Pickrosterprismerprts CPH 2026 City Guide
Home Overview Harbor Baths & Docks Parks & Royal Grounds Historic Streets & Nyhavn Open-Air Art & Plazas Cycle Bridges & Routes Contact & Map
Home / Privacy Policy

Privacy Policy & Data Governance

Last revised: January 1, 2026. This Privacy Policy details how Pickrosterprismerprts Media ApS collects, processes, and protects personal data in compliance with the General Data Protection Regulation (GDPR - EU 2016/679) and applicable international privacy frameworks.

1. Data Controller Identification

The data controller responsible for the processing of personal data on pickrosterprismerprts.online is:

Pickrosterprismerprts Media ApS
CVR (Danish Business Registration): DK-39281044
Registered Address: Havnegade 39, 1058 København K, Denmark
Email: [email protected]
Designated Data Protection Officer (DPO): [email protected]

2. Categories of Information Collected

We adhere strictly to the principle of data minimization under Article 5(1)(c) of the GDPR. We only collect information strictly necessary to provide and optimize our editorial guides to Copenhagen public spaces:

  • Technical Telemetry & Access Data: Masked IP address (anonymized at the subnet level prior to storage), browser user-agent string, operating system version, referring URL, timestamp of server request, and pages viewed.
  • Inquiry Form Data: When you voluntarily submit an editorial message via our contact portal, we collect your name, email address, topic selection, and the textual content of your message.
  • Consent Records: Cryptographically generated client timestamps indicating your acceptance or rejection of non-essential cookies.

3. Legal Basis for Processing

Pickrosterprismerprts processes personal data under the following lawful grounds established under GDPR Article 6:

  • Consent (Art. 6(1)(a)): For non-essential analytics tracking or functional cookie storage, obtained through our consent banner.
  • Legitimate Interests (Art. 6(1)(f)): For monitoring server security, mitigating denial-of-service attacks, and troubleshooting technical infrastructure crashes.
  • Performance of a Contractual or Pre-contractual Request (Art. 6(1)(b)): For addressing direct inquiries initiated through our contact form.

4. Third-Party Sub-Processors

We do not sell, rent, or lease personal identifiers. Data may be handled by contracted technical processors operating under formal Data Processing Agreements (DPAs):

  • Web Hosting Infrastructure: Cloud hosting facilities operating within the European Economic Area (EEA) adhering to ISO/IEC 27001 data security benchmarks.
  • Privacy-Conscious Analytics: Self-hosted or EU-hosted telemetry systems configured without persistent cross-site tracking fingerprints.

5. International Transfers

Our primary data repositories are situated within the European Union. In any circumstance where data might transit third-country networks (such as global CDN edge nodes), such transfers rely upon European Commission Standard Contractual Clauses (SCCs) to guarantee an adequate level of protection.

6. Data Retention Schedule

Contact form submissions are retained in secure email archives for a period not exceeding twelve (12) months following the resolution of the inquiry, after which they are permanently expunged. Technical server access log files are automatically purged on a rolling thirty (30) day schedule.

7. Your GDPR & CCPA Statutory Rights

Under European data protection law and California Consumer Privacy Act (CCPA) provisions where applicable, you possess specific enforceable rights:

  • Right of Access (GDPR Art. 15): You have the right to request a complete copy of personal records held regarding your person.
  • Right to Rectification (GDPR Art. 16): You may request the immediate correction of inaccurate or incomplete records.
  • Right to Erasure / "To Be Forgotten" (GDPR Art. 17): You may demand the deletion of your personal data where retention lacks continuing legal justification.
  • Right to Restriction of Processing (GDPR Art. 18): You may suspend processing during verification of data disputes.
  • Right to Data Portability (GDPR Art. 20): You can request your provided personal data in a structured, machine-readable format.
  • Right to Object (GDPR Art. 21): You may object at any time to processing predicated on our legitimate interest.

To exercise any statutory right, contact our Data Protection Officer at [email protected]. We respond to all verified requests within thirty (30) calendar days free of charge.

8. Supervisory Authority & Complaints

If you consider our processing of your personal data to infringe statutory European data protection regulations, you have the right to file a formal complaint with the Danish Data Protection Authority:

Datatilsynet
Carl Jacobsens Vej 35, 2500 Valby, Denmark
Website: www.datatilsynet.dk