When we receive personal data about you, we aim to ensure that you trust we will process your personal data in a transparent and secure manner. Hence, this privacy policy contains information about how we process your personal data.
This privacy policy for business relations applies to the processing of personal data about people who act as contact persons or take part in delivering services to Ørsted on behalf of a company (such as suppliers and business partners).
1. Data controller
The legal entity responsible for processing your personal data is the company in Ørsted mentioned in the agreement governing the delivery by the company you represent to Ørsted or which is part of the collaborative relationship with the company or authority (hereinafter “Company”) you represent. You can find an overview of our companies in our annual report.
2. We use personal data for the following purposes and in accordance with the stated lawfulness of processing
At Ørsted, we only process necessary personal data about you. In the table below, we describe how we process your personal data.
Purpose | Categories of personal data | Legal basis for processing | |
---|---|---|---|
Supplier Database: We process your personal data if you have registered as an interested supplier in our supplier database. This includes the following purposes: We process your personal data in our supplier database in order to contact you and your company in relation to supply chain opportunities within our wider supply chain. We will also process your personal data in order to compile statistics for supply chain development overview purposes. We collect your personal data from the following source(s):
|
We process the following categories of personal data: Ordinary personal data:
Sole trader:
|
We process your personal data on the following legal basis:
|
|
Administration of business relationships: We collect data from the following sources:
|
We process the following categories of personal data about you:
|
We process your personal data as described, and in accordance with:
|
|
Prequalification and tendering:
|
We process the following categories of personal data about you:
|
We process your personal data as described, and in accordance with:
|
|
Contract management:
|
We process the following categories of personal data about you: General personal data:
|
We process your personal data as described, and in accordance with:
|
|
Documentation: We process personal data to be able to live up to our documentation obligations when the services you provide can only be performed by people with sufficient documented qualifications e.g. welding certificates. |
We process the following categories of personal data about you:
|
We process your personal data as described, and in accordance with:
|
|
Ørsted Learning Portal (People Portal): We process personal data with the purpose to administrate necessary training for employees and employees of our suppliers and business partners. This involves sending invitations and reminders to courses, maintaining an overview of completed courses and necessary cookies when you access our Learning Portal. We collect the data from the following sources:
|
We process the following categories of personal data about you: Ordinary personal data:
|
We process your personal data as described, and in accordance with:
|
3. Recipients of personal data
Depending on the circumstances, Ørsted may share your data with:
- Suppliers who work with us to assist Ørsted
- Group enterprises – see list of Ørsted enterprises in our annual report
- Public authorities
- Business partners
- Players in the energy sector (distribution companies, Energinet.dk, public authorities and energy suppliers)
4. Personal data about other parties that you provide
If you provide personal data about other people (e.g. contact information for colleagues in the company in which you are employed), you must ensure that they agree to it, and that you have permission to provide us with such personal data. This means that you must refer them to this privacy policy when you provide us with their personal data.
5. Transfer of personal data to third countries
In certain situations, Ørsted will transfer personal data to countries outside EU/EEA.
Such transfers to third countries will be made on the following legal basis
- The countries have been deemed by the Commission of the European Union to have an adequate level of protection of personal data (so called safe third countries).
- If the countries have not been deemed by the Commission of the European Union to have an adequate level of protection of personal data: Ørsted will provide appropriate safeguards for the transfer through standard contractual clauses, as published by the Commission of the European Union, for the transfer of personal data to third countries.
You can obtain a copy of this contract by contacting us on info@orsted.com.
6. Storage of your personal data
We will store your personal data as long as it is necessary for the purpose described in section 2 above and/or as required under applicable law, and we will then delete or anonymise your personal data appropriately.
The criteria we will use to determine the storage period of your personal data will therefore depend on the purpose for which the personal data have been collected as well as the rules on storage which is required by specific national legislation.
7. Your rights
When we process your data, you have the following rights:
- You have the right of access to, rectification, or erasure of your personal data.
- You also have the right to object to the processing of your personal data and to have the processing of your personal data restricted.
- In particular, you have an unconditional right to object to the processing of your personal data for use for direct marketing purposes.
- If the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time. Your withdrawal of consent will not affect the lawfulness of the processing performed before withdrawal of your consent.
- You have the right to receive the personal data that you have provided yourself in a structured, commonly used and machine-readable format (data portability).
- You have the right to lodge a complaint with a supervisory authority (in Denmark the Danish Data Protection Agency).
You can exercise your rights by contacting us; see clause 8. These rights may be conditional or restricted. For example, you may not have the right to data portability in a particular case. It depends on the specific circumstances of the processing activities.
8. Contact Ørsted regarding the processing of personal data
You can always contact Ørsted if you have questions about our processing of your personal data, or if you wish to object to how your personal data is processed, by writing to info@orsted.com or by phoning +45 99 55 11 11.
You can also lodge a complaint with your local data protection authority. In Denmark, the supervisory authority is:
- The Danish Data Protection Agency
Tel.: +45 33 19 32 00
Email address: dt@datatilsynet.dk
Website: www.datatilsynet.dk
9. Amendments to our privacy policy
This privacy policy replaces all previous versions. It will be necessary to update and amend this privacy policy on an ongoing basis, and we thus reserve the right to do so. In the event of an important amendment, we will notify you at orsted.com or send an email if we deem this is necessary.
This privacy policy was last updated February 19, 2024.