Privacy and personal data policy

Posted: 10. september 2024
See how we take care of your personal information.

Security - both physical and virtual - is very important to Metroselskabet. Therefore, we have created a privacy policy that aims to ensure that your personal information is processed securely and correctly if you have had contact with The Company.

HOW WE PROCESS YOUR PERSONAL DATA
We are the data controller - how do you contact us?

Metroselskabet is the data controller for the processing of the personal data we have received from you. You can find our contact details below.

Metroselskabet
Metrovej 5, 2300 Copenhagen S, Denmark
CVR no.: 30823699
Telephone: +45 3311 1700
E-mail: m@m.dk

If you have any questions about our processing of your data, you are always welcome to contact our data protection officer. You can contact our data protection officer in the following ways:

By email: dpo@m.dk
By phone: +45 3311 1700
By letter: Metroselskabet
Metrovej 5, 2300 Copenhagen S,
Att. Data Protection Officer

General information

Metroselskabet treats the personal data you have provided to us confidentially. We both wish and are obliged to protect your personal data in accordance with personal data legislation, including the General Data Protection Regulation. We use technical and organisational measures to protect against unauthorised access, use, destruction, modification or disclosure of your personal data.
In order to protect your personal data in the best possible way, Metroselskabet has adopted internal policies for our employees' handling of personal data. We also conduct regular internal follow-ups on the adequacy of and compliance with these policies and measures.

What personal data do we process about you?

Enquiries:
If you have contacted us, we use e.g. your name, email address and phone number to respond to your enquiry.
If you contact our customer service, your name, email and the information you provide in connection with your enquiry will be registered. It is not The Metroselskabet, but The Metro Service A/S that processes your enquiry and your personal data, as they are the data processor in this relationship. The Metro Service A/S is a privately owned company that is responsible for the operation of The Metro. You can see The Metro's personal data policy here (Link to The Metro's website).

The legal basis for our processing of your personal data in connection with your enquiries to us is Article 6(e) of the General Data Protection Regulation.

Inspection fees:
Your name, address, telephone number and social security number are registered in connection with control fees. Metro Service A/S processes control fees on behalf of Metroselskabet and is the data processor in this relation.

The legal basis for the processing of your personal data by The Metro Service A/S in connection with control fees is elaborated in the personal data policy for customers in The Metro (link to DOT's website)

Neighbour notifications:
If you live near a metro construction site, we will use your mobile phone number to send you text messages and digital mail via e-boks to notify you of noisy activities etc. at the construction site. In this connection, we have collected information about your name and address by looking it up in the central personal data register, CPR.

Expropriation:
If your private property is to be expropriated in connection with the construction of The Metro, we collect and process personal data about you, including name, address, email, phone number, account number and property information.

Newsletters:
If you have consented to receive newsletters from us, we will use your email address to send newsletters to you. You can unsubscribe from our newsletters at any time.

Legal basis:
The legal basis for our processing of your personal data in connection with neighbour alerts, newsletters and expropriation is all in accordance with Article 6(1)(c) and (e) of the General Data Protection Regulation, which states that the processing is necessary for compliance with legal obligations to which we are subject and that the data processing is necessary for the performance of a task carried out in the public interest or as part of the exercise of our official authority. We make entries in CPR to ensure unambiguous identification of your name and address in accordance with section 32(1) of the Act on the Central Personal Data Register (CPR).

Control counts:
Metroselskabet conducts control counts by recording videos at the metro stations. The videos are deleted when the count reports are approved.

The legal basis for processing your personal data in connection with control counts is Article 6(1)(c) of the General Data Protection Regulation.

Applications for job adverts:

If you apply for a position with us, we process the following personal data about you:

  • Name, address, telephone number and e-mail. Other information that appears from your application or enclosed documents (e.g. CV and diplomas).
  • Personal data about you that is collected from third parties. For example, a previous employer that you may have informed and given consent for us to obtain references from.
    Metroselskabet I/S does not process sensitive personal data about you unless you have given us this information yourself. For example, because you are applying for a position where this information is necessary for employment. In special cases, personal data is used for statistics. In these cases, personal data is anonymised so that the data cannot be traced to a specific person.
  • If the position in question requires you to complete personality tests or similar, you will be informed of this when we have processed your application. The results of such tests are treated confidentially, but are included in our assessment of your application. 
    Metroselskabet is the data controller with regard to the personal data collected and processed in connection with the processing of your application.
  • The purpose of collecting personal data about you in the recruitment process is to assess whether you are the right candidate for a vacant position at Metroselskabet. 
    In this context, we use a recruitment system provided by an external data processor who handles your personal data on behalf of Metroselskabet, and we have entered into a data processing agreement with the data processor.
    The data processor can access and process your information according to documented instructions from Metroselskabet and cannot process your information for its own purposes.

Your rights to edit and delete your personal data
You get access to a career centre when you apply for a position with us. Here you can always edit or delete your personal data. If you have not been logged into your career centre for the last 180 days, your data will be deleted.

The legal basis for our processing of your personal data in connection with job applications is Article 6(1)(a) and (b) of the General Data Protection Regulation.

We do not disclose your personal data without your consent

As a general rule, we do not disclose your personal data to others without your consent.

However, in some cases, we may disclose your personal data to our suppliers without your consent if they process data on our behalf (so-called data processors).

We also do not obtain your consent if we are legally obliged to disclose personal data about you, e.g. as part of a report to an authority, board or similar.

If we receive a request for access to the case in which your personal data is involved, we may be obliged to disclose information about you in connection with a given case. However, there are a number of exceptions to the access rules and we will not disclose purely private or confidential information about you.

Access to your personal data

Only trusted employees with a work-related need in Metroselskabet and at Metroselskabet's suppliers have access to the personal data collected.

How long do we keep your personal data?

We keep your personal data for as long as it is necessary for us to have the data for the purpose for which it was collected. When we no longer need your personal data to fulfil the specific purpose, it will be deleted or anonymised. The retention period is determined in accordance with applicable legislation, requirements for public authorities and for securing documentation.

What rights do you have in connection with our processing of your personal data?

As a data subject, you have certain rights that Metroselskabet as data controller is obliged to fulfil You have the right to be notified by us if we process your personal data. Among other things, we must inform you of the purpose of the processing, and you have the right to know what personal data we process about you, including the content of the data and what we use the data for.

If you have consented to us processing your personal data, you can withdraw your consent at any time. If you choose to withdraw your consent, it will only take effect from the time of your withdrawal. This means that the processing of your personal data that we have already carried out before you withdrew your consent is still lawful.
If you believe that the personal data we process about you is incorrect or incomplete, you have the right to have it rectified. You must contact us and inform us of the nature of the inaccuracies and how they can be corrected.

When you contact us with a request to have your personal data corrected or deleted, we will investigate whether the conditions are met and, if so, make the changes or deletion as soon as possible.
You have the right to see the personal data that you have provided to us. You also have the right to ask us as a data controller to transfer your personal data directly to another data controller, such as another company or authority.
In special situations, your rights do not apply. This may, for example, be due to considerations of public security, investigation or supervision, or trade secrets and other considerations of private interests.

Metroselskabet's cookie policy

We use cookies to customise our content and ads, including on social media, and to analyse our traffic. We also share information about your use of our website with our social media marketing partners, advertising partners and analytics partners. Our partners may combine this data with other information you have provided to them or that they have collected from your use of their services. You can switch off these cookies using our cookie tool ‘Cookiebot’. You consent to our cookies if you use our website without opting out of cookies.

Who should you contact if you want to complain about our processing of your personal data?

You have the right to file a complaint with the Danish Data Protection Agency if you are dissatisfied with the way we process your personal data.

You can find the Danish Data Protection Agency's contact details here:

Danish Data Protection Agency
Carl Jacobsens Vej 35
2500 Valby, Denmark
Phone: +4533193200
E-mail: dt@datatilsynet.dk

Notification of collection of personal data in connection with:
Nyhedsbrevet Byen Rundt (pdf)
Henvendelser på telefon 7230 2020 (pdf)
Mail til nabo@m.dk (pdf)
Elektroniske nyhedsbreve om metrobyggeriet (pdf)
SMS-varslinger om metrobyggeriet (pdf)

More information

Metroselskabet
Metrovej 5, 2300 København S
CVR-nr.: 30823699
Phone: +45 3311 1700
E-mail: m@m.dk