Privacy policy
Esrum Kloster and Møllegård CVR no. 26363268 is the data controller for the information we process about you, and we ensure that your personal data is processed in accordance with the law.
We take your data protection very serious, which is why we have adopted this privacy policy that tells you how we process your personal data.
Contact details
If you wish to contact us regarding our processing of your personal data, you can do so at:
Esrum Kloster og Møllegård
Klostergade 12, 3230 Græsted
Tlf.: +45 4836 0400
E-mail: kloster@esrum.dk
Processing of personal data
Personal data is any kind of information that can be attributed to you to one extent or another. This privacy policy describes how Esrum Kloster og Møllegård processes your personal data. We only collect information about you that is necessary and processed for a purpose, and we always treat your personal data confidentially.
Data security
We have taken appropriate technical and organisational measures to secure your data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. We ensure that processing can only take place when all data protection principles are met.
We keep data up to date
As our service depends on your personal data being correct and up to date, we ask you to inform us of relevant changes to your personal data. You can use the contact details above to notify us of your changes and we will make sure to update your personal data. If we become aware that your personal data is not correct, we will update the information and notify you accordingly.
Below you can see on what basis we process your data, for what purpose and for how long we store it.
Website visitors
When you visit our website, we process the following personal data about you:
IP address information
We collect personal data about website visitors for the following purposes:
- To ensure optimal operation of our website – Necessary cookies
- To make your use of the website most relevant to you – Preference cookies
- To collect statistics on the use of our website for analytical purposes – Statistical cookies
- To optimise the relevance of advertising – Marketing cookies
We collect the data on the following processing bases:
- You have given consent via cookie banners (databeskyttelsesforordningen art. 6, stk. 1, litra a).
- Our legitimate interest, which is to administer our website (databeskyttelsesforordningen art. 6, stk. 1, litra f).
We retain the data for the period permitted by law and we delete it when it is no longer necessary. The period depends on the nature of the data and the reason for storage. Typically, personal data for website visitors will be deleted after an annual audit.
Contact and service
When you contact us by email, phone or letter, we collect the following information about you:
Your contact details and the content of your enquiry.
We process this information on the following processing basis:
- You have consented to us processing your data (databeskyttelsesforordningens art. 6, stk. 1, litra a)
- We process your data in order to provide you with a service in connection with a contract (databeskyttelsesforordningens art. 6, stk. 1, litra b)
Your personal data will be deleted when the purpose for storing the personal data no longer applies. This is assessed based on the specific enquiry and the nature of the enquiry. We only process the data you have submitted and we do not collect any additional data.
Buy and sell
When we sell to you or buy from you, we process the following information about you:
- General information for contact, invoicing etc.
We process this data on the following processing bases:
- We process your data based on the fulfilment of a contract or a request prior to entering into a contract (GDPR Art. 6(1)(b))
Data collected in connection with a purchase or sale will generally be deleted once we have delivered the service you have purchased, unless there is a specific reason to store the data for a longer period of time, e.g. a warranty period if you or we need to make a complaint.
We must store accounting material for 5 years from the end of the financial year to which the purchase or sale relates.
Social Media
When you choose to follow or like us on social media Facebook, LinkedIn, Instagram, you will see/receive news from us via social media.
When you like and/or follow us, we process the following information about you
- Your name
The purpose of using social media is to keep interested followers updated on relevant social media posts, e.g. offers, new areas, points of interest, etc.
- We process this data on the following processing basis:
Our interest in marketing (databeskyttelsesforordningens art. 6, stk. 1, litra f)
Newsletters
When you sign up to receive our newsletter, we collect the following information about you:
- Email and name
We process this information on the following processing basis:
- You have consented to us sending you the newsletter (databeskyttelsesforordningens art. 6, stk. 1, litra a)
Your personal data will be deleted when you withdraw your consent. You are free to withdraw your consent, and you can use the contact details at the top if you wish to withdraw your consent.
Recruitment
If you apply for a position with us, we will process the information provided in your application, CV and other enclosed documents. It is not necessary for you to write your CPR number.
The purpose of processing personal data about you in the recruitment process is to assess whether you are a qualified candidate for a vacant position with us.
We process your data on the basis of our legitimate interest, which is to assess your qualifications and competences in relation to the advertised position (databeskyttelsesforordningen art. 6, stk. 1, litra f).
Applications and attachments may be stored for up to 6 months after the recruitment process is completed, after which your data will be deleted. The purpose of storage after the end of the recruitment process is to safeguard interests in the event of any complaints of discrimination, differential treatment etc. during the recruitment process.
If we wish to store your application with attachments for possible future employment, this is based on your consent (databeskyttelsesforordningen art. 6, stk. 1, litra a).
Disclosure of information
We use a number of third parties to store and process the data, including IT solution providers. They only process data on our behalf and may not use it for their own purposes.
In relevant cases, personal data is disclosed to e.g. the social economy organisation Fonden Kilden, which runs the café at Esrum Kloster & Møllegård, banks, accountants and lawyers.
We use data processors/suppliers for the processing of personal data. We prioritise suppliers from the EU, as well as from third countries that the EU Commission has approved in relation to the level of protection of personal data, cf. Article 45 of the General Data Protection Regulation.
Disclosure of data to insecure third countries
We also use some data processors/suppliers in insecure third countries. When third country legislation does not offer the same security as the EU, we have stricter obligations to protect your data.
If you want to know more about the transfer bases that affect you, you can contact us at the contact point above.
Your rights
You can contact us using the contact details at the top of the page:
- gain access to your personal data
- rectify your registered personal data
- have personal data about yourself deleted
- have the processing of your personal data restricted
- receive your personal data (data portability) for the purpose of transferring it to another data controller
- object to the processing
If you give your consent to us, your consent is voluntary and it has no consequences for you if consent is not given, only given for certain points or later revoked.
You can withdraw your consent at any time by using the contact details above.
When you contact us with a request to exercise the above rights, we will respond to you within one month. If we cannot fulfil your request, you will be given a reason why.
To exercise your rights, or if you have any questions about the above, you can contact us. You can find our contact details at the top of the page.
If you are subsequently dissatisfied with the way we process your data, you have the right to lodge a complaint with
