Privacy policy for Konsulenthuset ballisager A/S
What's in the content
Introduction to our services
In order to deliver satisfactory career counseling, recruitment, outplacement and HR services, we need to process personal data about you. Our privacy policy describes what data we collect, why we collect it and what we use it for. Konsulenthuset ballisager A/S acts as both data controller and data processor, depending on the agreement we have entered into with the customer. The privacy policy outlines how we process your data within our different business areas: career counseling, outplacement, HR services and recruitment. For each area, it describes the basis for processing, purpose and security. It then explains your rights and the general principles we follow when handling your data across all areas.
If you use our website, including our free analyzes and other material or contact us via the website's forms or chat function, we refer to our cookie and privacy policy, where you can read more about what information we collect and how we ensure the processing of it.
If you have any questions or require further information, you are welcome to contact our Data Protection Officer at dpo@ballisager.com
Data controller
Konsulenthuset ballisager A/S, Søren Frichs Vej 40A, 8230, Aabyhøj (CVR number 31299004).
Career advice
Konsulenthuset ballisager A/S acts as a data processor in career counseling programs and acts on the instructions of a data controller. The data controller can be your municipality, your educational institution or a third party who has signed you up for a career counseling program.
Career counseling processes vary depending on the task at hand. Career counseling can be 1-on-1 interviews, workshops or online courses on our platform Jobspot, but it can also be a combination of several of the above.
Purpose and legalbasis
The purpose of processing your personal data is to assess your job readiness, perform case management, help you get a job and support you in your future job search by giving you the right tools. If you are registered via the job center, the processing is based on the Act on Active Employment Efforts, cf. the General Data Protection Regulation (GDPR) Article 6(1)(c) and Article 9(2)(b). If you are registered via other actors, e.g. your educational institution, the processing takes place on the basis of your consent, cf. GDPR Article 6(1)(a) and Article 9(2)(a)(a) or on the basis of the balancing of interests rule, cf. GDPR Article 6(1)(f).
In many cases, participation in an offer provided by the job center is required by law, and therefore it is necessary to process your personal data in order to complete the career counseling process with you.
We also process data for the purpose of invoicing our customers and fulfilling our contractual obligations. This processing is based on the balancing of interests rule, cf. GDPR Article 6(1)(f). According to the Danish Bookkeeping Act, we must store invoice information for at least 5 years, and the information on the invoice is therefore stored based on GDPR Article 6(1)(c).
After your program, we may ask you to share your experience with us on Trustpilot Trustpilot and evaluate the program through surveyXact. We do not share your information with Trustpilot. If you choose to write a review, Trustpilot collects your information itself and is therefore responsible for processing it.
For up to 6 months after your program, we may contact you to inquire about your job situation in order to provide the customer with profit and loss statements. Your response is voluntary.
The personal dataconcerned
We receive your personal data, either from yourself or from the party that has signed you up for the program.
The personal data processed during career counseling:
- Date of birth
- Name and surname
- Your address
- Contact details (email and/or phone number )
- Additional information sent during registration
- Health information
Confidential personal data including:
- Social security number (for billing and tasks assigned by authority )
We then register additional information about you during the conversations with your consultant.
Not all career counseling sessions process health information or social security numbers. Such information is only processed if it is necessary to perform the task.
Security
Sensitive and confidential data is delivered via secure email or via municipal IT systems where we have limited access to registered candidates. Data is uploaded to our internal database hosted by It's IT (see list of suppliers below). Only people with a work-related need for this have access to your personal data.
Storage and deletion
Personal data is deleted or anonymized when it is no longer necessary to achieve the purpose, unless otherwise provided by law. As we often act on behalf of a public authority, access to deletion is very limited.
We generally delete or anonymize information 6 months after invoicing so that we have the opportunity to invoice the customer and prove that we have fulfilled our obligations, and so that you have the opportunity to prove that you have participated in the process.
If you have given your consent to the processing, this can be withdrawn from the data controller who has collected the consent.
The information that appears on the invoice is deleted after 5 years, cf. the Accounting Act, this information is therefore not deleted if you withdraw your consent.
Disclosure
We may disclose your information to companies in order for you to be employed here. Disclosure is generally only made with your positive knowledge.
Read more about disclosure in this section.
Outplacement
Konsulenthuset ballisager A/S is the data controller for the data we process about you in an outplacement process. We receive your contact details from your employer, after which we will arrange a meeting with you. If you request an outplacement process via a form or chat on our website, your request and you will be created in our CRM system Hubspot. You can read more about our use of HubSpot here: https: //ballisager.com/cookie-privatliv-politik/
Purpose and legalbasis
The purpose of the processing is to get you a job. We process the personal data so that we can assess your situation and your skills in order to bring you into, or closer to, employment .
Before you start your outplacement process, you give your consent to the processing of personal data and the legal basis for the processing is found in Article 6(1)(a) of the GDPR. When your outplacement process starts, you must register through Hubspot in our online platform Jobspot. Read more about the disclosure of your data to Hubspot below.
During the outplacement process, we will hold interviews with you and take note of relevant information about you that you tell us. We may also ask you to complete a profile test. When you give your consent, you agree that we may conduct this test.
We also process your personal data in order to be able to invoice the customer, this processing is based on the balancing of interests rule. Your personal data may appear on the invoice basis. As we are obliged to store the invoice basis for 5 years, cf. the Danish Bookkeeping Act, this further storage is not based on consent, but on the basis of Article 6(1)(c) of the GDPR.
After your program, we may ask you to evaluate the program through SurveyXact and leave a review of your experience with us on Trustpilot. We do not disclose your information to Trustpilot. Trustpilot collects your information itself and is thus an independent data controller if you choose to write a review of us on their website
We may contact you up to 6 months after your program to inquire about your job situation in order to provide the customer with profit and loss statements.
The personal dataconcerned
We receive your contact details from your previous employer and collect additional relevant info for the meetings ourselves.
The information collected in outplacement processes:
- Email address and phone number
- Name and address
- Address and phone number
- Date of birth
- Education and experience details
- Test information
- Reference information
- Education and position
- Work experience and other information in the CV
- Minutes of meetings with agreed activities
- Attendance history
- Information about companies contacted in the process
- Agreements on jobs, wage subsidies or internships
Security
As soon as you become a candidate in an outplacement program, your data is uploaded to our internal database hosted by RIT (see list of suppliers below). Only employees with a work-related need have access to your personal data.
Storage and deletion
Personal data is deleted when it is no longer necessary to achieve the purposes described above. Information is generally deleted 6 months after the end of the process so that we have the opportunity to invoice the customer and prove that we have fulfilled our contractual obligations. You always have the right to withdraw your consent, after which your personal data will be deleted, with the exception of personal data that is necessary for invoicing.
The information that appears on invoices is deleted after 5 years, cf. the Accounting Act, this information is therefore not deleted if you withdraw your consent.
Disclosure
We may disclose your information to companies in order for you to be employed here. Disclosure is generally only made with your positive knowledge.
We will notify your previous workplace when you get a new job, but the name of your new workplace will only be disclosed with your consent.
Read more about disclosure in this section.
Networking meetings
Your personal data may be disclosed to the recipients listed in this personal data and privacy policy, as well as HubSpot, which handles invitations to network meetings. Data registered in HubSpot is automatically deleted after 2 years of inactivity. When transferring data to HubSpot, a transfer to the United States takes place, which is authorized by the EU - U.S. Data Privacy Framework.
You can withdraw your consent at any time and have your data deleted or corrected.
AI chatbot
In connection with your program, you will be provided with the chatbot "aiba" and CV and Application Builder (via Lovable). The purpose is to get concrete advice that strengthens your job search(Article 6(1)(a)). Data is not used to train the AI language model.
Recruitment process
In connection with recruitment processes, we may either contact you through LinkedIn or you may apply for a position through our website, either with us or with one of our customers. As part of the recruitment process, we may obtain additional publicly available information about you from the internet, including social media (primarily LinkedIn).
Purpose and legalbasis
The purpose of processing your personal data is to assess whether you are the right candidate for the advertised position or future positions. The processing and collection of your general personal data prior to a recruitment process is necessary for us to pursue legitimate interests in being able to assess an applicant for a vacant position. The collection of your data is therefore based on Article 6(1)(f) of the GDPR.
At the start of the recruitment process, you will be asked to register on the Teamtailor CV database or you can do so in connection with applying for a position with us or our customers. When you register, you will be asked to give your consent, and the storage on Teamtailor is based on Article 6(1)(a) of the GDPR .
You may also be asked to answer personality and cognitive tests in the E-stimate systems. The legal basis for this processing is consent pursuant to GDPR Article 6(1)(a) or (f).
The personal dataconcerned
The data collected, if possible, online or at the customer site before the recruitment process:
- Email address and phone number
- Name and surname
- Education and experience information
- CV and application
The information collected in connection with the recruitment process:
General personal data including, but not limited to:- Email address and phone number
- Name and surname
- Education and experience information
- Address information
- Personality test results
- CV and cover letter
- References
Security
Data is collected in our recruitment system Teamtailor and there is access to data for employees of Konsulenthuset ballisager A/S with a work-related need for this, as well as hiring managers at the customer if the position is applied for at one of our customers .
The customer's processing of data is regulated in the main agreement between Konsulenthuset ballisager A/S and the company. The customer/company where you are applying for a job is the data controller for the processing of your data, so you must contact the company where you are applying for a job if you wish to exercise your rights towards them. Konsulenthuset ballisager A/S will help you as far as we can.
Storage and deletion
Personal data is deleted when it is no longer necessary to achieve the purpose. Information in Teamtailor is deleted after 180 days, unless you consent to storage for a longer period, the 180 days corresponds to the customer's warranty period, therefore data is stored in order to answer questions from the customer or bring other candidates into play in case the warranty is triggered.
You always have the right to withdraw your consent, after which your personal data will be deleted. However, personal data will not be deleted if we have legitimate reasons to keep it for a longer period of time.
We can store information from your LinkedIn profile for up to 3 years.
Disclosure
We will send a link to the hiring company with your personal data, including CV, application and test result, if we assess that you are a relevant match for the given position at a customer. The customer can access your personal data in our candidate database during the recruitment process.
Read more about disclosure in this section.
HR services
Konsulenthuset ballisager offers a variety of HR services to companies. In this connection, it may be relevant to process your personal data.
Purpose and legal basis
The purpose of processing your personal data varies depending on the service provided. Overall, the purpose is to perform HR tasks with a focus on well-being, compliance, structuring and the like. The purpose may also be to analyze your employer's HR conditions and optimize processes.
The legal basis for the processing is the balancing of interests rule in Article 6(1)(f) of the GDPR and the rule for processing personal data in employment relationships in Section 12(1-3) of the Data Protection Act (DBL).
The personal data concerned
We receive your personal data from your employer if it is relevant to the task to be performed.
The personal data that can be processed when providing HR services:
General personal data including, but not limited to:
- Contact details
- Birthday and age
- Well-being metrics
- Length of service
- Salary data
- Other information about your employment
- Health information relevant to your work, including any sick leave
- Trade union affiliation
- CPR number
Sensitive personal data including
- Health information relevant to your work, including any sick leave
- Trade union affiliations
Confidential personal data including
- CPR number
Not all types of personal data are processed when providing all services. If you want insight into what personal data is processed about you, you can contact your employer or DPO@ballisager.com.
Safety and security
Your data is treated confidentially and only employees with a work-related need for it have access to it.
Storage and deletion
Personal data is deleted or anonymized when it is no longer needed to fulfill the purpose. The personal data is stored for the duration of the contract period with your employer, and can be stored for an additional 6 months if needed. If your employment relationship with your employer ends during this period, your data will be stored in accordance with your former employer's policies.
Disclosure
We may disclose your data to our own subcontractors. We have data processing agreements with all our subcontractors that ensure an adequate level of protection.
General for all treatments
Use of speech-to-writing tools
During meetings with your consultant, the consultant has the option to use a speech-to-text tool instead of taking notes themselves. This is an AI tool that, based on transcription during the conversation, takes notes and summarizes a summary of the conversation.
The tool is used for the purpose of taking notes during the meeting and is used to facilitate the administrative work for the consultant. As a participant in the meeting, you are always allowed to read the minutes and notes and make corrections as desired.
Read more about Klang.ai below.
Your rights under the General Data Protection Regulation
In connection with our processing of your personal data, you have several rights. You may not always be able to exercise all your rights. When you contact us, we will do our best to fulfill your request in accordance with the law and our data processing agreements. Your rights under the regulation are as follows:- The right to receive information about how we process your personal data (information obligation).
- The right to access your personal data.
- The right to have inaccurate personal data rectified.
- The right to have your personal data erased.
- The right to withdraw your consent (if you have given consent in connection with the processing )
- The right to object to your personal data being used for direct marketing purposes.
- The right to object to automated individual decisions, including profiling.
- The right to move your personal data (data portability).
All of the above rights are handled by contacting our Data Protection Officer (DPO). Inquiries can be made by email: dpo@ballisager.com.
If you do not agree with the way Konsulenthuset ballisager A/S processes your personal data, you can send your objection to dpo@ballisager.com.
We may refuse or charge a fee for requests that are unreasonably repetitive, require disproportionate technical intervention (e.g. developing a new system or significantly changing an existing practice), affect the protection of your personal data, or something that would be extremely impractical (e.g. requests for information contained in backups).
Unless it requires a disproportionate effort to correct information, we will do so at no cost. We endeavor to maintain our systems in a way that protects against erroneous or harmful destruction. This means, among other things, that we back up our system. When we delete your personal data from our systems, it is deleted from the user interface, but not from the backup.
You have the right to complain at any time to the Danish Data Protection Agency, Borgergade 28,5, 1300 Copenhagen K. https://www.datatilsynet.dk/borger/klage-til-datatilsynet/.
Disclosure of information
We do not disclose personal data to companies, organizations and individuals outside Konsulenthuset ballisager A/S. The exception is in these three cases:
With your consent or knowledge
We may disclose personal data to companies, organizations and individuals outside Konsulenthuset ballisager A/S if we have your consent or other legal authority to process your personal data. We disclose your information if we believe that disclosure is in accordance with the regulation and is necessary to fulfill the purpose. This may be, for example, in recruitment processes where we disclose your information to the hiring company. Your data will generally not be disclosed without your knowledge.
To sub-processors
We store personal data with trusted partners, where a data processing agreement containing specific instructions has always been signed. They process data based on our instructions and in accordance with our personal data policy and other applicable confidentiality and security measures. See complete list of sub-processors further down.
We may disclose personal data to companies, organizations and individuals outside Konsulenthuset ballisager A/S if we believe in good faith that access, use, preservation or disclosure of information is necessary to :
- Comply with applicable laws, regulations, legal process or lawful requests by public authorities.
- Enforce applicable terms of service, including investigation of potential violations.
- Detect, prevent or otherwise protect against fraud, security or technical issues.
- Keep Konsulenthuset ballisager A/S, our shareholder or the rights, property or safety of the public free from harm as required or permitted by law.
Recipients of your information
The contractual and confidentiality relationship between Konsulenthuset ballisager A/S and suppliers that we use in the processing of personal data is always regulated by a data processing agreement.
Below you can see a complete list of data processors that Konsulenthuset ballisager A/S works with.
Recipients in third countries
Konsulenthuset ballisager A/S uses sub-processors located in the third country USA. The transfer basis is the Commission's Privacy Framework scheme, to which all our US-based sub-processors are signed up. You can see a list of registered companies here: https: //www.dataprivacyframework.gov/s/participant-search
We enter into Standard Contractual Clauses (SCC) with our sub-processors in third countries if there is no other transfer basis.
Compliance and cooperation with supervisory authorities
We regularly review our compliance with our own privacy policy. We monitor new data security legislation and regulate our practices and policies according to changes. When we receive formal written objections, we contact the sender to follow up. We cooperate with the relevant regulatory authorities, such as the Danish Data Protection Agency, to resolve objections, such as the transfer of personal data, that we cannot resolve directly with the individual concerned.
Security and safety
We work hard to protect Konsulenthuset ballisager A/S and our candidates against unauthorized access, modification, disclosure of personal data that we store.
Our IT supplier has implemented secure technical measures and we keep ourselves regularly updated on compliance with these.
Internally, we have implemented a number of measures including regular awareness training for employees, requirements for employees to sign confidentiality statements and much more.
Data processors
Below you can see a list of data processors that Konsulenthuset ballisager A/S works with in connection with the above-mentioned programs.
Data processors
RIT
RIT hosts our IT, including files, exchange and candidate databases. We own our candidate database ourselves. The address is Lyshøjen 6, 8520 Lystrup. Disclosure takes place within all business areas.
SurveyXact
Used to evaluate our programs. E-mail can be linked to the candidate's response. Address is Olof Palmes Alle 20, 8200 Aarhus N. Disclosure takes place within all business areas.
Uniconta A/S
Used for information on invoice, name and CPR number. In cases where the customer requires personal data on the invoice, this will be stated and stored for 5 years in accordance with accounting legislation. The address is Klausdalsbrovej 601, 2750 Ballerup. Disclosure takes place within all business areas.
E-stimate
As part of a recruitment process with us, you may be asked to complete a personal profile test provided by E-stimate. The address is Boulevarden 13, 8300 Odder. The disclosure takes place within the business areas outplacement and recruitment.
Teamtailor
When you apply for a position through our website (including the CV database), your data is created in this HR system. The address is Östgötagatan 16, 116 21 Stockholm, Sweden. Disclosure takes place within the recruitment business area.
Mailgun
Used as a mail sender. We use mailgun in connection with Jobspot processes. The address is 112 E Pecan St, #1135, San Antonio, Texas, 78205. The disclosure is made within the business area outplacement.
GAIS
GAIS is used for employee satisfaction surveys. The address is Klokhøjen 4, 8200 Aarhus N. The disclosure takes place within the business area outplacement.
Candeno
Candeno is used in our online career counseling program and is an online job search platform. The address is Klosterport 4e, 2h, 8000 Aarhus. The disclosure is made within the business areas of career counseling and outplacement.
Microsoft Ireland
Microsoft is our general platform. We use the Outlook system for email and use the SharePoint solution for document sharing. The address is South County Business Park, One Microsoft Place, Carmanhall and Leopardstown, Dublin, D18 P521, Ireland. Microsoft's parent company is located in the USA. Disclosure takes place in all business areas.
Crisp
Crisp is a chat function that we use in our jobspot solution. The address is 2 Boulevard de Launay, 44100 Nantes, France. The disclosure takes place within the business area career counseling.
Addosign
Addosign is used to obtain consent forms in outplacement processes. The address is Gærtorvet 1, 5, 1799 Copenhagen V. Disclosure takes place within all business areas.
Warnich IT
Warnich IT hosts our filemaker where we store information about candidates. The address is J.P. Larsensvej 26 8220 Brabrand, and the general business area is career counseling and outplacement. Warnich IT is subject to a confidentiality agreement and not a data processing agreement. Disclosure takes place within all business areas.
Hubspot
Hubspot stores data about our customers and sends out newsletters, reminders and invitations. Data registered in HubSpot is automatically deleted after 2 years of inactivity. The location of the processing is 2 Canal Park, Cambridge, MA 02141, United States. When transferring data to HubSpot, there is a transfer to the United States, which is authorized by the EU - U.S. Data Privacy Framework. The transfer takes place within the business area of career counseling and outplacement.
Lovable
We share data with Lovable and their sub-processors.
Lovable is an AI-powered platform that can build web applications. Lovable is used to build applications within our HR services and to provide advice for CV, application etc. Outplacement. The address is Tunnelgatan 5, 111 37 Stockholm, Sweden. The disclosure is made within the business areas HR services and outplacement.
Data provided is not used to train the language model.
Klang.ai
Klang.ai is an AI-based speech-to-text tool used to take meeting notes and summarize to-do lists etc. Sundstorget 3, 252 21 Helsingborg, Sweden. Disclosure takes place within all business areas.
Changes to our privacy policy
Our privacy policy changes from time to time. We do not restrict your rights. Any restrictions to this Privacy Policy will be indicated on this page, and if there are significant changes, we will notify you of them in a more prominent way. (For certain services, we will, among other things, inform you of changes via email ) .
Revision history
Version - V5.3
Date - April 22, 2026
Edited by Linea Drexel Hougaard, (DPO )