GDPR Compliance and Policy Acceptance

Copenhagen Memories ApS

Last updated: 3 March 2026

At Copenhagen Memories ApS, we are committed to protecting your personal data and respecting your privacy in compliance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Danish data protection rules. This policy explains how we collect, use, and safeguard your personal information when you use our website or book our tours.

1. Data Controller

For the purposes of GDPR, Copenhagen Memories ApS is the “data controller” responsible for your personal data. If you have any questions about this policy or how we handle your data, you can contact us at:

Email: copenhagenmemories@gmail.com

Phone: +45 6677 2790

Website: https://www.copenhagenmemories.com/

2. Personal Data We Collect

We may collect, use, store, and transfer the following types of personal data:

• Identity Data: Name, username, or similar identifier.

• Contact Data: Email address, phone number, and other contact details you provide.

• Booking Data: Tour date/time, number of participants, meeting point, special requests, and other booking-related information.

• Financial/Transaction Data: Payment status and transaction reference/receipt (processed securely by third-party payment processors; we do not store full card details).

• Technical Data: IP address, browser type, time zone setting, device information.

• Usage Data: Information about how you use our website and services.

• Marketing and Communications Data: Your preferences for receiving marketing and your communication preferences.

3. Legal Basis for Processing

Under GDPR, we will only process your personal data when we have a lawful basis to do so. This includes:

• Contract: Processing is necessary to handle your booking and deliver the tour.

• Legal Obligation: Processing is necessary to comply with Danish/EU legal requirements (e.g., accounting documentation).

• Legitimate Interests: Processing is necessary for our legitimate interests (e.g., customer support, improving services, security and fraud prevention), provided your rights do not override those interests.

• Consent: We use consent only where required—typically for marketing communications and non-necessary cookies/trackers. Consent can be withdrawn at any time.

4. Consent (When it Applies)

We do not rely on consent to process personal data that is necessary to provide your booking and our services. We only ask for your consent when required, for example:

• Marketing emails/messages (opt-in, with an easy opt-out).

• Non-necessary cookies (e.g., analytics/marketing cookies).

You may withdraw your consent at any time. Withdrawal does not affect processing that already took place before you withdrew consent.

5. How We Use Your Personal Data

We use personal data to:

• Manage bookings and deliver tours.

• Communicate with you about your booking (confirmation, practical information, changes, essential messages).

• Provide customer service and handle complaints.

• Improve our website and services (where applicable and with proper cookie consent if required).

• Administer security and prevent fraud.

• Comply with legal obligations (e.g., accounting requirements).

6. Data Retention

We retain personal data only as long as necessary for the purposes described above and to meet legal requirements. When data is no longer needed, we delete or anonymize it.

7. Your GDPR Rights

Under GDPR, you have the right to:

• Access your personal data.

• Rectify inaccurate or incomplete data.

• Erase your data (where applicable).

• Restrict processing (where applicable).

• Data portability (where applicable).

• Object to processing based on legitimate interests and to direct marketing.

• Withdraw consent at any time (when consent is the legal basis).

To exercise any of these rights, please contact us at copenhagenmemories@gmail.com. We will respond to legitimate requests within one month.

8. Data Security

We have implemented appropriate technical and organizational security measures to protect personal data from loss, misuse, and unauthorized access. Access is limited to those with a business need to know.

9. International Transfers

If personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are used (such as EU Standard Contractual Clauses) where required.

10. Third-Party Links

Our website may include links to third-party websites, plug-ins, and applications. We do not control third-party websites and are not responsible for their privacy policies.

11. Cookies and Tracking Technologies

We use cookies and similar technologies. We obtain consent before placing non-necessary cookies. Necessary cookies may be used without consent to make the website function. You can manage cookie preferences through our cookie banner/settings.

12. Complaints

If you believe we have not handled your personal data correctly, you can contact us first. You also have the right to lodge a complaint with the Danish supervisory authority: Datatilsynet.

13. Changes to This GDPR Policy

We may update this policy from time to time. Any changes will be posted on this page with an updated revision date.

14. Acceptance of GDPR Terms

By booking a tour, contacting us, or using our services, you acknowledge that you have read and understood this GDPR policy. Where we rely on consent (e.g., marketing or non-necessary cookies), you will be asked to provide an active opt-in, and you may withdraw your consent at any time.