Privacy policy

Falsled Kro’s privacy policy

 
 

Privacy Policy

At Falsled Kro A/S ("Falsled Kro", "we", "us", or "our"), confidentiality and data security are highly prioritized.

In this privacy policy, you can read more about our processing of personal data and about the rights you, as a registered individual, are entitled to under data protection legislation.

We ask you to read the privacy policy before submitting your personal data to Falsled Kro.

1. Data controller and contact information

The data controller for the processing of your personal data is:

Falsled Kro A/S
Address: Assensvej 513, Falsled, 5642 Millinge
CVR-no.: 37153672
E-mail: info@falsledkro.dk
Phone number: +45 62 68 11 11

2. If you visit our websites

When you visit our websites, we will process personal data about you in a number of situations. The following section describes Falsled Kro's processing of personal data about visitors to the websites.

2.1 Cookies

We use cookies on our websites to ensure that the website functions work and to prevent abuse and downtime. In this connection, we process your personal data. Falsled Kro may collect the following personal data about you when you visit our websites:

  • IP address

  • MAC address

  • Browser history

  • Information about your use of our websites, including click behavior

We use cookies to collect the aforementioned personal data.

Purposes of Processing

Your personal data may be processed for the following purposes:

  • Delivery of website functionalities

  • General marketing

  • Product and service development

  • Statistics and analysis

Basis for Processing

Falsled Kro processes your personal data on the following basis:

Legitimate interests: We base the processing of your personal data on our legitimate interests to ensure that our websites and the functions on the website operate properly, as well as our legitimate interest in conducting statistics, analyses, providing support, and improving and developing our products and services (General Data Protection Regulation, Article 6(1)(f)).

When you visit our websites, we ask for your informed consent to place cookies that are not strictly necessary, in accordance with cookie rules. You have the right to withdraw your consent at any time. You can read more about how to change your cookie settings in our cookie banners on our websites.

Storage Period

Cookies are deleted in accordance with our cookie policy, which is available via our cookie banners on the websites.

However, the information may be stored longer in an anonymized form.

Disclosure

We may disclose information about your use of our website to our partners in social media, advertising, and analytics. We and our partners may combine the above personal data with other information about you or similar users. This could be information you have provided yourself, or information that our partners have collected from your or others' use of their services. The purpose of the disclosure is to target and personalize marketing to you via our or third parties' websites. We disclose your personal data based on our legitimate interest in showing you targeted, personalized marketing (General Data Protection Regulation, Article 6(1)(f)). The prerequisite for being able to offer you this service is your prior cookie consent to marketing as described above.

Some of our partners collect and process your personal data for their own purposes, and we therefore encourage you to read our partners' privacy policies, which you can find links to via our cookie banner.

Right to Object

For the sake of good order, we note that you always have the right to object to our processing of your personal data for direct marketing purposes. If you object to direct marketing, you will only receive general marketing that is not tailored to you. You can revisit your cookie settings via our website and decide which cookies you want to accept.

2.2 If you use our contact forms or otherwise communicate with us

Types of Personal Data

When you use our contact forms or otherwise communicate with Falsled Kro, Falsled Kro collects, processes, and stores the following types of personal data about you:

  • Name, email address, telephone number

  • What your inquiry is about

  • Date of your inquiry

  • Other information you provide in connection with your inquiry. We encourage you not to provide sensitive personal data to us unless they are strictly necessary for the processing of your inquiry. In this case, the information should only be sent in strongly encrypted form if you submit the information via email.

Purposes of Processing

Your personal data will be processed for the following purposes:

  • Handling your inquiry

  • General communication

  • Statistics and analysis

Basis for Processing

Falsled Kro processes your personal data on the following basis. The basis depends on the nature of your inquiry.

Legitimate interests: We may process your personal data based on our legitimate interests in handling your inquiry, communicating with you, and developing our products and services (General Data Protection Regulation, Article 6(1)(f)).

Contractual obligations: If your inquiry relates to a (potential) contractual agreement, we process your information to carry out measures prior to entering into the agreement (General Data Protection Regulation, Article 6(1)(b)).

Disclosure

We may disclose your personal data to external suppliers who, by agreement with us, provide the service you request. The disclosure is based on our legitimate interest in being able to deliver the service you request (General Data Protection Regulation, Article 6(1)(f)).

Storage Period

Your personal data will be stored for 1 year from the last contact. However, the information may be stored longer in an anonymized form.

If you are a customer or are employed by one of our customers, suppliers, or other partners, please refer to the section below.

2.3 If you purchase a gift card, book a stay, or use our webshop

Types of Personal Data

When you purchase a gift card, book a stay on our website, or use our webshop, Falsled Kro processes your personal data. Falsled Kro may collect, process, and store the following types of personal data about you:

  • Your name

  • Your email address

  • Your phone number

  • Your address

  • Company (optional)

  • Your payment information

  • Information about your order/purchase history

  • Digital footprint (e.g., information about how you use Falsled Kro's webshop)

If you choose to have the gift card sent directly to the recipient, we also ask you to enter the gift card recipient's name and email address.

Purposes of Processing

Your personal data will be processed for the following purposes:

  • Execution of orders on Falsled Kro's websites

  • Administration of shipments, complaints, and returns

  • Sending marketing without consent based on previous purchases with us in the cases where we choose to use this option in the marketing law

  • Statistics and analysis

Basis for Processing

Falsled Kro processes your personal data on the following basis:

Legitimate interests: We process your personal data based on our legitimate interest in marketing ourselves to you in cases where consent is not required, as well as our legitimate interest in conducting statistics and analysis with the aim of developing and improving our services. We process the gift card recipient's contact details (if this delivery method is chosen) since the contact details are a prerequisite for being able to deliver the gift card to the right recipient (General Data Protection Regulation, Article 6(1)(f)).

Contractual obligations: We process your personal data to fulfill the purchase agreement entered with you, including being able to deliver the ordered goods, gift cards, etc., and to handle complaints, returns, etc. (General Data Protection Regulation, Article 6(1)(b)).

Disclosure

We may disclose your personal data to external partners. We disclose your payment information encrypted to our collaborating payment providers for verification. The disclosure is based on our legitimate interest in being able to deliver the service you request (General Data Protection Regulation, Article 6(1)(f)). Falsled Kro does not store your payment information.

Storage Period

As a main rule, we will store your personal data for 3 years after your last purchase.

Information related to accounting material is stored for 5 years from the end of the fiscal year the information relates to.

We may, however, process your personal data for a longer period in anonymized form.

3. If you subscribe to our newsletter(s)

Types of Personal Data

Falsled Kro collects, processes, and stores your personal data for marketing purposes when you subscribe to newsletter(s). Falsled Kro may collect, process, and store the following types of personal data about you:

  • Name and email address

  • Your consent

  • Your interests

  • Your click behavior in relation to sent material

Purposes of Processing

Your personal data may be processed for the following purposes:

  • Marketing

  • Analysis and statistics

  • Documentation that direct marketing has occurred in accordance with applicable legislation

Basis for Processing

Falsled Kro processes your personal data on one or more of the following bases:

Consent: Falsled Kro will only use your personal data for direct marketing, including sending newsletters, if you have given your prior and explicit consent to this (Marketing Act § 10(1), and General Data Protection Regulation, Article 6(1)(a)).

Legitimate interests: The processing of your personal data in connection with analysis and statistics is based on our legitimate interests in being able to improve and develop our services. The processing of your consent for documentation purposes is based on our legitimate interest in being able to document that we have sent direct marketing in accordance with applicable law (General Data Protection Regulation, Article 6(1)(f)).

Retention Period

Your personal data will be stored as long as your consent to receive newsletters is active.

If you no longer wish to receive our newsletters, you can unsubscribe via the link at the bottom of each email or by contacting us as described below. However, revocation of your consent does not affect the legality of the processing that has taken place prior to the revocation.

Documentation of your marketing consent will be kept for 2 years from the time you have withdrawn your consent to receive direct marketing material. The retention period is based on Falsled Kro's legitimate interest in being able to document that direct marketing has been carried out in accordance with applicable legislation (Article 6(1)(f) of the General Data Protection Regulation).

4. If you apply for a job at Falsled Kro

When you apply for a job at Falsled Kro, we process your personal data in connection with the recruitment process.

We recommend that your application does not contain a social security number or sensitive personal data, such as personal data revealing racial or ethnic origin, religion, union membership, sexuality, or health information.

Types of Personal Data

Falsled Kro may collect, process, and store the following types of personal data about you:

  • Contact details such as name, email address, and phone number

  • Information contained in the application, CV, and any attachments

  • Relevant information that is publicly available on the internet and social media, including particularly information about previous employment, activities, competencies, performance, and general appearance

  • Results of personality tests, if you complete such

  • Criminal record, if necessary for the position you have applied for

  • References from previous and/or current employers that you have indicated in your application

  • Health information, if the position you have applied for has special health requirements

  • Other information you provide us in connection with the recruitment process

Purpose of Processing

Your personal data will be used to assess whether we wish to offer you a position at Falsled Kro.

Basis for Processing

Falsled Kro processes your personal data on one or more of the following grounds:

  • Legitimate interests: We may process your personal data based on our legitimate interest in assessing whether we wish to offer you employment, including based on the information you provide in your CV, application, and any attachments, based on relevant information that is publicly available on the internet and social media, results of personality tests, references from referees you have indicated in your application, and other information you provide us in connection with the recruitment process. The processing may also be necessary for our legitimate interest in defending or asserting legal claims (Article 6(1)(f) of the General Data Protection Regulation). If the position requires it, we may later in the recruitment process ask to see your criminal record based on our legitimate interest therein (Section 8(3) of the Data Protection Act).

  • Consent: If the position you have applied for exceptionally requires special health conditions, we will – after a specific assessment – ask for your explicit consent prior to the processing of such personal data (Article 9(2)(a) and Article 6(1)(a) of the General Data Protection Regulation).

Retention Period

If you are offered a position at Falsled Kro, your application and additional relevant personal data collected during the employment procedure will be stored in your personnel file with us.

If you are not offered a position, we will store your application and any additional personal data collected during the employment procedure for a period of 6 months after our rejection, unless you have given your consent to a longer storage of such personal data.

You may at any time withdraw any consents that you may have given as part of our employment procedure. Withdrawal of your consent will affect the future processing of your personal data but does not affect the legality of the processing based on the consent before the withdrawal. If you wish to withdraw your consent, you can contact us as indicated below.

Criminal records are deleted immediately after we have reviewed them.

5. If you are a supplier, partner, etc.

This section contains the policy for Falsled Kro's processing of personal data about owners of sole proprietorships or contact persons at suppliers and other partners cooperating with Falsled Kro.

Collection of Personal Data

Falsled Kro may collect, process, and store your personal data in the following cases:

  • When your company or the company you work for enters into an agreement with Falsled Kro

  • When you have shown interest in Falsled Kro's products and services, e.g., by giving Falsled Kro your business card

  • When you cooperate and communicate with Falsled Kro

Types of Personal Data

Falsled Kro may collect, process, and store the following types of personal data about you:

  • Name, email address, phone number, and similar contact details

  • Organizational information such as the company's name and address, job title, area of employment, primary workplace and country

  • Contractual information such as orders, invoices, contracts, and other agreements between your company (or your employer) and Falsled Kro, which may include your contact details

  • Financial information, such as payment terms, bank details, and credit assessments (if it is a sole proprietorship)

Such information can be received directly from you (primarily through emails and other correspondence with you) or from a third party such as your employer.

Purposes of Processing

Your personal data may be processed for the following purposes:

  • General planning, fulfillment, and administration of collaborations, including contracts

  • Administration such as processing of payments, evaluation of credit assessments, accounting, auditing, as well as providing support

  • Coordination and management of tasks

  • Newsletters and other marketing communication

  • Implementation of inquiries from you

  • General communication

  • Compliance with applicable legislation and regulations, such as fulfilling our obligations to prevent illegal activities

  • Handling of potential conflicts

Basis for Processing

Falsled Kro processes your personal data on one or more of the following grounds:

  • Contractual obligations: In some cases, the processing of your personal data is necessary to fulfill a contract (Article 6(1)(b) of the General Data Protection Regulation).

  • Legitimate interests: We may process your personal data based on our legitimate interests in, for example, managing daily operations in accordance with legal and fair business practices, including planning, execution, and administration of the collaboration or our legitimate interest in improving and developing our products and services. The processing may also be necessary for our legitimate interest in preventing fraud or establishing, defending, or asserting legal claims (Article 6(1)(f) of the General Data Protection Regulation).

  • Legal obligation: The processing of your personal data will in some cases be necessary for compliance with legal obligations, such as our obligation to prevent illegal activities (Article 6(1)(c) of the General Data Protection Regulation).

Retention Period

Your personal data will be stored for 3 years from the termination of the collaboration. However, the information may be stored for a longer period in anonymized form.

6. If you visit our inn

This section contains the policy for Falsled Kro's processing of personal data about guests and other visitors to Falsled Kro.

Types of Personal Data

When you visit Falsled Kro, we may collect, process, and store the following types of personal data about you:

  • Name, email address, phone number, and similar contact details

  • Birth date, nationality, permanent residence address, passport or other travel identification where required by applicable law

  • Your purchases

  • Payment information

  • Food preferences (e.g., during visits to our restaurants)

  • Photo and video material in connection with surveillance of our premises

Purposes of Processing

Your personal data may be processed for the following purposes:

  • Implementation of your reservations, including the administration of your stay with us

  • Sending of notifications to visitors

  • Fulfillment of applicable legislation

  • To establish, assert, or defend legal claims

  • Video surveillance – See more below

Basis for Processing

Falsled Kro processes your personal data on one or more of the following grounds:

  • Contractual obligations: In some cases, the processing of your personal data is necessary to fulfill a contract (Article 6(1)(b) of the General Data Protection Regulation).

  • Legitimate interests: In most cases, we base the processing of your personal data on our legitimate interests in being able to establish, defend, or assert legal claims as well as in protecting our physical premises. Furthermore, we base the processing of your personal data on our legitimate interest in planning and evaluating a visit (Article 6(1)(f) of the General Data Protection Regulation).

  • Legal obligation: The processing of information about your payment information and your purchases is necessary for compliance with applicable accounting legislation, VAT legislation, and marketing legislation (Section 6(1)(c) of the Data Protection Act). Certain identification information is necessary for compliance with the passport regulation and the regulation on foreigners' access to this country (Section 6(1)(c) of the Data Protection Act).

Special Note on Video Surveillance

We have installed video surveillance for crime prevention and safety reasons, according to the General Data Protection Regulation Article 6, Paragraph 1, Letter f, as well as the Danish Data Protection Act § 8, Paragraph 3. Signage is posted in the areas under surveillance.

Recordings can be reviewed in cases of specific suspicion of criminal acts by visitors or others, violation of Falsled Kro's policies and guidelines, internal/external audits, or for resolving disputes.

We may disclose recordings to the police for crime-solving purposes, including if disclosure is required by law, according to the Danish Data Protection Act § 8, Paragraph 4. If necessary to present the recordings for purposes other than the aforementioned, we will request your consent for such disclosure if you are included in the recordings.

Storage Period

Information related to accounting material is stored for 5 years from the end of the fiscal year to which the information relates.

Recordings from video surveillance conducted for crime prevention purposes are deleted or anonymized no later than 30 days after recording, unless it is necessary for Falsled Kro to retain the recordings to handle a specific dispute, e.g., in connection with solving a crime.

We delete information about your birth date, nationality, permanent residential address, and passport or other travel identification no later than 2 years after the end of your stay.

Other personal information is deleted 3 years after the end of your stay. However, we may process your personal data in an anonymized form for a longer period.

7. If you visit Oour profiles on social media

This section contains the policy for Falsled Kro's processing of personal data collected via Falsled Kro's profiles or pages on social media.

Falsled Kro has profiles or pages on the following social media:

  • Facebook (Meta Platforms Ireland Ltd.)

    • Facebook's privacy policy is available here

    • You can adjust your privacy settings on Facebook here

  • LinkedIn (LinkedIn Ireland Unlimited Company)

    • LinkedIn's privacy policy is available here

    • You can adjust your privacy settings on LinkedIn here

  • Instagram (Meta Platforms Ireland Ltd.)

    • Instagram's privacy policy is available here

    • You can adjust your privacy settings on Instagram here

For both LinkedIn, Facebook, and Instagram, Falsled Kro and the providers of social media are joint data controllers for processing personal data collected in connection with your interactions with the profiles, including the profile posts.

Falsled Kro and the providers of LinkedIn, Facebook, and Instagram have entered into an agreement on the allocation of data protection responsibilities. According to these agreements, Falsled Kro and the social media providers are each responsible for the tasks associated with the processing we each perform. However, it is agreed between Falsled Kro and the provider of Facebook and Instagram that the provider is responsible for enabling you to exercise your rights as described in the section 'Your Rights' below, in connection with the use of Facebook and Instagram, and that it is Falsled Kro's responsibility to provide you the information described below. Additionally, it is agreed between Falsled Kro and LinkedIn that the provider of LinkedIn is responsible for responding to requests from you regarding the rights described in the 'Your Rights' section below.

Collection of Personal Information

When you visit or interact with our profiles on social media, Falsled Kro and the provider of the respective social media may collect, process, and store the following types of personal information about you:

  • Information available on your profile, including your name, gender, marital status, workplace, interests, and your city

  • Whether you "like" or have used other reactions on our profile

  • Comments you leave on our posts

  • That you have visited our profile

  • Your IP address

Purposes of Processing

Falsled Kro processes your personal data for the following purposes:

  • Improving our products and services, including our profiles and pages on social media

  • Statistics and analysis

  • To communicate with you if you comment on a post, make a review, or send us a message

  • General marketing

The providers of social media process your personal data for the following purposes, among others:

  • Improvement of their ad system

  • To provide Falsled Kro with statistics, which the social media providers prepare based on your visit to our profiles and pages

  • Advertising and customization of activities on the page

Basis for Processing

The processing of your personal data is based on the following grounds:

Legitimate interests: Falsled Kro bases the processing of your personal data on our legitimate interests in being able to communicate with and market ourselves to you on our social media profiles, as well as our legitimate interest in improving our products and services (General Data Protection Regulation Article 6, Paragraph 1, Letter f).

Who do Social Media Providers Share Your Personal Data With?

Social media providers may share your personal data with the following categories of recipients:

  • Other entities within the group to which the social media provider belongs

  • External partners providing analysis and survey services

  • Advertisers

  • Other individuals who visit our profile or page on social media (to the extent that your information is publicly available)

  • Researchers and other academics

You can find more information about whom the social media providers share your personal data with in the individual provider's privacy policy.

Social media providers may transfer your personal data to recipients outside the EU/EEA in accordance with applicable data protection legislation. You can read more in the individual providers' privacy policies.

You can read more about whom Falsled Kro shares your personal data with in the section 'Disclosure to Other Data Controllers and Transfer to Data Processors' below.

Storage Period

Direct inquiries are stored for 1 year as a starting point, but the storage period depends on the content of the inquiry.

We encourage you to delete comments, likes, and other interactions you have left on our profile if you no longer wish them displayed on our pages. Falsled Kro does not delete such publicly available interactions.

Please see the privacy policy of the individual social media providers for information on how long they store your personal data.

8. Disclosure to other data controllers and transfer to data processors

To fulfill the above purposes, we may give third parties access to your personal data, based on a contractual relationship with Falsled Kro providing relevant services. This may include IT providers, mail providers, and IT solution providers. Such service providers will only process personal data in accordance with our instructions under the concluded data processing agreements.

As part of Falsled Kro's development, the corporate structure may change, e.g., through a complete or partial sale of the business. In the case of partial transfer of assets containing personal data, the basis for the associated disclosure of personal data is primarily the General Data Protection Regulation Article 6, Paragraph 1, Letter f, as Falsled Kro has a legitimate interest in transferring parts of its assets and making commercial changes.

Your personal data is not disclosed to a third party without your permission, except in certain circumstances and in accordance with legislation where it may be necessary to disclose your personal data to: Police, lawyers, auditors, courts, public authorities, potential buyers, and affiliated companies.

If your personal data is transferred to data processors or data controllers established in countries outside the EU/EEA that do not have an adequate level of protection, such transfer will be based on the EU-U.S. Data Privacy Framework or the European Commission's standard contracts. If you have questions or want to know more about specific transfers, including the basis for transfer, you are always welcome to contact us. You also have the right to receive a copy of the transfer basis.

9. Your rights

You have the right to access the personal data we process about you.

You have the right to object to our collection and further processing of your personal data.

You have the right to correction and deletion of your personal data, however, with certain statutory exceptions, including accounting laws.

You have the right to request us to restrict the processing of your personal data.

Under certain circumstances, you can also request to receive a copy of your personal data and about the transmission of the personal data you have provided to us to another data controller (data portability).

You can withdraw any consents you may have given at any time. We will then delete your personal data unless we can continue processing on another basis. Our newsletter can be unsubscribed by clicking the link at the bottom of the newsletter.

10. Links to other websites, etc.

Our website may contain links to other websites or integrated websites. We are not responsible for the content of other companies' websites or their practices in relation to the processing of personal data. When you visit other websites, you are encouraged to read the website's privacy policy.

11. Questions and complaints

If you have questions about this privacy policy or if you wish to complain about the way we process your personal data, you are welcome to contact us:

Falsled Kro A/S
Assensvej 513
Falsled, 5642 Millinge
Denmark
Email: info@falsledkro.dk
Phone: +45 62 68 11 11

If your complaint is not resolved by us, and you want to proceed with the matter, you can complain to the Danish Data Protection Agency:

Danish Data Protection Agency
Carl Jacobsens Vej 35
2500 Valby
Denmark
Phone: +45 33 19 32 00
Email: dt@datatilsynet.dk