Privacy Policy

This Privacy Policy outlines how we, GTS Nordic, collect and process the personal information we gather about our employees on an Employer of Record (EoR) solution. At the end of this privacy policy, you can find details about your rights under the data protection legislation, including your right to make a formal complaint.

GTS Nordic is the Data Controller

We are the data controller, which means that we are responsible for managing the personal information we collect as part of the employment. We are obligated to inform you about how we process your data and about your rights regarding this data. This is how you can get a hold of us:

GTS Nordic
Headquarters, GTS Nordic Denmark ApS
Kalkbrænderiløbskaj 6, 2100 Copenhagen Denmark
Phone: +45 70 24 80 80
Email: [email protected]
CVR: 21672475

Why do we process personal information?

When you are employed through the Employer of Record solution at GTS Nordic, we process personal information about you in order to facilitate your employment relationship between you, your Agency and your daily workplace at the End Client.

If you are recruited via a recruitment agency, we will exchange personal information about you with the agency in order to process the employment and to ensure correct payment according to time sheets. We may also process personal information about you in order to provide one or more of our additional services, including e.g. taxation services, prepayment and processing of salary, pension and benefits (payroll services), application for work and/or residence permits, etc.

What information do we collect and where from?

In order to process payroll, taxation, and working hours, we collect and process your contact and identification information, including your full name, email, phone number and address, your bank details and any passport and/or other necessary identification details. If we also manage residence and/or work permits, we will process necessary identification information required to comply with applicable regulations, including to be able to process residence and/or work permit applications on your behalf with the Danish immigration Authorities (SIRI) and The Danish Tax Agency (Skat). This will normally be done through a power of attorney, which will be concluded with you separately.

We mainly collect the information directly from you. We also receive information from the Agencies we work with, from End Client, and from public authorities in Denmark (and in your home country). We normally do not receive or process your CV, job application, or other documents that you have provided in the recruitment process. You can learn more about our application processes on our Website.

If you consent to receive text messages containing practical information about salary payments and similar information, we will process your name and phone number for this purpose.

The legal basis for processing your data

We generally have a legitimate interest (GDPR Article 6(1)(f)) in collecting and processing personal information about you for the purpose of facilitating your on- and oƯboarding and employment experience in a straightforward and compliant manner. We also process personal data about you on the basis of GDPR Article 6(1)(b) in order to fulfil the employment contract and any other contracts you may have entered into with us in relation to our other services. We process your personal data on the basis of GDPR Article 6(1)(c) for the purpose of tax reporting, in order to fulfill our legal obligation for tax compliance.

When we apply for work and/or residence permits on your behalf, we also process a copy of your passport and other necessary identification information to fulfill our legal obligations. Where necessary, we may occasionally process personal information about union membership in accordance with section 12(1) of the Data Protection Act in order to comply with labor law requirements. The data processing related to sending information text messages is based on your explicit consent, cf. Article 6(1)(a) of the GDPR.

How we share personal information

Generally, GTS Nordic does not share any personal information collected about you with any third parties. However, we do exchange personal information about you with relevant recruitment agencies and with the End Client where you perform the work. As stated above, we may also share personal information about you with relevant authorities, including The Danish Tax Agency (Skat), the Danish Agency for International Recruitment and Integration (SIRI), the Danish Business Authority (RUT), the Danish Working Environment Authority (Arbejdstilsynet) and The Civil Registry of your local municipality (CPR). When providing assistance with setting up a bank account, we may also exchange personal data about you with your bank. We only share personal data with public authorities and others when we are obligated to do so and where necessary to process your employment and/or any applications. In order to demonstrate compliance with work permit requirements and other employment regulations, we may forward a copy of your work permit and other necessary documents to relevant Agency and/or End Client. We also disclose personal data to our data processors who process personal data on our behalf and on our instructions, such as those who provide our IT systems, backup and support to GTS Nordic..

The legal basis for processing

We collect and process personal information on our website based on our legitimate interest (under GDPR Article 6(1)(f)) to provide a secure and functional online environment.

For marketing purposes, we collect information with your consent as per § 3 of the Danish Cookie Act and Article 6(1)(a) of the GDPR.

Should you choose not to allow cookies, you can block and delete them via your browser settings or by updating your preferences on our website.

How we share personal information

Generally, GTS Nordic does not share any personal information collected about you with any third parties. However, we do exchange personal information about you with relevant recruitment agencies and with the End Client where you perform the work.

As stated above, we may also share personal information about you with relevant authorities, including The Danish Tax Agency (Skat), the Danish Agency for International Recruitment and Integration (SIRI), the Danish Business Authority (RUT), the Danish Working Environment Authority (Arbejdstilsynet) and The Civil Registry of your local municipality (CPR). When providing assistance with setting up a bank account, we may also exchange personal data about you with your bank.

We only share personal data with public authorities and others when we are obligated to do so and where necessary to process your employment and/or any applications. In order to demonstrate compliance with work permit requirements and other employment regulations, we may forward a copy of your work permit and other necessary documents to relevant Agency and/or End Client.

We also disclose personal data to our data processors who process personal data on our behalf and on our instructions, such as those who provide our IT systems, backup and support to GTS Nordic.

How long do we store personal information?

We store personal information for as long as the information is necessary to fulfil the processing purposes for which the information was collected. We will store necessary personal information for five (5) years after the end of employment in order to document the employment relationship and to comply with bookkeeping and tax regulation.

If you have any questions about retention or deletion of personal information, or if you want to exercise your rights, please contact us at [email protected]

Do we transfer personal information to third countries?

We may in some cases transfer personal information to countries outside the EU/EEA. Any transfer of personal information to a country outside the EU/EEA that does not provide an adequate level of data protection based on an adequacy decision by the European Commission will be based on the European Commission's standard contractual clauses (SCC). You can contact us if you wish to receive a copy of the SCC.

Your rights

If we process personal information about you based on your consent, you have the right to withdraw that consent at any time and for any reason. Should you choose to do so, we will cease to process any personal information previously collected based on that consent.

Your right to access

You have the right to access the personal information we hold about you and to receive additional information about how we process it.

Right to rectification and erasure

You have the right to correct inaccurate information about yourself and, in certain cases, to have personal information about you deleted before the usual retention period expires.

Right to restriction of processing

In certain situations, you can request that we restrict the processing of your personal information. This means we can retain your data, but not process it further, unless this is for legal claims, protecting rights, or important public interests.

Right to object

When our processing of personal data about you is based on our legitimate interest, cf. Article 6(1)(f) GDPR, you may object to the processing, provided that the processing is otherwise lawful.

For more detailed information about your rights, please visit the Danish Data Protection Agency's website.

Complaints to the Danish Data Protection Agency (Datatilsynet)

You have a right to file a complaint with the Danish Data Protection Agency regarding our processing of your personal information. For more information, please visit the Danish Data Protection Agency's website: www.datatilsynet.dk. If you want to exercise your rights or if you have a complaint, please contact us: [email protected]