1. Data Controller
MM Bemanding is the data controller responsible for the processing of personal data we receive about you.
MM Bemanding
If you have any questions regarding our processing of your personal data, you can reach us at info@mmbemanding.com.
2. Who Does This Policy Apply To?
This privacy policy applies when you:
- apply for a job or register a candidate profile with MM Bemanding
- work as a temporary worker or employee with MM Bemanding
- act as a contact person at one of our clients or business partners
- supply goods or services to MM Bemanding
- visit our website
- contact us via email, phone, web form, or social media
3. What Personal Data Do We Process?
Job Seekers and Temporary Workers
We typically process the following categories of information:
- Name, address, email address, and phone number
- CV, education, vocational qualifications, and work experience
- Certificates, licenses, language proficiencies, and driving licenses
- Preferences regarding job type, working hours, expected remuneration, and geographical mobility
- References and testimonials from previous employers
- Notes from interview evaluations and the recruitment assessment
- Work and residence permits (where applicable)
If you are employed or assigned as a temporary worker, we additionally process:
- CPR number (Danish civil registration number)
- Bank account details for payroll transfer
- Tax card information and statutory tax deductions
- Records of working hours, holidays, illness, leaves of absence, and parental leave
- Remuneration and contractual employment terms
- Occupational injury records, where relevant
- Documentation necessary for employment compliance, wage disbursement, and statutory obligations
Corporate Clients and Business Partners
We typically process:
- Company name, registered address, and CVR/business registration number
- Contact person’s name, job title, corporate email, and telephone number
- Agreements, purchase orders, quotations, invoices, and operational correspondence
- Information necessary to administer and execute the business engagement
Website Visitors
When you browse our website, we may process technical data such as IP address, browser type, device specifications, and user interactions with our pages.
This processing takes place primarily via cookies and similar technologies. You can learn more in our cookie policy and consent settings.
4. Purposes of Processing
We process personal data in order to:
- match candidates and temporary personnel with suitable assignments
- facilitate talent acquisition, candidate screening, and hiring
- administer employment relationships and process payroll
- fulfil contractual commitments toward clients and partners
- respond to inquiries and communications
- enter into and manage commercial agreements
- issue invoices and maintain accurate financial accounting
- comply with fiscal, labour law, and bookkeeping obligations
- enhance the functionality of our website and recruitment services
- dispatch relevant communications regarding career opportunities and services where a legitimate legal basis exists
5. Legal Grounds for Processing
We only process personal data when an established legal ground under GDPR Article 6 is present.
| Legal Basis | Examples of Processing |
|---|---|
| Consent (Art. 6(1)(a) GDPR) | Newsletter subscriptions, non-essential analytics/marketing cookies, and optional candidate communication |
| Performance of Contract (Art. 6(1)(b) GDPR) | Employment contracts with staffing personnel, client master service agreements, and service fulfillment |
| Compliance with Legal Obligation (Art. 6(1)(c) GDPR) | Bookkeeping statutory mandates, tax reporting, holiday allowance fund transfers, and health & safety documentation |
| Legitimate Interests (Art. 6(1)(f) GDPR) | Recruitment pipeline administration, web platform integrity and security, documentation of transactions, and client relations |
In exceptional instances, we may process special categories of data (e.g., medical certificates in case of sick leave or workplace injuries). Such processing occurs solely when legally necessary under GDPR Article 9 and relevant Danish employment law.
6. Disclosure of Personal Data
We disclose personal data strictly when necessary for legitimate operational purposes or mandated by statutory regulations.
Personal data may be shared with:
- Corporate clients, when proposing and assigning personnel to specific customer projects.
- Danish Tax Agency (SKAT), in connection with salary reporting and statutory tax withholding.
- ATP, FerieKonto, and holiday funds, in accordance with mandatory Danish labour market schemes.
- Pension funds, financial institutions, and insurance underwriters, where relevant for collective agreements and coverage.
- Municipalities and public authorities, when compelled by statutory disclosure duties.
- IT service providers and data processors, supporting our hosting infrastructure, CRM, payroll administration, accounting, and email systems.
- External legal and financial counsel, including certified auditors and legal advisers where professional consultation is required.
We execute comprehensive Data Processing Agreements (DPAs) with all external vendors processing data on our behalf.
We do not sell your personal data under any circumstances.
7. Data Transfers Outside the EU/EEA
As a baseline rule, we process all personal data within the boundaries of the EU/EEA.
In the event that third-party infrastructure providers transfer or process data outside the EU/EEA, we ensure adequate protective safeguards, such as the European Commission Standard Contractual Clauses (SCCs), the EU-US Data Privacy Framework, or equivalent statutory transfer mechanisms.
8. Data Retention Periods
Personal data is retained only for as long as necessary to achieve the stated purposes or as mandated by statutory retention requirements.
| Data Category | Retention Period |
|---|---|
| CVs, applications, and candidate profiles of applicants not recruited or assigned | Up to 2 years following the most recent recorded activity, unless explicit consent for extended retention is granted or earlier deletion is requested |
| Records concerning employed staff and temporary workers | Throughout the duration of employment and up to 5 years following termination, pursuant to Danish accounting, tax, and labour law documentation mandates |
| Bookkeeping and statutory fiscal records | 5 years from the close of the financial year pursuant to the Danish Bookkeeping Act (Bogføringsloven) |
| Information on corporate clients and suppliers | For the duration of the commercial relationship and thereafter as required for documentation or accounting purposes |
| General inquiries and correspondence | For as long as necessary to resolve, follow up, and document the matter |
| Cookies and website analytics data | Pursuant to our cookie policy and your declared consent preferences |
By “most recent activity”, we mean actions such as profile updates, submission of an updated CV, applying for a placement, responding to our communications, or active dialogue regarding employment opportunities.
You may request the deletion of your personal data at any time by writing to info@mmbemanding.com. Please note that certain records must be retained pursuant to overriding statutory obligations (e.g. accounting and tax regulations).
9. Data Security
MM Bemanding maintains rigorous technical and organizational security safeguards designed to prevent data loss, unauthorized access, alteration, disclosure, or misuse.
Access to personal data is restricted strictly to authorized personnel and contracted processors with a verified operational need to access the information.
We enforce systematic incident management protocols. In the event of a reportable personal data breach, we notify the Danish Data Protection Agency (Datatilsynet) within 72 hours and inform affected data subjects whenever statutory thresholds are reached.
10. Cookies and Marketing
Our website utilizes cookies for core platform operation, aggregated traffic statistics, user preferences, and marketing purposes.
You are presented with the option to grant or withhold consent via our cookie banner upon your initial visit. You can modify your consent settings at any point.
Direct marketing communications are transmitted solely in presence of a legitimate legal basis (such as your express consent or an ongoing customer relationship). You may opt out at any time via the unsubscribe mechanism in our emails or by contacting info@mmbemanding.com.
11. Your Rights Under GDPR
Under the GDPR, you hold significant enforceable rights, including:
- Right of access to the personal data we hold about you
- Right to rectification of inaccurate or incomplete information
- Right to erasure (“right to be forgotten”) under eligible circumstances
- Right to restriction of processing under specified statutory conditions
- Right to object to processing founded upon legitimate interests
- Right to data portability in a structured, commonly used, and machine-readable format
- Right to withdraw consent at any time without affecting prior lawful processing
To exercise any of your rights, please submit your request to info@mmbemanding.com or telephone us at +45 60 88 03 30.
We may request proof of identity prior to processing your request to safeguard against unauthorized disclosure.
12. Right to Lodge a Complaint
If you believe that our processing of your personal data infringes applicable data protection regulations, we encourage you to contact us first so we can promptly address your concerns.
You also possess the statutory right to lodge a formal complaint with the Danish supervisory authority:
Datatilsynet (Danish Data Protection Agency)
13. Changes to This Privacy Policy
MM Bemanding reserves the right to amend this privacy policy in response to legislative revisions, service updates, or modifications to our data processing procedures.
The current binding version is continually accessible on our website, with the date of the latest revision stated prominently at the top.