Privacy Policy

KSR CRANES ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This privacy policy informs you about how we process your personal data when you visit our website (ksrcranes.dk) and tells you about your rights under data protection legislation (GDPR).

Our website is not intended for children, and we do not knowingly collect data relating to children.

KSR CRANES is the data controller for your personal data. If you have questions about this privacy policy or wish to exercise your rights, you can contact us at:

KSR CRANES
Eskebuen 49
2620, Albertslund
Danmark

E-mail: info@ksrcranes.dk
Phone: +45 23 26 20 64

We may collect and process the following categories of personal data:

• Identity data: Name, company name.

• Contact data: Email address, phone number, address.

• Technical data: IP address, browser type and version, timezone settings, browser plugin types and versions, operating system and platform, device type. Note: Your IP address may be used to derive your approximate geographical location (e.g., country or region) for analytical purposes.

• Usage data: Information about how you use our website and services (e.g., pages visited, clicks).

• Project data: When you request crane operators, we collect information about your projects, including location, dates, and descriptions.

We use various methods to collect personal data, including:

• Direct interactions: You may provide us with your identity, contact, and project data by filling in forms or corresponding with us via post, phone, email, or otherwise.

• Automated technologies: When you interact with our website, we may automatically collect technical data and usage data about your equipment and browsing actions through cookies and similar technologies (see section 6 on Cookies). We may also receive technical data about you if you visit other websites that use our cookies.

We only use your personal data when the law permits it. Most commonly, we will use your personal data in the following circumstances:

• Where we need to perform a contract we are about to enter into or have entered into with you.

• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.

• Where we need to comply with a legal obligation.

• Where we have your consent (e.g., for certain types of cookies or marketing).

We primarily use your personal data to:

• Provide crane operator services to you and manage the contract.

• Respond to your inquiries and communicate with you.

• Manage our relationship with you.

• Improve our website, services, and user experience. This includes analysis of technical data and usage data, including the approximate geographical location derived from IP addresses, to understand how our website is used and where our visitors come from. The legal basis for this processing is our legitimate interest in maintaining and improving our online presence (GDPR art. 6(1)(f)). For this purpose, we may share your IP address with third-party GeoIP service providers to determine your approximate location; we ensure that such providers comply with applicable data protection legislation.

• Ensure the security of our website and prevent fraud (legitimate interest).

• Send marketing and promotional content via email or other channels if you have given specific consent (GDPR art. 6(1)(a)).

Our website uses cookies to distinguish you from other users. This helps us provide you with a good experience when you browse our website and also allows us to improve our website. A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer, if you agree.

We use the following types of cookies:

• Necessary cookies: These are required for the website to function correctly (e.g., navigation, access to secure areas). The website cannot function properly without these cookies. The legal basis is our legitimate interest in providing a functioning website (GDPR art. 6(1)(f)).

• Analytics/performance cookies: These allow us to recognize and count the number of visitors and see how visitors move around our website when they use it. This helps us improve the way our website works, for example by ensuring that users easily find what they are looking for. We only use these cookies if you give your consent (GDPR art. 6(1)(a)).

• Marketing cookies: These are used to track visitors across websites in order to display relevant advertisements based on your interests. We only use these cookies if you give your consent (GDPR art. 6(1)(a)).

You can manage your cookie consents via the cookie banner displayed on your first visit, and typically via a link or icon on the website thereafter. You can also set your browser to reject all or some browser cookies or alert you when websites set or access cookies. If you disable or reject cookies, please note that some parts of this website may become inaccessible or not function properly.

We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, as well as the applicable legal requirements.

We generally retain:

• Contract data for up to 5 years after the conclusion of the contract (in accordance with the Danish Bookkeeping Act).

• Marketing data as long as consent is valid and relevant, or until you withdraw your consent (but typically no longer than 2 years after your last interaction).

• Job applications and recruitment data for up to 6 months after a completed recruitment process, unless you consent to longer retention.

• Technical data and usage data from website visits are typically retained for a limited period (e.g., 6-24 months) for analytical purposes.

We use artificial intelligence (AI) as an assistive tool in selected processes:

• Candidate profiles (KSR Operator Network): If you create an operator profile and upload your CV, you can choose to have the CV read by AI, which suggests how to fill in your profile (experience, education, languages and skills). Nothing is saved until you have reviewed and approved the information yourself.
• Bookkeeping: Incoming supplier invoices may be read by AI to extract invoice details for our accounting.

For these purposes we use Anthropic, PBC (USA) as a data processor. The transfer of data to the USA is based on the EU Standard Contractual Clauses (SCC) included in our Data Processing Addendum (DPA) with Anthropic. Anthropic does not use our data to train AI models, and data is only retained for a limited period for security and abuse-prevention purposes.

The AI makes no decisions about you. All decisions — including those related to recruitment — are made by people at KSR Cranes.

Under certain circumstances, you have the following rights under data protection law in relation to your personal data:

• Request access to your personal data (right of access).

• Request correction of the personal data we hold about you.

• Request deletion of your personal data ("right to be forgotten").

• Object to processing of your personal data where we base the processing on our legitimate interest.

• Request restriction of processing of your personal data.

• Request transfer of your personal data to you or a third party (data portability).

• Withdraw your consent at any time where we base the processing on consent.

If you wish to exercise any of the rights set out above, please contact us using the contact details in section 2.

You will not normally have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights).

If you are dissatisfied with our processing of your personal data, you have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet), Borgergade 28, 5., 1300 Copenhagen K, phone 33 19 32 00, email: dt@datatilsynet.dk, website: www.datatilsynet.dk.

However, we would appreciate the opportunity to address your concerns before you contact the Danish Data Protection Agency, so we encourage you to contact us first.

We may update this privacy policy from time to time to reflect changes in our practices or for legal reasons. Changes will be posted on this page with an updated date at the top. In the event of significant changes, we will endeavor to inform you via email or a prominent notice on our website.

Profiling and automated processing

When you create a candidate profile in the KSR Operator Network, we use your profile data (including certificates, experience, preferred regions, availability and expected hourly rate) to match you with relevant crane assignments. The matching calculates an indicative score of how well an assignment fits your profile.

No decision is made solely by automated means. The score is an internal working tool only — a KSR employee always decides which candidates receive a job offer, and you decide whether to accept it. You can opt out of job offers in your profile at any time.

AI-assisted CV import

If you choose the "Import from CV" feature, your uploaded CV is read by an AI service (Anthropic Claude) in order to fill in your profile automatically. The result is shown as a draft that you review and approve yourself — nothing is saved to your profile without your confirmation.

The data processor is Anthropic, PBC (USA). The transfer to the USA is based on the EU Standard Contractual Clauses (SCC) incorporated in Anthropic's Data Processing Addendum (DPA), available at anthropic.com/legal/data-processing-addendum. Anthropic does not use your data to train AI models, and data is retained only for a limited period for safety purposes.

Consent to job offers

We only send you job offers (via app notifications, e-mail, SMS or phone) if you have given separate consent. The consent is voluntary and can be withdrawn in your profile at any time — this does not affect the rest of your profile.

Retention of candidate profiles

Inactive candidate profiles are retained for up to 24 months after your latest activity. Before deletion you will receive an e-mail so you can keep your profile simply by signing in. If you do not respond, the profile and related documents are permanently deleted/anonymised.