Who is the data controller?
Fruedal BESS ApS is the data controller for the personal data we process when you visit this website, use the assessment form or email us. We process the data in accordance with the General Data Protection Regulation (GDPR) and the Danish Data Protection Act (databeskyttelsesloven).
Fruedal BESS ApS, CVR no. 45321002, Dalgårdvej 11, 7860 Spøttrup, Denmark. Email: kontakt@fruedalbess.dk.
We have not appointed a data protection officer (DPO). If you have questions about how we process your data, please email us.
What data do we process?
When you use the assessment form, we process the address or town of the site, what you know about its grid connection, which business model you are interested in, your name, your email address and your phone number, if you provide it. We also record that you ticked the confirmation box, when your enquiry was received and whether you used the Danish or the English version of the site.
If you email us, we process the information you choose to give us. Please do not send us sensitive data, such as health information, or your CPR number (Danish personal identification number) — we do not need them to answer your enquiry.
The data in the form and in your emails comes from you. To assess the site, we add publicly available information about the property, for example from the Danish building register (BBR), the cadastre and the land registry — including who owns it. We look this up through the Resights service (Resights ApS). When you visit the website, technical data such as your IP address is also processed (see ‘Technical operation, security and cookies’).
Why do we process the data — and on what legal basis?
We use the data to respond to your enquiry, assess the potential of the site and — if it is suitable — prepare an indicative business case. We do not use it for newsletters or for marketing unrelated to your enquiry.
If you contact us on your own behalf — for example as a private individual or the owner of a sole proprietorship — the processing is necessary to take the steps you have asked for before a possible agreement is entered into (Article 6(1)(b) GDPR).
If you contact us on behalf of a company or another organisation, we process your contact details on the basis of our legitimate interest in responding to the enquiry and establishing a working relationship with the company or organisation you represent (Article 6(1)(f)). Other enquiries, such as general questions, are processed on the basis of our legitimate interest in being able to answer them (same provision).
If we enter into an agreement, we process the data to perform it (Article 6(1)(b), or Article 6(1)(f) for contact persons at a company) and to comply with our obligations under the Danish Bookkeeping Act (Article 6(1)(c)). We will give you further information when the agreement is made.
The tick box in the form is not consent under data protection law. By ticking it, you confirm that you have read this privacy policy and ask us to contact you about your enquiry.
We do not make decisions based solely on automated processing, including profiling (Article 22).
Do you have to give us your data?
Contacting us is voluntary, and you are under no obligation to give us your data. However, without your name, email address and details of the site, we cannot respond to your enquiry or assess the site. Giving your phone number is optional.
Technical operation, security and cookies
When you visit the website, our hosting provider, Vercel, records technical data in log files, such as your IP address, information about your browser and which pages you request. This is necessary to deliver the site and protect it against errors and attacks.
When you submit the form, the form function uses your IP address to count how many enquiries are sent from the same sender within 10 minutes, so that we can limit spam. The IP address is only held temporarily in the function’s memory — not in a database — and it is not included in the email sent to us.
This is based on our legitimate interest in running a secure and stable website and protecting the form against misuse (Article 6(1)(f)).
The website sets no cookies, and we use no statistics, analytics or tracking tools. Fonts and images are served from the website itself, not from third parties. That is why we do not ask for your consent to cookies.
Who has access to the data?
We use two providers for the website and the form: Vercel Inc. (USA) hosts the website and the form function, and One.com is our email provider. The form function runs in Vercel’s data centre in Stockholm, while the site itself is served through Vercel’s global server network. When you submit the form, the function sends your enquiry to us as an email through One.com.
Your enquiry is then stored in our mailbox with One.com, which processes the data in its data centre in Copenhagen, Denmark. All our providers are data processors: they may only process the data on our behalf and on our instructions, and we have data processing agreements with them (Article 28).
We do not sell your data or share it with others for their marketing. Apart from our data processors, others only receive the data if you have asked us to share it or if we are required by law to disclose it.
Transfers outside the EU/EEA
Vercel Inc. is a US company, so the data may be transferred to the USA. Such transfers are based on the European Commission’s adequacy decision for the EU-US Data Privacy Framework (Article 45 GDPR) where Vercel is certified under the framework, and otherwise on the Commission’s standard contractual clauses (Article 46(2)(c)).
One.com processes the data in Denmark, but some of One.com’s sub-processors are established outside the EU/EEA. Transfers to them are based on the Commission’s standard contractual clauses (Article 46(2)(c)). If any of our other providers transfers data to a country outside the EU/EEA, this likewise takes place only on the basis of an adequacy decision or the standard contractual clauses. Email us at kontakt@fruedalbess.dk if you would like to know more about the transfers or receive a copy of the standard contractual clauses.
How long do we keep the data?
If your enquiry does not lead to an agreement, we delete the data no later than 12 months after our last contact with you. We keep it for that period so that we can resume and document the dialogue if you come back to us (Article 6(1)(f)).
If we enter into an agreement, we keep the data for as long as the agreement runs and then for as long as necessary to document the agreement and handle any claims — as a rule up to 3 years after the agreement ends, in line with the general Danish limitation period. Accounting records are kept for 5 years from the end of the financial year they relate to, as required by the Danish Bookkeeping Act.
Your IP address is only held temporarily in the form function’s memory, is used only to count enquiries within 10 minutes and is deleted automatically. It is never stored with your enquiry. Technical log files at Vercel are deleted automatically under Vercel’s standard deletion routines. The email containing your enquiry is kept in our mailbox with One.com and is deleted in line with the periods above — no later than 12 months after our last contact with you if your enquiry does not lead to an agreement.
Your rights
You have the right to access the data we process about you and to have inaccurate data corrected. You can also ask us to erase the data or restrict our processing of it. However, the right to erasure does not apply to data we are required to keep, for example under the Danish Bookkeeping Act.
Where we process the data to take steps before an agreement or to perform an agreement with you, you also have the right to receive the data you have given us in a structured, commonly used and machine-readable format (data portability).
Email us at kontakt@fruedalbess.dk if you wish to exercise your rights. We will reply as soon as possible and no later than one month after receiving your request. If your request is complex, or we receive many requests, this period may be extended by up to two further months. If so, we will tell you within the first month. If we have reasonable doubts about your identity, we may ask you to confirm it.
You can complain about our processing of your data to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, dt@datatilsynet.dk, www.datatilsynet.dk.
Your right to object
You can object at any time, on grounds relating to your particular situation, to processing we carry out on the basis of our legitimate interests (Article 6(1)(f) and Article 21). We will then stop the processing unless we have compelling legitimate grounds to continue that override your interests, rights and freedoms, or the processing is necessary to establish, exercise or defend legal claims.
To object, email us at kontakt@fruedalbess.dk.
Changes to this privacy policy
We update this privacy policy when we change how we process personal data or when the rules change. The date at the top of the page shows when it was last updated. If we want to use your data for a new purpose, we will tell you before we do so.