Effective from 25 September 2026.
This policy explains how we process personal data when you use best-choice.dk or contact us. We only process the data we need, and we never sell personal data.
1. Data controller
Best Choice
CVR no. 44079844 (Danish company registration number)
Rødovre Parkvej 276, 2610 Rødovre
Email: info@best-choice.dk
If you have questions about how we process your data, or want to exercise your rights, write to info@best-choice.dk.
2. What we process, why, and on what legal basis
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Operating and securing the website (server logs, protection against attacks, spam and abuse) | IP address, browser and device type, pages visited, time, referring page | Legitimate interest, GDPR Art. 6(1)(f), and the duty to secure processing, Art. 32 | Up to 90 days; afterwards only anonymous counts |
| Answering enquiries by form, email or phone | Name, contact details and what you write to us | Art. 6(1)(b) (steps before a contract) and 6(1)(f) (being able to reply) | Up to 12 months after the last contact, unless it leads to a contract |
We do not make decisions about you based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you (Art. 22).
You are not obliged to give us any data. Without contact details we cannot reply to you.
3. Who we share data with
We use suppliers (processors) who may only process the data on our instructions and under a data processing agreement:
- Contabo GmbH — hosting (Germany, EU).
Beyond that we only disclose data where the law requires it (e.g. to public authorities) or where it is necessary to establish, exercise or defend legal claims.
4. Transfers outside the EU/EEA
We do not transfer personal data to countries outside the EU/EEA.
5. Your rights
Under the General Data Protection Regulation you have the right to:
- access the data we process about you (Art. 15);
- have inaccurate data corrected (Art. 16);
- erasure (“the right to be forgotten”) (Art. 17);
- restriction of processing (Art. 18);
- receive your data in a common machine-readable format (data portability, Art. 20);
- object to processing based on our legitimate interest, and always to direct marketing (Art. 21);
- withdraw consent at any time — this does not affect the lawfulness of processing before the withdrawal (Art. 7(3)).
These rights may be subject to conditions or limits; for example we may keep data we are required to keep under bookkeeping law or that is needed to defend legal claims (Art. 17(3)). We reply within one month and may ask you to confirm your identity before disclosing data.
6. Complaints
You can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, dt@datatilsynet.dk, www.datatilsynet.dk, or to the supervisory authority where you live. We would like to hear from you first so we can put it right.
7. Security
We protect data with technical and organisational measures: encrypted connections (HTTPS), access control, security updates, backups and access logging. No method is 100% secure; if a personal data breach occurs we handle it under Art. 33-34.
8. Changes
We may update this policy, e.g. when we start using new tools. The current version and date are always on this page. For material changes we ask for new consent where required.