Data Protection Policy
At CA, we only collect personal data when it is relevant and necessary.
We place high demands on the level of IT and information security. Security is reviewed annually by an external audit, which ensures that we live up to the requirements and the applicable legislation. In this way, we protect your personal data in the best possible way.
1. CA is the data controller – how to contact us
CA is the data controller in accordance with GDPR for the personal data you provide to us in connection with your membership and through the ongoing communication and interaction you have with us.
If you have any questions about CA's processing of personal data, you can contact our Data Protection Officer either by phone or by email to: persondata@ca.dk
Company name: CA A-kasse
CVR number: 10631203
Address: Smakkedalen 2, 2820 Gentofte
Phone: 3314 9045
2. What information do we collect?
As an unemployment insurance fund, we have some special obligations that require the collection of personal data. As a general rule, we do not need to obtain your consent before this information is received or disclosed. This is specified in the unemployment legislation.
We collect the following types of information:
a. Personal Information in general
We collect general personal data to ensure the correct processing of your membership and to be able to provide you with the right advice and service. This information is used to identify you, administer your membership, meet regulatory requirements, and ensure that our ongoing communication will continue to be relevant to you.
Name
Address
Contact information
Nationality
Institution of education
Job title
Employer
Membership of another unemployment insurance fund
Any previous memberships or membership fees arrears with another unemployment insurance fund
Use of member offers or add-on services if relevant
Membership number
b. Sensitive and/or confidential information
Sensitive and/or confidential information is collected when it is necessary to assess your eligibility to receive services or to comply with our legal or contractual obligations. For example, we may process information about matters concerning criminal law if this affects your right to obtain a membership fee exemption for a period of time.
CPR number
Trade union membership
Health Information
Matters concerning criminal law
c. Information obtained through digital interaction
We use cookies and other tracking technologies on our website and in email communication. They allow us to measure which webpages are visited and how users are navigating on both the website and in our emails. They can also be used, for example, to tailor messages to better match your interests, so that we can continuously improve our service.
Data from cookies and/or completed forms on the website, social media or via our other channels may include:
Name
Email
Telephone number
IP address
Here you can read more about our cookie policy: https://www.ca.dk/cookiepolitik
3. How and when do we process your personal data?
a. Registration, case processing and payment of benefits
In connection with your registration, you provide us with a number of personal data, which we then use in connection with ongoing case processing and any payment of benefits such as unemployment benefits and early retirement benefits.
b. Administration and collection of membership fees
We use some of the personal data collected when you signed up on an ongoing basis to collect your membership fee.
c. Automated decisions
In certain cases, CA uses automated decisions:
Decisions on waiting days (Every time you have been unemployed for four months, you will be deducted from the unemployment benefits for one waiting day if you have not reported paid hours. We retrieve the information about your paid hours from the Income Register and your unemployment benefit cards for the period).
Decisions approving applications for holiday benefits when the calculations show that the number of days applied for can be paid
Approval of admission when admission can take place on the desired date
Approval of a change of status from student to graduate when the application has been made within the deadline and other conditions are met
Approval of extension of free student membership when the desired extension can be recognized
Automatic decision is only used in cases where we have all the necessary information available. If a case requires a closer investigation or is based on estimates, no automatic decision will be made.
If your case is processed automatically, you can always have an employee manually review your case. Contact us if you are in doubt.
d. Personalized, relevant communication
By telephone
When you call CA, we register the time of day and the duration of the call. We also register which employee you have been in contact with.
We record the conversation as we are obliged to record relevant information. We only use the recording to prepare a short, written note. The conversation will then be deleted after a maximum of 24 hours. If you so choose, we can also use the recording for education and training. In that case we will save the recording for up to three months.
Email
If you communicate with us by email, it may be an unencrypted message, which is why we recommend that you do not write your CPR number in the email and also provide as little personal information as possible.
When you log in to our website (My page), we have established a secure platform for exchanging documents and messages with CA, so you can always communicate with us in writing via a secure connection.
Personal inquiries and meeting
If you attend a meeting with us or contact us in person at one of our addresses, we treat your personal data confidentially.
e. Member offers and/or add-on services
If you make use of any of our many member offers and/or additional services, you will in some cases be redirected to our partners' websites, where you will be asked to provide a number of personal information. This information is processed by our partners based on their own personal data policy. However, this information is exchanged and updated between CA and the partner in a secure manner to validate the individual's membership.
If the use of a given service requires the sharing of your personal data with, for example, a course provider, you will be asked to give separate consent to this.
f. Member recruitment and marketing
E-books, draws and quizzes
In order to participate in draws, download e-books and similar services on our website and other platforms, you will sometimes be asked to fill in a form with your personal information, including your name, telephone number and email address. The information is stored securely and with user-restricted access.
Personalised marketing (with your consent)
We sometimes use your personal data to personalise our content for you. This applies, for example, to the content of our website, but also to the emails we send to you and the ads that we target you with on social media. All on the basis of your consent.
Our personalised content is made possible by the personal data that you have provided to us, your registrations, your purchases, your interactions in emails and with advertisements, as well as by your user behaviour on our website (registered using cookies).
Contacting potential members
CA regularly contacts potential members who have given their consent through inquiry or permission.
We also contact potential members whose personal information (Name, Company, Job Title, Mobile Number and Email) has been purchased via. registers of publicly available data.
g. Recruiting
By submitting an application to CA, you consent to us processing the personal data we have received from you. You can withdraw this consent and thus also your application at any time.
If your application does not lead to employment with us, we will delete your personal data after six months at the latest. If we wish to store your application and your personal data in our candidate database for more than six months, you will receive an email in which we specifically ask for your consent.
If you become employed by CA, you will then be informed about how we handle employees' personal data in CA.
h. Analysis and statistics
We continuously analyse anonymised personal data with the aim of understanding user behaviour, so that we can optimise our services and products and to improve our website and other marketing efforts.
4. How do we secure your information?
At CA, we place high demands on the level of IT and information security. Security is reviewed annually by an external audit, which ensures that we live up to the requirements and the applicable legislation. In this way, we protect your personal data in the best possible way.
We work according to internationally recognized frameworks in relation to IT and information security and ensure ongoing education and training of our employees in the handling of personal data in accordance with GDPR.
Personal data is continuously deleted after our applicable retention rules:
a. For members of CA Unemployment Insurance Fund
Personal data relating to your membership of CA Unemployment Insurance Fund will be deleted eight years after you have reached retirement age (or eight years after death). It is mandatory for us to store the information until then, and we can therefore not delete it on an ongoing basis.
b. For former members of CA Unemployment Fund
Personal data relating to your membership of CA Unemployment Insurance Fund is automatically deleted eight years after your membership with us has ended, unless you are covered by the cancellation scheme for early retirement.
If you have paid into early retirement, your data will not be deleted until eight years after you have reached retirement age (or eight years after death).
c. Personal data collected for marketing purposes
Personal data collected with consent for marketing purposes – e.g. through draws and downloading e-books – is stored for a maximum of three years after your last interaction, after which it is deleted.
5. Is your personal data disclosed?
CA sometimes uses collaborators and/or suppliers where it is necessary to disclose personal data. It is our responsibility to ensure that your personal data is processed properly, and we place high demands on our business partners.
Our business partners must guarantee that your personal data is protected, and therefore we enter into data processing agreements with the companies that handle personal data on our behalf.
Transfers of personal data to third countries or international organisations
As a general rule, we use data processors in the EU/EEA or who store data in the EU/EEA.
In a few cases, this is not possible, and in this case, data processors outside the EU/EEA may be used, provided that they can provide your personal data with appropriate protection.
6. Your rights
Below you can see what rights the General Data Protection Regulation gives you in relation to our processing of personal data about you.
Contact us if you would like to exercise your rights. Then we will help you.
a. Access
You have the right to access the information we process about you, as well as a number of additional information.
b. Rectification
You have the right to have incorrect information about yourself corrected.
c. Erasure
In special cases, you have the right to have information about you deleted before the time of our general deletion occurs.
d. Restriction of processing
You have the right in certain cases to have the processing of your personal data restricted. If you have the right to have the processing restricted, we may in future only process the data – except for storage – with your consent, or for the purpose of establishing, exercising or defending legal claims, or for the protection of a person or important public interests.
e. Object
In certain cases, you have the right to object to our otherwise lawful processing of your personal data. You can also object to the processing of your data for direct marketing purposes.
f. Portability
In certain cases, you have the right to receive your personal data in a structured, commonly used and machine-readable format and to have this personal data transferred from one controller to another without hindrance.
g. Withdrawal of consent
When our processing of your personal data is based on your consent, you have the right to withdraw your consent.
h. Complaints to the Danish Data Protection Agency
You have the right to lodge a complaint with the Danish Data Protection Agency if you are dissatisfied with the way we process your personal data. You can find the Danish Data Protection Agency's contact information on https://www.datatilsynet.dk/english
7. Changes to the Privacy Policy
We reserve the right to change the Privacy Policy. The latest version will always be available on our website.