PERSONAL DATA PROCESSING

PERSONAL DATA PROCESSING

WHAT PERSONAL DATA DOES MRSI PROCESS ABOUT YOU AND FOR WHAT PURPOSES?

Purpose Type of processing Categories of personal data
Applications for recruitment – Handling of recruitment process (incl. collection of data, recording, organisation, structuring and storage in our systems)

– Identification

– Correspondence regarding the application procedure

– Internal record keeping for future positions

Name, email, address, phone number, gender, year of birth, CV, personal letter, other documents uploaded for the recruitment process.
The legal ground for processing of applications for an advertised position is Performance of a Contract since the processing is needed in order to take steps prior to entering into an employment contract with you.

The legal ground for processing of open applications for future positions is Legitimate Interest. Data processing is required to address you when matching vacancies appear within the organisation. Should the requested information not be provided, MRSI may not be able to provide you with such information.

The retention period lasts until you have been hired or until you are no longer being considered for a future position, but no more than 2 years.

 

Purpose Type of processing Categories of personal data
Subscription for information about open positions – Correspondence regarding open job positions.

 

Email address.
The legal ground for processing is Legitimate Interest.

Should the requested information not be provided, MRSI will not be able to provide you with the requested information.

The retention period lasts until you opt out from future information notifications as set out in the information provided to you.

 

Purpose Type of processing Categories of personal data
Registration to alter/update job applications -Administration of account.

 

Email address.
The legal ground for processing is Legitimate Interest.

Should the requested information not be provided, MRSI will not be able to provide you with the account.

The retention period lasts until you delete your account or if you have not used your account for 2 years.

 

Purpose Type of processing Categories of personal data
Customer Service Correspondence and requests regarding MRSI’S products and services and other thereto related service matters. Name, email address, phone number.
The legal ground for processing is Legitimate Interest. The processing is necessary to administer yours and our need to process customer and other related service matters.
The retention period lasts until the request has been solved or you become a customer.

 

Purpose Type of processing Categories of personal data
Administration of invitations to events and newsletters. – Identification.

– Correspondence, surveys and evaluation regarding the event such as confirmation of registration, requests and evaluations.

 

Name, contact info (phone number, email, address), information from evaluations.
The legal ground for processing this data is Legitimate Interest. The processing is necessary to adhere to our and our customers’ legitimate interest to evaluate, develop and improve our services and systems.

The secondary reason Consent – where you have provided your consent to receive our invitations and newsletters.

The retention period last until the event/evaluation has been finalized and/or consent is revoked or you opt out from future invitations.

 

Purpose Type of processing Categories of personal data
Direct marketing – Direct marketing (by MRSI or through our external partners).

 

Name, email, phone number, address, navigational information such as information about your computer and your visits to this website including your IP address, geographical location, browser type, referral source, length of visit and pages viewed, correspondence and feedback regarding our products and services.
The legal ground for processing this data is Legitimate Interest. The processing is necessary to adhere to our and our customers’ legitimate interest to evaluate, develop and improve our services and systems.

The secondary reason Consent – where you as a non-customer has provided your consent to receive direct marketing.

The retention period lasts for 12 months following the end of an ended customer or similar relationship or at an earlier date if you so request or when your consent is revoked.

 

Purpose Type of processing Categories of personal data
Investor Relations Correspondence, invitations and registrations regarding investments in MRSI including notifications of shareholder meetings, reports etc. Name, email address, phone number.
The legal ground for processing is Legal Obligations that MRSI adhere to such as the Companies Act.

The legal ground for processing may also be Legitimate Interest where the processing is necessary to adhere to our investors legitimate interest to receive financial information about MRSI.

The third legal ground is Consent – where you have provided your consent to receive our invitations and newsletters.

The retention period lasts until you delete your account, revoke your consent or opt out from future invitations and information or when we no longer have a legal obligation to save data.

 

Purpose Type of processing Categories of personal data
Evaluate, develop and improve our services and systems for our customers in general.

 

– Improve visitors’ browsing experience by personalizing the website and improve our services.

– Administration of our website and our relationship with you including to provide services to you which you may request from MRSI and/or to provide and monitor our services to you.

– Conducting optional online surveys (e.g. to receive feedback regarding the quality of our service)

-Establish material for improvement of our services such as customer care and job applications.

– Provide our customers the possibility to improve our services.

-Development of material to improve our IT systems with the purpose of raising the security for the company and our visitors.

 

Based on the data MRSI collects (e.g. visit history, technical data and log dataetc.) MRSI may carry out analysis that may include you being sorted into a customer segment. The analysis is however never carried out on an individual level. The result from the analysis is used for improving out services and developing our webpage.

Correspondence/feedback, user generating data (incl. click and visit history), technical data such as browser type, domain names, internet service provider (ISP) etc.), info about your interaction with MRSI (log data, how long different pages have been reviewed, answering times, download errors, how you reach and leave the service etc.)

Navigational Information such as information about your computer and your visits to this website including your IP address, geographical location, browser type, referral source, length of visit and pages viewed.

Correspondence and feedback regarding our services.

 

The legal ground for processing this data is Legitimate Interest. The processing is necessary to adhere to our and our customers’ legitimate interest to evaluate, develop and improve our services and systems.
The retention period is 36 months following collection of the data.

 

Purpose Type of processing Categories of personal data
Prevent misuse of a service or prevention and investigation of a criminal offence against MRSI. – Prevent spam, phishing, harassment, incorrect logins to user accounts or similar activities etc.

-Development and improvement of our IT systems with the purpose of raising the security for

the company and our visitors.

Residence country, correspondence/feedback, user generating data (incl. click and visit history), technical data (incl. IP number, web installments, operating system, screen resolutions, platform), info about your interaction with MRSI (log data, how long different pages have been reviewed, answering times, download errors, how you reach and leave the service etc.)

Navigational Information such as information about your computer and your visits to this website including your IP address, geographical location, browser type, referral source, length of visit and pages viewed.

Correspondence and feedback regarding our services.

The legal ground for processing is the Legal Obligation to which MRSI is subject or Legitimate Interest. Where no legal obligation exists, the processing is necessary to adhere to our legitimate interest of preventing misuse of a service or to prevent and investigate criminal offenses against MRSI.
The retention period lasts for 36 months following collection of the data.