Privacy Policy
Welcome to Epico's privacy policy.
Version 1.0 - updated 28/3-2025
When you visit our website or otherwise interact with us, we collect information about you, which is used to customize, improve, and manage our content and services. Below we have elaborated on what information is collected, its purpose and which third parties have access to it.
Please also see our Cookiepolitik for information on which cookies we use.
We are the data controller – How do you contact us?
Epico-IT A/S
Borupvang 2C, 2. Floor
2750 Ballerup
CVR: 32466249
Email: dataprivacy@epico.dk
1. What is personal data
The Danish Data Protection Agency defines personal data as follows:
"Personal data is any type of information that can be attributed to a specific person, even if the person can only be identified if the information is combined with other information."
2. Processing of personal data
We process your personal data in different ways and for different purposes. Below you can read more about how your personal data is processed:
Website visitors
Purpose
When you use our website, we collect and process a number of information about your behavior for the purpose of collecting statistics about the use of the website, as well as for the purpose of being able to make targeted marketing.
Legal basis for the processing
The processing of personal data takes place under legitimate interest. We weigh the interests desired by the processing and ensuring that the processing does not violate fundamental rights.
Types of personal data
A unique ID and technical information is collected about your computer, tablet or mobile phone, your IP address, geographical location, and which pages you click on (interests).
Recipients of personal data
The personal data is not disclosed outside the company, but is left to data processors. We only use data processors in the EU/EEA or in countries that can provide your data with adequate protection.
Period of storage
The information is stored for the period permitted by law, and we delete it when it is no longer needed. Information that we collect for statistics is stored for 24 months, after which it is automatically deleted.
Automated decision-making and profiling
We do not use personal data in connection with automated individual decisions.
Creation in CV database
Purpose
When you create a profile on our website, we collect and process information about you and your job profile in order to be able to match you with relevant job opportunities, both freelance assignments, project employments and permanent employment with third parties.
Legal basis for the processing
The processing of personal data is based on your consent you give at the time of registration.
Types of personal data
When registering, we collect your CV, any application, password and a number of general contact information, including e-mail, telephone number and name.
Recipients of personal data
We disclose your personal data to companies with relevant job opportunities. However, the personal data is not disclosed outside the company without prior written agreement, but is left to data processors. We only use data processors in the EU/EEA or in countries that can provide your data with adequate protection.
Period of storage
The information is stored until you choose to withdraw your consent and request deletion of your personal data. In some cases, your profile may be deleted for extended periods of inactivity, and you will be informed if this happens.
Automated decision-making and profiling
We use your information to conduct a screening of our candidates, but do not use personal information in connection with automated individual decisions.
Signing non-disclosure agreements
Purpose
Before you are informed of potential positions or assignments, certain companies may require you to sign a non-disclosure agreement. This is because the job title or nature of the assignment may contain trade secrets. Your personal data will be processed in this case to ensure mutual confidentiality.
Legal basis for the processing
The processing of personal data takes place for the purpose of implementing measures taken prior to entering into a contract.
Types of personal data
Only your name and signature are processed in connection with this processing.
Recipients of personal data
We disclose your personal data to companies with relevant job opportunities. However, the personal data is not disclosed outside the company without prior written agreement, but is left to data processors. We only use data processors in the EU/EEA or in countries that can provide your data with adequate protection.
Period of storage
You can always obtain a copy of the confidentiality agreement, which is kept for a period of 5 years in order to be able to handle any disputes.
Automated decision-making and profiling
We do not use personal data in connection with automated individual decisions.
Application of Artificial Intelligence
Purpose
We use artificial intelligence (AI) as a tool to improve our recruitment processes and ensure an efficient and accurate assessment of CVs from both freelance consultants and candidates for permanent positions. AI technology helps us analyze and match qualifications, experience, and competencies with the requirements of the different positions. The data that customers provide to us, including job descriptions, values and the like, is used exclusively for the purposes described in the contracts entered into with the customers.
Legal basis for the processing
The processing of personal data is based on our legitimate interest in assessing candidates for the right positions. We ensure a balance between our interest in offering you relevant services and the consideration that the processing respects your fundamental rights.
Types of personal data
When consultants/candidates send their CV to us, we collect and process the personal data that the candidate has included in the CV. The information is used to assess the candidate's suitability for the positions applied for and to match them with relevant job opportunities. In addition, we receive information from customers, including job descriptions, company values, and the like. This information is used exclusively for the purposes set out in the contracts concluded with the customers.
Recipients of personal data
We disclose your personal data to companies with relevant job opportunities. However, the personal data is not disclosed outside the company without prior written agreement, but is left to data processors. We only use data processors in the EU/EEA or in countries that can provide your data with adequate protection.
Period of storage
The information is stored for as long as you have an active profile on our website. See more about storage and deletion under the section 'Creation in CV database'.
Automated decision-making and profiling
We use your data when we conduct a screening of candidates or freelance consultants, but do not use personal data in connection with automated individual decisions.
Enquiries via the website, e-mail or telephone
Purpose
When you contact us by phone, via contact forms or e-mail, we collect and process personal data for the purpose of being able to respond to your inquiry.
Legal basis for the processing
The processing of personal data takes place under legitimate interest. We weigh up the consideration that you have provided the personal data yourself with a view to being contacted or contacted by telephone and that the processing does not violate fundamental rights.
Types of personal data
General contact information such as company, name, position, telephone number and e-mail are collected. In addition, the content of the enquiry is processed, which may include information about current position, job wishes, CV, etc.
Recipients of personal data
The personal data is not disclosed outside the company, but is left to data processors. We only use data processors in the EU/EEA or in countries that can provide your data with adequate protection.
Period of storage
The data will be deleted within 24 months of the last processing if no collaboration or customer relationship is initiated, or if it is deemed that the data is necessary in relation to the processing.
Automated decision-making and profiling
We do not use personal data in connection with automated individual decisions.
Webinar registration
Purpose
When you sign up for a webinar, we collect and process personal data for the purpose of enabling you to participate in the webinar you sign up for, as well as for the purpose of being able to send notifications in connection with the webinar.
Legal basis for the processing
The processing of personal data takes place under legitimate interest. We weigh up the consideration that you have provided the personal data yourself in order to be registered for the webinar and that the processing does not violate fundamental rights.
Types of personal data
Name, e-mail, your IP address, title and organization are collected (voluntarily).
Recipients of personal data
As a general rule, the personal data is not disclosed outside the company, but is left to data processors. We only use data processors in the EU/EEA or in countries that can provide your data with adequate protection. If the webinar is held in collaboration with a third party, the personal data may be disclosed to this third party. This will typically be name and email.
Period of storage
The information will be deleted no later than 24 months after the webinar has ended.
Automated decision-making and profiling
We do not use personal data in connection with automated individual decisions.
Receiving newsletters
Purpose
When you sign up for our newsletter, we collect and process personal data for the purpose of being able to send out our newsletter.
In connection with your consent to receive online communication and marketing, EPICO-IT A/S may contact you separately.
Legal basis for the processing
The processing of personal data is based on consent. You can withdraw your consent at any time by writing to us. It is also possible to unsubscribe from the newsletter via an "unsubscribed" link at the bottom of the newsletter.
Types of personal data
Name, e-mail and IP address are collected.
Recipients of personal data
The personal data is not disclosed outside the company, but is left to data processors. We only use data processors in the EU/EEA or in countries that can provide your data with adequate protection.
Period of storage
The information is stored as long as you are signed up to receive our newsletter. If it is not possible to deliver emails to your account, we reserve the right to delete your email.
Automated decision-making and profiling
We do not use personal data in connection with automated individual decisions.
Marketing
Purpose
When you participate in our campaigns, events, customer cases, or as references and testimonials, we process personal data for the purpose of being able to use it for marketing.
Legal basis for the processing
The processing of personal data is based on consent. You can withdraw your consent at any time by writing to us – marketing@epico.dk
Types of personal data
Name, e-mail, position and company are collected.
Recipients of personal data
The personal data is not disclosed outside the company, but is left to data processors. We only use data processors in the EU/EEA or in countries that can provide your data with adequate protection.
Period of storage
The data will be deleted within 24 months of the last treatment.
Automated decision-making and profiling
We do not use personal data in connection with automated individual decisions.
Social Media Visitors
Purpose
We collect and process personal data when you visit our Facebook, Instagram and LinkedIn pages. The purpose of the processing is to be able to market to potential customers, respond to inquiries and similar related purposes.
Legal basis for the processing
The processing of personal data takes place under legitimate interest. We weigh up the consideration that you have visited our pages on social media and that the processing does not violate fundamental rights.
Types of personal data
Typically, name and other personal data related to your user profile are collected.
Recipients of personal data
The personal data is not disclosed outside the company, but is left to data processors. We only use data processors in the EU/EEA or in countries that can provide your data with adequate protection.
Period of storage
The information is stored for as long as your action on our Facebook, Instagram and LinkedIn page exists.
Automated decision-making and profiling
We do not use personal data in connection with automated individual decisions.
Use of our services as a customer
Purpose
When you use our services, we collect and process personal data for the purpose of being able to provide these, as well as for the purpose of providing you with information and news about our services and the like.
If you pay for our services, we also process your personal data for the purpose of being able to invoice in accordance with the rules of the Danish Bookkeeping Act and to send the invoice.
Legal basis for the processing
The processing of personal data is based on the performance of a contract, as well as under legitimate interest, as we weigh the consideration that you use our services and that the processing does not violate fundamental rights.
Types of personal data
Name, e-mail, telephone number, title and department are collected and processed.
In connection with invoicing, an internally generated invoice number is also processed.
Recipients of personal data
The personal data is not disclosed outside the company, but is left to data processors. We only use data processors in the EU/EEA or in countries that can provide your data with adequate protection.
Period of storage
The information is stored for as long as the customer relationship exists and is deleted within 24 months after the customer relationship has ended.
Information for bookkeeping is stored until 5 years after the end of the financial year.
Automated decision-making and profiling
We do not use personal data in connection with automated individual decisions.
Communication for sale
Purpose
We may collect and process personal data from third parties (via interviews, the company's website, social media or similar) for the purpose of selling our services.
Legal basis for the processing
The processing of personal data takes place under legitimate interest. We weigh up the consideration that the desire for the treatment outweighs the desire not to carry out the treatment, and that the treatment does not violate fundamental rights.
Types of personal data
Name, title, e-mail, telephone number and company are collected.
Recipients of personal data
The personal data is not disclosed outside the company, but is left to data processors. We only use data processors in the EU/EEA or in countries that can provide your data with adequate protection.
Period of storage
The data will be deleted within 24 months of the last processing if no collaboration or customer relationship is initiated, or if it is deemed that the data is necessary in relation to the processing.
Automated decision-making and profiling
We do not use personal data in connection with automated individual decisions.
Job applications for positions in Epico-IT
Purpose
When you send us a job application, we process your data for the purpose of assessing and selecting the applicant in relation to a specific job.
Legal basis for the processing
The processing of personal data takes place under legitimate interest. We weigh up the consideration that you have submitted the personal data yourself in order to be assessed in relation to a specific job.
Types of personal data
The personal data contained in the application and CV is processed for the purpose of evaluating the application. We will also evaluate and assess the applicant's performance and competencies via an interview.
Recipients of personal data
The personal data is not disclosed outside the company, but is left to data processors. We only use data processors in the EU/EEA or in countries that can provide your data with adequate protection.
Period of storage
The information will be deleted within 6 months after the rejection has been given, if a dialogue about possible employment is not initiated.
Automated decision-making and profiling
We do not use personal data in connection with automated individual decisions.
4. Security
We have taken technical and organisational measures to prevent your data from being accidentally or illegally deleted, published, lost, impaired or coming to the knowledge of unauthorised persons, being misused or otherwise processed in violation of the law.
5. Period of storage
The information is stored for the period permitted by law, and we delete it when it is no longer needed. The period depends on the nature of the information and the reason for storage.
Read more under section 2 "Processing of personal data".
6. Your rights
You have a number of rights in relation to the processing of your personal data. The rights mean, among other things, that you can be informed about what personal data we have about you, and that you can, under certain conditions, have the information deleted.
If you wish to exercise one of your rights, please contact us by e-mail at dataprivacy@epico.dk. We will then contact you in relation to which rights you wish to assert and to verify your identity.
The right of access
You have the right to request access to the personal data that we process about you. This means that you can ask us about what personal data we process for what purpose, etc.
The right to object
You have the right to object if you disagree with a specific processing taking place. This means that the information may continue to be used for other lawful purposes.
The right to request rectification
You can ask for correction/correction of personal data that you believe is not correct.
The right to request erasure
You can request the deletion of personal data that you believe we should not or must not have registered. This right is not final, as certain personal data cannot be deleted due to other legislation or if the agreement and purpose provide the right to store the personal data.
The right to ask for restriction
You can ask for the processing of the personal data to be restricted. This means that the personal data is not deleted, but that it is specified that it may not be processed and that access to it is restricted.
The right to data portability
You have the right to receive your personal data in a machine-readable format. Please note that this is only the personal data you have provided to us. You have the right to have your personal data that you have provided to us transferred to you in a structured, commonly used and machine-readable format.
The right to withdraw consent
If the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time.
The right to complain
If you have any questions about the processing of your personal data, you are welcome to contact us at dataprivacy@epico.dk.
If you are dissatisfied with our processing of your personal data, you can lodge a complaint with or contact the Danish Data Protection Authority (the Danish Data Protection Agency). You can also go to court at any time to clarify a case concerning the processing of personal data.