Privacy Policy
At IMPACT (“we”, “us” or “our”) we give high priority to confidentiality and data security. This privacy policy applies to our processing of personal data and establishes guidelines for the way IMPACT processes your personal data and provides you with the information that you are entitled to receive under applicable data protection laws. You should read the privacy policy before you hand over your personal data to IMPACT.
Data controller and contact information
The data controller of your personal data collected on the websites www.impact.dk and www.impactcommerce.com is:
IMPACT A/S
Address: Søren Frichs Vej 44D, 8230 Åbyhøj, Denmark
Business reg. no.: 25858832
Email: GDPR@impactcommerce.com
IMPACT is joint controller with LinkedIn Ireland Unlimited Company and Meta Platforms Ireland Limited, respectively, for the placing of LinkedIn cookies, Instagram cookies and Facebook cook-ies on IMPACT’s websites. You can find more information on the joint controllership, including the distribution of tasks and the providers’ procesisn of your personal data in the section ‘If you visit our profiles on social media’ below.
Types of personal data
IMPACT uses cookies on the websites www.impact.dk and www.impactcommerce.com and does, in this connection, process your personal data. IMPACT may collect the following personal data about you when you visit our website:
- IP address
- Browsing History
- Information about your use of our website, including click-behaviour
We use cookies to collect the above-mentioned personal data. You can read more about the use of cookies in our cookie policy, which you can find via this link.
The purposes of the processing
Your personal data may be processed for the following purposes:
- To make the website and its functionalities available to you, including to enable the web-site to remember your settings
- To give you a better user experience
- Marketing, if you have accepted the use of marketing cookies
- Product and service development, if you have accepted statistical cookies
- Statistics and analysis with a view to optimizing the website, if you have accepted statisti-cal cookies
- If you accept marketing cookies and statistical cookies, we may share your personal data with providers of social media and other cookie providers to improve their services, provide IMPACT with statistics and enable advertising. Those providers may be established in or may transfer your personal data to recipients in countries outside the EU/EEA which does not have the same level of protection as we do.
Legal basis for processing
IMPACT processes your personal data on the following basis:
- Consent: We base the processing of your personal data with a view to target our market-ing across platforms on your consent when you have provided your consent for the use of marketing cookies. In addition, we base the sharing of your personal data with providers of social media and other cookie providers on your consent to the use of marketing cookies and statistical cookies (Article 6(1)(a) of the General Data Protection Regulation).
- Legitimate interests: We base the processing of your personal data through necessary, functional and statistical cookies (where these cookies does not entail disclosure to third parties) on our legitimate interests in conducting statistics, analyses, as well as improving and developing our products and services (Article 6(1)(f) of the General Data Protection Regulation).
When you visit our website, we ask for your informed consent to place cookies that are not func-tional cookies according to the cookie rules. You have the right to withdraw your consent at any time. You may change your cookie setting through the small round icon in the lower left corner of the website. In addition, you can read more about how you delete cookies our cookie policy here.
Retention period
Cookies are deleted in accordance with our cookie policy, which is available here. Personal data collected through cookies is deleted no later than 2 years after the collection. However, the infor-mation may be stored for a longer period in anonymised form.
Data controller and contact information
The data controller for your personal data collected in relation to events, webinars and seminars is the IMPACT entity which arranges the event, webinar or seminar. This will appear from the information concerning the event, webinar or seminar in question. Feel free to contact us at GDPR@impactcommerce.com if you are in doubt who the data controller in relation to an event, webinar or seminar, you have signed up for, is. The contact information on the IMPACT entities that arrange events, webinars and seminars are:
IMPACT A/S
Address: Søren Frichs Vej 44D, 8230 Åbyhøj, Denmark
Business reg. no.: 25858832
Email: GDPR@impactcommerce.com
IMPACT Extend A/S
Address: Laplandsgade 4A, 2300 Copenhagen S, Denmark
Business reg. no.: 39186381
Email: GDPR@impactcommerce.com
Types of personal data
IMPACT collects, processes and stores your personal data when you sign up for an event, webinar or seminar. IMPACT may collect the following personal data about you in that context:
- Name, email address and phone number
- Your title and what firm you are employed with
- Your country and your expectations for the event, webinar or seminar, if you choose to submit such information
- Which event, webinar or seminar you have signed up for
- Date and time of participation
- Sign-up date
- Payment information
- Information on which IP address you participate from if you participate in a webinar
- Picture and photo collected in relation to events and seminars
Purposes of the processing
Your personal data may be processed for the following purposes:
- To be able to administrate your sign-up for our event, webinar or seminar, including to be able to ensure a fortunate event, webinar or seminar.
- To be able to collect and administrate payment for your participation in the event, webinar or seminar.
- To be able to comply with legal requirements, e.g. the storage requirements following from local bookkeeping legislation.
- Pictures and videos are processed with a view to promote IMPACT and IMPACT’s events, seminars and webinars. Due to this, photos and video may be shared on IMPACT’s social media and website.
- In cases where we arrange an event, webinar or seminar in cooperation with a third party, we may share information on your participation, including your name, title and where you work, with a view to give our partner insights on who will be participating and the possibility of tayloring the event, webinar or seminar accordingly. If an event is held in cooperation with a third party, this information will appear from the description of the event, webinar or seminar.
Legal basis for processing
IMPACT processes your personal data on the following legal bases:
- Contract: We process your personal data, including your payment information, with a view to comply with the agreement we have entered into with you concerning your participation in our event, webinar or seminar (Article 6(1)(b) of the General Data Protection Regulation).
- Legitimate interests: The processing of your personal data in relation to the administration and arrangement of the event, webinar or seminar, including any potential sharing of information on your participation with partners is based on our legitimate interests in enabling the administration and arrangement as well as optimal arrangement of the event, webinar or seminar. The processing of picture and video material is based on our legitimate interests in promoting our business and our events, webinars and seminars (Article 6(1)(f) of the General Data Protection Regulation).
- Legal obligation: According to local bookkeeping legislation we are obliged to store personal data which forms part of bookkeeping material, and due to this we process personal data concerning your sign-up, including your name, contact information, title, where you work as well as any payment information with a view of complying with this legal obligation (Article 6(1)(c) of the General Data Protection Regulation).
Retention period
We store your personal data collected in relation to the administration and arrangement of the event, webinar or seminar for up to 1 year after the event, webinar or seminar has been held. Personal data which forms part of bookkeeping material is, however, kept for 5 years from the end of the financial year to ensure compliance with our obligation under local bookkeeping legislation to store such information.
Data controller and contact information
The data controller for your personal data collected in relation to signing up for our newsletter is the IMPACT entity whose newsletter you decide to sign up to. Feel free to contact us at GDPR@impactcommerce.com if you are in doubt who the data controller in relation to an event, webinar or seminar, you have signed up for, is. The contact information on the IMPACT entities which sends newsletters are:
IMPACT A/S
Address: Søren Frichs Vej 44D, 8230 Åbyhøj, Denmark
Business reg. no.: 25858832
Email: GDPR@impactcommerce.com
IMPACT Extend A/S
Address: Laplandsgade 4A, 2300 Copenhagen S, Denmark
Business reg. no.: 39186381
Email: GDPR@impactcommerce.com
Types of personal data
IMPACT collects, processes, and stores your personal data for marketing purposes when you sign up for newsletter. IMPACT may collect, process, and store the following types of your personal data:
- Name and e-mail address
- Your consent
- Click-behaviour related to the newsletter
The purposes of the processing
Your personal data may be processed for the following purposes:
- Marketing of the IMPACT group’s services
- Documentation for compliance with local marketing practices legislation
- Statistics and analysis
Legal basis for processing
IMPACT processes your personal data on one or more of the following grounds:
- Consent: IMPACT will only use your personal data for direct marketing, including for sending out newsletters, if you have given your prior and explicit consent to this (Article 6(1)(a) of the General Data Protection Regulation).
- Legitimate interests: The processing of your personal data in relation to storage of documentation for IMPACT’s compliance with local marketing practices legislation is based on our legitimate interests in being able to document our compliance in accordance with the recommendations of the Danish Consumer Ombudsman (Article 6(1)(f) of the General Data Protection Regulation).
Retention period
Your personal data will be stored as long as your consent to receive newsletters is active.
You can always withdraw your consent by clicking on the unsubscribe link at the bottom of each e-mail or by contacting us as described below. However, withdrawing your consent does not affect the legality of the processing that preceded the withdrawal.
Documentation of your marketing consent is kept for 2 years from the time you have withdrawn your consent to receive direct marketing material. In addition, the information can be stored for a longer period in anonymised form.
Data controller and contact information
The data controller of your personal data collected and processed when you apply for a job with IMPACT is the IMPACT entity which you seek employment with. The recruiting IMPACT entity will appear from the job advertisement and you may find the contact information for each of your entities below. If you use the ‘Connect with us’ functionality on our career portal, IMPACT A/S is the data controller for the processing of your personal data.
If you are in doubt who the data controller for the processing of your personal data is, feel free to contact us at GDPR@impactcommerce.com.
IMPACT A/S
Address: Søren Frichs Vej 44D, 8230 Åbyhøj, Denmark
Business reg. no.: 25858832
Email: GDPR@impactcommerce.com
IMPACT Extend A/S
Address: Laplandsgade 4A, 2300 København S, Denmark
Business reg. no.: 39186381
Email: GDPR@impactcommerce.com
FIRSTIMPACT, UNIPESSOAL LDA
Address: Av. D. João II, Torre Fernão de Magalhães, 43, 9, 1990-084 Lissabon, Portugal
Business reg. no.: 515617091
Email: GDPR@impactcommerce.com
Imdepo
Address: Rua Circular Norte, Edifício Nere, Parque Industrial e Tecnológico,7005-841 Évora, Portugal
Business reg. no.: 514368381
Email: GDPR@impactcommerce.com
IMPACT Commerce AB
Address: Kungsholmstorg 5112, 21 Stockholm, Sweden
Business reg. no.: 556229-234101
Email: GDPR@impactcommerce.com
Improove DOO
Address: Terazije 12, 11000 Beograd, Serbien
Business reg. no.: 110951177
Email: GDPR@impactcommerce.com
IMPACT COMMERCELABS INDIA PRIVATE LIMITED
Address: 8th Floor World Trade Centre Unit No 801, Dholepatil Farm Rd EON Free Zone Kharadi, Pune,
Pune, Maharashtra, India, 411014
Business reg. no.: PNEI11572B
Email: GDPR@impactcommerce.com
Types of personal data
When you apply for a job with IMPACT, we process your personal data in relation to the recruitment process. We recommend that your application does not contain national identification number of sensitive personal data such as information which reveals race or ethnicity, religion, union membership, sexuality or health information.
IMPACT may in connection with the recruitment, including in relation to your use of the ‘Connect with us’ functionality, collect, process, and store the following personal data:
- Contact information such as name, email address and phone number
- Your profile picture from Facebook or LinkedIn, if you use Facebook or LinkedIn to log in to our career portal
- Language preferences
- Personal data which you have disclosed in your job application and CV as well as any attachments
- Relevant information about you, including information regarding your previous jobs, activities, competencies, performance, as well as your general appearance, which is publicly available on the internet, including on social media
- Information you provide us with during interviews. This may, depending on the circumstances, include salary information
- Results of personality tests if you complete such tests
- Criminal records if necessary in relation to the position you have applied for
- References from your previous and/or current employers which you have stated in your application or which you have otherwise appointed as references
Purposes of the processing
Your personal data will be processed for the purpose of assessing whether we can offer you a position at IMPACT. In addition, we may process your personal data with a view to documenting the recruitment process.
Lastly, we may, if you have provided your consent for this, store your personal data with the purpose of contacting you in relation to other positions which may be relevant to you. That is, for example, the case when you have signed up for ‘Connect with us’.
Legal basis
IMPACT will process your personal data based on the following legal bases:
- Legitimate interests: We may process your personal data on the basis of our legitimate interests in assessing whether we wish to offer you a position, including based on the information you provide in your CV, application and any attachments, based on relevant information which is publicly available on the internet and social media, results of personality tests, references from any references you have provided and other information provided by you during the recruitment process. The processing may also be necessary for us to be able to defend or exercise legal claims (Article 6 (1) (f) of the GDPR). If we need to review your criminal records in relation to our assessment, we process this information on the basis of our legitimate interests in ensuring that you can properly be entrusted with the position (Article 10 of the General Data Protection Regulation and Section 8(3) of the Danish Data Protection Act).
- Consent: We process your personal data with a view to consider you for other positions for which we find that you may be relevant as a candidate, e.g. when you have signed up for ‘Connect with us’. Such processing is based on your consent (Article 6 (1) (a) and 9 (2) (a) of the General Data Protection Regulation).
Retention period
If you are offered a position with IMPACT, your application and additional relevant personal data obtained during the recruitment procedure will be stored in your employee file.
If you are not offered a position, we will store your application and any additional personal data obtained during the recruitment procedure for a period of 6 months following our rejection, unless you have provided your consent to the storage hereof for a longer period.
You may at any time withdraw any consents you have provided as a part of the recruitment process. Withdrawal of your consent will affect the processing going forward but does not affect the legality of the processing based on your consent prior to your withdrawal. If you wish to withdraw your consent, you may contact us as stated below.
If we have collected your criminal records, we will delete them immediately after we have received and reviewed them.
Data controller and contact information
The data controller of your personal data processed when you contact IMPACT through our info mail (info@impactcommerce.com), our press mail (kha@impactcommerce.com) or our support mail (support@impact.dk) or on the phone is:
IMPACT A/S
Address: Søren Frichs Vej 44D, 8230 Åbyhøj, Denmark
Business reg. no.: 25858832
Email: GDPR@impactcommerce.com
Types of personal data
IMPACT may collect, process and store the following types of personal data about you when you contact us as stated above:
- Your contact information such as name, email address, phone number and, if relevant, title and place of work
- What your inquiry concerns including the subsequent correspondence
- Date and time of your inquiry/ies
Purposes of the processing
Your personal data may be processed for the following purposes:
- To be able to respond to your inquiry and otherwise communicate with you
- To provide customer service and support
- To carry out statistics and analysis
- Documentation of the correspondence
Legal basis of the processing
IMPACT processes your personal data on the following legal basis:
- Legitimate interests: The processing of your personal data in relation to the handling of your inquiry is based on our legitimate interests in being able to handle your inquiry and otherwise communicate with you, provide customer service and support, carry out statistics and analysis with a view to improve and develop our business as well as to document the correspondence, including our handling of your inquiry (Article 6(1)(f) of the General Data Protection Regulation).
Retention period
Your personal data will be kept for up to 2 years, depending on the nature of the inquiry. The information may, however, be kept for longer in anonymised form.
This section contains the policy for IMPACT’s processing of personal data collected through IMPACT’s profiles or social media pages.
IMPACT and the providers of LinkedIn and Facebook and Instagram, respectively, are jointly responsible for the processing of personal data collected in connection with your visit to IMPACT’s profile or page on the individual social media platform. IMPACT complies with the General Danish Data Protection Agency’s guidelines on shared data liability and, using available tools and means, tries to ensure that you receive information about the processing of your personal data when you visit IMPACT’s profiles or pages on social media.
IMPACT and the providers of LinkedIn and Instagram and Facebook have concluded agreements on the distribution of data protection tasks. According to these agreements, IMPACT and the providers of the social media are each responsible for the tasks connected with the processing they carry out. However, it has been agreed between IMPACT and the provider of Instagram and Facebook that the provider is responsible for enabling you to exercise your rights as described in the section ‘Your rights’ below, in relation to the use of Facebook and Instagram, and IMPACT is responsible for providing you the information stated below. In addition, it has been agreed between IMPACT and LinkedIn that LinkedIn is responsible for responding to requests from you concerning the rights described in the section ‘Your rights’ below.
Furthermore, IMPACT uses the provider of YouTube as a processor in relation to IMPACT’s use of YouTube and does, in this regard, also share certain information regarding your interactions, interests etc. with YouTube. This sharing is carried out on the basis of IMPACT’s and Google’s legitimate interests in optimizing marketing and the service, including our videos on YouTube (Article 6(1)(f) of the General Data Protection Regulation).
IMPACT has profiles or pages on the following social media platforms:
- YouTube (Google Ireland Ltd.)
- LinkedIn Ireland Unlimited Company
- Instagram (Meta Platforms Ireland Ltd.)
- Facebook (Meta Platforms Ireland Ltd.)
Collection of personal data
When you visit or interact with our social media profiles, IMPACT and the social media provider may collect, process, and store the following types of personal data about you:
- Information available on your profile, including your name, gender, civil status, workplace, interests, image, and your city
- Whether you “like” or have applied other reactions to our profile
- Comments you leave on our posts
- That you have visited our profile
The purposes of the processing
IMPACT processes your personal data for the following purposes:
- Improving our products and services, including our social media profiles and pages
- Statistics and analysis
- To be able to communicate with you if you comment on a post, make a review, or send us a message
- Marketing in general
Social media providers process your personal data for the following purposes:
- Improving their ad system
- To provide IMPACT with statistics which the social media providers produce based on your visit to our profiles and pages
- Advertising and customising the activities on the page
Legal basis for processing
The processing of your personal data is based on the following basis:
- Legitimate interests: IMPACT bases the processing of your personal data on our legitimate interests in being able to communicate with and market us to you on our social media profiles, as well as our legitimate interest in improving our products and services (Article 6(1)(f) of the General Data Protection Regulation).
Social media providers base the processing of your personal data on their legitimate interests, including their interest in improving their ad system and providing statistics to IMPACT, which the social media provider, for example, prepares based on your visit to IMPACT’s profile or social media page. In addition, the social media providers have a legitimate interest in providing an innovative, individually adapted, secure and profitable service (Article 6(1)(f) of the General Data Protection Regulation).
- Consent: The social media providers process some of your personal data in accordance with your consent, which you can withdraw at any time through your social media privacy settings (Article 6(1)(a) of the General Data Protection Regulation).
Retention period
We encourage you to delete your posts, comments and other reactions on our profiles if you no longer want these to be accessible on our social media. Your private messages to IMPACT will be kept for up to 1 year. However, the information can be stored for a longer period in anonymised form.
Please refer to the privacy policy of the provider for each of the social media platforms for information on how long they store your personal data.
Who do social media providers share your personal data with?
Social media providers may, among other things, share your personal data with the following categories of recipients:
- Other devices in the group of which the social media provider is a part of
- External partners providing analysis- and survey services
- Advertisers
- Other individuals visiting our social media profile or page (to the extent that your information is publicly available)
- Researchers and other academics
- You can find more information about who the social media providers share your personal data with, in each provider’s privacy policy.
- The social media providers may transfer their personal data to recipients outside the EU/EEA in accordance with applicable data protection legislation. Such transfers are based on the EU Commission’s standard contractual clauses which you have a right to request a copy of. You can read more in each provider’s privacy policy.
You can read more about who IMPACT shares your personal data with, in the Section Disclosure to other data controllers and hand over to data processors below.
Data controller and contact information
The data controller of your personal data collected in relation to our handling of leads is the IMPACT entity you have shown interest in or which you are in contact with. If you are in doubt who the data controller is, feel free to contact us at GDPR@impactcommerce.com.
The contact information for the different IMPACT entities are:
IMPACT A/S
Address: Søren Frichs Vej 44D, 8230 Åbyhøj, Denmark
Business reg. no.: 25858832
Email: GDPR@impactcommerce.com
IMPACT Extend A/S
Address: Laplandsgade 4A, 2300 Copenhagen S, Denmark
Business reg. no.: 39186381
Email: GDPR@impactcommerce.com
IMPACT Commerce AB
Address: Kungsholmstorg 5112, 21 Stockholm, Sweden
Business reg. no.: 556229-234101
Email: GDPR@impactcommerce.com
Types of personal data
IMPACT collects, processes, and stores your personal data when you show interest in our services, e.g. by signing up for events or newsletters or provide us with your business card. IMPACT may collect, process, and store the following types of your personal data:
- Name, email address and phone number
- Title and place of work
The purposes of the processing
Your personal data may be processed for the following purposes:
- Marketing of the IMPACT group’s services (where consent is not required)
Legal basis for processing
IMPACT processes your personal data on one or more of the following grounds:
- Legitimate interests: The processing of your personal data in relation to marketing where consent is not required is based on our legitimate interests in being able to document our compliance in accordance with the recommendations of the Danish Consumer Ombudsman (Article 6(1)(f) of the General Data Protection Regulation).
Retention period
Your personal data will be stored for 3 years from last point of contact. However, the information can be stored for a longer period in anonymised form.
To achieve the above purposes, we may give third parties access to your personal data, which, based on a contractual relationship with IMPACT, provides relevant services, this could be IT suppliers or other business partners that process personal data for us. Such suppliers will only process personal data in accordance with our instructions according to the signed data processing agreements.
In the context of IMPACT’s development, the corporate structure may change, e.g., by the total or partial sale of the company. In the case of a partial transfer of assets containing personal data, the processing basis for the related transfer of personal data is, as a rule, Article 6(1)(f) of the General Data Protection Regulation, since IMPACT has an interest in transferring parts of its assets and making commercial/structural changes.
In addition, in certain circumstances and under the law, it may be necessary to disclose your personal data to e.g. the police, lawyers, accountants, courts, public authorities, potential buyers and group entities.
Your personal data may be transferred to data processors or data controllers established in countries outside the EU/EEA that do not have an adequate level of protection. Such a transfer will be based on the EU Commission’s standard contracts which you have a right to receive a copy of by contacting us as stated below.
- You have the right to access the personal data we process about you
- You have the right to object to our collection and further processing of your personal data
- You have the right to rectification and deletion of your personal data, however there are certain statutory exceptions, including the Bookkeeping Act
- You have the right to ask us to restrict the processing of your personal data
- In certain circumstances, you may also request to receive a copy of your personal data and to transmit the personal data you have provided to us to another data controller (data portability)
- You can withdraw any consents you may have given at any time. We will then delete your personal data unless we may continue the processing on another basis. You can cancel our newsletter by clicking on the link at the bottom of the newsletter
If you have any questions about this privacy policy or if you wish to complain about the way we process your personal data, please feel free to contact us at GDPR@impactcommerce.com.
If your complaint is not resolved by us and you want to proceed with the case, you can complain to the data protection supervisory authority in your country or in the country where the IMPACT entity which is the data controller for the processing you want to complain about is based. A list of European data protection supervisory authorities is available here.