VisitDenmark’s Data Protection Notice
We are the data controller – how can you contact us?
This Data Protection Notice is intended to inform you about how VisitDenmark processes the personal data you have provided to us, or which we have collected in connection with the purposes when you act as one of the following: job applicant, user of the website, recipient of newsletters, business partner and supplier, Unsolicited enquiries, participant in familiarization- and press trips, participant in exhibitions, workshops and partner events, guest at VisitDenmark, participant in market research, ordering of brochures or participant in competitions.
We will only process your personal data in accordance with this Data Protection Notice and the legislation to which we are subject, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“the General Data Protection Regulation”), and Act No. 502 of 23 May 2018 on supplementary provisions to the General Data Protection Regulation (“the Data Protection Act”), as well as other legislation which supplements these rules.
VisitDenmark is the data controller for the processing of the personal data which we have received about you. You can find our contact information below.
VisitDenmark
Islands Brygge 43, 3rd floor
DK-2300 Copenhagen S
Central Business Register (CVR) no. 33055331
Telephone: (+45) 32 88 99 00
E-mail: contact@visitdenmark.com
Contact information of the data protection officer
If you have any questions about our processing of your data, you are always welcome to contact our data protection officer, DPO Team ApS.
You can contact our data protection officer in the following ways:
By e-mail: dpo@visitdenmark.com
By telephone: (+45) 71749020
Job applicant
What personal data we collect, where we collect it, the purposes thereof, and the legal basis for the processing of your personal data
When you submit your application with attachments, including CV, portrait photo, recommendations, educational certificates and, if applicable, test results, we process your data in order to assess your suitability for the position, including whether we wish to invite you to a job interview and potentially offer you the vacant position.
The purpose of the processing is, as part of the exercise of our public authority to hire employees and to take measures prior to the conclusion of a possible employment contract, see Article 6(1)(b) and (e) of the General Data Protection Regulation.
When you have provided your consent, we can collect information about you from references, including, among other things, information about your work experience and skills.
The purpose of the processing is as part of the exercise of our public authority to hire employees, see Article 6(1)(e) of the General Data Protection Regulation, and to establish documentation that you have given your consent to the collection of information from your references, see Article 9(2)(a) of the General Data Protection Regulation.
We can also collect data about you from publicly available sources, including social media. In certain cases, we may request that you complete a qualification- or personality test. We process your data in order to assess your qualifications, skills and personality in relation to the specific vacant position.
The purpose of the processing is as part of the exercise of our public authority to hire employees, see Article 6(1)(e) of the General Data Protection Regulation.
In most cases, we will collect the data directly from you. However, we will also collect information about you from other sources, including recruitment agencies, your references and publicly available sources. If we obtain references, it will be done with your prior consent.
Recipients of personal data
Your personal data may be transferred to suppliers, partners, contracting parties or other third parties who process data on behalf of VisitDenmark. These companies are data processors and are under our instructions, and they process data for which we are the data controller. They may not use the data for other purposes than the fulfilment of the agreement with us, and they are bound by confidentiality regarding this data. We have concluded a data processing agreement with all of our data processors that meets the requirements of Article 28 of the General Data Protection Regulation. This requires that these data processors carry out adequate technical and organisational measures so that the processing complies with the requirements of the regulation and ensures the protection of your rights.
Your personal data may also be transferred to public authorities if required by law or if it is necessary in order to perform the task assigned to VisitDenmark.
In some cases, we transfer personal data outside the EU/EEA to recipients who do not necessarily have the same level of protection on the processing of personal data as that within the EU/EEA countries. In such cases, we will inform you of the necessary or adequate guarantees and where you can find or obtain them.
Your personal data can be made available to our data processors, including our suppliers of e-recruitment system, providers of personality tests, and hosting suppliers to the extent that we register your data in our IT systems.
Storage of your personal data
We delete your personal data when we no longer have an objective purpose for storing and processing this data.
Special laws, for example in the archival legislation, the Danish Act on Limitations and the Dan-ish Bookkeeping Act, may grant us a right or impose a duty upon us to store your personal data for a longer period of time. We also reserve the right to store your personal data for a longer period than stated below if we assess that it will be necessary to determine, assert, or defend a legal claim.
Applications received from applicants who are not offered employment will be deleted no later than 6 months after the end of the application process, unless you have given your consent to a longer period of storage.
Unsolicited applications that are not part of a current hiring process will be deleted no later than 6 months after receipt unless you have given your consent to a longer period of storage, or we have a legal obligation to store the application.
Your rights
The General Data Protection Regulation grants you a number of rights in relation to our processing of data about you. In order to establish transparency regarding the processing of this data, we inform you below about your rights.
You can read more about your rights in the Danish Data Protection Agency’s guide on the rights of data subjects, which you can find at www.datatilsynet.dk.
Right of access
You are at all times entitled to request information from us about, among other things, the personal data we have registered about you, the purpose of the registration, the categories of personal data, recipients of the personal data, and the origin of this personal data.
You have the right to obtain a copy of the personal data we process about you. If you would like a copy of your personal data, send a written request to dpo@visitdenmark.com. You may be asked to provide proof that you are the person you claim to be.
Right to rectification
You have the right to rectification of incorrect personal data we have relating to you. If you become aware of errors in the personal data we have registered about you, you are encouraged to contact us in writing so that the personal data can be rectified.
Right to erasure
In certain cases, you have the right to erasure by us of all or parts of your personal data prior to the time of our standard general deletion. This applies, for example, if you withdraw your consent and we do not have another legal basis to continue the processing. To the extent that continued processing of your data is necessary, e.g. for our compliance with legal obligations, including the Danish Public Administration Act or the Danish Archive Act, or in order to establish, assert or defend legal claims, we are not obliged to delete your personal data.
Right to restriction of processing
In certain cases, you have the right to restrict the processing of your personal data to mere storage, e.g. if you believe that the data we process about you is not correct.
If you have the right to restrict the processing, we may only process your data – apart from storage – with your consent, or for the purpose of establishing, asserting or defending a legal claim, or to protect a person or important societal interests.
Right to object
In some cases, you have the right to object to our otherwise legal processing of your personal data. You also have the right to object to the processing of your data for direct marketing purposes including profiling.
Right to data portability
In some cases, you have the right to obtain the personal data you have provided to us in a structured, commonly used and machine-readable format, and to have this personal data transferred to another data controller.
Right to withdraw consent
You have the right to withdraw consent that you have granted to us for a given processing of your personal data. If you wish to withdraw your consent, please contact us at dpo@visitdenmark.com.
Right to complain
You have the right to submit a complaint to the Danish Data Protection Agency, Bor-gergade 28, 5, 1300 Copenhagen K, Denmark, regarding VisitDenmark’s processing of your personal data. A complaint can be submitted by e-mail to dt@datatilsynet.dk or by telephoning +45 33 19 32 00.
User of the website
What personal data we collect, where we collect it, the purposes thereof, and the legal basis for the processing of your personal data
When you visit VisitDenmark’s websites, we collect data about your use of the website, including, for example, the type of browser you are using, the search terms you use on the website, your IP address, including your network location, technical data about your equipment, your browser behavior, and other information about your computer. We collect this data using cookies and other similar technologies. You can read more about the use of cookies in our Cookie Policy.
The purpose is to optimize the user experience and function of the website, including the compilation of statistics. This processing is necessary in order to perform a task which constitutes the exercise of public authority, imposed upon VisitDenmark pursuant to Act no. 648 of 15 June 2010 on VisitDenmark, see Article 6(1)(e) of the General Data Protection Regulation.
When you contact us via our contact information on our website, we can process data about your name, e-mail address and the data you otherwise choose to send to us in connection with your enquiry.
The purpose is to reply to your enquiry. The processing is necessary in order to perform a task which constitutes the exercise of authority by a public body, imposed upon VisitDenmark pursuant to Act no. 648 of 15 June 2010 on VisitDenmark, see Article 6(1)(e) of the General Data Protection Regulation.
Facebook Pixel
VisitDenmark uses third-party cookies (Facebook pixels) to adapt our content and target marketing on Facebook and Instagram towards you and other advertising groups, as well as to analyze the effect of advertising based on interactions with our website. By clicking "Accept all" cookies, you consent to VisitDenmark's use of Facebook pixels.
When you accept marketingcookies on VisitDenmark's website, you consent to VisitDenmark's use of Facebook Pixel. Facebook Pixel is used to create a lookalike audience based on interaction with our website. A lookalike audience is a target group that is formed on the basis of data about current customers, in order to target people who can become the ideal customer. You can read more about lookalike audience at Facebook here.
VisitDenmark is the joint data controller with Facebook for the processing of your personal data when you consent to our use of Facebook Pixel. We only use data that comes from your interaction with our website. Facebook stores your data, which VisitDenmark then no longer has access to. You can read more about Facebook Pixel here.
EU-U.S. The Data Privacy Framework forms the basis for the adequacy decision the EU Commission has adopted regarding the transfer of personal data to the USA. The agreement stipulates a number of legal obligations that the organizations certified under the scheme must comply with, and thus ensures a sufficient level of protection in connection with the transfer of personal data from the EU to the USA. The list of certified organizations, which is continuously updated, can be found here.
Because Facebook is certified under the scheme, VisitDenmark can transfer personal data to Facebook without having to provide a transfer basis cf. GDPR article 46. Not all of Facebook's sub-data processors appear on the list, and your personal data may therefore be processed of unsafe organizations outside the EU. We refer to Facebook's privacy policy for further information here.
The purpose of the processing is, as part of VisitDenmark's exercise of public authority, to market Denmark as a travel destination, cf. GDPR art. 6(1)(e), as well as to be able to document that you have given consent, cf. GDPR article 6(1)(a). You can always revoke your consent for VisitDenmark's processing of your personal data by opting out of cookies in the cookie overview, which you will find in our cookie policy in the bottom left corner of the website.
Recipients of personal data
Your personal data may be transferred to suppliers, partners, contracting parties or other third parties who process data on behalf of VisitDenmark. These companies are data processors and are under our instructions, and they process data for which we are the data controller. They may not use the data for other purposes than the fulfilment of the agreement with us, and they are bound by confidentiality regarding this data. We have concluded a data processing agreement with all of our data processors that meets the requirements of Article 28 of the General Data Protection Regulation. This requires that these data processors carry out adequate technical and organizational measures so that the processing complies with the requirements of the regulation and ensures the protection of your rights.
Your personal data may also be transferred to public authorities if required by law or if it is necessary in order to perform the task assigned to VisitDenmark.
In some cases, we transfer personal data outside the EU/EEA to recipients who do not necessarily have the same level of protection on the processing of personal data as that within the EU/EEA countries. In such cases, we will inform you of the necessary or adequate guarantees and where you can find or obtain them.
We use external partners for, among other things, technical operation, website improvements, website hosting, and targeted marketing. These companies are data processors and are under our instructions, and they process data for which we are the data controller.
Two of these data processors, Google Analytics w/Google LLC and Google Tag Manager w/Google LLC, are established in the USA. The necessary guarantees for transfer of data to the USA are ensured through the EU Commission's standard contractual provisions (SCC).
Storage of your personal data
We delete your personal data when we no longer have an objective purpose for storing and processing this data.
Special laws, for example in the archival legislation, the Danish Act on Limitations and the Danish Bookkeeping Act, may grant us a right or impose a duty upon us to store your personal data for a longer period of time. We also reserve the right to store your personal data for a longer period than stated below if we assess that it will be necessary to determine, assert, or defend a legal claim.
Data collected in connection with your use of VisitDenmark’s website will be deleted when we no longer have an objective purpose for storing and processing this data.
Data collected in connection with general enquiries will be deleted on a running basis as they are replied to, unless we have a legal obligation to save the enquiry.
Your rights
The General Data Protection Regulation grants you a number of rights in relation to our processing of data about you. In order to establish transparency regarding the processing of this data, we inform you below about your rights.
You can read more about your rights in the Danish Data Protection Agency’s guide on the rights of data subjects, which you can find at www.datatilsynet.dk.
Right of access
You are at all times entitled to request information from us about, among other things, the personal data we have registered about you, the purpose of the registration, the categories of personal data, recipients of the personal data, and the origin of this personal data.
You have the right to obtain a copy of the personal data we process about you. If you would like a copy of your personal data, send a written request to dpo@visitdenmark.com. You may be asked to provide proof that you are the person you claim to be.
Right to rectification
You have the right to rectify incorrect personal data we have relating to you. If you become aware of errors in the personal data we have registered about you, you are encouraged to contact us in writing so that the personal data can be rectified.
Right to erasure
In certain cases, you have the right to erasure by us of all or parts of your personal data prior to the time of our standard general deletion. This applies, for example, if you withdraw your consent and we do not have another legal basis to continue the processing. To the extent that continued processing of your data is necessary, e.g. for our compliance with legal obligations, including the Danish Public Administration Act or the Danish Archive Act, or in order to establish, assert or defend legal claims, we are not obliged to delete your personal data.
Right to restriction of processing
In certain cases, you have the right to restrict the processing of your personal data to mere storage, e.g. if you believe that the data we process about you is not correct.
If you have the right to restrict the processing, we may only process your data – apart from storage – with your consent, or for the purpose of establishing, asserting or defending a legal claim, or to protect a person or important societal interests.
Right to object
In some cases, you have the right to object to our otherwise legal processing of your personal data. You also have the right to object to the processing of your data for direct marketing purposes including profiling.
Right to data portability
In some cases, you have the right to obtain the personal data you have provided to us in a structured, commonly used and machine-readable format, and to have this personal data transferred to another data controller.
Right to withdraw consent
You have the right to withdraw consent that you have granted to us for a given processing of your personal data. If you wish to withdraw your consent, please contact us at dpo@visitdenmark.com.
Right to complain
You have the right to submit a complaint to the Danish Data Protection Agency, Borgergade 28, 5, 1300 Copenhagen K, Denmark, regarding VisitDenmark’s processing of your personal data. A complaint can be submitted by e-mail to dt@datatilsynet.dk or by telephoning +45 33 19 32 00.
Business partner and supplier
What personal data we collect, where we collect it, the purposes thereof, and the legal basis for the processing of your personal data
When you communicate with us as a contact person for one of our suppliers or partners, or conclude agreements with us on behalf of the company, organisation or authority you represent, we collect and process data about your name, telephone number, e-mail address, workplace and position.
The purpose is in order to be able to communicate with you and the company, organisation or authority you represent, and to conduct VisitDenmark’s efforts to market Denmark as a tourist destination in accordance with the task assigned to VisitDenmark as a public authority pursuant to Act no. 648 of 15 June 2010 on VisitDenmark, see Article 6(1)(e) of the General Data Protection Regulation.
In most cases, we will collect the data directly from you. However, we will also collect information about you from other sources, including your employer and your colleagues.
Recipients of personal data
Your personal data may be transferred to suppliers, partners, contracting parties or other third parties who process data on behalf of VisitDenmark. These companies are data processors and are under our instructions, and they process data for which we are the data controller. They may not use the data for other purposes than the fulfilment of the agreement with us, and they are bound by confidentiality regarding this data. We have concluded a data processing agreement with all of our data processors that meets the requirements of Article 28 of the General Data Protection Regulation. This requires that these data processors carry out adequate technical and organisational measures so that the processing complies with the requirements of the regulation and ensures the protection of your rights.
Your personal data may also be transferred to public authorities if required by law or if it is necessary in order to perform the task assigned to VisitDenmark.
In some cases, we transfer personal data outside the EU/EEA to recipients who do not necessarily have the same level of protection on the processing of personal data as that within the EU/EEA countries. In such cases, we will inform you of the necessary or adequate guarantees and where you can find or obtain them.
Your personal data can be made available to our data processors, including our hosting suppliers, to the extent that we register your data in our IT systems.
Your personal data can also be transferred to other external partners or suppliers to the extent necessary.
Storage of your personal data
We delete your personal data when we no longer have an objective purpose for storing and processing this data.
Special laws, for example in the archival legislation, the Danish Act on Limitations and the Dan-ish Bookkeeping Act, may grant us a right or impose a duty upon us to store your personal data for a longer period of time. We also reserve the right to store your personal data for a longer period than stated below if we assess that it will be necessary to determine, assert, or defend a legal claim.
Your personal data is deleted in connection with the termination of the cooperation with our partner or supplier, unless we have a legal obligation to store the data.
Your rights
The General Data Protection Regulation grants you a number of rights in relation to our processing of data about you. In order to establish transparency regarding the processing of this data, we inform you below about your rights.
You can read more about your rights in the Danish Data Protection Agency’s guide on the rights of data subjects, which you can find at www.datatilsynet.dk.
Right of access
You are at all times entitled to request information from us about, among other things, the personal data we have registered about you, the purpose of the registration, the categories of personal data, recipients of the personal data, and the origin of this personal data.
You have the right to obtain a copy of the personal data we process about you. If you would like a copy of your personal data, send a written request to dpo@visitdenmark.com. You may be asked to provide proof that you are the person you claim to be.
Right to rectification
You have the right to rectification of incorrect personal data we have relating to you. If you become aware of errors in the personal data we have registered about you, you are encouraged to contact us in writing so that the personal data can be rectified.
Right to erasure
In certain cases, you have the right to erasure by us of all or parts of your personal data prior to the time of our standard general deletion. This applies, for example, if you withdraw your consent and we do not have another legal basis to continue the processing. To the extent that continued processing of your data is necessary, e.g. for our compliance with legal obligations, including the Danish Public Administration Act or the Danish Archive Act, or in order to establish, assert or defend legal claims, we are not obliged to delete your personal data.
Right to restriction of processing
In certain cases, you have the right to restrict the processing of your personal data to mere storage, e.g. if you believe that the data we process about you is not correct.
If you have the right to restrict the processing, we may only process your data – apart from storage – with your consent, or for the purpose of establishing, asserting or defending a legal claim, or to protect a person or important societal interests.
Right to object
In some cases, you have the right to object to our otherwise legal processing of your personal data. You also have the right to object to the processing of your data for direct marketing purposes including profiling.
Right to data portability
In some cases, you have the right to obtain the personal data you have provided to us in a structured, commonly used and machine-readable format, and to have this personal data transferred to another data controller.
Right to withdraw consent
You have the right to withdraw consent that you have granted to us for a given processing of your personal data. If you wish to withdraw your consent, please contact us at dpo@visitdenmark.com.
Right to complain
You have the right to submit a complaint to the Danish Data Protection Agency, Bor-gergade 28, 5, 1300 Copenhagen K, Denmark, regarding VisitDenmark’s processing of your personal data. A complaint can be submitted by e-mail to dt@datatilsynet.dk or by telephoning +45 33 19 32 00.
Unsolicited enquiries
What personal data we collect, where we collect it, the purposes thereof, and the legal basis for the processing of your personal data
When you make an unsolicited enquiry to VisitDenmark, we collect and process the information you provide to us, typically your name, telephone number, email address and other information in relation to your request. The purpose is to be able to communicate with you in response to your enquiry, and to handle VisitDenmark's work to market Denmark as a tourist destination in accordance with the performance of the task that VisitDenmark, as a public authority, has been assigned, cf. Act no. 648 of 15 June 2010 on VisitDenmark, cf. the Data Protection Ordinance art. 6 pieces. 1, letter e. We will only collect the information directly from you.
Recipients of personal data
Your personal data may be transferred to suppliers, partners, contracting parties or other third parties who process data on behalf of VisitDenmark. These companies are data processors and are under our instructions, and they process data for which we are the data controller. They may not use the data for other purposes than the fulfilment of the agreement with us, and they are bound by confidentiality regarding this data. We have concluded a data processing agreement with all of our data processors that meets the requirements of Article 28 of the General Data Protection Regulation. This requires that these data processors carry out adequate technical and organisational measures so that the processing complies with the requirements of the regulation and ensures the protection of your rights.
Your personal data may also be transferred to public authorities if required by law or if it is necessary in order to perform the task assigned to VisitDenmark.
In some cases, we transfer personal data outside the EU/EEA to recipients who do not necessarily have the same level of protection on the processing of personal data as that within the EU/EEA countries. In such cases, we will inform you of the necessary or adequate guarantees and where you can find or obtain them.
When you make an unsolicited enquiry to VisitDenmark, we collect and process the information you provide to us, typically your name, telephone number, email address and other information in relation to your request. The purpose is to be able to communicate with you in response to your enquiry, and to handle VisitDenmark's work to market Denmark as a tourist destination in accordance with the performance of the task that VisitDenmark, as a public authority, has been assigned, cf. Act no. 648 of 15 June 2010 on VisitDenmark, cf. the Data Protection Ordinance art. 6 pieces. 1, letter e. We will only collect the information directly from you.
Storage of your personal data
We delete your personal data when we no longer have an objective purpose for storing and processing this data.
Special laws, for example in the archival legislation, the Danish Act on Limitations and the Dan-ish Bookkeeping Act, may grant us a right or impose a duty upon us to store your personal data for a longer period of time. We also reserve the right to store your personal data for a longer period than stated below if we assess that it will be necessary to determine, assert, or defend a legal claim.
Information collected in connection with our communication with you will be deleted when we no longer have a business purpose to store and process it, unless we are subject to a legal obligation to store the information. However, the information will be deleted no later than 1 year after the time of collection.
Your rights
The General Data Protection Regulation grants you a number of rights in relation to our processing of data about you. In order to establish transparency regarding the processing of this data, we inform you below about your rights.
You can read more about your rights in the Danish Data Protection Agency’s guide on the rights of data subjects, which you can find at www.datatilsynet.dk.
Right of access
You are at all times entitled to request information from us about, among other things, the personal data we have registered about you, the purpose of the registration, the categories of personal data, recipients of the personal data, and the origin of this personal data.
You have the right to obtain a copy of the personal data we process about you. If you would like a copy of your personal data, send a written request to dpo@visitdenmark.com. You may be asked to provide proof that you are the person you claim to be.
Right to rectification
You have the right to rectification of incorrect personal data we have relating to you. If you become aware of errors in the personal data we have registered about you, you are encouraged to contact us in writing so that the personal data can be rectified.
Right to erasure
In certain cases, you have the right to erasure by us of all or parts of your personal data prior to the time of our standard general deletion. This applies, for example, if you withdraw your consent and we do not have another legal basis to continue the processing. To the extent that continued processing of your data is necessary, e.g. for our compliance with legal obligations, including the Danish Public Administration Act or the Danish Archive Act, or in order to establish, assert or defend legal claims, we are not obliged to delete your personal data.
Right to restriction of processing
In certain cases, you have the right to restrict the processing of your personal data to mere storage, e.g. if you believe that the data we process about you is not correct.
If you have the right to restrict the processing, we may only process your data – apart from storage – with your consent, or for the purpose of establishing, asserting or defending a legal claim, or to protect a person or important societal interests.
Right to object
In some cases, you have the right to object to our otherwise legal processing of your personal data. You also have the right to object to the processing of your data for direct marketing purposes including profiling.
Right to data portability
In some cases, you have the right to obtain the personal data you have provided to us in a structured, commonly used and machine-readable format, and to have this personal data transferred to another data controller.
Right to withdraw consent
You have the right to withdraw consent that you have granted to us for a given processing of your personal data. If you wish to withdraw your consent, please contact us at dpo@visitdenmark.com.
Right to complain
You have the right to submit a complaint to the Danish Data Protection Agency, Bor-gergade 28, 5, 1300 Copenhagen K, Denmark, regarding VisitDenmark’s processing of your personal data. A complaint can be submitted by e-mail to dt@datatilsynet.dk or by telephoning +45 33 19 32 00.
Participants in familiarization- and press trips
What personal data we collect, where we collect it, the purposes thereof, and the legal basis for the processing of your personal data
When you, as a tour operator, travel agent, journalist, influencer or other representative participate in familiarization- and press trips, we can collect and process data about, for example, your name, address, e-mail address, telephone number, title, gender, marital status, nationality, date of birth, passport number, next of kin information, links to your social media profiles, and special dietary preferences and requirements. In special cases, we can also collect and process special categories of personal data, including health data in the form of allergies and diseases.
The purpose is in order to be able to communicate with you and to plan a personalised programme for you in connection with your familiarization- or press trip, including making the necessary travel arrangements and considerations, and to conduct VisitDenmark’s efforts to market Denmark as a tourist destination in accordance with the task assigned to VisitDenmark as a public authority pursuant to Act no. 648 of 15 June 2010 on VisitDenmark, see Article 6(1)(e) of the General Data Protection Regulation.
We only collect and process health data and other types of special categories of personal data if we find it relevant and reasoned in relation to the specific pro-gramme being planned for you, and if you have granted us explicit consent to do so, see Article 9(2)(a) of the General Data Protection Regulation.
In most cases, we will collect the data directly from you, including when we communicate with you and when you complete one of our forms for use in connection with your forthcoming familiarization- or press trip. However, we can also collect data about you from other sources, including our partners and suppliers, and from articles and other public media.
Recipients of personal data
Your personal data may be transferred to suppliers, partners, contracting parties or other third parties who process data on behalf of VisitDenmark. These companies are data processors and are under our instructions, and they process data for which we are the data controller. They may not use the data for other purposes than the fulfilment of the agreement with us, and they are bound by confidentiality regarding this data. We have concluded a data processing agreement with all of our data processors that meets the requirements of Article 28 of the General Data Protection Regulation. This requires that these data processors carry out adequate technical and organisational measures so that the processing complies with the requirements of the regulation and ensures the protection of your rights.
Your personal data may also be transferred to public authorities if required by law or if it is necessary in order to perform the task assigned to VisitDenmark.
In some cases, we transfer personal data outside the EU/EEA to recipients who do not necessarily have the same level of protection on the processing of personal data as that within the EU/EEA countries. In such cases, we will inform you of the necessary or adequate guarantees and where you can find or obtain them.
Your personal data can be made available to our data processors, including our hosting suppliers, to the extent that we register your data in our IT systems.
Your personal data can also be transferred to external partners, including destination partners, travel agents, hotels and restaurants to the extent necessary in order to plan and carry out the trip you will be participating in. We only transfer special categories of data, including, for example, data about allergies and diseases, to our partners if you have granted us explicit consent to do so.
Storage of your personal data
We delete your personal data when we no longer have an objective purpose for storing and processing this data.
Special laws, for example in the archival legislation, the Danish Act on Limitations and the Dan-ish Bookkeeping Act, may grant us a right or impose a duty upon us to store your personal data for a longer period of time. We also reserve the right to store your personal data for a longer period than stated below if we assess that it will be necessary to determine, assert, or defend a legal claim.
Data collected in connection with our communication with you will be deleted when we no longer have an objective purpose for storing and processing this data.
Data collected in connection with the planning and carrying out of familiarization trips will be deleted no later than 3 months after the completion of the trip, unless we have a legal obligation to store the data. Special categories of personal data that we process on the basis of your consent will be deleted no later than at the time when the data is no longer needed or when you withdraw your consent, unless we have a legal obligation to store the data.
Your rights
The General Data Protection Regulation grants you a number of rights in relation to our processing of data about you. In order to establish transparency regarding the processing of this data, we inform you below about your rights.
You can read more about your rights in the Danish Data Protection Agency’s guide on the rights of data subjects, which you can find at www.datatilsynet.dk.
Right of access
You are at all times entitled to request information from us about, among other things, the personal data we have registered about you, the purpose of the registration, the categories of personal data, recipients of the personal data, and the origin of this personal data.
You have the right to obtain a copy of the personal data we process about you. If you would like a copy of your personal data, send a written request to dpo@visitdenmark.com. You may be asked to provide proof that you are the person you claim to be.
Right to rectification
You have the right to rectification of incorrect personal data we have relating to you. If you become aware of errors in the personal data we have registered about you, you are encouraged to contact us in writing so that the personal data can be rectified.
Right to erasure
In certain cases, you have the right to erasure by us of all or parts of your personal data prior to the time of our standard general deletion. This applies, for example, if you withdraw your consent and we do not have another legal basis to continue the processing. To the extent that continued processing of your data is necessary, e.g. for our compliance with legal obligations, including the Danish Public Administration Act or the Danish Archive Act, or in order to establish, assert or defend legal claims, we are not obliged to delete your personal data.
Right to restriction of processing
In certain cases, you have the right to restrict the processing of your personal data to mere storage, e.g. if you believe that the data we process about you is not correct.
If you have the right to restrict the processing, we may only process your data – apart from storage – with your consent, or for the purpose of establishing, asserting or defending a legal claim, or to protect a person or important societal interests.
Right to object
In some cases, you have the right to object to our otherwise legal processing of your personal data. You also have the right to object to the processing of your data for direct marketing purposes including profiling.
Right to data portability
In some cases, you have the right to obtain the personal data you have provided to us in a structured, commonly used and machine-readable format, and to have this personal data transferred to another data controller.
Right to withdraw consent
You have the right to withdraw consent that you have granted to us for a given processing of your personal data. If you wish to withdraw your consent, please contact us at dpo@visitdenmark.com.
Right to complain
You have the right to submit a complaint to the Danish Data Protection Agency, Bor-gergade 28, 5, 1300 Copenhagen K, Denmark, regarding VisitDenmark’s processing of your personal data. A complaint can be submitted by e-mail to dt@datatilsynet.dk or by telephoning +45 33 19 32 00.
Participants in exhibitions, workshops and partner events
What personal data we collect, where we collect it, the purposes thereof, and the legal basis for the processing of your personal data
When you participate in exhibitions, workshops and partner events, we can collect and process data about, for example, your name, e-mail address, telephone number, organization, title and photos from the event where you may be in. In special cases, we can also collect and process special categories of personal data, including health data in the form of allergies.
The purpose is in order to be able to communicate with you and to conduct Vis-itDenmark’s efforts to market Denmark as a tourist destination in accordance with the task assigned to VisitDenmark as a public authority pursuant to Act no. 648 of 15 June 2010 on VisitDenmark, see Article 6(1)(e) of the General Data Protection Regulation.
As part of VisitDenmark’s effort to market Denmark as a tourist destination, VisitDenmark occasionally takes photos of exhibitions, workshops and partner events and as a participant, there is a chance you may appear in these photos . In case photographs will be taken at the event, clear signs will be displayed to ensure that you are made aware that you are being photographed. If you do not wish to be photographed please inform the photographer or VisitDenmark's staff.
We only collect and process health data if we find it relevant and reasoned in relation to your participation, and if you have granted us explicit consent to do so, see Article 9(2)(a) of the General Data Protection Regulation.
In most cases, we will collect the data directly from you, including when we communicate with you, when you provide us your business card and when you complete your registration to the exhibition, workshop or partner event.
Recipients of personal data
Your personal data may be transferred to suppliers, partners, contracting parties or other third parties who process data on behalf of VisitDenmark. These companies are data processors and are under our instructions, and they process data for which we are the data controller. They may not use the data for other purposes than the fulfilment of the agreement with us, and they are bound by confidentiality regarding this data. We have concluded a data processing agreement with all of our data processors that meets the requirements of Article 28 of the General Data Protection Regulation. This requires that these data processors carry out adequate technical and organisational measures so that the processing complies with the requirements of the regulation and ensures the protection of your rights.
Your personal data may also be transferred to public authorities if required by law or if it is necessary in order to perform the task assigned to VisitDenmark.
In some cases, we transfer personal data outside the EU/EEA to recipients who do not necessarily have the same level of protection on the processing of personal data as that within the EU/EEA countries. In such cases, we will inform you of the necessary or adequate guarantees and where you can find or obtain them.
Your personal data can be made available to our data processors, including our hosting suppliers, to the extent that we register your data in our IT systems.
Your personal data can also be transferred to external partners, to the extent necessary in order to plan and carry out the exhibition, workshop or partner event you will be participating in. We only transfer special categories of data, including, for example, data about allergies, to our partners if you have granted us explicit consent to do so.
Your personal data can also be transferred to other participants in the event by distribution of lists of participants containing name and organization.
Storage of your personal data
We delete your personal data when we no longer have an objective purpose for storing and processing this data.
Special laws, for example in the archival legislation, the Danish Act on Limitations and the Dan-ish Bookkeeping Act, may grant us a right or impose a duty upon us to store your personal data for a longer period of time. We also reserve the right to store your personal data for a longer period than stated below if we assess that it will be necessary to determine, assert, or defend a legal claim.
Data collected in connection with our communication with you will be deleted when we no longer have an objective purpose for storing and processing this data.
Data collected in relation with the planning and carrying out of exhibitions, workshops or partner events will be deleted no later than 3 months after the completion of the event, unless we are under a legal obligation to store the data. Pictures from events may be stored for up to one year after the event, for marketing purposes of similar events. Data regarding contact details of collaboration partners may be stored for up to two years after the event due to administrative purposes. Special categories of personal data that we process on the basis of your consent will be deleted no later than at the time when the data is no longer needed or when you withdraw your consent, unless we have a legal obligation to store the data.
Your rights
The General Data Protection Regulation grants you a number of rights in relation to our processing of data about you. In order to establish transparency regarding the processing of this data, we inform you below about your rights.
You can read more about your rights in the Danish Data Protection Agency’s guide on the rights of data subjects, which you can find at www.datatilsynet.dk.
Right of access
You are at all times entitled to request information from us about, among other things, the personal data we have registered about you, the purpose of the registration, the categories of personal data, recipients of the personal data, and the origin of this personal data.
You have the right to obtain a copy of the personal data we process about you. If you would like a copy of your personal data, send a written request to dpo@visitdenmark.com. You may be asked to provide proof that you are the person you claim to be.
Right to rectification
You have the right to rectification of incorrect personal data we have relating to you. If you become aware of errors in the personal data we have registered about you, you are encouraged to contact us in writing so that the personal data can be rectified.
Right to erasure
In certain cases, you have the right to erasure by us of all or parts of your personal data prior to the time of our standard general deletion. This applies, for example, if you withdraw your consent and we do not have another legal basis to continue the processing. To the extent that continued processing of your data is necessary, e.g. for our compliance with legal obligations, including the Danish Public Administration Act or the Danish Archive Act, or in order to establish, assert or defend legal claims, we are not obliged to delete your personal data.
Right to restriction of processing
In certain cases, you have the right to restrict the processing of your personal data to mere storage, e.g. if you believe that the data we process about you is not correct.
If you have the right to restrict the processing, we may only process your data – apart from storage – with your consent, or for the purpose of establishing, asserting or defending a legal claim, or to protect a person or important societal interests.
Right to object
In some cases, you have the right to object to our otherwise legal processing of your personal data. You also have the right to object to the processing of your data for direct marketing purposes including profiling.
Right to data portability
In some cases, you have the right to obtain the personal data you have provided to us in a structured, commonly used and machine-readable format, and to have this personal data transferred to another data controller.
Right to withdraw consent
You have the right to withdraw consent that you have granted to us for a given processing of your personal data. If you wish to withdraw your consent, please contact us at dpo@visitdenmark.com.
Right to complain
You have the right to submit a complaint to the Danish Data Protection Agency, Bor-gergade 28, 5, 1300 Copenhagen K, Denmark, regarding VisitDenmark’s processing of your personal data. A complaint can be submitted by e-mail to dt@datatilsynet.dk or by telephoning +45 33 19 32 00.
Guests at VisitDenmark
What personal data we collect, where we collect it, the purposes thereof, and the legal basis for the processing of your personal data
When you visit VisitDenmark and log in to our guest network, we collect and process data about your MAC-address, IP-address, the host name of your computer/device, and the URLs from which you collect data.
The purpose is to gain insight into the activities that take place on VisitDen-mark’s guest network in order to optimise the solution and to enable trouble-shooting. This processing is necessary in order to perform a task which constitutes the exercise of authority by a public body, imposed upon VisitDenmark pursuant to Act no. 648 of 15 June 2010 on VisitDenmark, see Article 6(1)(e) of the General Data Protection Regulation.
Recipients of personal data
Your personal data may be transferred to suppliers, partners, contracting parties or other third parties who process data on behalf of VisitDenmark. These companies are data processors and are under our instructions, and they process data for which we are the data controller. They may not use the data for other purposes than the fulfilment of the agreement with us, and they are bound by confidentiality regarding this data. We have concluded a data processing agreement with all of our data processors that meets the requirements of Article 28 of the General Data Protection Regulation. This requires that these data processors carry out adequate technical and organisational measures so that the processing complies with the requirements of the regulation and ensures the protection of your rights.
Your personal data may also be transferred to public authorities if required by law or if it is necessary in order to perform the task assigned to VisitDenmark.
In some cases, we transfer personal data outside the EU/EEA to recipients who do not necessarily have the same level of protection on the processing of personal data as that within the EU/EEA countries. In such cases, we will inform you of the necessary or adequate guarantees and where you can find or obtain them.
Your personal data can be made available to our data processors, including our hosting supplier(s), to the extent that we register your data in our IT systems.
Storage of your personal data
We delete your personal data when we no longer have an objective purpose for storing and processing this data.
Special laws, for example in the archival legislation, the Danish Act on Limitations and the Dan-ish Bookkeeping Act, may grant us a right or impose a duty upon us to store your personal data for a longer period of time. We also reserve the right to store your personal data for a longer period than stated below if we assess that it will be necessary to determine, assert, or defend a legal claim.
Data collected in connection with your use of our network will be automatically deleted one month after it is collected, unless we have a legal obligation to store the data.
Your rights
The General Data Protection Regulation grants you a number of rights in relation to our processing of data about you. In order to establish transparency regarding the processing of this data, we inform you below about your rights.
You can read more about your rights in the Danish Data Protection Agency’s guide on the rights of data subjects, which you can find at www.datatilsynet.dk.
Right of access
You are at all times entitled to request information from us about, among other things, the personal data we have registered about you, the purpose of the registration, the categories of personal data, recipients of the personal data, and the origin of this personal data.
You have the right to obtain a copy of the personal data we process about you. If you would like a copy of your personal data, send a written request to dpo@visitdenmark.com. You may be asked to provide proof that you are the person you claim to be.
Right to rectification
You have the right to rectification of incorrect personal data we have relating to you. If you become aware of errors in the personal data we have registered about you, you are encouraged to contact us in writing so that the personal data can be rectified.
Right to erasure
In certain cases, you have the right to erasure by us of all or parts of your personal data prior to the time of our standard general deletion. This applies, for example, if you withdraw your consent and we do not have another legal basis to continue the processing. To the extent that continued processing of your data is necessary, e.g. for our compliance with legal obligations, including the Danish Public Administration Act or the Danish Archive Act, or in order to establish, assert or defend legal claims, we are not obliged to delete your personal data.
Right to restriction of processing
In certain cases, you have the right to restrict the processing of your personal data to mere storage, e.g. if you believe that the data we process about you is not correct.
If you have the right to restrict the processing, we may only process your data – apart from storage – with your consent, or for the purpose of establishing, asserting or defending a legal claim, or to protect a person or important societal interests.
Right to object
In some cases, you have the right to object to our otherwise legal processing of your personal data. You also have the right to object to the processing of your data for direct marketing purposes including profiling.
Right to data portability
In some cases, you have the right to obtain the personal data you have provided to us in a structured, commonly used and machine-readable format, and to have this personal data transferred to another data controller.
Right to withdraw consent
You have the right to withdraw consent that you have granted to us for a given processing of your personal data. If you wish to withdraw your consent, please contact us at dpo@visitdenmark.com.
Right to complain
You have the right to submit a complaint to the Danish Data Protection Agency, Bor-gergade 28, 5, 1300 Copenhagen K, Denmark, regarding VisitDenmark’s processing of your personal data. A complaint can be submitted by e-mail to dt@datatilsynet.dk or by telephoning +45 33 19 32 00.
Participants in market research
What personal data we collect, where we collect it, the purposes thereof, and the legal basis for the processing of your personal data
When you, as a contact person or representative of a company or organisation, participate in and provide responses in market research or satisfaction surveys, we can collect and process your name, e-mail address and your responses provided in connection with the satisfaction survey, including, for example, data about the company’s/organisation’s satisfaction with VisitDenmark activities and events.
The purpose is to collect information about the company’s/organisation’s participation in courses and conferences, as well as consumption in connection with these courses and conferences, in order to measure the satisfaction with our activities and events for the purpose of performing VisitDenmark’s efforts to market Denmark as a tourist destination in accordance with the task assigned to VisitDenmark as a public authority pursuant to Act no. 648 of 15 June 2010 on VisitDenmark, see Article 6(1)(e) of the General Data Protection Regulation.
In most cases, we collect data about your name and e-mail address from other tourism organisations. However, we may also be in possession of your contact information from previous relevant communication, including if the company or partner you work for is a partner or supplier of VisitDenmark.
Recipients of personal data
Your personal data may be transferred to suppliers, partners, contracting parties or other third parties who process data on behalf of VisitDenmark. These companies are data processors and are under our instructions, and they process data for which we are the data controller. They may not use the data for other purposes than the fulfilment of the agreement with us, and they are bound by confidentiality regarding this data. We have concluded a data processing agreement with all of our data processors that meets the requirements of Article 28 of the General Data Protection Regulation. This requires that these data processors carry out adequate technical and organisational measures so that the processing complies with the requirements of the regulation and ensures the protection of your rights.
Your personal data may also be transferred to public authorities if required by law or if it is necessary in order to perform the task assigned to VisitDenmark.
In some cases, we transfer personal data outside the EU/EEA to recipients who do not necessarily have the same level of protection on the processing of personal data as that within the EU/EEA countries. In such cases, we will inform you of the necessary or adequate guarantees and where you can find or obtain them.
Your personal data can be made available to our data processors, including our hosting suppliers, to the extent that we register your data in our IT systems, and our analysis institutions.
In some cases, we will publish the results of our analyses and surveys. In such cases, the publication will be at the aggregate level, which means that the data can no longer be attributed to an identifiable person.
Storage of your personal data
We delete your personal data when we no longer have an objective purpose for storing and processing this data.
Special laws, for example in the archival legislation, the Danish Act on Limitations and the Dan-ish Bookkeeping Act, may grant us a right or impose a duty upon us to store your personal data for a longer period of time. We also reserve the right to store your personal data for a longer period than stated below if we assess that it will be necessary to determine, assert, or defend a legal claim.
Your personal data will be deleted or aggregated, i.e. made anonymous, immediately after we have completed our market analysis unless otherwise stated in connection with the given survey, or unless we have a legal obligation to store the data.
Your rights
The General Data Protection Regulation grants you a number of rights in relation to our processing of data about you. In order to establish transparency regarding the processing of this data, we inform you below about your rights.
You can read more about your rights in the Danish Data Protection Agency’s guide on the rights of data subjects, which you can find at www.datatilsynet.dk.
Right of access
You are at all times entitled to request information from us about, among other things, the personal data we have registered about you, the purpose of the registration, the categories of personal data, recipients of the personal data, and the origin of this personal data.
You have the right to obtain a copy of the personal data we process about you. If you would like a copy of your personal data, send a written request to dpo@visitdenmark.com. You may be asked to provide proof that you are the person you claim to be.
Right to rectification
You have the right to rectification of incorrect personal data we have relating to you. If you become aware of errors in the personal data we have registered about you, you are encouraged to contact us in writing so that the personal data can be rectified.
Right to erasure
In certain cases, you have the right to erasure by us of all or parts of your personal data prior to the time of our standard general deletion. This applies, for example, if you withdraw your consent and we do not have another legal basis to continue the processing. To the extent that continued processing of your data is necessary, e.g. for our compliance with legal obligations, including the Danish Public Administration Act or the Danish Archive Act, or in order to establish, assert or defend legal claims, we are not obliged to delete your personal data.
Right to restriction of processing
In certain cases, you have the right to restrict the processing of your personal data to mere storage, e.g. if you believe that the data we process about you is not correct.
If you have the right to restrict the processing, we may only process your data – apart from storage – with your consent, or for the purpose of establishing, asserting or defending a legal claim, or to protect a person or important societal interests.
Right to object
In some cases, you have the right to object to our otherwise legal processing of your personal data. You also have the right to object to the processing of your data for direct marketing purposes including profiling.
Right to data portability
In some cases, you have the right to obtain the personal data you have provided to us in a structured, commonly used and machine-readable format, and to have this personal data transferred to another data controller.
Right to withdraw consent
You have the right to withdraw consent that you have granted to us for a given processing of your personal data. If you wish to withdraw your consent, please contact us at dpo@visitdenmark.com.
Right to complain
You have the right to submit a complaint to the Danish Data Protection Agency, Bor-gergade 28, 5, 1300 Copenhagen K, Denmark, regarding VisitDenmark’s processing of your personal data. A complaint can be submitted by e-mail to dt@datatilsynet.dk or by telephoning +45 33 19 32 00.
Participants in competitions
What personal data we collect, where we collect it, the purposes thereof, and the legal basis for the processing of your personal data
When you participate in competitions, we can collect and process data about, for example, your name, e-mail address and telephone number.
The purpose is in order to be able to communicate with you and to con-duct VisitDenmark’s efforts to market Denmark as a tourist country in ac-cordance with the task assigned to VisitDenmark as a public authority pur-suant to Act no. 648 of 15 June 2010 on VisitDenmark, see Article 6(1)(e) of the General Data Protection Regulation.
In most cases, we will collect the data directly from you, when you complete your registration to the competition.
Recipients of personal data
Your personal data may be transferred to suppliers, partners, contracting parties or other third parties who process data on behalf of VisitDenmark. These companies are data processors and are under our instructions, and they process data for which we are the data controller. They may not use the data for other purposes than the fulfilment of the agreement with us, and they are bound by confidentiality regarding this data. We have concluded a data processing agreement with all of our data processors that meets the requirements of Article 28 of the General Data Protection Regulation. This requires that these data processors carry out adequate technical and organisational measures so that the processing complies with the requirements of the regulation and ensures the protection of your rights.
Your personal data may also be transferred to public authorities if required by law or if it is necessary in order to perform the task assigned to VisitDenmark.
In some cases, we transfer personal data outside the EU/EEA to recipients who do not necessarily have the same level of protection on the processing of personal data as that within the EU/EEA countries. In such cases, we will inform you of the necessary or adequate guarantees and where you can find or obtain them.
Your personal data can be made available to our data processors, to the extent that we register your data in our IT systems.
Your personal data will also be available to employees at VisitDenmark, in order for them to draw the winner.
In some countries your personal data will be shared with external parties such as nota-ries and lawyers according to local legislation. This information will be available in the terms and conditions.
Storage of your personal data
We delete your personal data when we no longer have an objective purpose for storing and processing this data.
Special laws, for example in the archival legislation, the Danish Act on Limitations and the Dan-ish Bookkeeping Act, may grant us a right or impose a duty upon us to store your personal data for a longer period of time. We also reserve the right to store your personal data for a longer period than stated below if we assess that it will be necessary to determine, assert, or defend a legal claim.
Data collected in connection with our communication with you will be deleted when we no longer have an objective purpose for storing and processing this data.
Data collected in connection with the competition will be deleted no later than 3 months after the drawing of the winner. In some countries it will be necessary to store the data for a longer period according to local legislation. This information will be available in the terms and conditions.
Your rights
The General Data Protection Regulation grants you a number of rights in relation to our processing of data about you. In order to establish transparency regarding the processing of this data, we inform you below about your rights.
You can read more about your rights in the Danish Data Protection Agency’s guide on the rights of data subjects, which you can find at www.datatilsynet.dk.
Right of access
You are at all times entitled to request information from us about, among other things, the personal data we have registered about you, the purpose of the registration, the categories of personal data, recipients of the personal data, and the origin of this personal data.
You have the right to obtain a copy of the personal data we process about you. If you would like a copy of your personal data, send a written request to dpo@visitdenmark.com. You may be asked to provide proof that you are the person you claim to be.
Right to rectification
You have the right to rectification of incorrect personal data we have relating to you. If you become aware of errors in the personal data we have registered about you, you are encouraged to contact us in writing so that the personal data can be rectified.
Right to erasure
In certain cases, you have the right to erasure by us of all or parts of your personal data prior to the time of our standard general deletion. This applies, for example, if you withdraw your consent and we do not have another legal basis to continue the processing. To the extent that continued processing of your data is necessary, e.g. for our compliance with legal obligations, including the Danish Public Administration Act or the Danish Archive Act, or in order to establish, assert or defend legal claims, we are not obliged to delete your personal data.
Right to restriction of processing
In certain cases, you have the right to restrict the processing of your personal data to mere storage, e.g. if you believe that the data we process about you is not correct.
If you have the right to restrict the processing, we may only process your data – apart from storage – with your consent, or for the purpose of establishing, asserting or defending a legal claim, or to protect a person or important societal interests.
Right to object
In some cases, you have the right to object to our otherwise legal processing of your personal data. You also have the right to object to the processing of your data for direct marketing purposes including profiling.
Right to data portability
In some cases, you have the right to obtain the personal data you have provided to us in a structured, commonly used and machine-readable format, and to have this personal data transferred to another data controller.
Right to withdraw consent
You have the right to withdraw consent that you have granted to us for a given processing of your personal data. If you wish to withdraw your consent, please contact us at dpo@visitdenmark.com.
Right to complain
You have the right to submit a complaint to the Danish Data Protection Agency, Bor-gergade 28, 5, 1300 Copenhagen K, Denmark, regarding VisitDenmark’s processing of your personal data. A complaint can be submitted by e-mail to dt@datatilsynet.dk or by telephoning +45 33 19 32 00.
Ordering of brochures
What personal data we collect, where we collect it, the purposes thereof, and the legal basis for the processing of your personal data
When you order brochures, we may collect and process information about for example your name, e-mail, address and phone number.
The purpose is to be able to send you the requested materials cf. General Data Protection Regulation art. 6, (1), litra b and in order to handle VisitDenmark’s work to market Denmark as a tourist destination in accordance with the performance of the task that VisitDenmark as a public authority has been assigned, cf. law no. 648 of 15. June 2010 about VisitDenmark, cf. General Data Protection Regulation art. 6, (1), litra e.
Recipients of personal data
Your personal data may be transferred to suppliers, partners, contracting parties or other third parties who process data on behalf of VisitDenmark. These companies are data processors and are under our instructions, and they process data for which we are the data controller. They may not use the data for other purposes than the fulfilment of the agreement with us, and they are bound by confidentiality regarding this data. We have concluded a data processing agreement with all of our data processors that meets the requirements of Article 28 of the General Data Protection Regulation. This requires that these data processors carry out adequate technical and organisational measures so that the processing complies with the requirements of the regulation and ensures the protection of your rights.
Your personal data may also be transferred to public authorities if required by law or if it is necessary in order to perform the task assigned to VisitDenmark.
In some cases, we transfer personal data outside the EU/EEA to recipients who do not necessarily have the same level of protection on the processing of personal data as that within the EU/EEA countries. In such cases, we will inform you of the necessary or adequate guarantees and where you can find or obtain them.
Your personal information can be handed to our external partners in connection with the distribution of the brochures. These companies are data processors and under our instruction and process data that we are data responsible for.
Storage of your personal data
We delete your personal data when we no longer have an objective purpose for storing and processing this data.
Special laws, for example in the archival legislation, the Danish Act on Limitations and the Dan-ish Bookkeeping Act, may grant us a right or impose a duty upon us to store your personal data for a longer period of time. We also reserve the right to store your personal data for a longer period than stated below if we assess that it will be necessary to determine, assert, or defend a legal claim.
Information collected in relation to our communication with you will be deleted when we no longer have a factual purpose of storing and processing the data. Information collected in relation to ordering of brochures will be deleted no later than 3 months after shipment of the brochure material.
Your rights
The General Data Protection Regulation grants you a number of rights in relation to our processing of data about you. In order to establish transparency regarding the processing of this data, we inform you below about your rights.
You can read more about your rights in the Danish Data Protection Agency’s guide on the rights of data subjects, which you can find at www.datatilsynet.dk.
Right of access
You are at all times entitled to request information from us about, among other things, the personal data we have registered about you, the purpose of the registration, the categories of personal data, recipients of the personal data, and the origin of this personal data.
You have the right to obtain a copy of the personal data we process about you. If you would like a copy of your personal data, send a written request to dpo@visitdenmark.com. You may be asked to provide proof that you are the person you claim to be.
Right to rectification
You have the right to rectification of incorrect personal data we have relating to you. If you become aware of errors in the personal data we have registered about you, you are encouraged to contact us in writing so that the personal data can be rectified.
Right to erasure
In certain cases, you have the right to erasure by us of all or parts of your personal data prior to the time of our standard general deletion. This applies, for example, if you withdraw your consent and we do not have another legal basis to continue the processing. To the extent that continued processing of your data is necessary, e.g. for our compliance with legal obligations, including the Danish Public Administration Act or the Danish Archive Act, or in order to establish, assert or defend legal claims, we are not obliged to delete your personal data.
Right to restriction of processing
In certain cases, you have the right to restrict the processing of your personal data to mere storage, e.g. if you believe that the data we process about you is not correct.
If you have the right to restrict the processing, we may only process your data – apart from storage – with your consent, or for the purpose of establishing, asserting or defending a legal claim, or to protect a person or important societal interests.
Right to object
In some cases, you have the right to object to our otherwise legal processing of your personal data. You also have the right to object to the processing of your data for direct marketing purposes including profiling.
Right to data portability
In some cases, you have the right to obtain the personal data you have provided to us in a structured, commonly used and machine-readable format, and to have this personal data transferred to another data controller.
Right to withdraw consent
You have the right to withdraw consent that you have granted to us for a given processing of your personal data. If you wish to withdraw your consent, please contact us at dpo@visitdenmark.com.
Right to complain
You have the right to submit a complaint to the Danish Data Protection Agency, Bor-gergade 28, 5, 1300 Copenhagen K, Denmark, regarding VisitDenmark’s processing of your personal data. A complaint can be submitted by e-mail to dt@datatilsynet.dk or by telephoning +45 33 19 32 00.
Security
We have taken adequate technical and organisational safeguards to prevent personal data from being accidentally or illegally destroyed, lost, altered or damaged, and to prevent unauthorised access or abuse by third parties.
Only employees who have a legitimate need for access to your personal data to perform their work have access to this data.
If we make changes to this Data Protection Notice, you will be notified of these changes to the extent that we still possess personal data relating to you.
This is version 8 of VisitDenmark’s Data Protection Notice, dated November 2023.
In case of changes to our Data Protections Notice, you will be notified when the changes may have an impact on the processing of your personal data.