Privacy policy for Skanderborg Park

June 2025

This document describes what personal data Skanderborg Park (hereinafter referred to as SKP) processes about you and what we do if you are:

• Guest at Skanderborg Park, including booking inquiries (described in Section 3 below)
• Visitors to the website (described in Section 4 below)
• Newsletter recipients (described in Section 5 below)

Skanderborg Park is the data controller for the personal data we process about you. Our contact details are:

Skanderborg Park
Skovsvinget 10
8600 Skanderborg
CVR no.: 34 69 93 56
Phone: 89 93 33 33 10
Email: reception@skanderborgpark.dk

2: Contact details of the GDPR responsible employee

If you have any questions about our processing of your data, you are always welcome to contact us via the contact details above or via GDPR@finansudd.dk.

3: Guests at Skanderborg Park, including booking inquiries

a: The purposes and legal basis for processing your data personal data

We process your personal data for the following purposes:
- The purpose of processing your personal data is to manage your visit to the hotel as a guest or participant at an event, conference, party or similar. In connection with booking inquiries or similar inquiries via contact forms on our website, direct mail or calls, the purpose is to handle your inquiry.

The legal basis for our processing of your personal data follows from:
- Our legal basis for processing your personal data is our agreement or contract with you, cf. Article 6(1)(b) of the General Data Protection Regulation. booking inquiries and the like is our legitimate interest in being able to respond to your inquiry, cf. the balancing of interests rule in Article 6(2)(f) of the GDPR.

b: Categories of personal data

We process the following general categories of personal data about you:
Name, address, e-mail address, telephone number and any individual considerations that you have provided us with. 

c: Recipients or categories of recipients

We do not disclose your personal data to others. However, we have engaged certain data processors who perform a number of tasks on our behalf. We may entrust these data processors with your personal data. The processors may only access and process your personal data on our behalf to fulfill the specific purposes set by us. Data processors may, for example, be providers of our IT solutions. These suppliers only process the personal data on behalf of SKP and in accordance with SKP's instructions and thus cannot process personal data for their own purposes.

d: Where your personal data originates from

We only process the data that you have provided us with.

e: Retention of your personal data

We process personal data about your booking and your stay with us for 12 months after your visit. The retention period is based on our legitimate interest in providing customer service and handling any legal claims.

Personal data included in accounting material is stored for 5 years + up to 12 months from the end of the financial year, after which the data is deleted. The retention period is based on the retention requirements in section 10 of the Danish Bookkeeping Act and is therefore done in order to comply with applicable legislation.

Personal data registered in connection with booking requests and similar inquiries is stored for 12 months. The retention period is based on our legitimate interest in providing customer service and handling your inquiry. If your inquiry is made via email, it will automatically be deleted after three years.

4: Visitors to our website

a: The purposes and legal basis for processing your data personal data

We process your personal data for the following purposes:
The purpose is to ensure the functionality of the website through the use of cookies; to improve the user experience and security; to compile analysis and statistics on the use of the websites; to enable marketing of our services.

b: Categories of personal data

We collect personal data about you, including technical information about the device you use to visit the website, IP address, browser information and information about your use of the website. You can read more in our cookie policy (link). 

In all cases, it will only be ordinary personal data covered by Article 6 of the GDPR.

c: Recipients or categories of recipients

In certain cases, we may disclose your personal data to third parties. For example, in cases where information about your use of the website, geographical location, etc. is disclosed to third parties to the extent that this information is known. You can see which third parties are involved in our cookie policy (link). The information is used for targeting advertising.

In addition, we have engaged certain data processors who perform a number of tasks on our behalf. We may entrust your personal data to these processors. The data processors may only access and process your personal data on our behalf to fulfill the specific purposes set by us. Data processors may, for example, be providers of our IT solutions. These suppliers only process the personal data on behalf of SKP and in accordance with SKP's instructions and thus cannot process personal data for their own purposes.

d: Where your personal data originates from

Your personal data is collected automatically when you visit the website. However, you have the opportunity to choose to what extent cookies are used, cf. our cookie policy (link).

e: Retention of your personal data

We will retain your personal data for as long as necessary to fulfill the purposes described above. The retention period for the different cookies we use is stated in our cookie policy (link).

f: The right to withdraw consent

In connection with your visit to our website, you can choose to consent to cookies. If you have given consent to cookies, you have the right to withdraw your consent at any time. You can see how to do this in our cookie policy (link).

If you choose to withdraw your consent, it will not affect the lawfulness of our processing of your personal data on the basis of your previously given consent and up to the time of withdrawal. Therefore, if you withdraw your consent, it will only take effect from that time.

5: Newsletter recipients

a: The purposes and legal basis for processing your data personal data

We process your personal data for the following purposes:
The purpose is to be able to send you the newsletters that you have signed up for and other direct marketing via email.

The legal basis for our processing of your personal data follows from:
The legal basis for our processing of your personal data is the consent you give when you sign up to receive newsletters and other direct marketing. registration to receive newsletters and other direct marketing, cf. the General Data Protection Regulation, Article 6(1)(a). 

b: Categories of personal data

We process the following categories of personal data about you:
When you sign up for a newsletter, you also provide information about your email address and possibly your name and interests, which we process to send out the newsletter.

In all cases, it will only be ordinary personal data covered by Article 6 of the GDPR.

c: Recipients or categories of recipients

We have engaged certain data processors who perform a number of tasks on our behalf. We may entrust your personal data to these processors. The data processors may only access and process your personal data on our behalf to fulfill the specific purposes set by us. Data processors may, for example, be providers of our IT solutions. These suppliers only process the personal data on behalf of SKP and in accordance with SKP's instructions and thus cannot process personal data for their own purposes.

d: Where your personal data originates from

You provide your personal data when you sign up for the newsletter.

e: Retention of your personal data

We will retain your personal data for as long as necessary to fulfill the purposes described above.

When signing up for newsletters, your data is stored for as long as you subscribe to the newsletters. If you unsubscribe from the newsletter, we will immediately stop sending newsletters and your data will be deleted immediately.

f: The right to withdraw consent

You have the right to withdraw your consent at any time. You can withdraw your consent via the "Unsubscribe here" link found at the bottom of all newsletters.

If you choose to withdraw your consent, it will not affect the lawfulness of our processing of your personal data on the basis of your previously given consent and up to the time of withdrawal. Therefore, if you withdraw your consent, it will only take effect from that time.

6: Transfer to recipients in third countries, including international organizations

We may transfer your personal data to recipients outside the EU and EEA. If we transfer your personal data to recipients outside the EU, it will only ever be done in accordance with the applicable rules and legislation on data protection, including the General Data Protection Regulation, the Data Protection Act and relevant guidance from competent authorities. We always ensure that there is a valid transfer basis according to the rules in Chapter 5 of the GDPR.

7: Your rights

You have a number of rights under the General Data Protection Regulation in relation to our processing of information about you.

If you want to exercise your rights, please contact us.

Right to see information (right of access)

You have the right to access the data we process about you as well as a number of additional information.

Right to rectification (correction)

You have the right to have incorrect information about yourself corrected.

Right to erasure

In special cases, you have the right to have data about you deleted prior to the time of our general general deletion.

Right to restriction of processing

You have the right to have the processing of your personal data restricted in certain cases. If you have the right to have the processing restricted, we may in future only process the data - except for storage - with your consent, or for the establishment, exercise or defense of legal claims, or to protect a person or important public interests.

Right to object

In certain cases, you have the right to object to our or lawful processing of your personal data. You can also object to the processing of your data for direct marketing purposes.

Right to transmit data (data portability)

In certain cases, you have the right to receive your personal data in a structured, commonly used and machine-readable format and to have this personal data transferred from one controller to another without hindrance.

You can read more about your rights in the Danish Data Protection Agency's guide on data subject rights, which you can find at www.datatilsynet.dk.

 8: Complaint to the Danish Data Protection Agency

You have the right to file a complaint with the Danish Data Protection Agency if you are dissatisfied with the way we process your personal data. You can find the Danish Data Protection Agency's contact details at www.datatilsynet.dk.