Compass Group Denmark (Compass Group) is a leading provider of facility management services, catering, and cleaning to a wide range of companies in various industries. Our customers are companies located in Denmark with an agreement for service provision. In this context, we may process information about the employees of these companies.
The processing of information depends on the service provisions a company has chosen as part of a customer agreement.
1. Compass Group is the Data Controller
Compass Group is responsible for the processing of your personal data in relation to the agreements we have entered. We take care of your personal data and would like to inform you about how we process your personal information. You can learn about what we use personal data for, how long we retain it, and who we share it with.
If you need to contact us, you can do so via email: persondata@compass-group.dk or phone: 72 22 88 88.
Further contact information can be found below.
2. Processing of Personal Data About You
We process personal data about you as an employee in a company that is a customer of ours. Either the customer or you as an employee choose the personal information that is shared with Compass Group. The personal data for employees may include:
- Name
- Email address
- Initials
- Employee number
- Phone number
- Payment card information (for purchases on website and in apps)
- Food allergies or similar*
*Health information is a special category of personal data. In general, Compass Group is prohibited from processing sensitive personal data unless the data subject (employee/guest of the customer) has given explicit consent for processing. Processing of information about an allergy is considered necessary to protect the data subject’s (employee’s/guest’s) interests. If an employee of a customer chooses to provide this type of information to Compass Group, Compass Group considers this as consent to register and store this information.
Compass Group generally encourages customers to limit the sharing of personal information collected in various services.
Additionally, Compass Group may process personal data in the following contexts:
- Compass Group’s customer loyalty program (participation in events, receiving newsletters, invitations, etc.)
- Through visits to websites and any apps (use of cookies). See cookie policy.
- Statistics on employees’ use of access to the Customer Dashboard.
- Subscription to newsletters.
- Information provided in customer satisfaction surveys.
Customers are informed about each individual processing, for example, through a cookie policy.
3. Purpose of Processing
We process information about you to fulfill the agreement we have entered. We process personal data for the following purposes:
- Invitation to events
- Meeting bookings and ordering catering for meetings
- Cash registration of purchases in a canteen
- Purchase of takeaway on a website or in an app
- Other services
- Contact information related to the agreement itself
In addition to handling purchases, information is used for statistics, analysis to develop services, and based on inquiries regarding a purchase.
The processing of your personal data is based on Article 6(1)(b) of the General Data Protection Regulation (fulfillment of a contract the data subject is a party to).
If you have provided us with sensitive information (such as food allergies), such information is processed under Article 9(2)(a) of the General Data Protection Regulation (consent).
4. Sharing Your Information with Our Data Processors
Your information is shared with our suppliers, who are our data processors. These are specifically chosen to support the service offerings our customers have selected as part of the agreement. In addition to service providers, Compass Group has agreements with AWS (Amazon Web Services) for server hosting and data storage, and Microsoft for email and calendar services (Outlook). Most of our data processors are located in Denmark or in the EU (EU locations).
If required, we have entered into data processing agreements with these data processors, meaning these parties also adhere to rules regarding the processing of personal data. You can contact us at any time to find out precisely which data processors Compass Group uses for a given service.
5.Retention of Your Information
Compass Group retains your data for as long as necessary to provide you with the agreed-upon services in the customer agreement. According to the rules of the Bookkeeping Act, we are obligated to retain certain information about your purchase for up to 6 years.
6. Your Rights
Under the General Data Protection Regulation, you have several rights regarding our processing of information about you. If you wish to exercise the rights below, please contact us by sending an email to: persondata@compass-group.dk.
Right of Access
You have the right to access the personal data Compass Group processes about you.
Right to Rectification
You have the right to have incorrect personal data rectified without undue delay. You also have the right to have incomplete personal data completed.
Right to Erasure
You have the right to have your personal data erased from Compass Group if the conditions for erasure are met. For example, we cannot erase information legislation requires us to retain.
Right to Restriction of Processing
You have the right to restrict Compass Group’s processing of your personal data in certain cases, including when there is doubt about the accuracy of your personal data.
Right to Object
You have the right to object to Compass Group’s processing of your personal data if you believe your personal data is being processed in violation of the law or other legal obligations, such as a contract with Compass Group.
Right to Data Portability
You have the right to receive the personal data you have provided to Compass Group in a structured, commonly used, and machine-readable format and/or to have your personal data transferred from Compass Group to another data controller, such as another company.
7. Contact Information
Name: Compass Group Danmark A/S
Address: Rued Langgårds Vej 8, 2300 Copenhagen S
CVR no.: 81093628
Phone: 72 22 88 88
Email: persondata@compass-group.dk
8. Data Protection Officer (DPO)
Compass Group has not appointed a DPO, as we are a private company in the facility management services, catering, and cleaning sectors, which do not require regular and systematic monitoring of private individuals or involve processing sensitive personal data on a large scale.
9. Complaint to the Danish Data Protection Agency
You have the right to file a complaint with the Danish Data Protection Agency if you are dissatisfied with the way we process your personal data. You can find the contact information for the Danish Data Protection Agency at www.datatilsynet.dk.