Here, you can read about how we handle your personal data as a vendor of kompasbank, effective 1 March 2022 for existing and new partners.
At kompasbank, we protect and respect your data and your privacy. When you enter into a cooperation agreement with kompasbank a/s, we act as the data controller for processing your personal data. A cooperation agreement may include a contract for the supply of goods, the delivery of software services, a partnership agreement about kompasbank navigator, etc.
This Privacy Notice applies to you as a private individual affiliated with a company that has, or potentially may have, a cooperation agreement with kompasbank. You may be an authorized signatory, beneficial owner, director, employee, or a third party associated with our suppliers.
The Privacy Notice describes how we process your personal data when your company cooperates with us.
1. What is personal data?
Personal data includes any information that can be linked to you. When your company enters into a cooperation with us, we register contact details and identification information of the contact person and, if different, any authorized signatories — all of which, individually or in combination, may be attributable to individuals associated with the company.
2. How do we process your personal data?
At kompasbank, we treat your personal data confidentially and in compliance with the Data Protection Act, the EU General Data Protection Regulation (GDPR), the Danish Data Protection Agency guidelines, and other relevant legislation.
We obtain your personal data when you, for example, fill out our contact form or provide information upon request or through correspondence. In addition, we collect information from publicly available sources.
We collect and process general (non-sensitive) personal data:
Name, address, phone number, email, and potentially the company registration number (CVR) are examples of regular personal data that we process.
Furthermore, we may collect sensitive information concerning meetings between kompasbank and your company, including voice and video recordings.
3. Purpose of processing and the legal basis
We process your personal data for the following purposes:
Registration as a supplier in our systems, such as our contract register and/or kompasbank navigator
Ongoing administration of our cooperation
Termination of the cooperation
Compliance with applicable legislation
We do not request information beyond what is necessary and relevant to fulfill the above purposes.
To process your personal data, we must have a legal basis (it must be stated in the law that we are permitted to process the specific data). The relevant legal bases are listed below:
To fulfill contracts and agreements with you (GDPR, Article 6(1)(b)), we are required to process your personal data, such as contact information and company registration number (CVR), which, in the case of sole proprietorships, is considered personal data.
The processing of your personal data requires your consent in certain situations (GDPR, Article 6(1)(a)). Therefore, we obtain your consent for specific purposes, such as recording voice and video meetings. You may withdraw your consent at any time, and doing so will have no impact on our collaboration agreement.
4. How long will you keep my personal data for?
If we enter into a cooperation agreement, we will retain your personal data as long as you are a vendor at kompasbank. If you cease to be a supplier to kompasbank, we will retain your personal data for five years plus the current calendar year from termination.
5. Protection of your personal data
We have established a number of technical and organisational measures to ensure that your personal data is not accidentally or illegally deleted, published, made known to unauthorised persons or misused.
6. The right to information and other rights
You have the right to get access to the information we have collected about you, and the right to get incomplete or inaccurate personal data about you corrected or deleted. You also have the right to request restrictions on how we may process your information, just as in certain cases you have the right to object to our processing of your personal data based on our legitimate interest. In the event of an objection, we will assess whether the processing can continue to take place, or whether your situation means that your objection can be met. Finally, you have the right to have your information transferred to you or another company (data portability). You can read more about your rights in the Danish Data Protection Agency’s guide on data subjects’ rights, which you can find at www.datatilsynet.dk.
We keep records that we have complied with (or possibly rejected) your request to use one of your rights for two years.
You make use of your rights by contacting our data protection officer. See the contact information below.
7. Transfer of information (including third country transfers)
We use third parties (data processors) for storage and processing of data, i.e. processing and storage of your personal information in our IT systems provided by private companies. They process information solely on our behalf and are prohibited to use it for their own purposes.
We only use data processors and/or sub-processors in the EU or in countries that can provide your information with satisfactory protection.
8. Duty of confidentiality
All our employees have a duty of confidentiality. This means that information about you, including your personal data, will not be unjustifiably passed on to third parties.
9. Contact
If you have any questions about our processing of your personal data or wish to exercise your rights, you are welcome to contact us or our data protection officer.
10. Data controller
We, kompasbank a/s, CVR.no. 38803611, Frydenlundsvej 30, 2950 Vedbæk, are Data Controller with regards to the personal information we collect.
11. Data Protection Officer
We have appointed a Data Protection Officer (DPO), who is responsible of controlling that kompasbank complies with the relevant data protection regulation. You can always contact our DPO with inquiries or questions regarding our processing of personal information:
kompasbank a/s
Att. Data Protection
Frydenlundsvej 30
2950 Vedbæk
Phone +45 38 42 33 00
12. The Danish Data Protection Agency (Datatilsynet)
If you are unhappy with the way we process your personal information, you can always submit a complaint to the Danish Data Protection Agency. You can find the contact information at www.datatilsynet.dk.
13. Changes to the Privacy Notice
As a vendor of kompasbank, you will receive notification if we make changes to the way we collect and process personal data that is important to you. The date from which it applies appears at the beginning of the document.
Last reviewed: 4. December, 2025