Privacy Policy – CMD License
Finance Denmark are the data controller for the processing of the personal data we have received about you. You can find our contact details below:
Finance Denmark
Amaliegade 7
1256 København
CVR-nr.: 14654208
Telephone: [33 70 10 00]
Mail: [mail@finansdanmark.dk]
On our behalf, we have appointed Finanssektorens Uddannelsescenter as data processor to manage the practical administration of exams, certificate storage, and other administrative tasks related to the certification.
This document aims to inform you about how Finanssektorens Uddannelsescenter processes your personal data on behalf of Finance Denmark. This means, among other things, that the purpose and legal basis for processing your personal data are defined by Finance Denmark, and that Finanssektorens Uddannelsescenter acts according to Finance Denmark’s instructions.
You can find the contact details for Finanssektorens Uddannelsescenter below:
Finanssektorens Uddannelsescenter
Skovsvinget 10
8660 Skanderborg
CVR-nr.: 17046942
Telephone: [89 93 33 33]
Mail: [info@finansudd.dk]
If you have any questions about how your personal data are processed, you are always welcome to contact the GDPR responsible employee at Finanssektorens Uddannelsescenter at:
Finance Denmark processes your personal data for the following purposes:
- Certificate administration. Including the collection of general personal data: name, work email, employer, information about the use of VidenBarometer, including browser information (log data), information about login with MitID including CPR number.
- Continuing education administration
- Collection of email addresses for the purpose of sending evaluation forms, registering participation, or handling inquiries related to certification and training.
The legal basis for our processing of your personal data is:
Consent to the processing of personal data
We may process your sensitive information, your CPR number, once you have given consent in accordance with § 11, stk. 2, nr. 2 in the Danish data protection law (databeskyttelsesloven).
Legitimate interests pursued through the processing
The remaining processing activities are based on Article 6(1)(f) of the GDPR, as we have a legitimate interest in processing your data, including ensuring the quality of the certification.
Finanssektorens Uddannelsescenter processes the following categories of personal data about you:
Name, work email, employer, CPR number, information about exam results and obtained certification, as well as log data related to the use of Finanssektorens Uddannelsescenter’s platform VidenBarometer, including date and time of last login and the browser used during the last login.
Finanssektorens Uddannelsescenter discloses or transfers your personal data to the following recipients:
Your employer’s HR department receives information about your exam results, regardless of whether you pass or fail.
In addition, Finanssektorens Uddannelsescenter has engaged certain sub-processors who perform various tasks on our behalf. We may transfer your personal data to these sub-processors. The sub-processors are only permitted to access and process your personal data on our behalf in order to fulfill the specific purposes defined by us. Sub-processors may include, for example, our cloud hosting provider Microsoft. These sub-processors process personal data solely on behalf of Finanssektorens Uddannelsescenter and in accordance with our instructions and are therefore not permitted to process personal data for their own purposes.
Finanssektorens Uddannelsescenter does not transfer your personal data to recipients outside the EU and EEA.
Finanssektorens Uddannelsescenter receives your personal data from your employer.
In addition, personal data is generated when you take exams via VidenBarometer, including exam results and any obtained certification.
Finanssektorens Uddannelsescenter stores your personal data until we receive notification from your employer that you have left your position. After that, you have the option to request that Finanssektorens Uddannelsescenter transfer the personal data (e.g., CMD License/certificate) associated with your VidenBarometer user profile to a new profile linked to your new employer. You decide whether your data should be transferred to the user profile at your new employer. The employer cannot initiate the transfer on your behalf.
In connection with your CMD License exam, you will be asked to give consent for Finanssektorens Uddannelsescenter to process your CPR number on behalf of Finance Denmark, who is the data controller. This is necessary to ensure the unique identification of all exam participants, which is done via MitID.
You have the right to withdraw your consent to the processing of your CPR number at any time. You can do so by contacting Finanssektorens Uddannelsescenter using the contact details provided in sections 1 or 2.
If you choose to withdraw your consent, this does not affect the legality of our processing of your personal data based on your previously given consent up until the time of withdrawal. The withdrawal of consent will therefore only take effect from that point forward.
If you withdraw your consent, we may need to collect additional information from you to ensure we can identify you correctly. You will be informed of this when you contact us.
You have a number of rights regarding our processing of your personal data under the General Data Protection Regulation (GDPR).
If you wish to exercise your rights, please contact us.
Right of access
You have the right to access the personal data we process about you, as well as additional information.
Right of rectification
You have the right to have inaccurate personal data about yourself corrected.
Right to erasure
In certain cases, you have the right to have your personal data erased before our general retention period expires.
Right to restriction of processing
In certain cases, you have the right to restrict the processing of your personal data. If you exercise this right, we may only process the data – apart from storage – with your consent, or for the establishment, exercise, or defense of legal claims, or to protect a person or important public interests.
Right to object
In certain cases, you have the right to object to our lawful processing of your personal data. You may also object to the processing of your data for direct marketing purposes.
Right to data portability
In certain cases, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to have this data transferred from one data controller to another without hindrance.
You can read more about your rights in the Danish Data Protection Agency’s guidance on data subject rights, available at www.datatilsynet.dk.
You have the right to file a complaint with the Danish Data Protection Agency if you are dissatisfied with the way we process your personal data. You can find the contact details of the Danish Data Protection Agency at www.datatilsynet.dk.