We are obliged to protect the personal data we process about you and to inform you about this in accordance with the General Data Protection Regulation (“GDPR”).

We have therefore prepared this privacy policy to inform you about how we process your personal data when you apply for a job, take part in a residency, receive HAUT’s newsletter, or collaborate with us.

The data controller (the organisation processing your personal data is:

HAUT

Thoravej 29,

2400 Copenhagen NW

CVR nr.: 35686541

If you have any questions about our processing of your personal data, you are welcome to contact us at info@hautscene.dk or by telephone at (+45) 93 87 47 06.

Information we process about you in connection with application rounds and the completion of a residency.

WHAT INFORMATION DOES HAUT PROCESS?

In connection with your application, we process the following information about you: your name, address, date of birth, telephone number and email address. Information in your application and attachments, e.g. qualifications, CV and education, grades and course certificates, statements from references and possibly a photo

If we enter into a residency agreement, we will process the following additional information: information for ongoing administration and case processing in connection with artist residency contracts, including information in the application, portrait photo, other photos, citizenship, place of residence and accommodation, fee and dietary conditions, information relevant to payments, including bank details, education, courses and qualifications, and any illnesses. CPR (Danish personal identification) number. Health information (if applicable)

WHAT ARE HAUT’S PURPOSES AND THE LEGAL BASIS FOR THIS PROCESSING?

The purpose of processing your personal data in connection with your application is to assess your qualifications in order to evaluate whether we can offer you a residency. We do this on the basis of our legitimate interest in assessing the applications, cf. Article 6(1)(f) of the GDPR.

If we offer you a residency, we will process personal data about you for a number of additional purposes. We process personal data about you in order to comply with our contract, including communicating with you and paying fees in accordance with Article 6(1)(b) of the GDPR. We publish information about our collaboration on your residency on our website and social media, including your portrait. We do this to pursue our legitimate interest in marketing HAUT and creating awareness of the residencies offered by HAUT in accordance with Article 6(1)(f) of the GDPR.

In connection with reporting to SKAT, we process personal data about you in order to fulfil our obligations under tax legislation in accordance with Article 6(1)(c) of the GDPR and section 11(2)(1) of the Danish Data Protection Act.

If necessary, we may process data related to liability insurance for the establishment, exercise or defence of legal claims in accordance with Articles 6(1)(f) and 9(2)(f) GDPR.

RECIPIENTS OF THE PERSONAL DATA

We share the information in your application and supporting documents with a co-curator who helps us assess your residency application. You can see the name of the co-curator in the announcement of the application round or open call.

If we enter into a residency agreement, we are obliged to disclose information about you to public authorities, including SKAT, as part of the collaboration. We may also disclose information about you to our advisors, including financial and legal advisors. In connection with the administration of your residency, it will be necessary for us to share personal data about you with private companies. This may relate to booking accommodation and transport for you, or our coordination with dialogue partners, theatres and other art institutions as part of your residency. In case of disclosure, it will be done within the framework of the data protection rules. In connection with the administration of your residency, HAUT uses data processors for accounting and IT. Data processors only process the data on our behalf and may not use it for their own purposes.

HOW LONG DOES HAUT STORE YOUR PERSONAL INFORMATION?

If we cannot offer you a residency, we will delete your application after six months. We keep the data to be able to document a fair selection process.

If we enter into a residency agreement, we store and delete data in accordance with the following periods: Under normal circumstances, we delete information in your application and attachments three months after the contract ends. We will delete portrait photos of you as soon as possible and no later than the end of the season in which you have your residency. Information about the contract is generally deleted three years after the contract ends. However, accounting material is only deleted five years after the end of the financial year to which that material relates. Images, films and explanatory text on social media are generally not deleted. Images taken as part of the execution of the project which HAUT has bought out are generally not deleted.

We process the information we receive from you in connection with a job application in the following manner.

whose personal data does haut process?

Depending on the recruitment process, we will process some of your personal information. We only process the following personal data about you, necessary for the specific

recruitment process: Your full name, address, email and phone number. Information from your application, including CV and any attachments, date of birth, grades and test scores, hobbies, qualifications, picture, previous employment,

references, marital status, education and course certificates. Information gathered from the internet and social media. Personality and skills tests. References from previous employers. Reasons for any rejection. Health information, e.g., in case of employment under special terms.

We do not wish to receive your CPR number. We also ask you to omit information such as your race or ethnic origin, and information about political, religious or philosophical beliefs and trade union affiliation from your application and attachments. If relevant, we will obtain this information from you in the recruitment process.

WHERE DOES HAUT COLLECT YOUR PERSONAL DATA FROM?

We gather the information from you and the references you provide, and from relevant and accessible sources on the internet, including social media.

WHAT ARE HAUT’S PURPOSES AND THE LEGAL BASIS FOR THIS PROCESSING ?

We process personal data about you in order to assess your qualifications for employment with us at HAUT and to be able to communicate with you. Our basis for processing is our legitimate interest in being able to assess your professional and social qualifications, to communicate with you in connection with your application (by inviting you to a job interview, for example), and to document an objective recruitment process in accordance with Article 6(1)(f) of the GDPR.

If we obtain reference statements from previous employers, we also do so based on our legitimate interests in accordance with Article 6(1)(f) GDPR. If you consent, we will store your application in order to make you aware of other positions

in case you are not offered the position applied for in accordance with Article 6(1)(a) of the GDPR.

RECIPIENTS OF THE PERSONAL DATA

In some cases, we disclose information about you to lawyers and financial advisors. In case of disclosure, it will be done within the framework of the data protection rules. In connection with the recruitment process, HAUT uses data processors (for IT purposes, for example). Data processors only process the information on our behalf and may not

use it for their own purposes.

HOW LONG DOES HAUT RETAIN YOUR PERSONAL DATA?

Information about unsuccessful applicants will be deleted no later than six months after the application round has ended and the rejection has been communicated. We retain it to document an objective recruitment process. If you consent to it, we will keep the personal data for up to two years so that we can make you aware of other positions that might be relevant to you. Information about successful applicants is stored as stated in the privacy policy for employees.

When you sign up for HAUT's newsletter, we process the following information.

WHAT INFORMATION DOES HAUT PROCESS?

We process information about the e-mail address you provided us with when you subscribed to our newsletter.

WHAT IS THE PURPOSE AND THE BASIS OF HAUT’S DATA PROCESSING?

The purpose of processing your personal data is both to send you our newsletter, which contains marketing material, and to document that you have consented to receive newsletters from us. We process your personal data based on our legitimate interest in sending you the newsletter and documenting your subscription according to our obligations under Article 6(1)(f) of GDPR. As the newsletter constitutes electronic marketing material, we are obliged to seek permission in accordance with § 10 of the Danish Commercial Practices Act. We do this when you subscribe to the newsletter. You are free to unsubscribe from the newsletter by clicking “Unsubscribe” at the bottom of the newsletters you receive.

RECIPIENTS OF THE PERSONAL DATA

Sending out our newsletters, HAUT uses data processors related to distribution and IT. These data processors do no more than process the information on our behalf, and are prohibited from using it for their own purposes. We may also share the information with relevant public authorities – for example, in order to document our compliance with Denmark’s Commercial Practices Act.

HOW LONG DOES HAUT KEEP YOUR PERSONAL INFORMATION?

We keep your personal information for as long as you continue to subscribe to our newsletter. When you subscribe to our newsletters, we collect and process, at a minimum, the following information about you: the e-mail address that you entered. On registration, we will further indicate whether we collect and process additional information about you. This might include: First name, Surname. The data collected is used exclusively for sending newsletters. We use MailChimp to collect and store email addresses and to send newsletters. When you subscribe to our newsletters, you authorise your data to be transferred to MailChimp and processed in accordance with MailChimp’s privacy policy. In some cases, we transfer personal data to the Rocket Science Group LLC (MailChimp) in the USA. The transfer basis conforms to the European Commission’s standard contractual clauses for transfers to third countries. You are welcome to contact us for a copy of this agreement.

The following policy applies to collaborators such as photographers and co-curators who are paid on a fee basis.

WHOSE PERSONAL DATA DOES HAUT PROCESS?

We process data about you when we enter into a collaboration agreement with you. This can be either as a photographer or as a co-curator.

WHAT INFORMATION DOES HAUT PROCESS?

We process the following information about you: Your name, address, telephone number and email address. Information for the use of ongoing administration and case management in connection with the collaboration agreement, including fees and information relevant to payments, education and qualifications. CPR number.

WHAT ARE HAUT’S AIMS AND THE LEGAL BASIS FOR THIS PROCESSING?

The purpose of processing your personal data is to administer our collaboration, including communication, coordination, and the payment of fees. This processing is necessary to fulfil our cooperation agreement in accordance with Article 6(1)(b) of the GDPR. We also process your personal data to fulfil our legal obligations under tax legislation in connection with reporting to SKAT according to Article 6(1)(c) of the GDPR and section 11(2)(1) of the Danish Data Protection Act.

RECIPIENTS OF THE PERSONAL DATA

We share the information with public authorities, including SKAT, when they are entitled to receive it. We may additionally disclose information about you to our advisors; these include financial and legal advisors. In connection with our collaboration, HAUT uses a number of data processors for accounting and IT purposes. Data processors only process the information on our behalf; they may not use it for their own purposes.

HOW LONG DOES HAUT STORE THE PERSONAL DATA?

In normal circumstances, we delete contact information three years after the end of the contract. Personal data necessary to fulfil our accounting and auditing obligations, however, will not be deleted until five years after the end of the financial year to which the material relates.

If you want to exercise your rights as set out below, please use the contact details at the top of this page.

Right to withdraw consent: When we process personal data about you based on your consent, you have the right to withdraw your consent at any time. If you withdraw your consent, HAUT will cease processing the personal data to which you have withdrawn your consent. Your withdrawal of consent will not affect the legality of the processing until it is withdrawn.

Right of access: You have the right to access the personal data we process about you as well as a range of additional information. Access must not, however, violate the rights and freedoms of others.

Right to rectification: You have the right to have inaccurate information about you rectified and (taking into account the purpose of the processing) you have the right to have incomplete personal data made complete. If information about you changes and you cannot correct it yourself, you must inform us so that we can alter it. Any changes must be communicated without undue delay.

Right to erasure: In special circumstances, you have the right to have data concerning you deleted earlier than it would normally be deleted.

Right to restriction of processing: In certain circumstances, you have the right to restrict the processing of your personal data. If you have the right to restrict processing, we may in future only process the data - except for storage – with your consent, or for the establishment, exercise or defence of legal claims, or to protect an individual or important public interests.

Right to data portability: If our processing of your personal data is based on consent or a contract and the processing is carried out automatically, you have the right to data portability. This is the right to receive the personal data we process about you in a structured, commonly used and machine-readable format, which you have the right to transfer to another service provider. If you wish to exercise this right to data portability, contact us via the contact details above and request the transmission of your personal data from us in a commonly used format.

Right to object: In certain circumstances, you have the right to object to our otherwise lawful processing of personal data about you when we process data based on our legitimate interests.

TRANSFER TO THIRD COUNTRIES

Some of our data processors may transfer data to countries outside the EU/EEA (so-called third countries). You can obtain both a copy of the relevant basis for the transfer and information on where it has been made available by contacting us.

Link til one.com dataprocessing: https://www.one.com/static/info/data-processing-agreement-da.pdf

COMPLAINTS TO THE DANISH DATA PROTECTIONAGENCY

You have the right to complain to Datatilsynet - the Danish Data Protection Agency - about our processing of your personal data. You can find Datatilsynet’s contact details at www.datatilsynet.dk.