This is a courtesy translation. The Danish version is legally binding.

Padborg Inn is the data controller

When you use our hotel, including when you book rooms, conferences or otherwise enter into agreements with us, Padborg Inn acts as the data controller for personal data in relation to the services you use.

Padborg Inn only collects personal data that is relevant for the purpose described below or in the above terms and conditions for the individual service and this privacy policy. The individual service determines both which personal data Padborg Inn collects and the purpose of the collection.

Padborg Inn uses the personal data to administer, provide, develop and maintain the services we offer, including for the following purposes:

• Processing your bookings and purchases of Padborg Inn's services

• Contacting you before, during or after your stay

• Improving and developing Padborg Inn's services

• Individualising our communication with you and marketing towards you

• Analysing your user behaviour

• Administering your relationship with Padborg Inn

• Complying with legal requirements.

When you provide your personal data to Padborg Inn, you also give your consent that your personal data may be stored and processed by Padborg Inn in accordance with this privacy policy.

What information does Padborg Inn collect?

Padborg Inn collects, among other things, the following personal data:

• Name, address, phone number, e-mail address, date of birth and other general personal data

• Credit card details

• Demographic information

• Purchase history, including the use of Padborg Inn's website and/or other digital services

• Feedback via our customer surveys

• Feedback via physical and online competitions, including in newsletters

• Feedback on social media and other digital platforms

• IP address and browser information. See the cookie policy below.

• Information about your company and relevant contact persons.

You may, at your own discretion, choose to give Padborg Inn personal data beyond the general personal data which you consider may be relevant either for safety reasons and/or to enable Padborg Inn to tailor the service specifically to you. If you choose to do so, Padborg Inn also regards this as consent to register and store this sensitive information on your profile.

This may for example be information about:

• Disabilities.

• Allergies.

• Special food preferences.

• Medical and mental condition.

• Emergency contact persons.

In addition to receiving information from you, Padborg Inn will in some cases supplement our information with data received from third parties, e.g. a group organiser or a partner (for example a travel agency or agent). In these cases, the third party is required to inform the guests involved of Padborg Inn's terms and conditions as well as this privacy policy. The third party is likewise required to obtain the necessary consents for the registration and processing of any sensitive data.

Security of stored personal data

Padborg Inn has adopted internal rules on information security containing instructions and measures that protect your personal data against unauthorised access or disclosure.

Padborg Inn has established procedures for granting access rights to those of our employees who process sensitive personal data and data revealing information about personal interests and habits. Padborg Inn monitors their actual access through logging and supervision.

To avoid data loss, Padborg Inn continuously backs up our databases. If a security breach results in a high risk to you of discrimination, identity theft, financial loss, loss of reputation or other significant disadvantage, Padborg Inn will inform you of the security breach as soon as possible.

Padborg Inn's security procedures are continuously reviewed and updated based on the latest technological developments.

Sharing and disclosure of personal data

In order to provide the highest level of service, Padborg Inn shares selected personal data with external suppliers such as agents, analysis agencies and companies that provide IT solutions to Padborg Inn, for example booking systems and check-in systems. Padborg Inn may in certain cases also be obliged to disclose your personal data pursuant to legislation or by decision of a public authority. You can always be informed of the extent to which Padborg Inn has shared your personal data, cf. below under your rights.

Deletion of personal data

Padborg Inn deletes your personal data when Padborg Inn is no longer required by law to store the data, or when there is no longer a purpose for the processing. Deletion may also take place if you invoke your right to erasure, cf. below.

Your rights

Under the General Data Protection Regulation (GDPR) you have a number of rights.

Right of access:

You have the right to access the personal data that Padborg Inn processes and stores about you, and to receive further supplementary information in this connection, including to what extent and with whom Padborg Inn has shared the data. Access may, however, be limited out of consideration for other persons' privacy, trade secrets and/or intellectual property rights.

Right to rectification:

You have the right to have the personal data that Padborg Inn has registered about you updated and rectified.

Right to erasure:

You have the right to have the personal data that Padborg Inn has registered about you deleted. If you wish to have your personal data deleted, Padborg Inn deletes all data that Padborg Inn is not required by law to store.

Right to restriction of storage and processing:

In certain cases you have the right to have Padborg Inn's processing of your personal data restricted.

Right to data portability:

You have the right to receive your personal data in a structured, commonly used and machine-readable format so that you can transfer your data to another provider. This only covers the data you have provided to Padborg Inn yourself and which Padborg Inn processes based on your consent or for the performance of an agreement.

Right to object:

You have the right to object to the processing of your personal data. The right to object only applies in specific cases. Whether the right to object applies depends on Padborg Inn's purpose for the processing as well as the legal basis for the processing.

Withdrawal of consent:

If the processing of personal data is based on your consent, you can withdraw the consent at any time. Processing of your personal data will then cease, unless Padborg Inn is required by law to process the personal data.

How do I exercise my rights?

If you wish to exercise your rights, you must send a request to hej@padborginn.dk stating precisely which rights you wish to exercise. You must provide your full name and address in your enquiry. Please note that Padborg Inn, for security reasons, must be able to verify your identity before your request can be processed. In this connection, Padborg Inn may ask to see your driving licence or passport.

Padborg Inn will respond within 1 month of receiving your request. If the request is complicated, the response deadline may be extended by a further two months.

Padborg Inn will inform you if the response deadline is expected to exceed 1 month. You can also contact Padborg Inn at hej@padborginn.dk if you believe that your personal data is being processed in violation of the law or other legal obligations.

Padborg Inn may reject requests that are unreasonably repetitive, require disproportionate technical intervention (for example developing a new system or significantly changing an established practice), affect the protection of other people's personal data, or in situations where the requested action must be considered extremely complicated and time-consuming.

Contact

If you have questions, comments or complaints about Padborg Inn's processing of personal data, you can contact us in writing or electronically at:

Padborg Hotel ApS

Oksevej 2
6330 Padborg
Mail: hej@padborginn.dk

Any complaint that you cannot resolve satisfactorily by contacting Padborg Inn can be directed to the Danish Data Protection Agency (Datatilsynet). The current contact address can be found at www.datatilsynet.dk.