhus Centre for Regenerative Building was developed by the following partner organizations:
- Søren Jensen Engineering Consultants CVR 15684046
- Aarhus School of Architecture CVR 27120717
- Aarhus University, Department of Civil and Architectural Engineering CVR 31119103

Data processing operations

As data controllers, cf. GDPR, the centre has the following operations for data processing:

Visits on webpage

When you visit the ACRB webpage, cookies are used to allow the webpage to function. You can read more about this in our [Cookie Policy or by clicking on the cookie icon on the frontpage].

Communication with collaboration partners

In case of questions concerning the webpage or curiosity to hear more about our work, you can contact us via:

• Email: msh@cae.au.dk
• Phone: +45 9352 1423

Through these channels we will use your personal data to engage in dialogue with you, e.g. answer questions about our work and collaboration opportunities. We only use the information that you provide yourself in cases of direct communication.

Typically, we will process the following information: Name, email, phone number.

Our legal base for processing personal data is The General Data Protection Regulation, article 6 (1)(f).

We delete all communication with you when it becomes clear if you wish to engage in a collaboration or not.

The centre may keep your personal data for longer, in special cases where these are particularly needed. 

Collaboration partners and other interested parties

We need to communicate with our collaboration partners and other interested parties to ensure the delivery of our work is correct. In these cases, we may process information such as name, address, output, special agreement, events, etc.

Our legal base for processing personal data is The General Data Protection Regulation, article 6 (1)(b).

Bookkeeping

Invoices and similar enclosures for bookkeeping will be transferred to the responsible partner organization, in cases where these needs to be saved cf. the Danish Bookkeeping Act. These documents may hold personal data such as name, address and output descriptions.

Our legal base for processing personal data is The General Data Protection Regulation, article 6 (1).

We keep this information for a minimum of 5 years until present financial year is concluded.

Job applications

ACRB does not hire staff directly. Appointment happens through one of the partner organizations, which is why it is suggested to enquire directly at a relevant partner organization.

If you send us a job application, our legal base for processing personal data is The General Data Protection Regulation, article 6 (1)(f). If you send an unsolicited application, a member of the working group will process your application and immediately delete your information again.

If you are part of a recruitment procedure and/or hired at one of the partner organizations, you will receive information on your personal data processing directly from that entity.

Data processors

Few can handle everything on their own. The same applies to us. As a result, we have collaboration partners, as well as vendors, and some might of these might be data processors.

External vendors may deliver systems to help organize our work, different services, counselling, IT-hosting or marketing.

• Google – processing of visiting data for web statistics
• Leadfeeder - registration of visits on acrb.dk
• spring-cc.com – hosting and counselling of/on the site

It is our responsibility to ensure that personal data attained in this manner is processed correctly. As a result, we have high demands to our collaboration partners, and all partners must ensure that your personal data is protected.

As a result, we make agreements with all data processors that handle personal data on our behalf to enhance the security of your information.

Disclosure of personal data

ACRB does not disclose your data with third parties.

Profiling and automatized rulings

ACRB does not use profiling or automatized rulings.

Third country transfers

As a starting point we only use EU/EØS data processors that keep their data storage in EU/EØS.

When this is not an option, some data processors may be located outside EU/EØS, as long as they can provide sufficient protection of the personal data.

Security of processing

We keep all personal data safe by installing appropriate technical and organizational measures in the partnering organizations.

The partnering organizations are periodically making risk assessments that have resulted in the installment of appropriate technical and organizational measures to enhance the security of processing.

Registered rights

Cf. The General Data Protection Regulation you have a series of rights concerning our processing of your data.

If you wish to assert these rights you must contact us, for us to assist you.

The right to see information (inspection right)

You have a right to gain access to the information we have processed about you, as well as a series of supplementary information.

The right to rectification (rectification right)

You have the right to have false information about you rectified.

The right to deletion

In rare cases you have the right to have certain information about you deleted before our usual set timeframes for deletion set in.

The right to restriction of processing

In certain cases, you have the right to restrict the processing of your personal data. If you have the right to restrict the processing of your data, we are henceforth only allowed to process data (with the exemption of storing data) with your consent or with the purpose of protecting a person or important societal interests. This only applies in cases where the legal claim can be determined, is valid and defendable.

The right to object

In certain cases, you have the right to object to our legal processing of personal data. You can also object to the processing of your data in relation to direct marketing.

The right to transmit information (data portability)

In certain cases, you have the right to receive your personal data in a structured, generally applied and machine-readable format as well as having your personal data transferred from one data controller to another without hindrance.

You can read more about your rights in The Danish Data Protection Agency guidance on registered rights, available at https://www.datatilsynet.dk/english.

Withdrawal of consent

In cases where our processing of your data is based on your consent, you have the right to withdraw this consent.

Lodge a complaint with The Danish Data Protection Agency

If you are unsatisfied with the way we process your personal data, you have the right to lodge a complaint with The Danish Data Protection Agency. You can find their contact information at https://www.datatilsynet.dk/english.

Generally, we would like to encourage you to read more about GDPR, to stay informed on the rules.