§ 1
How to ask
Write to us at the email address at the bottom of this page and put "GDPR" in the subject line. Your request then lands in the right place immediately. You can also call, if that is easier — but please write afterwards, so we have it in writing.
Exercising your rights is free, and you do not have to give a reason for doing so.
Tell us in your message:
- Who you are — your name and the contact details we know you by.
- What you want to exercise — access, rectification, erasure, restriction, objection or data portability.
- In what context you are writing, if you know it:
- You are a debtor in a collection case with us.
- You are a customer, supplier or business partner.
- You have applied for a position with us.
- You do not know — then we will work it out.
§ 2
What you can ask for
- Access
- A copy of the information we process about you, and to be told why we process it, where it came from, who it has been passed on to, and how long we keep it.
- Rectification
- To have information that is incorrect corrected, and incomplete information completed.
- Erasure
- To have information about you erased where we no longer have a basis for processing it.
- Restriction
- That we stop using the information but keep it — while we investigate whether it is correct, for example.
- Objection
- To object to our processing your information on the basis of a legitimate interest. We must then assess whether our interest outweighs yours.
- Data portability
- To receive the information you have given us yourself in a machine-readable format — or to have it transferred to someone else.
The rights are not unconditional. We may be required to keep information under other legislation, or it may be necessary in order to establish or defend a legal claim. If we cannot meet your request in full, we write and say why.
§ 3
What happens next
- We acknowledge receipt, so you know your message has arrived.
- We satisfy ourselves that you are who you say you are — so that we do not hand your information to someone else. If we cannot identify you from what you have written, we ask for further details. We never ask for more than identification requires.
- We retrieve the information and assess the request.
- We reply to you in writing. The law gives us a month; if the request is extensive, the period can be extended by two months, and you will be told about that within the first month.
If you are a debtor in a collection case, a request for access does not halt the case. They are two separate tracks: you can be told what we know about you while the case continues. If you believe the claim itself is wrong, that is an objection to the claim — send it to us as such, so that your case handler can consider it.
§ 4
If you are unhappy
Tell us first — most things can be settled with a phone call, and we would rather correct a mistake than defend it.
If you remain unhappy, you can complain to Datatilsynet:
- Authority
- Datatilsynet (the Danish Data Protection Agency)
- Address
- Borgergade 28, 5th floor, 1300 Copenhagen K, Denmark
If your complaint concerns the way a collection case has been conducted, it is Rigspolitiet (the Danish National Police) that supervises our compliance with god inkassoskik (proper debt-collection practice).