Tax

The client and/or the client’s employees.

PwC processes non-sensitive personal data, including names, telephone numbers, job positions, employer names, workplaces, employee IDs, employment and rental contracts, current and past addresses, hours of travel and work, bank account details, marital relations and information about children, information on shareholdings, pensions, salary and benefits as well as property information.

PwC processes sensitive personal data, such as religious affiliation, sexual orientation (wedding certificates), membership of trade unions and health information, in connection with the calculation of church tax, deduction of contributions to religious associations, calculation of deduction of membership fees and contributions to trade unions/unemployment funds. Moreover, PwC processes information on taxation of employer-paid health treatments.

If assisting the client in assessing a potential tax dispute and sanctions, PwC will process data on criminal convictions and offences.

In addition, for the preparation of tax returns, PwC will process civil registration numbers.

The processing of personal data is necessary in order for us to perform the agreement with our client or implement measures at the client's request prior to the conclusion of the agreement, see Article 6(1)(b) of the General Data Protection Regulation.

PwC collects personal data directly from the client and/or any third party, e.g. public authorities.

PwC retains personal data for ten years, counted from the end of the calendar year on which a tax claim may be enforced, unless special circumstances require shorter or longer periods of storage. Such circumstances include that a claim is threatening - or has actually been made.

PwC will disclose personal data to Danish and foreign authorities, if required by applicable law.

In addition, we engage data processors, including IT suppliers, to whom we make personal data available. PwC enters into data processing agreements with all data processors to ensure appropriate security.

The client's employee and possibly employees of the client's customers and / or the client's suppliers.

PwC processes non-sensitive personal data about the notifier and the person whom the notification concerns.

PwC processes data relating to criminal acts and offences, including serious misconduct – or suspicions thereof. This may be the case, for example, in connection with suspicion of serious financial crime, including bribery, fraud and forgery.

The processing of personal data is necessary in order for us to pursue our legitimate interest in managing the client whistleblower service, see Article 6(1)(f) of the General Data Protection Regulation.

In addition, PwC processes data relating to criminal convictions and offences in order to investigate any criminal acts put forward in notifications, see Article 10 of the General Data Protection Regulation, and section 8(3) of the Danish Act on the Processing of Personal Data.

The client's employee

The personal data will be deleted as soon as the notification has been assessed outside the service.

The information is deleted 5 years after notification, if this has been assessed within the service.

PwC will disclose personal data to the client.

In addition, we engage data processors, including IT suppliers, to whom we make personal data available. PwC enters into data processing agreements with all data processors to ensure appropriate security.