Processing Activities

When you visit my website, cookies are used to ensure that the website functions properly. You can read more about which cookies are used and how to manage your consent via the cookie settings available on the website.

Communication with Potential Customers

If you contact me with questions or inquiries about my services, you may do so via email and phone. In this connection, I process your personal data in order to communicate with you and respond to your inquiries. I only process the information you provide.

Typically, this includes:

• Name

• Email address

• Phone number

Legal basis: Article 6(1)(f) of the GDPR (legitimate interests).

Your data will be deleted once it is clear whether you wish to use my services or not. In special cases, data may be retained for a longer period if necessary.

Customers

To deliver my services properly, I need to process certain personal data about my customers, such as:

• Name

• Address

• Service details

• Special agreements

• Payment information

Legal basis: Article 6(1)(b) of the GDPR (performance of a contract).

Once the service has been delivered and all obligations are fulfilled, your personal data will generally be deleted.

Bookkeeping

I am required to store accounting records in accordance with the Danish Bookkeeping Act. This includes invoices and related documents that may contain personal data such as:

• Name

• Address

• Description of services

Legal basis: Article 6(1)(c) of the GDPR (legal obligation).

These records are stored for a minimum of 5 years after the end of the relevant financial year.

Job Applications

As I operate a sole proprietorship without employees, I do not hire staff. If I receive a job application, I will contact you and subsequently delete your data.

Data Processors

Like most businesses, I use third-party service providers (data processors) to support my operations.

Examples include:

• EasyMe – booking system and newsletter (name, email, phone number, date of birth, booking history)

I ensure that all data processors handle your personal data securely and in accordance with GDPR by entering into data processing agreements.

Disclosure of Personal Data

I do not disclose your personal data to third parties.

Profiling and Automated Decision-Making

I do not use profiling or automated decision-making.

Transfers to Third Countries

As a general rule, I use data processors within the EU/EEA or those that store data within the EU/EEA.

If this is not possible, I ensure that any transfer outside the EU/EEA is subject to appropriate safeguards to protect your personal data.

Data Security

I take appropriate technical and organizational measures to ensure the security of your personal data.

This includes:

• Risk assessments of data processing activities

• Implementation of security procedures

• Continuous GDPR training and awareness

Your Rights

Under the GDPR, you have the following rights:

• Right of access – to see the data I process about you

• Right to rectification – to correct inaccurate data

• Right to erasure – in certain cases

• Right to restriction of processing

• Right to object – including to direct marketing

• Right to data portability

To exercise your rights, please contact me.

You can read more about your rights on the website of the Danish Data Protection Authority.

Withdrawal of Consent

If my processing of your personal data is based on your consent, you have the right to withdraw your consent at any time.

Complaints

If you are dissatisfied with how I process your personal data, you have the right to lodge a complaint with the Danish Data Protection Authority (Datatilsynet).

Updates to This Policy

This privacy policy is updated regularly. The latest version will always be available on my website.