1. Data controller and contact information
KIRKBI Invest A/S is data controller for the processing of your personal data:
KIRKBI Invest A/S
CVR No. 31159830
Phone: 75 33 88 33
2. Purpose, legal basis, and types of personal data
Below we have listed for which purposes we process your personal data when you interact with us regarding Butikstorvet in Billund.
a. To reply to your inquiries
If you contact us via the contact information on the website or in other ways, we will use your personal data to be able to respond to your inquiry. We typically process the following personal data about you, including contact details such as name, email, phone number and the topic of your inquiry.
We use art. 6(1)(f) in the GDPR (the rule on balancing of legitimate interests) as our legal basis. Our legitimate interest is to be able to respond to your inquiry and communicate with you.
We collect the personal data directly from you and we will keep your personal data only for the period necessary to fulfil the purposes listed above.
b. List of interest
In KIRKBI Invest A/S we keep a common list of interest for apartments in the following buildings: Butikstorvet, Kastaniehjoernet, and Rosengaarden in Billund. If you wish to be registered on the list of interest, we will register the following information about you: Name, address, email, phone number and which apartments, you are interested in.
We use art. 6(1)(b) in the GDPR as our legal basis, as the personal data is necessary to fulfil the agreement with you regarding registration on the list of interest and communicate with you in this respect.
We collect the personal data directly from you, and we keep your personal data for as long as you wish to be registered on the list. Every 3rd year we will contact you by email to find out if you are still interested. It is, therefore, important that you inform us about any changes to your contact information. If we do not receive any response from you no later than 6 months after the deadline for responding to our inquiry regarding your continued interest, we will delete your personal information. We will also delete your information if you inform us that you no longer wish to be registered on the list.
c. Use of our website
In order to fulfil above purposes, we may disclose your personal data to third parties, who on a contractual basis with KIRKBI Invest A/S, deliver relevant services, e.g., IT services. Such disclosure is subject to data processing agreements, and the data processor may not use the data for other purposes than to perform the processing on our behalf.
In general, your personal data is not disclosed to other data controllers without your consent, unless we are legally required to do so.
4. Processing of personal data outside the EU/EEA
KIRKBI Invest A/S transfers, stores, and processes your information (including your personal data and content) both inside and outside of Denmark. Wherever your personal data is transferred, stored or processed by us or by companies carrying out such services on our behalf, we will take reasonable steps to safeguard the privacy of your personal data.
In some cases, we will be transferring your personal data to countries outside the EU/EEA. If your personal data are transferred to countries outside the EU/EEA, such transfer will take place on the following legal basis:
• Binding Corporate Rules
• The country has been approved by the European Commission as having an adequate level of security
• If the country has not been approved by the European Commission as having an adequate level of security, we will transfer the data by use of "Model Contracts for the Transfer of Personal Data to Third Countries" (Standard Contractual Clauses), as published by the Commission of the European Union, or any other contractual agreement approved by the competent authorities.
We use Microsoft 365 with data storage within the EU/EEA. However personal data may be transferred to or accessed from countries outside the EU/EEA. If this is the case the transfer mechanism is Standard Contractual Clauses.
We have high standards for security, including when it comes to the protection of your personal data. We, therefore, have internal procedures and policies in place to ensure that we live up to our high standards and thereby comply with the requirements of implementing appropriate technical and organisational measures. Thus, we do our best to safeguard the quality and integrity of your personal data.
6. Retention of personal data
We will retain your personal data for the period necessary to fulfil the purposes listed in Section 2.
a. To reply to an inquiry:
As long as necessary to reply to the inquiry and for documentation, if necessary, depending on the type of inquiry.
b. List of interest:
We retain your personal data 3 years from the date of registering after which you will be asked to confirm that we can retain your personal data for another 3 years, cf. Section 2 b above.
c. Use of website:
Data may be processed and stored for a longer period in anonymized form or if we are legally required to do so.
7. Your rights
In accordance with the General Data Protection Regulation and the Danish Data Protection Act, you have certain rights.
• You have the right to request access to and rectification or erasure of your personal data;
• You have the right to object to the processing of your personal data and have the processing of your personal data restricted;
• You have an unconditional right to object to the processing of your personal data for direct marketing purposes;
• You have the right to receive the personal data that is being processed in a structured, commonly used, and machine-readable format (data portability).
Please note that there may be conditions to or limitations of these rights. It is, therefore, not certain that you e.g., always have the right of data portability - this depends on the specific circumstances of the processing activity.
You can exercise your rights by visiting the settings for your account or by contacting us (see below). If you contact us by email, we will have to verify your identity for security purposes.
If you disagree with the way, we process your personal data or the purposes we process the data for, you are welcome to contact us. You can also file a complaint with:
The Danish Data Protection Agency
Carl Jacobsens Vej 35
T: +45 33 19 32 00
9. Contact information