Information to employers as to how Collectum processes personal data according to GDPR

On 25 May 2018, the new General Data Protection Regulation, GDPR, comes into effect and Collectum will, therefore, inform you as an employer on how Collectum processes personal data.

Collectum acts as Personal Data Controller for the personal data you have provided to Collectum according to the collective agreement. Consequently, it is not necessary to establish a separate Data Processor Agreement with Collectum. All employers who have signed a collective agreement are also obliged to sign a pension agreement with Collectum regarding the occupational pension plan ITP and occupational group life insurance (TGL) for their private sector white collar employees.

Collectum procures insurance with the insurance companies who are to manage your employees’ pension premiums, administer the ITP plans, is the selection center for private sector employees and informs the employers and personnel regarding the occupational pension plan, ITP. In order to be able to fulfil these commitments, Collectum needs to compile personal data for the personnel concerned, such as the personal identity numbers, first and last names, addresses, employers, salaries and choice of insurance company. Collectum also processes certain categories of sensitive personal data, such as choice of beneficiary in the case of selection of survivor’s cover, health details and details regarding protected identities.

When Collectum receives and processes personal data according to the collective agreement (via forms, internet office or files) it is Collectum who determines the purposes and means of the processing of personal data. As employer, you are obliged, in accordance with the collective agreement you have signed, to provide the personal data required in order for Collectum to execute the administration of the ITP according to the ITP Plan in effect.

The General Data Protection Regulation stipulates that it is the Personal Data Controller, in this case, Collectum, who determines the purposes and means of the processing of personal data. The Personal Data Controller always has the right to appoint a so-called Personal Data Representative to process the personal data at the request of the Personal Data Controller. Collectum processes personal data regarding your employees based on Collectum’s assignment to administer the occupational pension plan ITP. This implies that Collectum is not a Personal Data Representative for you as an employer.

Information as to how Collectum processes personal data will be updated on Collectum’s home page due to the coming into effect of the General Data Protection Regulation (GDPR).