Privacy Policy
Paychex Europe Denmark ApS, company registration no. 15611472 (”Paychex”, ”we”, ”us” or ”our”), which owns and provides the following solutions:
- Danløn
- Paychex Europe Lessor Payroll
- Paychex Europe Lessor Workforce
- Paychex Europe Emply People
Paychex acts as a data controller in certain situations, including when visitors to our website contact us through the website and in connection with the organisation of courses and webinars. In the section below, you can read more about the purposes, legal bases, and your rights.
When Paychex processes personal data about our customers’ employees in our solutions, Paychex acts as a data processor and is subject to the clauses set out in the data processing agreement we have entered into with our customers. You can read more about our role as data processor, download a copy of our standard data processing agreement, and learn more about the security measures we have implemented to protect your employees’ personal data in our data processing agreement.
You are always welcome to contact us using the contact details set out below in section 11.1 if you have any questions regarding our processing of personal data. You may also refer to section 10 below, where we describe your rights in more detail and provide additional contact information.
2 Our processing of personal data as data controller when you use Paychex’ dedicated websites, when you use our contact forms or otherwise communicate with us
2.1 When you use Paychex’ dedicated websites or otherwise contact us, Paychex processes various personal data about you as data controller, e.g. in connection with your use of our dedicated websites, when you contact us to receive support, or when you otherwise get in touch with us, as well as when we receive information about you from third parties.
2.2 When you contact us via contact forms on our website or in connection with other enquiries, your enquiry may sometimes contain personal data, such as contact details, your affiliation with a particular company, or other personal data you may provide to us. We process, among other things, this information in order to handle and respond to your enquiry.
2.3 Our legal basis for processing the information described in sections 2.1 and 2.2 is the pursuit of our legitimate interests. Our legitimate interest is handling and responding to your enquiry. The legal basis is Article 6(1)(f) of the GDPR.
2.4 If you use one of our contact forms, if you express interest in one of our products in an enquiry, or if you contact us on behalf of a company, we may also register you and the information you provide in our CRM system as a potential lead or as a representative of a company, so that we may contact you with information about and offers for our products. In such cases, you will be registered as a contact person for the company you represent.
2.5 Our legal basis for processing the information described in section 2.4 is the pursuit of our legitimate interests. Our legitimate interests are: (i) the potential sale of our products that we may achieve by subsequently using the information to contact you about our products, and (ii) our interest in being able to contact you as a contact person for the company you represent. The legal basis is Article 6(1)(f) of the GDPR.
3 Our processing of personal data that you provide to us in connection with support, marketing, and general communication
3.1 When you contact us to receive support in relation to the use of our products, your enquiry may sometimes contain personal data, such as contact details, your affiliation with a particular company, or other personal data that you may provide to us. We process this information in order to provide the support you request.
3.2 Our legal basis for processing the information described in section 3.1 is the pursuit of our legitimate interests. Our legitimate interest is handling and responding to your enquiry and thereby delivering the support that we have agreed to provide to the company you represent. The legal basis is Article 6(1)(f) of the GDPR.
3.3 We may also use your enquiry, including any personal data contained therein, as part of optimising our current services or developing new services, for example by compiling statistics on enquiries received or by anonymising enquiries in order to use them at a later time. We may also use your contact details in connection with the preparation of surveys, as well as any personal data we may receive if you participate in such surveys.
3.4 Our legal basis for processing the information described in section 3.5 is the pursuit of our legitimate interests. Our legitimate interest is the potential optimisation of our current services or the development of new services that the processing seeks to achieve. The legal basis is Article 6(1)(f) of the GDPR.
3.5 When you contact us by telephone to receive support in relation to the use of our products, we record the telephone conversation if you provide your consent. The purpose of the recording is to train our employees in the support department.
3.6 Our legal basis for processing the information described in section 3.5 is the consent you provided prior to the recording. The legal basis is Article 6(1)(a) of the GDPR.
3.7 You may withdraw your consent at any time. You can do so by contacting us using the contact details set out in section 11.1 below.
3.8 In connection with the distribution of marketing materials, including customer satisfaction surveys or the personalisation (profiling) of our marketing to you — based upon your click behaviour in relation to received marketing through the use of cookies — we may process your personal data, such as your name, email address, company affiliation, and other information we specifically receive.
3.9 Our legal basis for processing the information described in section 3.8 is the consent you provided prior to the distribution of marketing to you. The legal basis is Article 6(1)(a) of the GDPR.
3.10 You may withdraw your consent at any time. This can be done by unsubscribing via the relevant communication or by contacting us using the contact details set out in section 11.1 below.
4 Our processing of personal data when you are registered or register yourself for a course, and in connection with the organisation of courses
4.1 When you or others register you for a course, we process your contact details, such as your name, email address, company affiliation, and other information that we specifically receive. This may also include information about specific dietary preferences if we are responsible for catering in connection with the course. We do this in order to provide you with the course for which you are registered.
4.2 Our legal basis for processing the information is the pursuit of our legitimate interests. Our legitimate interest is that the processing of the personal data is necessary for us to deliver the course that we have agreed to provide to the company you represent. The legal basis is Article 6(1)(f) of the GDPR.
4.3 If your registration is made on your own behalf, and thus not on behalf of a company, our legal basis for the processing is Article 6(1)(b) of the GDPR as the processing is necessary for the performance of the contract that we enter into with you regarding the delivery of a course.
5 Our processing of personal data when you subscribe to and receive our newsletter
5.1 When you subscribe to our newsletter, we register your email address and any other contact information that may constitute personal data in order to send our newsletters and offers to you.
5.2 In some cases, we also register other information that you specifically provide to us.
5.3 We use this additional information to personalise the offers and news we send to you.
5.4 Our legal basis for the above processing is the consent you provide when subscribing to our newsletter. The legal basis is Article 6(1)(a) of the GDPR.
5.5 You may withdraw your consent at any time. This can be done by unsubscribing via the relevant communication or by contacting us using the contact details set out in section 11.1 below.
6 Our processing of personal data in connection with your use of our websites
6.1 Our websites use cookies and similar technologies to collect and process information about our visitors’ use of our website and services. If you wish to know more about our use of cookies and similar technologies, you can read about this in our cookie policy.
6.2 When cookies and similar technologies are placed on your device, personal data about you may be processed and disclosed to our partners, such as information about your IP address, if you have provided your consent. Our legal basis for processing this information is the consent you provided prior to the use of cookies and similar technologies. The legal basis is Article 6(1)(a) of the GDPR.
6.3 You may withdraw your consent at any time. For example, this can be done by contacting us using the contact details set out in section 11.1 below.
7 Processing of personal data in connection with legal obligations, enforcement of terms of use, and handling of legal claims
7.1 When we process personal data in order to comply with our obligations under applicable legislation, such processing is carried out only to the extent necessary to ensure compliance with legal requirements and for the correct and legally required administration of our services. This may include storing, reporting, or disclosing information when required under bookkeeping rules, regulatory requirements, or other legal obligations to which we are subject.
7.2 The legal basis for processing the information described in section 7.1 is Article 6(1)(c) of the GDPR.
7.3 From time to time, it may be necessary for us to process personal data in order to establish, exercise, or defend a legal claim. When we process personal data in connection with the handling of potential or actual legal claims, this is done for the purpose of documenting relevant circumstances, presenting necessary information, and ensuring our ability to establish, defend, or assert legal claims.
7.4 The legal basis for processing the information described in section 7.3 is Article 6(1)(f) of the GDPR and, where relevant, Article 9(2)(f).
8 Disclosure and transfer of personal data to data processors and third parties
8.1 As a general rule, we do not disclose personal data covered by this privacy policy to third parties without your consent, unless we are required to do so under applicable law or if the disclosure is made to pursue the purposes described above, including providing our solutions. For example, we may disclose your name to a third party if that third party’s facilities are to be used for a course you are attending. We may also share your contact details and preference information with our group companies if, for example, you have provided your consent in connection with subscribing to newsletters, etc. Our legal basis for such disclosure is the same as described above in relation to our own processing.
8.2 In several situations, we share your personal data to our data processors. This is the case, for example, when we have our data hosted by an external provider or when another company operates our website on our behalf. Our data processors process your personal data solely in accordance with our instructions, and we always enter into data processing agreements with our data processors. We primarily use well‑established and reputable data processors — such as Microsoft — who are able to provide sufficient guarantees in terms of expertise, reliability, and resources to implement appropriate technical and organisational security measures for the personal data they process on our behalf.
8.3 We use, among others, the data processor Abtion, which provides a range of services in connection with the operation of our website.
8.4 If our data processors, in exceptional cases, process personal data on our behalf in a third country, we always ensure that the necessary legally required transfer mechanism is in place.
9 Storage of your personal data
9.1 We process your personal data for as long as it is necessary for the purposes for which the personal data was collected. Please refer to the table below for specific retention periods.
9.1 We process your personal data for as long as it is necessary for the purposes for which the personal data was collected. Please refer to the table below for specific retention periods.
| Information and purpose of processing | Retention period after collection |
| Information about leads processed for purposes such as potential sale of products | The data is deleted no later than 3 years after collection, unless the company represented by the contact person has become a customer of ours. |
| Contact details received in connection with support | The data is deleted no later than 3 years after the support case has been closed. |
| Telephone calls recorded in connection with support | The data is deleted after 90 days. |
| Information received in connection with course registration | The data is deleted after 6 years. |
| Information received in connection with newsletter subscription | The data is deleted no later than 3 days after the consent has been withdrawn. |
| Information collected through the use of cookies, etc. | The data is deleted no later than 2 years after the most recent visit to the websites. |
10 Your rights
10.1 Under the General Data Protection Regulation (GDPR), you have a number of rights in relation to our processing of your personal data.
Right of access
You have the right to obtain access to the personal data that we process about you, as well as a range of additional information. This follows from Article 15 of the GDPR.
Right to rectification
You have the right to have inaccurate or incomplete personal data about you corrected. If you believe that we process information about you that is incorrect, outdated, or otherwise inaccurate, you have the right to contact us to have such data corrected or updated. This follows from Article 16 of the GDPR.
Right to erasure
In certain circumstances, you have the right to have personal data about you deleted before the time of our general retention periods. Please note that the right to erasure is not absolute, and in some cases we may be entitled or required to retain certain information — for example, if retention is necessary to comply with legal obligations to which we are subject. This follows from Article 17 of the GDPR.
Right to restriction of processing
In certain circumstances, you have the right to restriction of the processing of your personal data. If you are entitled to restriction, we may — apart from storage — only process the personal data with your consent, or for the establishment, exercise or defense of legal claims, or to protect the rights of another person or important public interests. This follows from Article 18 of the GDPR.
Right to object
In certain circumstances, you have the right to object to our otherwise lawful processing of your personal data. This follows from Article 21 of the GDPR.
Right to data portability
In certain circumstances, you have the right to receive your personal data in a structured, commonly used and machine‑readable format, and to have those personal data transmitted from one controller to another without hindrance. This follows from Article 20 of the GDPR.
10.2 For all enquiries regarding the exercise of your rights, you may simply contact us using the contact details set out in section 11.1.
11 Contact
11.1 If you have any questions or comments regarding the processing of your personal data, you are always welcome to contact us at:
Paychex Europe Denmark ApS
Company registration no. 15611472
Engholm Parkvej 8
3450 Allerød
E-mail: info@paychex.eu, telephone +45 48 16 60 00
11.2 You may also contact our Data Protection Officer (DPO), DPO Denmark, by telephone at +45 77 34 17 34 or by email at dpo-lessor@dpo-danmark.dk.
11.2 If you wish to lodge a complaint about our processing of your personal data, you may do so with the Danish Data Protection Agency (Datatilsynet) by telephone at +45 33 19 32 00 or via: https://www.datatilsynet.dk/kontakt/.
