At the Bagger-Sørensen Group (“Bagger-Sørensen,” “we,” “us,” or “our”), we place a high priority on confidentiality and data security. This Privacy Policy applies to our processing of personal data on the website www.dandybusinesspark.dk, when you contact us, sign up for a newsletter, register for an event, visit our locations or social media profiles, or when you collaborate with us. The Privacy Policy sets out guidelines for how we process your personal data and provides you with the information you are entitled to receive under applicable data protection laws.
This Privacy Policy applies to the processing carried out by the following data controller:
DANDY Business Park ApS
Address: Tabletvej 1, 7100 Vejle
CVR No.: 3619 9512
Email: kontakt@dandybusinesspark.dk
(“DANDY Business Park”)
1. Cookies
This section applies to our processing of personal data via cookies on the website www.dandybusinesspark.dk.
Collection of personal data
DANDY Business Park uses cookies on its websites and processes your personal data in connection with this. We may collect the following personal data about you when you visit our website:
- IP address
- Browsing history
- Information about your use of our website, including your clicking behavior
Purposes of data processing
Your personal data may be processed for the following purposes:
- We use statistical cookies for statistics and analysis
- We use marketing cookies to promote our business
- We use functional cookies to ensure that the website works properly
Legal Basis for Processing
We process your personal data on the following legal basis:
- Legitimate interests: We may process your personal data based on our legitimate interests in making our website’s features available to you ( Article 6(1)(f) of the General Data Protection Regulation).
- Consent: We may process your personal data for the purpose of marketing our services to you and analyzing your use of our website if you have consented to the use of marketing cookies and/or statistical cookies (Article 6(1)(a) of the General Data Protection Regulation).
When you visit our website, we ask for your informed consent to place cookies that are not functional cookies, in accordance with cookie regulations. You have the right to withdraw your consent at any time. You can always change your cookie settings by clicking the icon at the bottom left of our website.
You can read more about the use of cookies in our cookie policy, which you can find by clicking the icon at the bottom left of our website.
Retention Period
Personal data collected via cookies is deleted in accordance with the deletion deadlines specified in the cookie policy. However, the data may be retained for a longer period in anonymized form.
Recipients of Your Personal Data
In connection with our use of cookies on the website, we may share your personal data with the following categories of recipients:
- Data processors who provide our cookie consent solution;
- Data processors that provide cookies for statistical and marketing purposes;
- Third parties that place cookies if you have accepted marketing cookies. You can see which third parties are listed in our cookie banner, which you can access via the small cookie icon in the lower-left corner of the page.
You can read more about the sharing of your personal data in Section 8 below.
2. When you contact us
When you contact us through the channels listed on our website, DANDY Business Park collects and processes your personal data.
Collection of personal data
In this context, DANDY Business Park may collect, process, and store the following types of personal data about you:
- Name, email address, phone number
- Organizational information, such as your title and place of work
- Subject of your inquiry
- Date of your inquiry
- Other information you provide in connection with your inquiry
Purposes of data processing
Your personal data will be processed for the following purposes:
- Processing Your Inquiry
- General communication
Legal Basis for Processing
We process your personal data on the following legal basis:
- Legitimate interests: We may process your personal data based on our legitimate interests in handling your inquiry and communicating with you (Article 6(1)(f) of the General Data Protection Regulation).
Retention Period
Your personal data will be deleted no later than one year after collection. However, if you are a business partner, please refer to the section below. If you are a tenant or partner, please refer to our privacy policy for tenants in our buildings. However, the information may be retained for a longer period in anonymized form.
Recipients of your personal data
In connection with handling your inquiry, we may share your personal data with data processors who provide communication services to us and who process your personal data based on our instructions.
You can read more about the sharing of your personal data in Section 8 below.
3. If you are a business partner or supplier
This section sets out DANDY Business Park’s policy regarding the processing of personal data concerning sole proprietors or contact persons at companies that collaborate with or supply goods and services to us.
Collection of personal data
DANDY Business Park may collect, process, and store your personal data in the following cases:
- When your company or the company you work for enters into an agreement with one of the venues
- Once you’ve expressed interest in one of the homes, for example by giving us your business card
- When you work with us and communicate with us
Types of Personal Data
DANDY Business Park may collect, process, and store the following types of personal data about you:
- Name, email address, phone number, and other contact information
- Organizational information, such as the company’s name and address, job title, area of responsibility, and primary work location
- Contractual information, such as orders, invoices, contracts, and other agreements between your company (or your employer) and the firm, which may include, for example, your contact information
- Financial information, such as payment terms and bank details (if the business is a sole proprietorship)
We may receive such information directly from you (primarily through emails and other correspondence with you) or from a third party, such as your employer.
Purposes of data processing
Your personal data may be processed for the following purposes:
- General planning, implementation, and management of partnerships, including contracts
- Administrative tasks such as processing payments, bookkeeping, and auditing
- Marketing communications
- General communication
- Statistics and Analysis
- Conflict Resolution
Legal Basis for Processing
DANDY Business Park processes your personal data on the following legal basis:
- Contractual obligations: In certain cases, the processing of your personal data is necessary to fulfill a contract (Article 6(1)(b) of the General Data Protection Regulation).
- Legitimate interests: We may process your personal data based on our legitimate interests, such as managing day-to-day operations—including planning, executing, and administering our collaboration—or our legitimate interest in conducting statistics, analyses, and marketing activities (where consent is not required), as well as our legitimate interest in communicating with you. The processing may also be necessary for our legitimate interest in preventing fraud or establishing, exercising, or defending legal claims (Article 6(1)(f) of the General Data Protection Regulation).
- Legal obligation: In some cases, the processing of your personal data will be necessary to comply with legal obligations, such as our obligations under the Accounting Act (Article 6(1)(c) of the General Data Protection Regulation).
Retention Period
Your personal data will be retained for 2 years following the termination of our collaboration. However, information included in accounting records is routinely deleted 5 years after the end of the fiscal year. The information may, however, be retained for a longer period in anonymized form.
Recipients of your personal data
In connection with the management of our collaboration, we may share your personal data with data processors who provide communication services and administrative tools, including accounting software and CRM systems, to us, and who process your personal data in accordance with our instructions.
You can read more about the sharing of your personal data in Section 8 below.
4. If you sign up for one of our events
This section outlines DANDY Business Park’s policy regarding the processing of personal data about participants in our events.
Types of personal data
DANDY Business Park may collect, process, and store the following types of personal data about you when you register for an event:
- Name, email address, phone number, and other contact information
- Organizational information, such as the company’s name and address, job title, area of responsibility, and primary work location
- Contractual information, such as invoices, which may contain your contact information
- Financial information, such as payment details
- Photos from the event (we always let you know if photos are being taken at an event)
Purposes of data processing
Your personal data may be processed for the following purposes:
- Event administration, including participant registration and payment processing, bookkeeping, and auditing
- General communication regarding the event
- Statistics and Analysis
Legal Basis for Processing
DANDY Business Park primarily processes your personal data on one or more of the following legal bases:
- Contractual obligations: In certain cases, the processing of your personal data is necessary to fulfill a contract regarding your purchase of a ticket for the event (Article 6(1)(b) of the General Data Protection Regulation).
- Legitimate interests: We may process your personal data based on our legitimate interests, such as administering the event and marketing ourselves through the use of images, as well as documenting our history; or our legitimate interest in, for example, conducting statistics and analyses; and our legitimate interest in communicating with you regarding the event (Article 6(1)(f) of the General Data Protection Regulation).
- Legal obligation: In some cases, the processing of your personal data will be necessary to comply with legal obligations, such as our obligations under the Accounting Act (Article 6(1)(c) of the General Data Protection Regulation).
Retention Period
Your personal data will be retained for 6 months following the event. However, information included in accounting records is routinely deleted 5 years after the end of the fiscal year. Photos are generally deleted after 5 years, but may be retained longer depending on the circumstances if, based on a specific assessment, they are deemed important for documenting the history of Bagger-Sørensen. However, the information may be retained longer in anonymized form.
Recipients of your personal data
In connection with the management of our collaboration, we may share your personal data with data processors who provide communication services and administrative tools, including accounting software and CRM systems, to us, and who process your personal data based on our instructions.
You can read more about the sharing of your personal data in Section 8 below.
5. If you sign up for newsletters
This section outlines DANDY Business Park’s policy regarding the processing of personal data when you subscribe to newsletters from the buildings.
Types of personal data
DANDY Business Park collects, processes, and stores your personal data for marketing purposes when you subscribe to newsletters. DANDY Business Park may collect, process, and store the following types of personal data about you:
- Name and email address
- Your consent
- Your interests
Purposes of data processing
Your personal data may be processed for the following purposes:
- Marketing
- Analysis and Statistics
Legal Basis for Processing
DANDY Business Park processes your personal data on the following legal basis:
Consent: DANDY Business Park will only use your personal data for direct marketing, including sending newsletters, if you have given your prior and explicit consent to this (Article 6(1)(a) of the General Data Protection Regulation).
Legitimate Interests: We base the processing of your personal data in connection with the storage of your consent on our legitimate interests in being able to document our compliance with marketing legislation (Article 6(1)(f) of the General Data Protection Regulation).
Retention period
Your personal data will be retained for as long as your consent to receive newsletters remains active.
You can always withdraw your consent by clicking the unsubscribe link at the bottom of each email or by contacting us as described below. However, withdrawing your consent does not affect the lawfulness of the processing that took place prior to the withdrawal.
We retain documentation of your consent for marketing purposes for two years from the date you withdrew your consent to receive direct marketing materials. The retention period is determined based on our legitimate interest in being able to document that direct marketing has been conducted in accordance with applicable law (Article 6(1)(f) of the General Data Protection Regulation).
The information may also be retained for a longer period in anonymized form.
Recipients of your personal data
In connection with your subscription to our newsletters, we may share your personal data with data processors who provide platforms for sending newsletters and managing marketing consents on our behalf, and who process your personal data based on our instructions.
You can read more about the sharing of your personal data in Section 8 below.
6. If you visit our physical locations
This section outlines DANDY Business Park’s policy regarding the processing of personal data when you visit one of our buildings in DANDY Business Park.
DANDY Business Park is a joint data controller with Bagger-Sørensen Real Estate A/S for the CCTV surveillance in and around the buildings. The parties have entered into a joint data controller agreement, under which it has been agreed that DANDY Business Park is responsible for informing you about the processing of your personal data, while Bagger-Sørensen Real Estate is responsible for establishing an adequate level of security, deleting personal data, ensuring ongoing operations, ensuring that personal data is only disclosed when legally permitted, and ensuring that the cameras only film the necessary and permitted areas. In addition, both parties are responsible for data protection obligations, including those related to the handling of your rights, which are described in more detail in Section 9 below.
Types of Personal Data
When you visit our office facilities and other buildings, DANDY Business Park processes your personal data via CCTV surveillance. DANDY Business Park may collect, process, and store the following types of personal data about you:
- Photo and video material
Purposes of data processing
Your personal data will be processed for the following purposes:
- To ensure safety at our facilities
- To prevent and investigate crime at our facilities
Legal Basis for Processing
DANDY Business Park processes your personal data on the following legal basis:
- Legitimate interests: We process your personal data based on our legitimate interests in protecting our physical locations and being able to address any legal claims (Article 6(1)(f) of the General Data Protection Regulation). Information regarding criminal offenses collected via CCTV surveillance is also processed based on DANDY Business Park’s legitimate interests in investigating criminal offenses (Section 8(3) of the Data Protection Act).
Retention period
CCTV footage recorded for crime prevention purposes is retained for a maximum of 30 days.
Recipients of your personal data
In connection with your visit to our physical locations, we may share your personal data with data processors who provide CCTV services to us and who process your personal data based on our instructions.
You can read more about the sharing of your personal data in Section 8 below.
7. If you visit our social media profiles
This section outlines DANDY Business Park’s policy regarding the processing of personal data collected through DANDY Business Park’s social media profiles or pages.
DANDY Business Park has profiles on the following social media platforms:
- TikTok (TikTok Technology Limited and TikTok Information Technologies UK Limited) – TikTok’s privacy policy is available here
- LinkedIn (LinkedIn Ireland Unlimited Company) – LinkedIn’s privacy policy is available here
- Facebook (Meta Platforms Ireland Ltd.) – Facebook’s Privacy Policy is available here
- YouTube (Google Ireland Ltd.) – Google’s privacy policy is available here
For LinkedIn, Facebook, TikTok, and Instagram, DANDY Business Park and each of the social media providers are joint data controllers for the processing of personal data collected in connection with your interactions with the profiles, including posts on those profiles.
DANDY Business Park and the providers of LinkedIn, TikTok, Instagram, and Facebook have entered into an agreement regarding the allocation of data protection responsibilities. Under these agreements, DANDY Business Park and the social media providers are each responsible for the tasks associated with the processing activities they respectively carry out. However, it has been agreed between DANDY Business Park and the provider of Facebook and Instagram that the provider is responsible for enabling you to exercise your rights as described in the section “Your Rights”below, in connection with the use of Facebook and Instagram, and that DANDY Business Park is responsible for providing you with the information described below. It has also been agreed between the entities and LinkedIn that LinkedIn is responsible for responding to requests from you regarding the rights described in the section “Your Rights” below.
DANDY Business Park also uses YouTube as a data processor in connection with the use of YouTube and, in this context, shares certain information about your interactions, interests, etc., with YouTube. This sharing is based on our and Google’s legitimate interest in optimizing marketing and the service, including our videos, on YouTube (Article 6(1)(f) of the General Data Protection Regulation).
Collection of Personal Data
When you visit or interact with our social media profiles, DANDY Business Park and the provider of the relevant social media platform may collect, process, and store the following types of personal data about you:
- Information available on your profile, including your name, gender, marital status, workplace, interests, photo, and city
- Whether you've "liked" our profile or used other reactions
- Comments you leave on our posts
- That you've visited our profile
- IP address
Purposes of Data Processing
DANDY Business Park processes your personal data for the following purposes:
- Improving our social media profiles and pages
- Statistics and Analysis
- So we can communicate with you if you comment on a post, leave a review, or send us a message
- Marketing in general
- You can read about the purposes for which social media providers process your personal data in their respective privacy policies.
Legal Basis for Processing
The processing of your personal data is based on the following legal basis:
- Legitimate interests: DANDY Business Park bases the processing of your personal data on our legitimate interest in communicating with you and marketing to you via our social media profiles, as well as our legitimate interest in improving our products and services (Article 6(1)(f) of the General Data Protection Regulation). You can read about the legal bases on which social media providers process your personal data in their respective privacy policies.
Retention period
We encourage you to delete your posts, comments, and other interactions on our profiles if you do not want them to remain visible on our social media channels. Your private messages to us will be retained for up to 1 year. However, the information may be retained for longer in anonymized form.
Please refer to the privacy policy of the respective social media provider for information on how long they retain your personal data.
Recipients of your personal data
In connection with the use of social media, we may share your personal data with the provider of the social media platform on which you interact with us.
You can find information about who the social media providers share your personal data with in each provider’s privacy policy.
Social media providers may transfer your personal data to recipients outside the EU/EEA in accordance with applicable data protection laws. You can read more in each provider’s privacy policies.
You can read more about who Bagger-Sørensen shares your personal data with in the section “Disclosure to other data controllers and transfer to data processors” below .
8. Disclosure to Other Data Controllers and Transfer to Data Processors
To fulfill the above purposes, we may grant third parties access to your personal data if they provide relevant services based on a contractual relationship with DANDY Business Park. These may include, for example, IT providers, email service providers, and marketing service providers. Such service providers will only process personal data in accordance with our instructions pursuant to data processing agreements entered into.
In connection with the development of the Bagger-Sørensen Group, the corporate structure may change, for example, through the full or partial sale of group companies. In the event of a partial transfer of assets containing personal data, the legal basis for the associated disclosure of personal data is, as a general rule, Article 6(1)(f) of the General Data Protection Regulation, as Bagger-Sørensen and DANDY Business Park have a legitimate interest in transferring parts of their assets and making commercial changes.
Your personal data will, apart from what is described above, generally not be disclosed to a third party without your consent. However, under certain circumstances and in accordance with the law, it may be necessary to disclose your personal data to:
- The Police
- Lawyers
- Auditors
- Courts
- Government agencies
- Potential buyers
- Affiliated companies
Your personal data may be transferred to data processors or data controllers established in countries outside the EU/EEA that do not provide an adequate level of protection. Such transfers are based on the EU-U.S. Data Privacy Framework or the European Commission’s standard contractual clauses, which you can access by contacting us as indicated above.
9. Your rights
- You have the right to access the personal data we process about you
- You have the right to object to our collection and further processing of your personal data
- You have the right to have your personal data corrected and deleted, subject to certain legal exceptions
- You have the right to ask us to restrict the processing of your personal data
- Under certain circumstances, you may also request a copy of your personal data and request that the personal data you have provided to us be transferred to another data controller (data portability)
- You may withdraw any consent you have provided at any time. We will then delete your personal data, unless we can continue processing it on another legal basis
- 10. Questions and Complaints
- If you have any questions about this privacy policy or if you wish to file a complaint regarding the way we process your personal data, please feel free to contact us using the contact information provided at the top of this privacy policy.
You also have the option to file a complaint with the Danish Data Protection Agency:
Danish Data Protection Agency
Carl Jacobsens Vej 35
2500 Valby
Phone: 33 19 32 00
Email: dt@datatilsynet.dk - 11. Changes to the Privacy Policy
- We reserve the right to make changes to this Privacy Policy from time to time. In the event of changes, the date at the bottom of the Privacy Policy will be updated. The current version of the Privacy Policy will be available at www.dandybusinesspark.dk.
***
March 2026
