Privacy Policy

Privacy Policy for Toppen af Danmark, Holiday Homes

At Toppen af Danmark, Holiday Homes, we prioritize data security and confidentiality highly. We ensure that the data we process and store is handled securely, confidentially, and in accordance with current legislation. In this privacy policy, you can read more about how we handle the personal data we acquire when you are a customer (guest or homeowner) with us, visit our website, and/or use our website features, as well as other features or services we offer.

  1. General Information Toppen af Danmark, Holiday Homes is the data controller for the personal data we process as part of our business operations. Below you will find all relevant contact information, including where to address your questions about the processing of your personal data:

Toppen af Danmark, Holiday Homes
CVR. NR: 25450388
Vestre Strandvej 10
9990, Skagen
Phone: 98488655
Email: Skagen@feriehuse.dk

  1. Processing of Personal Data

2.1 For visitors to our website

If you accept cookies, we process the following personal data about website visitors: (a) IP address
(b) Internet behavior
The purpose of this information, depending on the cookies you accept, is to target marketing, including retargeting, profiling, and optimizing the user experience and features for website visitors. The information is transferred to our partner Nordsee Holidays for data analysis and targeted marketing purposes. See also section 6.2.

Note that you can give (and withdraw) your consent for us to place cookies on your computer (more about this in our cookie policy).

2.2 For newsletter subscribers

We process the following personal data if you subscribe to our newsletter: (a) Email address
(b) Name and possibly surname
The purpose of this information is to target marketing and send news. This information is stored with an external provider, Intuit, located in the USA. Intuit is certified under the EU-U.S. Data Privacy Framework with the U.S. Department of Commerce, ensuring adequate security for transferring personal data from the EU to the USA. The information is transferred to our partner Nordsee Holidays for data analysis and targeted marketing purposes. See also section 6.2.

Processing is based on your consent, making the legal basis Article 6(1)(a) of the GDPR. We process the information as long as there is consent. You can withdraw your consent by unsubscribing via a link at the bottom of our newsletters. Additionally, we delete your consent after 12 months of inactivity.

2.3 Competition entry

If you enter one of our competitions, we will process the following personal data: (a) Name
(b) Email address
(c) Possibly address
The purpose of processing this information is to enforce your competition entry, making the legal basis Article 6(1)(a) of the GDPR.

Please note that we may take and share photos during our competitions on our website and social media. The purpose is to market the competition and Toppen af Danmark, Holiday Homes as a whole. The legal basis is Article 6(1)(f) of the GDPR. If you do not wish to be photographed, please inform us at the start of the event. If a photo of you is shared on our website or social media and you wish it removed, please contact us at Skagen@feriehuse.dk.

2.4 For holiday home renters

We process the following personal data if you rent a holiday home from Toppen af Danmark, Holiday Homes: (a) Name
(b) Address
(c) Nationality
(d) Phone
(e) Email address
(f) Payment information / bank details
(g) IP address
(h) Information about the holiday home you wish to rent, rental period, and any special requests
(i) Information you choose to provide about your preferences and interests through surveys
(j) Possibly name, email address, and birth date of other guests
The purpose of this information is to fulfill our contract and secure your rights in this context. The purpose is also to target marketing, including retargeting and profiling. The legal basis for our processing of this personal data is Article 6(1)(b) of the GDPR (contract performance) and Article 6(1)(f) of the GDPR (legitimate interest in managing the customer relationship) to optimize the user experience and features on our website, conduct targeted marketing, conduct satisfaction surveys, enter and manage the contractual relationship, and ensure your rights as well as our own security, including preventing fraud, based on our legitimate business interests. The legal basis is Article 6(1)(f) of the GDPR.

We store the information as permitted by law and delete it after five years when the renter has not been active with us. The renter always has the right to withdraw their personal data. However, this does not apply to personal data necessary to fulfill the legal obligation under the Accounting Act. We store data in our booking/CRM system in Denmark, and there is a data processor agreement with the system provider. Information may be transferred to our partner Nordsee Holidays for data analysis and targeted marketing. See also section 6.2. We also have a data processor agreement with our IT provider, who also has access to personal data via the booking system, which integrates with our website.

2.5 For homeowners who have entered into a brokerage agreement with us

We process the following personal data about homeowners who have entered into a brokerage agreement with us: (a) Name
(b) Private address
(c) Email
(d) Phone
(e) Bank details
(f) Information you choose to provide through satisfaction surveys
(g) Personal identification number in connection with information to SKAT (DAC7)
The legal basis for our processing of this personal data is Article 6(1)(b) of the GDPR (contract performance) and Article 6(1)(f) of the GDPR (legitimate interest in managing the customer relationship). We store the information for five years after the end of the brokerage agreement in accordance with the Accounting Act.

We store data in our booking/CRM system in Denmark, with a data processor agreement with the system provider. We also have a data processor agreement with our IT provider, who also has access to personal data via the booking system, which integrates with our website.

2.6 For individuals who contact Toppen af Danmark, Holiday Homes via email

When you contact us via email or our website, we process your name, phone number, email address, postal code, and city, as well as a description of the issue you want help with. Processing occurs to provide the requested service to you, making the legal basis Article 6(1)(b) and/or Article 6(1)(f) of the GDPR, depending on the nature of the inquiry. You are encouraged never to provide sensitive or confidential personal data or your CPR number when contacting us via email.

2.7 For individuals who create a user profile on our website

When you create a user profile on our website, we store your name, email, address, and phone number. Processing occurs to provide the requested service to you, making the legal basis Article 6(1)(b) and/or Article 6(1)(f) of the GDPR, depending on the nature of the inquiry. You can delete your user profile on the website or by contacting Skagen@feriehuse.dk.

  1. Data Mining

We collect, process, and store only the personal data necessary to fulfill our stated purposes. Furthermore, certain types of information may be required by law to be collected and stored for our business operations. The type and extent of the information we process may also be determined by the need to fulfill a contract or another legal obligation.

  1. Updating Data

As our service depends on your data being accurate and up-to-date, we ask that you inform us of any relevant changes to your data. You can use our contact information to notify us of your changes, and we will ensure your personal data is updated. If we become aware that the data is not correct, we will update the information and notify you.

  1. Storage and Deletion of Data

We delete your personal data when we no longer need to process it in accordance with the purpose for which it was collected. However, special legal rules, including for example accounting, anti-money laundering, and statute of limitations laws, may oblige or entitle us to retain the data for a longer period. Data may also be processed and retained for a longer period if it is anonymized.

Personal data collected in connection with the rental agreement will generally be deleted after five years from the end of the calendar year in which you made your purchase. Personal data may be retained longer if we have a legitimate need for longer retention.

Personal data collected in connection with the brokerage agreement will generally be deleted five years from the end of the calendar year in which the brokerage agreement expired. Personal data may be retained longer if we have a legitimate need for longer retention, for example, if it is necessary for legal claims to be established, asserted, or defended, or if retention is necessary for us to comply with legal requirements.

Personal data included as part of accounting material is retained for five years from the end of the financial year. The retention period is determined based on the retention requirements in section 10 of the Accounting Act and is therefore intended to comply with current legislation.

We generally retain sign-up lists for competitions for 12 months after the event is held. This is to evaluate who participated in the event to improve the content of the event if we later offer the same event again. We do not use participants' information to, for example, invite them again or for general marketing unless specific consent has been given for this purpose.

  1. Disclosure of Information

In the above-described cases, we disclose your personal data to other entities, including partners, suppliers, and other entities, including, for example, IT providers, customer satisfaction survey providers, newsletter providers, and providers of targeted marketing (including social media platforms). Our partners are data processors under our instructions and process data for which we are responsible. Data processors may not use the data for any purpose other than the fulfillment of the agreement with us and are subject to confidentiality regarding this information.

6.1 For visitors to our website

Data collected through cookies on our website may be transferred to the following partners: (a) Nordsee Holidays for data analysis and targeted marketing purposes. See also section 6.2.

6.2 Nordsee Holidays

We have established a partnership with the marketing chain, Nordsee Holidays, a commercial partnership that allows us to offer you an even better and broader selection of services and products.

We share certain customer data with Nordsee Holidays to optimize our offerings, including for marketing and analysis purposes. When we share data with Nordsee Holidays, it is for the following purposes: (a) Targeted marketing and retargeting
(b) Profiling
(c) Analysis of customer data

Nordsee Holidays operates with the highest level of confidentiality and data security. They are required to comply with the same legal regulations and security measures as we do. Data shared with Nordsee Holidays is stored securely and in compliance with the GDPR.

  1. Security

We have implemented appropriate technical and organizational security measures to protect your personal data against loss, misuse, and unauthorized access. We continuously update our security measures in line with technological developments.

  1. Your Rights

You have the following rights regarding our processing of your personal data:

8.1 Right of access

You have the right to request access to the data we process about you and various other information. This includes the purposes for which the data is processed, the categories of data, and the recipients of the data. You also have the right to receive a copy of the personal data we process about you.

8.2 Right to rectification

You have the right to request rectification of inaccurate personal data concerning you. You also have the right to have incomplete personal data completed.

8.3 Right to erasure (right to be forgotten)

In certain circumstances, you have the right to request the erasure of your personal data. This is, for example, the case if your data is no longer necessary for the purposes for which it was collected or if you withdraw your consent on which the processing is based, and there is no other legal ground for the processing.

8.4 Right to restriction of processing

In certain circumstances, you have the right to request the restriction of the processing of your personal data. This means that the data may only be processed under certain conditions and for specific purposes.

8.5 Right to data portability

In certain circumstances, you have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format and to transmit those data to another data controller.

8.6 Right to object

You have the right to object at any time to our processing of your personal data. This applies to processing based on legitimate interests, including profiling, and processing for direct marketing purposes.

8.7 Right to withdraw consent

If our processing is based on your consent, you have the right to withdraw your consent at any time. This does not affect the legality of the processing carried out before your withdrawal.

  1. Complaints

If you are dissatisfied with the way we process your personal data, you can file a complaint with the Danish Data Protection Agency:

Datatilsynet
Carl Jacobsens Vej 35
2500 Valby
Phone: +45 33 19 32 00
Email: dt@datatilsynet.dk

  1. Changes to the Privacy Policy

We reserve the right to update and amend this privacy policy. If we do, we will change the date at the bottom of the document. In case of significant changes, we will notify you in the form of a visible notification on our website or by email.