Here you can read about how IDC Management Denmark ApS (hereinafter "we," "us," and "our") collects, processes, and stores your personal data as part of our operations and the activities described in section 3 below.
Responsible handling of personal data is crucial to our business goals and reputation. Therefore, this privacy policy describes how and why we collect personal data about you, how the data is used, when it is deleted, and how you can, among other things, access your personal data.
IDC is the data controller for the processing activities described in this privacy policy unless otherwise stated in the activities in section 3 below. If you have any questions about this privacy policy or our processing of your personal data as described in section 3 below, please contact us at:
IDC Management Denmark ApS
VAT number: DK-40911871
Store Kongensgade 40H, 3. Th., 1264 Copenhagen K, Denmark
Email: ir@idcventures.com
We collect and process personal data in different situations, and the purposes of the collection, what the personal data is used for and when it is deleted can vary. The individual activities where IDC (as data controller) can collect personal data about you are therefore described separately below.
When you visit our website (IDC Ventures — A Platform for Entrepreneurs by Entrepreneurs), we process, store, and disclose personal data about you for various activities and through cookies and your personal data may be used for the purposes specified below.
You can read more about cookies, the different types of cookies we use, how to change your cookie settings, delete cookies, and more in our cookie policy which is available here. Our website may contain links to other websites or to integrated websites. We are not responsible for the content of websites from other companies or their processing practices of personal data, and we refer you to read their privacy policy as well as other relevant policies relevant for other websites.
We expect to collect the following personal data about you through cookies on our website:
We process your personal data for the following purposes:
Our processing of general personal data is based on the following legal bases:
Your personal data may be shared with online service and ad providers and any of our IDC corporate entities.
We may transfer your personal data to countries outside of the EU/EEA if necessary to carry out the relevant task. Any transfer will take place subject to valid legal grounds for such transfer (the GDPR Chapter 5), e.g. the Standard Contractual Clauses published by the EU Commission which can be found here: Standard contractual clauses for international transfers (europa.eu). We may also rely on the EU-U.S Data Privacy Framework, if we transfer personal data to the US which can be found here: Home (dataprivacyframework.gov).
The retention period depends on the cookie. Your personal data is stored in accordance with our cookie policy which is included in our cookie solution.
We may store and process data for longer in anonymised form meaning we can no longer identify you.
When you communicate with us, contact customer service, or otherwise communicate with us, we collect and process your personal data.
We urge you not to disclose any sensitive or confidential personal data to us unless it is strictly necessary for your inquiry. For security reasons, we encourage you to send the information in encrypted form if you submit confidential or sensitive personal data via email.
We collect, process, and store the following types of personal data about you:
We process your personal data for the following purposes:
Our processing of general personal data is based on the following legal bases:
Your personal data will be deleted when we no longer need to process it for the fulfilment of one or more of the above purposes. In most cases, we will delete your inquiry once we have handled and completed your inquiry.
Depending on the nature of the inquiry, we may retain your personal data for up to 3 years from the response to your inquiry for the purpose of documentation and with reference to the statute of limitations rules on the limitation of ordinary monetary claims.
The personal data may be processed and stored for longer if we are obliged to do so by law.
When you subscribe to our newsletter for direct marketing purposes, we process different personal data about you for different purposes.
We process the following personal data about you in relation to our newsletter services:
We process your personal data for the following purposes:
Our processing of general personal data is based on the following legal bases:
We may share your personal data and/or make them available to other suppliers and/or service providers in connection with the general operation of our business, e.g. in connection with the external administration of our newsletter solution, analysis tasks, and marketing tasks.
We may transfer your personal data to countries outside of the EU/EEA if necessary to carry out the relevant task. Any transfer will take place subject to valid legal grounds for such transfer (the GDPR Chapter 5), e.g. the Standard Contractual Clauses published by the EU Commission which can be found here: Standard contractual clauses for international transfers (europa.eu). We may also rely on the EU-U.S Data Privacy Framework, if we transfer personal data to the US which can be found here: Home (dataprivacyframework.gov).
Your personal data is stored if your consent to receive newsletters is active and for a period thereafter to document the validity of the consent.
In accordance with the recommendations of the Consumer Ombudsman, we keep documentation of your marketing consent for at least two years after you have withdrawn your consent and in any case for as long as it is relevant for us to be able to document the validity of the consent.
The retention period is based on our legitimate interest in being able to demonstrate that direct marketing has taken place in accordance with applicable legislation (Article 6(1)(f) of the GDPR).
We may store and process data for longer in anonymised form meaning we can no longer identify you, or if we are obliged to do so by law or as part of a specific case.
When you enrol in our Services as a Partner, we process a variety of personal data about you for different purposes.
We process the following personal data about you as a natural person when performing our Partner relationship management:
We process your personal data for the following purposes:
Our processing of general personal data is based on the following legal bases:
We may share your personal data and/or make them available to suppliers and/or service providers in connection with the general operation of our business, e.g. in connection with the external administration of our IT systems, analysis tasks, marketing tasks, audit, legal assistance, etc. We may also share your personal data with our IDC corporate entities.
We may also share your information with public authorities and other government agencies for financial reporting and registration purposes.
We may transfer your personal data to countries outside of the EU/EEA if necessary to carry out the relevant task. Any transfer will take place subject to valid legal grounds for such transfer (the GDPR Chapter 5), e.g. the Standard Contractual Clauses published by the EU Commission which can be found here: Standard contractual clauses for international transfers (europa.eu). We may also rely on the EU-U.S Data Privacy Framework, if we transfer personal data to the US which can be found here: Home (dataprivacyframework.gov).
Your personal data is stored as long as we are in a contractual relationship, and as long as it is necessary to document our legal position which may overlap with the Danish Statute of Limitations.
Personal data collected for the purpose of complying with the Danish Anti-Money Loundering Act will be stored as long as we are in a contractual relationship, and for a period of 5 years after its termination.
Accounting material, including personal data, which we are obliged to store, is deleted no earlier than 5 years after the end of the financial year to which the information relates according to the Danish Accounting Act.
When you become a portfolio company, we process different types of personal data about the founders and other contact persons related to the portfolio company.
We process the following personal data about you
We process your personal data for the following purposes:
Our processing of general personal data is based on the following legal bases:
We may share your personal data and/or make them available to suppliers and/or service providers in connection with the general operation of our business, e.g. in connection with the external administration of our IT systems, analysis tasks, marketing tasks, audit, legal assistance, etc. We may also share your personal data with our IDC corporate entities.
We may also share your information with public authorities and other government agencies for financial reporting and registration purposes.
We may transfer your personal data to countries outside of the EU/EEA if necessary to carry out the relevant task. Any transfer will take place subject to valid legal grounds for such transfer (the GDPR Chapter 5), e.g. the Standard Contractual Clauses published by the EU Commission which can be found here: Standard contractual clauses for international transfers (europa.eu). We may also rely on the EU-U.S Data Privacy Framework, if we transfer personal data to the US which can be found here: Home (dataprivacyframework.gov).
Your personal data is stored as long as we are in a contractual relationship, and as long as it is necessary to document our legal position which may overlap with the Danish Statute of Limitations.
Accounting material, including personal data, which we are obliged to store, is deleted no earlier than 5 years after the end of the financial year to which the information relates according to the Danish Accounting Act.
Our Whistleblower Scheme allows members of the Board of Directors and Executive Board as well as any other employees and former employees of the Company to report their knowledge or reasonable suspicion of serious and criticisable matters or illegalities in relation to the Us and/or the Funds.
A report may include various personal data depending on the subject matter and we will only process a whistleblower report after it has been processed by our external Whistleblower Scheme partner, and if the report concludes that it concerns a reportable matter.
For information about the processing of personal data for the initial screening, we refer to our Whistleblower policy which can be found here: [IDC Management Denmark ApS - Whistleblower Policy].
We process the following personal data about you as a whistleblower:
We process your personal data for the following purposes:
Our processing of general personal data is based on the following legal bases:
We may disclose personal data to law enforcement authorities and others who may assist us in the investigation and prosecution of reported criminal offences if an offence is committed. In addition, the information will be shared with our trusted employees, unless the reported offence relates to one or more of the trusted employees.
Reports that are processed and handled regardless of the outcome are normally deleted 18 months after they are finalised. However, we may store the personal data for a longer period of time if it is necessary to comply with the law or to establish, defend or exercise a legal claim.
When you register as a user on our platform, the LP Portal, we process your personal data which you have provided to us.
We process the following personal data about you when using the LP Portal:
We process your personal data for the following purposes:
Our processing of general personal data is based on the following legal bases:
We may share your personal data and/or make them available to other suppliers and/or service providers in connection with the general operation of the platform, e.g. in connection with the external administration of our IT systems, analysis tasks, and marketing tasks.
We may also share your personal data with our IDC corporate entities.
We may transfer your personal data to countries outside of the EU/EEA if necessary to carry out the relevant task. Any transfer will take place subject to valid legal grounds for such transfer (the GDPR Chapter 5), e.g. the Standard Contractual Clauses published by the EU Commission which can be found here: Standard contractual clauses for international transfers (europa.eu). We may also rely on the EU-U.S Data Privacy Framework, if we transfer personal data to the US which can be found here: Home (dataprivacyframework.gov).
Your personal data is stored in as long as you have an active account on the LP Portal. The retention period of your personal data
We may store and process data for longer in anonymised form meaning we can no longer identify you.
If you apply for a job with us, including one or more of our affiliated companies, we process your personal data in connection with the recruitment process. The data controller for the processing of your application is the company in which you have applied for a job. If the company is located within the EU/EEA, we manage the recruitment process on behalf of that company and will act as the data processor.
We encourage you to not include any sensitive or confidential information, such as health data or social security number, unless this is a requirement or is explicitly requested for the position you are applying for.
We process the following personal data about you during our recruitment process:
We process your personal data for the following purposes:
Our processing of general personal data is based on the following legal bases:
We may share your personal data and/or make them available to other suppliers and/or service providers in connection with the general operation of our business, e.g. in connection with the external administration of our IT systems and HR administration.
We may also share your personal data with our IDC corporate entities.
We may transfer your personal data to countries outside of the EU/EEA, including our affiliated companies. Any transfer will take place subject to valid legal grounds for such transfer (the GDPR Chapter 5), e.g. the Standard Contractual Clauses published by the EU Commission which can be found here: Standard contractual clauses for international transfers (europa.eu). We may also rely on the EU-U.S Data Privacy Framework, if we transfer personal data to the US which can be found here: Home (dataprivacyframework.gov).
If you are offered a position with us, your application as well as additional relevant personal data collected in connection with the recruitment process will be stored in your personnel file with us.
If you are not offered a position, we will keep your application and any additional personal information collected during the recruitment procedure for a period of six (6) months after our refusal, unless you have given your consent to for us to store your personal data for a longer period in case other employment opportunities arise.
Any criminal records and health data will be deleted immediately after review.
We may store and process data for longer in anonymised form meaning we can no longer identify you.
If you visit our social media profiles, we may process your personal data as the data controller. In some cases, we act as joint data controllers together with the provider of the social media platform and has entered into a joint data controller agreement. We refer you to the individual social media providers’ privacy policies for more information about their processing of your personal data.
We have the following social media profiles:
When you visit our social media profiles, we and the social media provider may process the following personal data about you:
We process your personal data for the following purposes:
The social media providers may process your personal data for their:
Our processing of your personal data is based on the following legal bases:
We may share your personal data and/or make them available to other suppliers and/or service providers in connection with the general operation of our business, e.g. in connection with the administration of our IT systems.
We may transfer your personal data to countries outside of the EU/EEA, including our affiliated companies. Any transfer will take place subject to valid legal grounds for such transfer (the GDPR Chapter 5), e.g. the Standard Contractual Clauses published by the EU Commission which can be found here: Standard contractual clauses for international transfers (europa.eu). We may also rely on the EU-U.S Data Privacy Framework, if we transfer personal data to the US which can be found here: Home (dataprivacyframework.gov).
We store your personal data as long as they are active on our social media profiles, and until you delete any “likes”, shared posts, comments, messages etc. on our social media profiles.
The data can be stored for a longer period in anonymised form.
In connection with the purposes above, we may share your personal data with third parties, including IT suppliers, and other subcontractors. Our subcontractors process your personal data solely under our direct instructions and in accordance with the data processing agreement. Therefore, our subcontractors do not process the personal data for their own purposes but solely as data processors on our behalf.
In certain situations, it is necessary for us to disclose your personal data to third parties other than recruiting clients. Under specific circumstances and in accordance with the law, it may be necessary to disclose your personal data to the following recipients:
Our company structure may change as we develop, for example, through the complete or partial sale of IDC. In the event of the transfer of assets containing personal data, we disclose your personal data based on our legitimate interest in transferring parts of our assets and making commercial changes (Article 6(1)(f) of the GDPR).
When transferring personal data to recipients in countries outside the EU/EEA ("international data transfers"), the transfer is based on Chapter 5 of the GDPR, such as the EU Commission's standard contractual clauses or relevant adequacy decisions made by the EU Commission.
You are entitled to exercise your rights under the data protection legislation at any time:
If you wish to exercise your rights or have any other questions relating to our processing of your personal data, please contact us at ir@idcventures.com. Your request will be processed in accordance with the legislation in force at the given time. To the extent necessary, we will contact you and ask for additional information required to handle your request correctly.
If you would like to learn more about your rights, please visit the website of the Danish Data Protection Agency, www.datatilsynet.dk.
If you would like to make a complaint about our processing of your personal data, you are welcome to contact us. Our contact details are listed in Section 2 above.
You also have a right to file a complaint to the Danish Data Protection Agency, Carl Jacobsens Vej 35, DK-2500 Valby. A complaint may be filed by email to dt@datatilsynet.dk or through the website of the Danish Data Protection Agency datatilsynet.dk.
IDC may update this privacy policy on an ongoing basis when this is necessary to provide a fair description of our processing of personal data.
In the event of material changes to our processing of your personal data already in our possession, you will be notified directly of the update (e.g. by email) or we will announce the update on our website.
This privacy policy was last updated in September 2023.