Privacy policy for Toppen af Danmark. See how we process your data and how we protect you according to GDPR legislation.

Privacy policy

We take your data protection seriously. We process personal data and have therefore adopted this privacy policy, which tells you how we process your data and what rights you have in this regard.

Toppen af Danmark is the data controller for the data we collect and ensures that personal data is processed in accordance with the law. We collect information about guests, visitors to our websites, suppliers, business partners, employees, job applicants and employees from public authorities.

If you wish to contact us regarding our processing of personal data, you can do so at: info@toppenafdanmark.dk.

When do we process your personal data?

When you visit our websites, book accommodation, package holidays and experiences or contact us for service, we need to collect personal data about you in order to provide our service.

What information can we collect?

Toppen af Danmark F.M.B.A. processes the personal data that you provide to us. Personal data that will be processed includes, but is not limited to:

• Name
• Date of birth
• Gender
• Nationality
• Address, email address and phone number
• Payment details.

We may also process data registered in connection with orders:

• Age
• Wishes for special diets.

You send the personal data when you place your order/order, create accounts or other services online or by phone.

Please note that submitting your personal data is optional. However, in many cases we will not be able to provide you with the service and/or product you ordered unless you provide us with your personal information.

How do we use the information and what is the purpose of processing personal data?

• Your personal data is processed so that we can fulfil our obligations to you. The fulfilment may, for example, consist of delivering the event or the additional services you have ordered.
• Your personal data is processed to enable general customer service.
• Your personal data is processed to provide you with information by post, email, SMS and phone.
• Processing of your personal data may also take place in order for us to be able to fulfil obligations under the Accounting Act and other laws and regulations.
• The processing may also contain information about dialogue between you and Toppen af Danmark, such as comments to questions and complaints.
• In addition to the above purposes, your personal data may be used for our market and customer analyses, risk management and statistics to provide you with a better travel offer and better service.

Consent

When you as a guest make a purchase or reservation with us, you automatically consent to us using your personal data for the purpose of fulfilling our contractual obligations, including targeting our communication in that context. A user profile is also created, which you can use, among other things, to stay updated on your purchases with us by logging in to our website.

On our website, you also have the option to give your explicit consent to respectively:

• Storage of cookies - consent can be withdrawn via our cookie policy
• Newsletter subscription - consent can be withdrawn by unsubscribing via a link in one of our newsletters
• Use of personal information for marketing purposes.

Consent can be withdrawn by contacting us (see top of this policy).

What legal grounds do we have for collecting personal data?

• Legal obligation: The storage of your personal data is required by law. If the information is not provided, our legal obligation cannot be fulfilled and we are therefore forced to refuse you the purchase.
• Legitimate interest: The processing is necessary to fulfil our and your legitimate interest in handling customer service matters. The processing is necessary to fulfil our and our customers' legitimate interest in evaluating, developing and improving our services, products and systems.
• Execution of the service agreement/booking/purchaseThis collection of your personal information is required for us to fulfil our obligations under the service agreement/booking/purchase. If the information is not provided, our obligations cannot be fulfilled and we are therefore forced to deny you the service.
• Fulfilment of any legal obligation or legitimate interest: If there is no legal obligation, the processing is necessary to fulfil our legitimate interest to prevent misuse of a service or to prevent, deter and investigate crimes against the company.

How long will we store personal data and information?

We only store personal data for as long as necessary to fulfil the purposes for which the data was collected, as stated above. Your personal data will be stored by Toppen af Danmark for as many years as required by law. In case of complaints, some data may be stored for the number of years required to fulfil the requirements of Toppen af Danmark's liability insurance policies. Some personal data must be stored for a minimum of 5 years for legal reasons, e.g. the Danish Bookkeeping Act. For example, personal data is used to issue invoices so that we can settle tax and VAT correctly and be able to document this to the authorities.

When you use cancellation insurance, we handle your information by sending documents by email. Once the case is closed, the data is stored for the number of years required to comply with the requirements of the Danish Bookkeeping Act and Toppen af Danmark's liability insurance policies. Only authorised persons have access to this information after such a case has been processed and closed.

Who we disclose personal data to and who may process that personal data

Your personal data may be disclosed to our data processors and our business partners.

In order to fulfil the contract, Toppen af Danmark will pass on your contact information in the form of name and address to one of our suppliers with whom a contract for the provision of services has been concluded. The supplier's processing of this information is necessary for the fulfilment of the contract, which is why there is no processing of personal data that goes beyond this purpose. Suppliers will most often be:

• Top of Denmark members and partners in the tourism industry, such as:
  • Hotels and local partners
  • Bus companies, guides
  • Restaurants, museums and event organisers.

A data processor is a company that processes personal data on our behalf. We have data processors that help us, for example:

• Denmark's top providers of administrative services, system services and other systems
• Organisations for operations, technical support and maintenance of our IT solutions
• Payment service providers such as banks and card acquirers / payment service providers
• Marketing service providers
• Auditor and bookkeeping

The data controller

Toppen af Danmark F.M.B.A., Vestre Strandvej 10, 9900 Skagen, CVR no.: 25450388 is responsible for the storage and processing of personal data in accordance with applicable legislation.

How do we protect your personal data?

We use IT systems to protect privacy and access to personal data. We have security measures in place to protect your personal data from illegal or unauthorised processing. Only the people who actually need to process your personal data in order for us to fulfil our stated purposes have access to it.

Your rights:

Toppen af Danmark is responsible for ensuring that your personal data is processed in accordance with applicable law.

The data subject has several rights under the law:

• Right to have incorrect personal data corrected
• Right to access and receive a copy of your personal data
• Right to have your personal data deleted
• Right to object to the processing of your personal data
• Right to withdraw consent, if applicable
• Right to request information about transfers to countries and organisations outside the EU
• Right to avoid profiling
• Right to complain about our processing of your personal data.

The request for the above must be made in writing. We will, at your request or on our own initiative, correct or delete any data that is inaccurate or restrict the processing of this data. You also have the right to request that your data is not processed for direct marketing purposes. Please note that we have the right to refuse a request for e.g. erasure, restriction or otherwise if there are legal obligations we must comply with, such as the Accounting Act and others.

If you are dissatisfied with our processing, you can submit a complaint to a supervisory authority, which in Denmark is Datatilsynet (datatilsynet.dk).