Privacy Policy
FOR TALENTS
FOR EMPLOYERS
1. PROTECTION OF YOUR PRIVACY
At Caseflow ApS (“Caseflow”), we believe that real-life cases, solved anonymously, will improve the quality of education, as well as hiring processes by removing conscious and unconscious bias.
When Caseflow process personal data in our software system (the “Caseflow Platform”), it is usually in the role of data processor by processing the data provided by you or our customer in connection with case-based recruitment and case competitions on behalf of our customers. For more information on this processing, please refer to the privacy policy of the company or student organization behind the specific recruitment or case competition (the “Event”). The relevant privacy policy is available on the Caseflow Platform.
Caseflow is data controller for the user profiles on the Caseflow Platform which may be used by you in multiple Events on the Caseflow Platform.
This document states how Caseflow will process personal data about our users on the Caseflow Platform in connection with the user profiles.
Under the General Data Protection Regulation (“GDPR”), Caseflow is obligated to inform you of how Caseflow processes the personal data collected and registered about you.
We take your privacy seriously and ensure reasonable and transparent processing in accordance with applicable rules on processing of personal data.
2. CONTACT DETAILS
Caseflow is controller for the user profiles and therefore responsible for your personal data being processed in accordance with applicable personal data law.
The contact details of Caseflow are as follows:
Caseflow ApS
CVR: 43684744
Address: Kanslergade 2, st. tv., 2100 København Ø
E-mail: info@caseflow.io
If you have any questions or comments regarding Caseflow's processing activities, you can always reach out to us, using the contact information above.
3. WE WILL PROCESS THE FOLLOWING PERSONAL DATA ABOUT YOU
We will process the following general personal data which we have received from yourself or the student organization or company hosting the Event:
General contact information: name, username, password, email address
Personal information on the user profile: age, birthplace, gender, date of birth, current
Residence, birthplace, when you joined the Caseflow Platform, information written by you on the user profile.
Skills listed on the user profile: education, professional and personal skills, behavioral skills, uploaded CV.
Your answers to feedback surveys
The user profiles contain a free text area where you can write additional information about yourself. Please do not provide any sensitive information such as information on political opinions, religious or philosophical beliefs, or trade union membership, data concerning health, or data concerning a natural person’s sex life or sexual orientation.
We also process your solution to cases and answers to personality tests, see more in clause 4.
4. PURPOSE AND LEGAL BASIS
The purposes and legal basis of our processing of your personal data are as follows:
Making the user profile available for your use of the Caseflow Platform and its Events. The legal basis is that the processing is necessary for the performance of a contract to which you are a party in accordance with Article 6(1)(b) of the GDPR and that the processing is necessary for the purpose of our legitimate interest in storing your user profile for present and future Events in accordance with Article 6(1)(f) of the GDPR.
Disclosing the data to the relevant public authorities and our advisors if it is necessary for compliance with a legal obligation in accordance with Article 6(1)(c) of the GDPR or the processing is necessary for the purpose of our legitimate interest in obtaining advice in accordance with Article 6(1)(f) of the GDPR.
Anonymize your solution to cases and answers to personality tests for the purpose of developing an AI algorithm to determine personality type of the user based on answers to cases in accordance with Article 6(1)(f) of the GDPR based on our le- gitimate interest in business development.
Process your answers to the feedback surveys for the purpose of our legitimate interest in improving and further develop Caseflow's products and services in accordance with Article 6(1)(f) of the GDPR
Your answers to the feedback surveys will be deleted or anonymized within 30 days after you have sent us your answers. Caseflow might also process this data as data processor for our customers.
5. CATEGORIES OF RECIPIENTS
In accordance with the purposes described above, we may disclose your personal data to the following categories recipients if relevant:
Our advisors
Relevant public authorities
Student organization or company hosting the Events
Users on the Caseflow Platform
Furthermore, we use data processors who process data on behalf of us.
6. TRANSFER TO THIRD COUNTRIES
Any transfer of personal data to third countries or international organisations by Caseflow shall always take place in compliance with GDPR.
7. DELETION
Your personal data are only stored as long as necessary for the purpose of collection or for observing relevant legislation.
The user profiles will usually be deleted within 3 years after the end of the last Event where you participated, unless there is a substantive reason for longer retention, including a pending dispute.
Solutions to cases and answers to personality tests for the purpose for developing an AI algorithm will be anonymized before any analysis. Afterwards, Caseflow might continue to process this data as data processor for our customers. 8.3 Caseflow may change the features of any type of account, may withdraw or, or introduce new features, products or types of account at any time and for any reason.
8. YOUR RIGHTS
If you wish to exercise the below rights, please contact us using the contact details listed above.
Your rights are the following:
Right of access: You are entitled to have access to the personal data processed and a number of additional information. However, the right of access may not infringe other persons’ rights and rights of freedom.
Right of rectification: You are entitled to have incorrect personal data rectified.
Right of deletion: In special situations, you are entitled to have personal data deleted before our general deletion takes place.
Right of restriction of processing: In certain situations, you are entitled to have the processing of your personal data restricted. If you are entitled to such restricted processing, we may only process your personal data – except for storage – with your consent, for the purpose of establishing, exercising or defending a legal claim or to protect a person or important public interests.
Right of data portability: You are entitled to data portability to the extent that our processing of your personal data is based on your consent or an agreement, and the processing takes place automatically. This right implies that you are en-titled to have your personal data forwarded in a structured, generally applied and machine-readable format, which you are entitled to transfer to another ser-vice provider.
Right of objection: In certain situations, you are entitled to object to our legal processing of your personal data.
Right of withdrawal of consent: To the extent that our processing is based on your consent, you are entitled to withdraw your consent wholly or partly. The withdrawal of your consent will not affect the lawfulness of the processing made by us until your consent is withdrawn. Withdrawal of your consent will thus only be valid from that point in time.
For more information on your rights, see the Danish Data Protection Agency’s guidelines describing the data subject’s rights on www.datatilsynet.dk.
If you make use of your rights as described above, we also process personal data relating to reception and responding to inquiry. If there is doubt about your identity, we have the right to request for more information necessary to confirm your identity. In such a case, we will process end register this additional information about you for this purpose. How-ever, we will limit the extent of information and our processing as much as possible.
9. COMPLAINTS
If you wish to complain about our processing of your personal data, you may complain to the Danish Data Protection Agency (contact details at www.Datatilsynet.dk).
10. UPDATES
This privacy policy was last updated in February 2024.
Privacy Policy
FOR TALENTS
FOR EMPLOYERS
1. PROTECTION OF YOUR PRIVACY
At Caseflow ApS (“Caseflow”), we believe that real-life cases, solved anonymously, will improve the quality of education, as well as hiring processes by removing conscious and unconscious bias.
When Caseflow process personal data in our software system (the “Caseflow Platform”), it is usually in the role of data processor by processing the data provided by you or our customer in connection with case-based recruitment and case competitions on behalf of our customers. For more information on this processing, please refer to the privacy policy of the company or student organization behind the specific recruitment or case competition (the “Event”). The relevant privacy policy is available on the Caseflow Platform.
Caseflow is data controller for the user profiles on the Caseflow Platform which may be used by you in multiple Events on the Caseflow Platform.
This document states how Caseflow will process personal data about our users on the Caseflow Platform in connection with the user profiles.
Under the General Data Protection Regulation (“GDPR”), Caseflow is obligated to inform you of how Caseflow processes the personal data collected and registered about you.
We take your privacy seriously and ensure reasonable and transparent processing in accordance with applicable rules on processing of personal data.
2. CONTACT DETAILS
Caseflow is controller for the user profiles and therefore responsible for your personal data being processed in accordance with applicable personal data law.
The contact details of Caseflow are as follows:
Caseflow ApS
CVR: 43684744
Address: Kanslergade 2, st. tv., 2100 København Ø
E-mail: info@caseflow.io
If you have any questions or comments regarding Caseflow's processing activities, you can always reach out to us, using the contact information above.
3. WE WILL PROCESS THE FOLLOWING PERSONAL DATA ABOUT YOU
We will process the following general personal data which we have received from yourself or the student organization or company hosting the Event:
General contact information: name, username, password, email address
Personal information on the user profile: age, birthplace, gender, date of birth, current
Residence, birthplace, when you joined the Caseflow Platform, information written by you on the user profile.
Skills listed on the user profile: education, professional and personal skills, behavioral skills, uploaded CV.
Your answers to feedback surveys
The user profiles contain a free text area where you can write additional information about yourself. Please do not provide any sensitive information such as information on political opinions, religious or philosophical beliefs, or trade union membership, data concerning health, or data concerning a natural person’s sex life or sexual orientation.
We also process your solution to cases and answers to personality tests, see more in clause 4.
4. PURPOSE AND LEGAL BASIS
The purposes and legal basis of our processing of your personal data are as follows:
Making the user profile available for your use of the Caseflow Platform and its Events. The legal basis is that the processing is necessary for the performance of a contract to which you are a party in accordance with Article 6(1)(b) of the GDPR and that the processing is necessary for the purpose of our legitimate interest in storing your user profile for present and future Events in accordance with Article 6(1)(f) of the GDPR.
Disclosing the data to the relevant public authorities and our advisors if it is necessary for compliance with a legal obligation in accordance with Article 6(1)(c) of the GDPR or the processing is necessary for the purpose of our legitimate interest in obtaining advice in accordance with Article 6(1)(f) of the GDPR.
Anonymize your solution to cases and answers to personality tests for the purpose of developing an AI algorithm to determine personality type of the user based on answers to cases in accordance with Article 6(1)(f) of the GDPR based on our le- gitimate interest in business development.
Process your answers to the feedback surveys for the purpose of our legitimate interest in improving and further develop Caseflow's products and services in accordance with Article 6(1)(f) of the GDPR
Your answers to the feedback surveys will be deleted or anonymized within 30 days after you have sent us your answers. Caseflow might also process this data as data processor for our customers.
5. CATEGORIES OF RECIPIENTS
In accordance with the purposes described above, we may disclose your personal data to the following categories recipients if relevant:
Our advisors
Relevant public authorities
Student organization or company hosting the Events
Users on the Caseflow Platform
Furthermore, we use data processors who process data on behalf of us.
6. TRANSFER TO THIRD COUNTRIES
Any transfer of personal data to third countries or international organisations by Caseflow shall always take place in compliance with GDPR.
7. DELETION
Your personal data are only stored as long as necessary for the purpose of collection or for observing relevant legislation.
The user profiles will usually be deleted within 3 years after the end of the last Event where you participated, unless there is a substantive reason for longer retention, including a pending dispute.
Solutions to cases and answers to personality tests for the purpose for developing an AI algorithm will be anonymized before any analysis. Afterwards, Caseflow might continue to process this data as data processor for our customers. 8.3 Caseflow may change the features of any type of account, may withdraw or, or introduce new features, products or types of account at any time and for any reason.
8. YOUR RIGHTS
If you wish to exercise the below rights, please contact us using the contact details listed above.
Your rights are the following:
Right of access: You are entitled to have access to the personal data processed and a number of additional information. However, the right of access may not infringe other persons’ rights and rights of freedom.
Right of rectification: You are entitled to have incorrect personal data rectified.
Right of deletion: In special situations, you are entitled to have personal data deleted before our general deletion takes place.
Right of restriction of processing: In certain situations, you are entitled to have the processing of your personal data restricted. If you are entitled to such restricted processing, we may only process your personal data – except for storage – with your consent, for the purpose of establishing, exercising or defending a legal claim or to protect a person or important public interests.
Right of data portability: You are entitled to data portability to the extent that our processing of your personal data is based on your consent or an agreement, and the processing takes place automatically. This right implies that you are en-titled to have your personal data forwarded in a structured, generally applied and machine-readable format, which you are entitled to transfer to another ser-vice provider.
Right of objection: In certain situations, you are entitled to object to our legal processing of your personal data.
Right of withdrawal of consent: To the extent that our processing is based on your consent, you are entitled to withdraw your consent wholly or partly. The withdrawal of your consent will not affect the lawfulness of the processing made by us until your consent is withdrawn. Withdrawal of your consent will thus only be valid from that point in time.
For more information on your rights, see the Danish Data Protection Agency’s guidelines describing the data subject’s rights on www.datatilsynet.dk.
If you make use of your rights as described above, we also process personal data relating to reception and responding to inquiry. If there is doubt about your identity, we have the right to request for more information necessary to confirm your identity. In such a case, we will process end register this additional information about you for this purpose. How-ever, we will limit the extent of information and our processing as much as possible.
9. COMPLAINTS
If you wish to complain about our processing of your personal data, you may complain to the Danish Data Protection Agency (contact details at www.Datatilsynet.dk).
10. UPDATES
This privacy policy was last updated in February 2024.