Privacy Policy

The Danish Balder Group is the data controller for the information we collect about you, and we ensure that your personal data is processed in accordance with the law. If you have any questions about the processing of your personal data, you can contact Balder using the information below.

We take your privacy seriously and have therefore adopted this Privacy Policy, which tells you how we process your personal data.

Contact details

If you wish to contact us regarding our processing of your personal data, you can do so at:

Our office: Vesterbrogade 1E, 1620 Copenhagen V
Via our mail: persondata@balder.dk

If you are a tenants or potential tenants

Personal data is any information that can be attributed to you in one way or another. If you do not want us to process this information, it may be difficult to maintain and fulfil any agreements and legal obligations.

As the data controller, we have taken appropriate technical and organisational measures to prevent your data from being accidentally or unlawfully deleted, published, lost, deteriorated, disclosed to third parties, misused or otherwise processed in breach of the law. We ensure that processing can only occur when all data protection principles are met, cf. Article 5 of the General Data Processing Regulation (GDPR).

When we are the data processor, we process personal data in accordance with the instructions and guidelines set out in the data processor agreement concluded with the data controller.

Below you can see on what basis we process your data, for what purpose, and for how long we keep it.

Website visitors

In connection with your visit to our website, we will process the following personal data about you:

Ip addresses (not available to Balder)
Language
Gender
Age
Demography
Geography
Interests
Behaviour, new and returning
Time visiting

We collect personal data about website visitors for the following purposes:

The optimal user experience of our website.
Targeting of ads.
Record information for contact purposes.

We collect the data on the following legal basis:

Consent has been given via our contact form and cookie banner, cf. Article 6(1)(a) of the GDPR.
Balder's legitimate interest is to operate our website, cf. Article 6(1)(f) of the GDPR.

We store the data for the period allowed by law and delete it when it is no longer needed. The period depends on the nature of the data and the reason for storage. Typically, personal data relating to website visitors will be deleted after an annual review.

Potential tenants

In order for you to be a potential tenant of an apartment/tenancy with us, it is necessary that we collect the following personal data about you:

Name, including first and last name
E-mail address
Telephone number

We collect personal data about potential tenants for the following purposes:

Possible future cooperation or house purchase
Managing your relationship with Balder

We collect this information on the following processing bases:

To be able to contact potential customers/landlords regarding available apartments/leases.
The processing is carried out on the basis of compliance with the rental contract, cf. Article 6(1)(b) of the GDPR.

We store the data for the period allowed by law and delete it when it is no longer needed. The storage period depends on the nature of the information and the purpose of the handling. Typically, information about potential customers/tenants will be deleted after the agreement has ended or when it is no longer relevant to have contact.

Information on potential customers is deleted 2 years after the last contact or upon request.

Customer who is a tenant of an apartment/tenancy

In order for you to be a customer/tenant with us, it is necessary that we collect the following personal data about you:

Name, including first and last name
E-mail address
Telephone number
Address
RKI information
CPR/CVR no.
Key fob information in the form of log files and tenant numbers,
IP address of the phone and Unique ID of the user when using the Salto App

We collect personal data about customers/tenants for the following purposes:

Processing your purchase and providing our service.
Managing your relationship with Balder.
Use of entry door phone system.
Use of key fob system.

We collect this information on the following legal bases:

Consent has been given by means of a consent form, cf. Article 6(1)(a) of the GDPR.
The processing is carried out on the basis of the performance of the rental contract, cf. Article 6(1)(b) of the GDPR.
The processing is based on a legal obligation, e.g. in the Tenancy Act, cf. Art. 6(1)(c) of the GDPR.
Our legitimate interest, which is the management of the rental relationship, makes it necessary to process these personal data. We assure you that the fulfilment of the legitimate interest will not go beyond your rights, cf. Article 6(1)(f) of the GDPR.

We store the data for the period allowed by law and delete it when it is no longer needed. The storage period depends on the nature of the information and the purpose of the processing. You have received an information document when signing your rental contract, which describes the processing of your data in more detail.

Information about customers is deleted 5 years after the customer relationship has ended.

If opinions or similar are published, the legal basis for this is consent.

Suppliers and partners

In order to be a supplier and partner of ours, we need to collect the following personal data about you:

Names
Addresses
CVR no.
Titles

We collect personal data about suppliers and business partners for the following purposes:

Processing of our purchases/services from you
Managing your relationship with Balder

We collect this information on the following legal bases:

The processing is carried out on the basis of a contract, cf. Article 6(1)(b) of the GDPR.
The processing is based on a legal obligation in the Danish Accounting Act, cf. Article 6(1)(c) of the GDPR.
Our legitimate interest, which is the administration and management, necessitates the processing of these personal data. We assure you that meeting the legitimate interest will not go beyond your rights, cf. Article 6(1)(f) of the GDPR.

We store the data for the period allowed by law and delete it when it is no longer needed. The storage period depends on the nature of the information and the purpose of the processing.

Information on suppliers is deleted when the warranty on purchased products has expired, or the agreement is terminated.

Recruitment

The purpose of collecting personal data about you in the recruitment process is to assess whether you are a qualified candidate for a vacancy with us.

Personal data obtained in the recruitment process is the information contained in your application, CV and other documents submitted, which will be recorded. It is not necessary to write your CPR number.

Your application and supporting documents will be shared internally with relevant staff in the recruitment process but will not be shared with anyone outside Balder.

Where appropriate, we use external recruitment consultants to assist us in the process, and your information may be collected by them on our behalf or shared with them.

If you are called for an interview, we will record information and details for use in the recruitment process.

We process your data on the basis of our legitimate interest, cf. Article 6(1)(f) of the GDPR, which is to assess your qualifications and competencies in relation to the vacancy.

The application and supporting documents may be stored for up to 6 months after the recruitment process has been completed, after which your data will be deleted. The purpose of storage after the recruitment process is to safeguard interests in the event of any allegations of discrimination, unequal treatment etc., during the recruitment process.

If we wish to store your application with supporting documents, with a view to possible future recruitment, this will be done on the basis of your consent, cf. Article 6(1)(a) of the GDPR.

Unsolicited applications

In the case of unsolicited applications, we process your data on the basis of our legitimate interest, cf. Article 6(1)(f) of the GDPR, which is to assess your skills and competencies in relation to possible future employment.

For unsolicited applications, the application and supporting documents are stored for a maximum of 12 months, after which they are deleted. If we wish to keep your applications for longer than this, this will be done based on specific consent from you.

Your consent is voluntary, and you may withdraw

Processing of personal data in relation to participation in a competition

When you participate in a competition at Balder Danmark, we process information about you for the purpose of carrying out the competition, including extracting, contacting and announcing the winner(s) of the competition, and handing over the winners prize. The personal data that we process is your contact information, i.e. your name, e-mail address and telephone number, and the answer that you may submitted in the competition.

The basis for the processing is the data protection regulation art. 6 pieces. 1, letter f, as the processing is necessary for us to pursue our legitimate interest in carrying out the competition. We also believe that you have overlapping interests, since you yourself have chosen to participate in the competition, and therefore have an interest in the processing being carried out so that the competition can be carried out.

Information about the winner(s) of the competition is stored for 3 years from the dispatch of the prize, with reference to the statute of limitations. Information about the other par-ticipants in the competition is deleted immediately after the competition has been com-pleted.

When we use Facebook or Instagram for a competition, these media enable us to process certain information about you if you visit, follow or interact with Balder Danmark. Depend-ing on the competition, we will also process information about your name/profile name, and possibly comments, posts or photos that you have posted.

Our purpose with the treatment is respectively to interact with users and analyze, develop, and improve our marketing exposure on Facebook and Instagram, as well as possibly to carry out the competition, including selecting, contacting and announcing the winner(s) of the competition, and handing over the prize won.

The basis for the processing is the data protection regulation art. 6 pieces. 1, letter f, as the processing is necessary for us to pursue our legitimate interest in marketing ourselves on Facebook and Instagram and in carrying out the competition.

We are joint data controllers with Meta Platforms Ireland Limited ("Meta" - owner of Fa-cebook and Instagram) for processing information about people who visit, follow or inter-act with Balder Danmark on Facebook and Instagram. You can read more about the agreement with Meta on joint data responsibility here. Meta also processes personal data about you for Meta's own purposes, see Meta's personal data policy here.

We have access to the information about you as long as you follow us on Facebook or Insta-gram, or as long as your like, comment or share of our content is on our page. You can delete this information yourself. Meta's storage of personal data about you is de-scribed in Meta's own privacy policy.

Handling of information for direct marketing towards you, if you have provided marketing consent

You have consented under the marketing law for Balder Denmark to contact you for direct marketing. We therefore process information about you for this purpose. The personal data we process primarily includes your contact details, i.e., your name and email address. We also process information about your telephone number if your marketing consent includes phone calls. If you have submitted a form for booking a viewing, we also process information about which property or real estate you wish to have shown.

The basis for processing is Article 6(1)(a) of the Data Protection Regulation, as your marketing consent implies that you have consented to the processing of your information for this purpose. You can revoke your consent at any time. We want our communications to be relevant to you. Therefore, Balder also processes information about you to target what we contact you about. You can read more about the information we process in these specific sections:

If you have given your marketing consent in a contact form, such as an interest form or booking a viewing, in a rental application, or in connection with setting up a housing agent:

Unless you have opted out, we process this information about you to target what we contact you about:

Type of accommodation and housing area you have shown interest in, in connection with your marketing consent, for example, by using an interest form or submitting a rental application for a specific property, or a request for a viewing of a specific property or real estate,
Whether you are a resident of Balder,
When you gave marketing consent, were last contacted, and any previous viewings and lease agreements you have received.
If you have given your marketing consent in connection with setting up a housing agent, we also process information about the housing criteria you have specified in the housing agent.

We use the information to carry out segmentation in order to select recipients of specific marketing, such as all those who:

Have viewed a property in Strandby Huse in the last 6 months but are not residents of Balder,
Have submitted an interest form for a property in Ørestad,
Have submitted a rental application for a 3-room apartment in Hedehusene or Hundige but are not residents of Balder,
Have set up a housing agent with criteria for 2 rooms in Espergærde.

If you have given marketing consent for residents, for example, in connection with signing a lease agreement, in the Mit Balder app, on a landing page, or in an event form:

Unless you have opted out, we process this information about you to target what we contact you about:

Address
Gender
Age
Children or not, and possibly children's ages in intervals
Pets or not, and possibly type of pet
Type and size of accommodation (square meters and rooms)
Rent
Energy consumption
Interests (based on questionnaires you have filled out yourself).

We use the information to carry out segmentation in order to select recipients of specific marketing, such as all those who:

Live in Strandby Huse and have children aged 5-12,
Are between 35-45 years old and live in Ørestad,
Have a dog,
Live in accommodation with 3 or more rooms,
Have an energy consumption higher than the average according to Statistics Denmark.

You were informed of an easy way to opt out of us processing to target what we contact you about when you gave your marketing consent. You always have the option to opt out of this processing in the Mit Balder app by using the link solution displayed with your marketing consent in your profile in the app, just as you always have the right to object to the processing with Balder. For example, you can send an email with your objection to persondata@balder.dk. The purpose of processing personal data for segmentation to target what we contact you about is that we want to increase the content and relevance of our direct marketing to improve effectiveness. We believe that you also have an interest in the marketing you receive based on your marketing consent being relevant to you.

The basis for processing is Article 6(1)(f) of the Data Protection Regulation, as the processing is necessary for us to pursue our legitimate interest in conducting direct marketing of relevance to you. We assess that balancing our interests against your potential conflicting interests is in our favor. We have particularly emphasized i) the relatively simple nature of the processing, including that it does not involve profiling or linking information from different sources and/or platforms, ii) you, as a person who has given marketing consent, do not have significant conflicting interests, and iii) you were informed of an easy way to opt out of us conducting this processing when you gave your marketing consent. To document that we can lawfully contact you with direct marketing, we retain information about your consent, including the time of it, the IP address used, and whether your device and browser were used, and the receipt for the consent sent to you. The basis for processing is Article 6(1)(c) of the Data Protection Regulation.

We carry out the described processing of personal data for as long as we consider it relevant to market to you, and you have not revoked your marketing consent or objected to the processing. However, we do not store information about any previous viewings, rental applications, unaccepted lease agreements, and discontinued housing agents for targeting marketing for longer than 2 years. If you revoke your marketing consent, we will no longer process information about you for the purpose of contacting you with direct marketing. However, we will continue to retain documentation that our direct marketing to you was in accordance with the marketing law and data protection regulations. We will keep this documentation for 2 years from the last time we contacted you with direct marketing.

Right to object to processing for direct marketing purposes
You have the right to object to the processing of personal data for direct marketing purposes at any time.
If you object to the processing of personal data for direct marketing purposes, we will no longer process personal data about you in accordance with your objection. If you have given us marketing consent, i.e., consent for us to contact you with direct marketing, we will consider a general objection to us processing information about you for direct marketing purposes as a revocation of your marketing consent.

Other information on the processing

Video surveillance

As part of the security measures around our physical environment, video surveillance is used on selected properties. We will ensure at all times that any video surveillance will comply with the Danish Video Surveillance Act.

In the case where video surveillance is used on roads, streets, squares or similar areas used for general public traffic, we will register it in the police register of video surveillance cameras (POLCAM).

All recordings are stored for 30 days, after which they are automatically overwritten.

We process personal data on the following lawful bases:

The surveillance is based on Balder's legitimate interest, which is to ensure the physical security of the workplace and for crime prevention purposes. Our interest is deemed legitimate as the monitoring serves as an active and proportionate part of these purposes. It is considered that the interests and rights of the data subject, i.e. you, do not override the legitimate interest of the data controller. The processing is necessary for the purposes of the legitimate interest pursued by the controller, cf. Article 6(1)(f) of the GDPR.

Data minimisation

We process only the data necessary to fulfil our stated purposes. Also, we may be required by law to collect and store other information about you. We only keep personal data for as long as necessary or required by law. Personal data is deleted or anonymised when it is no longer necessary for us to process it.

We keep data up to date

As our service depends on your personal data being accurate, and up to date, we ask you to inform us of any relevant changes to your personal data. You can use our contact details above to notify us of your changes, and we will update your personal data. If we become aware that your personal data is not correct, we will update the information and notify you.

Your consent to receive our newsletter is voluntary and you can withdraw your consent at any time by contacting us at any time.
Use our contact information here: persondata@balder.dk, +45 55 55 07 07:

Information text regarding Balder Danmark A/S' processing of your information when you sign up for the newsletter
• Balder Danmark A/S is the data controller for the processing of your personal data in connection with sending out the newsletter.
The basis for processing your personal data in connection with your subscription to our newsletter is the data protection regulation. 6 pieces. 1, letter a (consent).
You can withdraw your consent at any time by unsubscribing from the newsletter. We will delete your email address if you unsubscribe from the newsletter, and thus only process your personal data as long as you are registered for the newsletter, cf. Article 5 of the Data Protection Regulation, so-called 1, letter e.
However, the fact that you withdraw your consent will not affect the legality of the processing carried out before the withdrawal of consent.

According to the data protection regulation, you have a number of rights in relation to our processing of information about you, which appears at the bottom of the page.

Transfer of data

We use several third parties to store and process the data, including IT solution providers and external suppliers etc. These process information solely on our behalf and may not use it for their own purposes. In relevant cases, personal data is disclosed to banks, debt collectors, accountants, etc.

We use data processors/suppliers for the processing of personal data. We give priority to suppliers from the EU and third countries approved by the EU Commission in relation to the level of protection of personal data, cf. Article 45 of the GDPR.

Transfer of data to unsafe third countries

We also use some data processors/suppliers in unsafe third countries. When the legislation of third countries does not offer the same security as the EU does, we have stricter obligations regarding the protection of your data.

Personal data we collect and process in connection with recruitment, marketing, etc., is transferred to Facebook, Instagram and LinkedIn, which are all based in the United States. We have ensured that there is a lawful basis for the transfer in the form of concluded SCCs, cf. Article 46(2)(a) of the GDPR, and that the data are processed under adequate safeguards.
Personal data we collect and process in connection with the use of Balder's systems, such as Outlook, Office 365, etc., is transferred to Microsoft, which is also based in the United States. We have ensured that there is a lawful basis for the transfer in the form of concluded SCCs, cf. Article 46(2)(c) of the GDPR, and that the data are processed under adequate security measures.
Personal data we collect and process in connection with marketing and cookies is transferred to Google, USA. We have ensured that there is a lawful basis for the transfer in the form of concluded SCCs, cf. Art. 46(2)(c) of the GDPR and that the data is processed under adequate security measures.
Personal data we collect and process in connection with the sending of newsletters is transferred to Mailchimp (The Rocket Science Group), which is also based in the USA. We have ensured that there is a lawful basis for the transfer in the form of concluded SCCs, cf. Article 46(2)(c) of the GDPR, and that the data are processed under adequate security measures.

If you want to know more about the transfer bases that affect you, please contact us at

persondata@balder.dk,+45 55 55 07 07

Joint data control (When using social media)

We use the following social media Facebook, Instagram and Linkedin, which are categorised as joint controllers. Joint data control means that both parties are responsible for the purpose and processing of personal data.

Your rights

You can by contacting us at persondata@balder.dk,+45 55 55 07 07:

obtain access to your personal data,
rectify your recorded personal data,
have personal data about yourself deleted,
have your personal data handed over (data portability) in order to transfer it to another data controller,
object to the processing, and
have the processing of your personal data restricted.

When you contact us with a request to exercise the above rights, we will respond to you within one month. If we cannot accommodate your request, you will be given a reason why.

To exercise your rights, or if you have any questions about the above, please contact us at persondata@balder.dk,+45 55 55 07 07.

If you are subsequently dissatisfied with the way we process your data, you have the right to lodge a complaint with the Danish Data Protection Agency.