Introduction
This privacy policy describes how Virio ApS processes personal data in connection with the use of virio.dk and our services.
Among other things, the policy applies when you visit the website, create a user account, contact us, manage a company profile, complete a company verification or purchase a service from Virio.
Virio also operates a company information service where company data and information about individuals with registered company roles may be displayed.
You can read separately about this processing on the Company data and personal data page.
Data controller
Virio ApS is the data controller for the processing of personal data described in this privacy policy.
Virio ApS
Kridtsløjfen 22
9000 Aalborg
Company reg. no.: 46139399
Phone: (+45) 77 22 02 13
Email: info@virio.dk
If you have questions about our processing of personal data or wish to exercise your rights, you can contact us at info@virio.dk.
What personal data do we process?
The information Virio processes about you depends on how you use our website and services.
When you visit virio.dk
When you visit the website, we may automatically receive technical information about your visit.
This may include, among other things:
- IP address
- browser type
- device type
- operating system
- time of the visit
- which pages and features you use
- technical log information
- cookie and consent information
Some of this information is only processed if you have given the necessary consent.
Read more in our Cookie policy.
When you create an account
If you create a user on Virio, we may process, among other things:
- name
- email address
- phone number, if provided
- login and account information
- which company the account is affiliated with
- time of creation and login
- technical and security-related information
Passwords are stored in a secure, non-readable form and are not stored as ordinary plain text.
When you verify a company
If you wish to gain access to manage or verify a company profile, we process the information necessary to verify your affiliation with the company.
This may include, for example:
- name
- email address
- company information
- the company's registration number
- your relation to the company
- information about the completed verification
- documentation, if additional documentation is necessary
Virio strives to collect only the documentation necessary for the verification.
When you purchase a service
When a company purchases, for example, Verified company, Virio may process:
- name of contact person
- the company's name and registration number
- billing information
- email address
- phone number
- order and subscription information
- payment status
- invoices and transaction information
Payment card details may be processed directly by the payment provider Virio uses.
Virio does not store complete payment card details on its own systems when payment is handled by an external payment provider.
When you contact us
If you contact Virio by email, phone, contact form or other contact options, we process the information you provide to us.
This may include, for example:
- name
- email address
- phone number
- company
- the content of your enquiry
- any documents or information you send to us
Newsletter and marketing
If Virio offers newsletters or other electronic marketing, we process, among other things, your email address and information about your consent.
Electronic marketing is only sent when Virio has the necessary lawful basis.
You can always withdraw a marketing consent via the unsubscribe option in the communication or by contacting Virio.
Withdrawal does not affect the lawfulness of the processing that took place before the consent was withdrawn.
Why do we process your information?
Virio processes personal data for various purposes depending on your relationship with us.
The purposes may include, among other things, to:
- provide and operate virio.dk
- create and manage user accounts
- verify users' affiliation with companies
- provide paid services
- manage subscriptions
- carry out and document payments
- send necessary service messages
- respond to enquiries
- provide support
- prevent misuse and security incidents
- improve the website and our services
- keep accounts and comply with legal obligations
- send marketing where there is a valid basis for doing so
Legal basis for processing
Virio only processes personal data when there is a lawful basis for processing.
Performance of a contract
We may process personal data when the processing is necessary to enter into or perform a contract, cf. Article 6(1)(b) of the General Data Protection Regulation.
This may be, for example, in connection with a user account or the delivery of a purchased service, when the data subject is itself a party to the contract.
Legal obligation
We process information when it is necessary to comply with a legal obligation, cf. Article 6(1)(c).
This may be, for example, information that Virio must retain under bookkeeping or tax legislation.
Legitimate interest
Virio may process personal data on the basis of a legitimate interest, cf. Article 6(1)(f).
This may be relevant in connection with, among other things:
- operation and security
- prevention of misuse
- support
- administration of customers and company contacts
- improvement of our services
- documentation of communication
When we rely on a legitimate interest, we balance Virio's interest against the data subject's interests, rights and freedoms.
Consent
In cases where the processing requires consent, we process information on the basis of your consent, cf. Article 6(1)(a).
This may be relevant, for example, for certain cookies or other processing where consent is required.
You can withdraw a consent at any time.
Company data from public registers
Virio also processes information from public company registers and other data sources as part of our company information service.
This includes both company information and, in certain cases, personal data about individuals with registered roles or relations to companies.
To avoid overlap, this processing is described separately on the Company data and personal data page.
Cookies and statistics
Virio uses cookies and similar technologies.
Some technologies are necessary for the website to function, while others may be used, for example, for statistics or marketing.
Non-essential cookies are only used to the extent that the necessary consent is in place.
You can read more about the cookies and services used, and change your consent, via our Cookie policy.
Who do we share information with?
Virio may disclose or entrust personal data to providers and partners when necessary to operate the business and deliver our services.
This may be, for example, providers of:
- hosting and cloud infrastructure
- databases
- payment solutions
- accounting
- analytics
- security
- technical operations and support
Providers that process personal data on Virio's behalf may only process the information under Virio's instructions and in accordance with a data processing agreement, where this is required.
Virio may also disclose information if it is necessary to comply with legislation, authority requirements or court decisions.
Transfer to countries outside the EU/EEA
Some of Virio's providers may process personal data outside the EU/EEA.
If personal data is transferred to a country outside the EU/EEA, Virio ensures that a valid transfer basis exists under the data protection rules.
This may be, for example:
- the European Commission's decision on an adequate level of protection
- the European Commission's standard contractual clauses
- the EU-U.S. Data Privacy Framework, when the conditions for it are met
- another valid transfer basis
Virio assesses relevant data protection matters in connection with the providers we use.
How long do we store information?
We do not store personal data longer than necessary.
The storage period depends on the type of information and the purpose of the processing.
For example:
- account information may be stored while the account is active and for a relevant period after closure
- customer and subscription information may be stored for as long as the customer relationship exists and subsequently where necessary
- accounting material is stored for the period required by applicable law
- support enquiries are stored for as long as they are relevant to the case and any subsequent documentation
- consent information is stored for the period necessary to document the consent
- technical security logs are stored for a limited period, unless longer storage is necessary due to a security incident
Virio sets and reviews relevant deletion deadlines on an ongoing basis.
Security
Virio works with appropriate technical and organizational security measures to protect personal data against, among other things:
- unauthorized access
- loss
- alteration
- disclosure
- misuse
- destruction
The security measures are adapted to, among other things, the information, the processing, the technology and the relevant risk.
Access to personal data is limited to persons and providers who have a relevant need for access.
Your rights
When Virio processes personal data about you, you have a number of rights under the data protection rules.
Depending on the circumstances, you may have the right to:
- access to the personal data we process about you
- rectification of inaccurate information
- erasure of information
- restriction of the processing
- data portability
- object to certain processing activities
- withdraw a consent
The rights are not absolute. There may be situations where Virio has the right or obligation to continue processing the information.
If your enquiry specifically concerns information about you that is displayed on a company profile or comes from company registers, you can also read the Company data and personal data page.
Right to object
If Virio processes your personal data on the basis of a legitimate interest, you have the right to object to the processing on grounds relating to your particular situation.
Virio then carries out a specific assessment in accordance with the data protection rules.
How to exercise your rights
If you wish to exercise your rights, you can contact:
Please describe your enquiry as precisely as possible.
Virio may request additional information if it is necessary to confirm your identity and ensure that information is not disclosed, changed or deleted on behalf of the wrong person.
Automated decisions and profiling
As a starting point, Virio does not make decisions about users or customers based solely on automated processing that have legal effect or similarly significantly affect the person.
If this changes, Virio will update the privacy policy and provide the information required under the applicable data protection rules.
Children
Virio's services are aimed at companies, traders and individuals seeking company information.
Virio does not intend to collect personal data directly from children through the creation of company accounts or the purchase of our business services.
If Virio becomes aware that personal data has been collected in breach of applicable rules, we will handle the information in accordance with our legal obligations.
Complaint to the Danish Data Protection Agency
If you are dissatisfied with Virio's processing of your personal data, you are welcome to first contact us so that we have the opportunity to examine the matter.
You also have the right to complain to the Danish Data Protection Agency.
Datatilsynet
Carl Jacobsens Vej 35
2500 Valby, Denmark
Changes to the privacy policy
We may update this privacy policy from time to time, for example if Virio's services, providers, technical solutions or processing of personal data change.
The latest version will always be available on virio.dk.
In the event of material changes, we may inform relevant users or customers directly if deemed necessary.
Contact
If you have questions about this privacy policy or Virio's processing of personal data, you can contact:
Virio ApS
Kridtsløjfen 22
9000 Aalborg
Company reg. no.: 46139399
Phone: (+45) 77 22 02 13
Email: info@virio.dk