Privacy Policy

At PEM, we are committed to protecting personal data and ensuring information security as an integral part of our operations and governance. We recognize the importance of safeguarding confidentiality, integrity, and availability of information to meet regulatory requirements, support business continuity, and maintain the trust of our clients, partners, and stakeholders.

This Privacy Policy explains how we handle personal data for website visitors, our partners, staff and consultants. PEM acts as the data controller for the personal data processed.

1. Information collected by PEM

We collect and use general information when an individual interacts with PEM. The personal data collected and used by PEM relates to our partners, core consultants, employees, and other consultants, as specified in their contracts.

All processing of personal data within our company is conducted in accordance with the principles of legality, reasonableness, and transparency. Personal data is collected solely for explicitly stated and legitimate purposes.

2. Information collected automatically

The digital tools and platforms that PEM uses for communication, document sharing, and project management may automatically collect data (e.g. IP address, device information) to provide the best possible services, either directly by PEM or by a third party on our behalf.

For our website, analysis of users’ data, including data collected via cookies and clickstream information may be carried out to understand how users interact with our website and to help us to improve its functionality and performance.

Our website uses cookies. For detailed information about cookie management, please see our Cookie Management document.

3. Information provided by the user

Examples of data individuals may have submitted include name, address, phone number, e-mail address and similar information. Such data may come from:

  • Job applications and tenders, e.g. CVs submitted via email or through the website.
  • Contract related information, including financial details (e.g. bank account details).
  • Information sent via e-mail, the website contact form or LinkedIn.

Collaboration with third parties in regard to EoIs and proposals
Data about consultants may be shared with organisations that PEM collaborates with, including partners and entities located outside the European Economic Area (EEA), as part of preparing Expressions of Interest (EOIs) and proposals. EOIs and proposals may include CVs, personal information, and agreed rates. These documents are shared with partners and clients, including in some cases in third countries, and the consent provided by CV owners clearly reflects this.

PEM cannot control the privacy practices of clients or partners and encourage individuals to review their respective privacy policies.

4. Storage time and deletion policy

Personal data is processed on the basis of contractual necessity, legitimate business interests, and legal obligations.
Requests for access, rectification, or deletion of personal information can be made by contacting PEM at pemconsult@pem.dk. This includes the following rights:

  • Access to personal data and information about its use.
  • Correction of personal data.
  • Deletion of personal data.
  • Restriction of the use of personal data.
  • Requesting and obtaining personal data in an electronic format (data portability).

5. Information Security Management Systems

PEM maintains a comprehensive information security system overseen by senior management. Responsibilities are clearly defined, risk-based security measures are implemented, and staff receive regular training and updates. Security routines are continuously evaluated and improved through audits and reviews, while incidents are formally logged, analyzed, and escalated as needed. Although PEM is not ISO 27001 certified, its system aligns with the standard, with all procedures and decisions documented internally and a Statement of Applicability available upon request.

6. Review

The PEM Privacy Policy will be reviewed and updated every year to ensure that it remains current and effective.
Last updated: March 2026.

7. Acknowledgement and Compliance

The Managing Director and the Chairperson of PEM agree that PEM will comply with the AI Usage Policy.

Newsletter