Policies

Privacy Policy

This Privacy Policy describes the collection, use and disclosure of personal data by the VDX Group with VDX Wind System A/S as the main data controller. “VDX”, “we or “us” means the parent company, VDX Wind Systems A/S, or any of its subsidiaries, joint ventures and affiliated companies in the VDX group (together the “VDX Group”), details of which can be found on the VDX website ( www.vdxenergy.com).

You can use this website without disclosing your identity. When you access our website, we may automatically (i.e., not by registration) collect non-personal data (e.g. type of Internet browser and operating system used, domain name of the website from which you came, number of visits, average time spent on the site, pages viewed). 

This Privacy Policy concerns personal data we may collect during your use of the website such as an IP address. If you register for any of our services or contact us via forms, there will be detailed information about what data we collect and how your data is processed in connection to your registration. It may be information about name, postal address, email address, other contact information, etc. 

If you follow a link to another website (including a website operated by VDX), different privacy policies may apply. You should read these policies before you submit any personal data to these websites and agree that use of your personal data by those websites will be subject to those privacy policies.

By "processing" is meant that VDX collects, uses, discloses, stores and deletes your personal data.

VDX is responsible for ensuring that we use that personal data in compliance with data protection laws.

VDX only collects and processes your personal information if we have a legal basis for the processing under applicable laws, for example:

• We have collected your consent,
• It is necessary to fulfill an agreement with you,
• We legally are obliged to do so, or
• We have a legitimate interest.

How we use your personal data

VDX registers and processes personal data about you to deliver the requested services when you:

• Are contacting VDX,
• Sign up for newsletters, or
• Give any kind of personal data to us via our website or applications.

We base the processing on our legitimate interest in running our daily business and being able to provide you with our services.

VDX will be guided by the following principles when processing personal data:

1. We will only collect personal data for specific purposes;
2. We will not collect personal data beyond what is necessary to accomplish those purposes;
3. We will not use personal data for purposes other than that for which the data was collected, except as stated herein, or with prior consent;
4. We will not transfer personal data to third parties or across borders, except as stated herein, or with prior consent;
5. We will apply high technical standards to make our processing of personal data secure;
6. Except when stated herein, we will not store personal data in identifiable form longer than is necessary to accomplish its purpose, or as is required by law.

Disclosure and transfer of your personal data

VDX is a global business. Our customers and our operations are spread around the world. As a result, we collect and transfer personal data on a global basis. That means that we may transfer your personal data to locations outside of your country. Where we transfer your personal data to another country outside the EEA, we will ensure that it is protected and transferred in a manner consistent with legal requirements. We have internal policies in place to ensure an adequate level of protection irrespective of where in the VDX Group your data is located. 

We may also share your personal data outside of the VDX Group as further described below:

• with third-party service providers for the purposes of providing services to us that enable or support our fulfillment of the purposes described in this Privacy Policy (for example, VDX’ IT and communications providers). These third parties will be subject to appropriate data protection obligations;
• to the extent required by law, for example, if we are under a duty to disclose your personal data in order to comply with any legal obligation, or to establish, exercise or defend our legal rights.
  

Security

VDX takes all appropriate organisational and technical security measures to protect your personal data and has implemented necessary security measures in order to safeguard your data. Any personal data submitted will be treated as strictly confidential and will only be processed for the purposes for which they are collected.

Cookies

We automatically track how the content provided is used. This tracking allows us to gain a better understanding of potential areas for improvement so as to continually improve the relevance of and accessibility of the content we provide. One of the methods used is cookies. You can read more about our cookie policy under the cookie notice.

For how long will we store your personal data

How long we will hold your personal data for will vary and will be determined by the following criteria:

• the purpose for which we are using it (as further described in this policy) – we will need to keep the data for as long as is necessary for that purpose; and
• legal obligations – laws or regulations may set a minimum period for which we have to keep your personal data.

Your rights

You have the right to gain access to the data processed about you. You also have the right to object to the processing of your personal data and to rectify the data processed if relevant. Please note that VDX may not always be obliged to comply with such a request. 

Furthermore, if you wish to exercise your right to access your personal data, to object to it being processed or to rectify processed data, please contact us at:  [email protected]. Further, if you have any complaints about VDX’ processing of your personal data, you may contact the Danish Data Protection Agency.

Visitor Privacy Notice

This notice provides information about the processing of your personal data by the VDX Group with VDX Wind System A/S as the main data controller. “VDX”, “we or “us” means the parent company, VDX Wind Systems A/S, or any of its subsidiaries, joint ventures and affiliated companies in the VDX group (together the “VDX Group”), details of which can be found on the VDX website (www.vdxenergy.com).

VDX may process personal data about you, if you as an individual, or the employee of a company, visits VDX. We may also process your personal data when you have shown an interest in VDX’ products and/or services by e.g. providing your business card to VDX.

VDX will primarily obtain your personal data from yourself and/or your employer and in some cases from publicly available resources.

Some personal data might also be automatically generated from VDX’ IT-system, or equivalent when you are creating or using access to online services provided by VDX.

Categories of personal data

VDX may process the following categories of personal data:

• Contact data, such as full name, email address, telephone number;
• Organizational data, such as company name
• Vehicle registration number, used for parking permits on VDX sites
• IT-related data, such as user-ID, passwords, log-in details as well as data and logs about your usage of VDX’ IT applications and services; 

Legal basis and purposes of the processing

VDX will process your personal data based on either of the following legal grounds, see also further details below.

• Legitimate interests
  VDX’ legitimate interests include the interest to manage its daily operations according to lawful and fair business practices including planning, performing and managing the relationship with the visitor.

• Legal obligation 
  In exceptional cases and only when no other legal ground can be applied, VDX may ask separately for your consent to process your personal data. If consent is collected, you are always entitled to withdraw your consent, which will, however, not affect the lawfulness of the processing based on consent before its withdrawal. 

VDX will process your personal data for the following purposes:

Generally, to plan, perform and manage VDX’ daily operations and handling of visitors.

More specifically

• Administration purposes, such as arranging shipments and deliveries, facilitating meetings and providing support services;
• Communications purposes, such as invitations to events organized by us or from third-party companies with whom we collaborate;
• Compliance and regulatory purposes, such as fulfilling our legal and compliance-related obligations to prevent illegal activity.
• Security purposes, such as maintaining and protecting the security of our products, services, and websites, preventing and detecting security threats, fraud or other criminal or malicious activities; 
• Dispute handling purposes, such as enforcing our contractual agreements and to establish, exercise or defend legal claims.

Disclosure and transfer of your personal data

VDX is a global business. Our business partners and our operations are spread around the world. As a result, we collect and transfer personal data on a global basis. That means that we may transfer your personal data to locations outside of your country. Where we transfer your personal data to another country outside the EEA, we will ensure that it is protected and transferred in a manner consistent with legal requirements. We have internal policies in place to ensure an adequate level of protection irrespective of where in the VDX Group your data is located. 

We may also share your personal data outside of the VDX Group as further described below:

• with third party service providers for the purposes of providing services to us that enable or support our fulfillment of the purposes described in this notification (for example, VDX’ IT and communications providers). These third parties will be subject to appropriate data protection obligations;
• to the extent required by law, for example, if we are under a duty to disclose your personal data to comply with any legal obligation, or to establish, exercise or defend our legal rights;

If a third-party service provider processes your personal data outside the EU/EEA, such transfer shall be based on a legal basis recognised by the relevant authorities or courts as providing an adequate level of protection for personal data, including but not limited to the EU-U.S. Privacy Shield or the EU Commission’s Standard Contractual Clauses or such other mechanisms as have been recognized or approved by the relevant authorities from time to time.

For how long will we store your personal data?

How long we will hold your personal data for will vary and will be determined by the following criteria:

• the purpose for which we are using it e.g. to fulfill our legal or contractual obligations considering amongst others the contractual period, warranty and product liability requirements; and
• legal obligations – laws or regulations may set a minimum period for which we have to keep your personal data.
• Unless  we are required to keep the data for a longer period, the data will be stored for 30 days, after which they will be anonymized so they will no longer be connected to any person. This is done so we can create statistics on the traffic of visitors on VDX locations.
  
  

Your Rights

You have the right to gain access to the data processed about you. You also have the right to object to the processing of your personal data, to request the erasure of your personal data and rectification of the data processed if relevant. Please note that VDX may not always be obliged to comply with such a request.

Furthermore, if you wish to exercise your right to access your personal data, to object to it being processed, to request erasure or to rectify processed data, please contact us at:  [email protected]. Further, if you have any complaints about VDX’ processing of your personal data, you may contact the Danish Data Protection Agency.

Customer Privacy Notice

This notice provides information about the processing of your personal data by the VDX Group with VDX Wind System A/S as the main data controller. “VDX”, “we or “us” means the parent company, VDX Wind Systems A/S, or any of its subsidiaries, joint ventures and affiliated companies in the VDX group (together the “VDX Group”), details of which can be found on the VDX website (www.vdxenergy.com).

VDX may process personal data about you, if you as an individual, or the employee of a company, has bought a product or service offered by VDX. We may also process your personal data when you have shown an interest in VDX’ products and/or services by e.g. providing your business card to VDX.

VDX will primarily obtain your personal data from yourself and/or your employer and in some cases from publicly available resources.

Some personal data might also be automatically generated from VDX’ IT-system, or equivalent, when you are creating or using access to online services provided by VDX.

Categories of personal data

VDX may process the following categories of personal data:

• Contact data, such as name, email address, telephone number;
• Individual data, such as preferred language and photo;
• Organizational data, such as company name, job position, place of work and country;
• Competence data, such as training activities;
• IT-related data, such as user-ID, passwords, log-in details as well as data and logs about your usage of VDX’ IT applications and services; 
• Financial data, such as credit or payment information, bank account details.

Legal basis and purposes of the processing

VDX will process your personal data based on either of the following legal grounds, see also further details below.

• Contractual obligation.
• Legitimate interests.
  VDX’ legitimate interests include the interest to manage its daily operations according to lawful and fair business practices including planning, performing and managing the (contractual) relationship with customers.
• Legal obligation 
  In exceptional cases and only when no other legal ground can be applied, VDX may ask separately for your consent to process your personal data. If consent is collected, you are always entitled to withdraw your consent, which will, however, not affect the lawfulness of the processing based on consent before its withdrawal. 

VDX will process your personal data for the following purposes:

Generally, to plan, perform and manage VDX’ relationship with customers.

More specifically

• Administration purposes, such as performing transactions, processing payments, performing accounting, auditing, billing and collection activities, arranging shipments and deliveries, facilitating repairs and providing support services;
• Promotional communications and marketing purposes, such as periodic newsletter/magazines, information on our services, promotional and advertising material, sweepstakes, contests, invitations to events organized by us or from third-party companies with whom we collaborate;
• Customer surveys purposes, such as customer satisfaction surveys, product quality surveys, market analysis to improve customer engagement;
• Personalized services purposes, such as providing you merchandise in the right size when being invited to a VDX organized event.
• Compliance and regulatory purposes, such as fulfilling our legal and compliance-related obligations to prevent illegal activity.
• Security purposes, such as maintaining and protecting the security of our products, services and websites, preventing and detecting security threats, fraud or other criminal or malicious activities; 
• Training and development purposes, such as enabling training activities;
• Dispute handling purposes, such as enforcing our contractual agreements and to establish, exercise or defend legal claims.
  
  

Disclosure and transfer of your personal data

VDX is a global business. Our customers and our operations are spread around the world. As a result, we collect and transfer personal data on a global basis. That means that we may transfer your personal data to locations outside of your country. Where we transfer your personal data to another country outside the EEA, we will ensure that it is protected and transferred in a manner consistent with legal requirements. We have internal policies in place to ensure an adequate level of protection irrespective of where in the VDX Group your data is located. 

We may also share your personal data outside of the VDX Group as further described below:

• with third party service providers for the purposes of providing services to us that enable or support our fulfillment of the purposes described in this notification (for example, VDX’ IT and communications providers). These third parties will be subject to appropriate data protection obligations;
• to the extent required by law, for example if we are under a duty to disclose your personal data to comply with any legal obligation, or to establish, exercise or defend our legal rights;
  

If a third-party service provider processes your personal data outside the EU/EEA, such transfer shall be based on a legal basis recognised by the relevant authorities or courts as providing an adequate level of protection for personal data, including but not limited to the EU-U.S. Privacy Shield or the EU Commission’s Standard Contractual Clauses or such other mechanisms as have been recognized or approved by the relevant authorities from time to time.

For how long will we store your personal data

How long we will hold your personal data for will vary and will be determined by the following criteria:

• the purpose for which we are using it e.g. to fulfill our legal or contractual obligations considering amongst others the contractual period, warranty and product liability requirements; and
  
• legal obligations – laws or regulations may set a minimum period for which we have to keep your personal data.

Your Rights

You have the right to gain access to the data processed about you. You also have the right to object to the processing of your personal data, to request erasure of your personal data and rectification of the data processed if relevant. Please note that VDX may not always be obliged to comply with such a request.

Furthermore, if you wish to exercise your right to access your personal data, to object to it being processed, to request erasure or to rectify processed data, please contact us at:  [email protected]. Further, if you have any complaints about VDX’ processing of your personal data, you may contact the Danish Data Protection Agency.

Supplier Privacy Notice

This notice provides information about the processing of your personal data by the VDX Group with VDX Wind System A/S as the main data controller. “VDX”, “we or “us” means the parent company, VDX Wind Systems A/S, or any of its subsidiaries, joint ventures and affiliated companies in the VDX group (together the “VDX Group”), details of which can be found on the VDX website (www.vdxenergy.com).

VDX may process personal data about you, if you act as an individual who do business and/or is interested in doing business with the VDX Group e.g. as a consultant, or if you are or have been the employee of a company that is a business partner to the VDX Group.

VDX will primarily obtain your personal data from yourself and/or your employer and in some cases from publicly available resources.

Some personal data might also be automatically generated from VDX’ IT-system, or equivalent, when you are creating or using access to online services provided by VDX.

Categories of personal data

VDX may process the following categories of personal data:

• Contact data, such as name, workplace address, e-mail address, telephone number;
• Individual data, such as preferred language and photo;
• Organizational data, such as company name, job position, place of work, country;
• IT-related data, such as user-ID, passwords, log-in details as well as data and logs about your usage of VDX’s IT applications or services;
• Competence data, such as training activities;
• Contractual data, such as purchase orders, contracts and other agreements between you and VDX.

For some business partners e.g. consultants, the following personal data is processed:

• Individual data, such as name, date of birth, gender, nationality, preferred language, photo;
• Organizational data, such as consultancy number, services description, place of work, business unit, department, manager, direct reports;
• Contact data, such as work location, home address, email, telephone number;
• Financial data, such as credit or payment information and bank account details;
• Contractual data, such as purchase orders, contracts and other agreements between you and VDX;
• Consultancy administration data, such as consultancy contract and information about assignment start date and termination date;
• Time data, such as working hours, worked time;
• Security data, such as access cards, access rights and use of access cards and access rights;
• Health and safety data, such as information about work related incidents;
• Manufacturing/repair/service data, such as tracking and logging of activities undertaken by you in connection with manufacturing, maintenance, repair or service;
• Competence data, such as training activities;
• Travel administration data, such as information on business trips, booking details, passport number, travel invoices and allowances;
• Help desk and support data, such as questions from you relating to your assignment or IT-equipment or support provided to you in relation to the same;
• IT-related data, such as user-ID, passwords, log-in details as well as data and logs about your use of VDX’ IT equipment, application or services, as per VDX’ IT policies, as applicable from time to time;
• Compliance related data, such as information about relevant and significant litigation or other legal proceedings against you.

It is specifically noted that some aspects of health and safety data are regarded as sensitive data under the applicable data protection laws and shall be handled with extra care. It is specifically noted that sensitive data is only processed in case of legal obligation and/or explicit consent.

VDX may also process a limited amount of personal data (name and contact details) of persons indicated by you as persons to be contacted by VDX in case of emergency.

Legal basis and purposes of the processing

VDX will process your personal data based on either of the following legal grounds, see also further details below.

• Contractual obligation.

• Legitimate interests.
  VDX’ legitimate interests include the interest to manage its daily operations according to lawful and fair business practices, including planning, performing and managing the (contractual) relationship with business partners. VDX’ legitimate interests also include managing its daily operations, secure its facilities and equipment and keep internal control.
  
• Legal obligation.
  In exceptional cases and only when no other legal ground can be applied, VDX may ask separately for your consent to process your personal data. If consent is collected, you are always entitled to withdraw your consent, which will, however, not affect the lawfulness of the processing based on consent before its withdrawal.

VDX will process your personal data for the following purposes:

Generally, to plan, perform and manage VDX’ relationship with business partners.

More specifically

• Administration purposes
• Compliance and regulatory purposes
• Reporting purposes
• Work environment and product safety purposes
• Training and development purposes
• Employment management purposes
• Service and quality management purposes
• Dispute handling purposes
• Security purposes

Disclosure and transfer of your personal data

VDX is a global business. Our customers and our operations are spread around the world. As a result we collect and transfer personal data on a global basis. That means that we may transfer your personal data to locations outside of your country. Where we transfer your personal data to another country outside the EEA, we will ensure that it is protected and transferred in a manner consistent with legal requirements. We have internal policies in place to ensure an adequate level of protection irrespective of where in the VDX Group your data is located. 

We may also share your personal data outside of the VDX Group as further described below:

• with third party service providers for the purposes of providing services to us that enable or support our fulfilment of the purposes described in this notification (for example, VDX’ IT and communications providers). These third parties will be subject to appropriate data protection obligations;
  
• to the extent required by law, for example if we are under a duty to disclose your personal data to comply with any legal obligation, or to establish, exercise or defend our legal rights;

If a third-party service provider processes your personal data outside the EU/EEA, such transfer shall be based on a legal basis recognised by the relevant authorities or courts as providing an adequate level of protection for personal data, including but not limited to the EU-U.S. Privacy Shield or the EU Commission’s Standard Contractual Clauses or such other mechanisms as have been recognized or approved by the relevant authorities from time to time.

For how long will we store your personal data

How long we will hold your personal data for will vary and will be determined by the following criteria:

• the purpose for which we are using it e.g. to fulfill our legal or contractual obligations considering amongst others the contractual period, warranty and product liability requirements; and
  
• legal obligations – laws or regulations may set a minimum period for which we must keep your personal data.

Your Rights

You have the right to gain access to the data processed about you. You also have the right to object to the processing of your personal data, to request erasure of your personal data and rectification of the data processed if relevant. Please note that VDX may not always be obliged to comply with such a request.

Furthermore, if you wish to exercise your right to access your personal data, to object to it being processed, to request erasure or to rectify processed data, please contact us at:  [email protected]. Further, if you have any complaints about VDX’ processing of your personal data, you may contact the Danish Data Protection Agency.

Shareholder Privacy Notice

Introduction
As part of handling investor relations VDX Germany GmbH | Bayreuther StraBe 3 | 42115 Wuppertal | Germany HRB 31339 | Managing Director: Rino Fortin (“VDX”), will be processing personal data about its shareholders, proxies and advisors. This privacy policy sets out how and why we process personal data in connection with administration of our relationship with our shareholders, proxies and advisors, including registration in the register of shareholders and when providing notice of and holding general meetings.

VDX is the data controller for the processing activities set out in this privacy policy (also referred to as “we”, “our” in this privacy policy).

How and why we collect personal data

Below, it is listed what type of personal data we collect about our shareholders, proxies and advisors and for which purposes we use the personal data. 

Third parties with whom we share personal data 
We may share the personal data about shareholders, proxies and advisors with relevant employees in the VDX Group and with relevant third party advisors and service providers. We may also share the personal data with public authorities as well as the general public through publication on our website in accordance with applicable law. Some of these parties may be located in countries outside of the EU/EEA. Please be informed that the level of data protection as currently applied and enforced in some countries outside the European Union does not conform to the level of data protection for personal data currently applied and enforced within the European Union. If personal data is being processed outside of the EU/EEA, such transfer of personal data will either be subject to the EU-U.S. Privacy Shield or the European Commission’s standard contractual clauses. You can request a copy of the agreement covering the transfer of personal data by sending an e-mail to  [email protected].

How long will we store the personal data
We will only store the personal data for as long as is necessary to fulfil the purposes outlined on this policy. With respect to information about shareholders, proxies and advisors, unless stated otherwise above, we will generally be keeping the personal data for 5 years after the end of the financial year in which the shareholder no longer owns shares in VDX. We may store the minutes of the general meeting until it is no longer necessary for VDX to store the information for the purpose of protecting VDX’ and the shareholders’ interests, including for the purpose of documenting the deliberations and resolutions passed at the general meeting. This implies that minutes will never be deleted.

Your rights as a data subject
Right to information. You can obtain further information on the personal data which we stores and processes about you by sending an e-mail to  [email protected] stating this request. 

Right to object. You may object to your personal data being processed. If you wish to object to your personal data being processed, please send an e-mail to  [email protected] stating this request. 

Right to rectification and restriction of processing. You may request that your personal data is rectified or restrict the processing of your personal data. If you wish to have your data rectified or restrict the processing, please send an e-mail to [email protected] stating this request.

Right to a copy of your personal data. You may be entitled to obtain a copy of your personal data in a structured, commonly used and machine-readable format by sending an e-mail to  [email protected] stating this request. If technically feasible, you may request that the personal data is transmitted directly to another company or person acting as a data controller.

Right to make a compliant. If you have any complaints about our processing of your personal data, you may contact the Danish Data Protection Agency. 

Changes to this policy
We may change this privacy policy from time to time by issuing a new version on our website.

Contact details
Our contact details are:

VDX Wind Systems A/S 
Hedeager 42
8200 Aarhus N
Denmark
T: +45 97 30 00 00 
E: [email protected] 

Investor Relation News Services Subscriber Privacy Notice

This notice provides information about the processing of your personal data by the VDX Group with VDX Wind System A/S as the main data controller. “VDX”, “we or “us” means the parent company, VDX Wind Systems A/S, or any of its subsidiaries, joint ventures and affiliated companies in the VDX group (together the “VDX Group”), details of which can be found on the VDX website ( www.vdxenergy.com).

This privacy notice explains how VDX processes your personal data in our administration of our Investor Relations activities.

We will primarily obtain your personal data from yourself. 

Categories of personal data 

We may collect the following categories of personal data:

• Contact data, such as name, email address, telephone number and country of residence;
• Individual data, such as preferred language and communication preferences.

Legal basis and purposes of the processing

VDX will process your personal data based on either of the following legal grounds, see also further details below.

• Contractual obligation.
  
• Legitimate interests.
  VDX’ legitimate interests include the interest to manage its daily operations according to lawful and fair business practices including providing communication about VDX’ activities.
  
• Legal obligation
  In exceptional cases and only when no other legal ground can be applied, VDX may ask separately for your consent to process your personal data. If consent is collected, you are always entitled to withdraw your consent, which will, however, not affect the lawfulness of the processing based on consent before its withdrawal.

We will use your personal data for the following purposes:

To provide information services which you have signed up for through our news services e.g. audiocasts, changes in the share price (stock threshold alerts), disclosed company announcements, press releases, and financial reports.

Disclosure and transfer of your personal data

VDX is a global business. Our customers and our operations are spread around the world. As a result, we collect and transfer personal data on a global basis. That means that we may transfer your personal data to locations outside of your country. Where we transfer your personal data to another country outside the EEA, we will ensure that it is protected and transferred in a manner consistent with legal requirements. We have internal policies in place to ensure an adequate level of protection irrespective of where in the VDX Group your data is located. 

We may also share your personal data outside of the VDX Group as further described below:

• with third party service providers for the purposes of providing services to us that enable or support our fulfillment of the purposes described in this notification (for example, VDX’ IT and communications providers). These third parties will be subject to appropriate data protection obligations;
  
• to the extent required by law, for example if we are under a duty to disclose your personal data to comply with any legal obligation, or to establish, exercise or defend our legal rights;

If a third-party service provider processes your personal data outside the EU/EEA, such transfer shall be based on a legal basis recognised by the relevant authorities or courts as providing an adequate level of protection for personal data, including but not limited to the EU-U.S. Privacy Shield or the EU Commission’s Standard Contractual Clauses or such other mechanisms as have been recognized or approved by the relevant authorities from time to time.

For how long will we store your personal data

How long we will hold your personal data for will vary and will be determined by the following criteria:

• the purpose for which we are using it e.g. to fulfill our legal or contractual obligations; and
  
• legal obligations – laws or regulations may set a minimum period for which we must keep your personal data.

Your Rights

You have the right to gain access to the data processed about you. You also have the right to object to the processing of your personal data, to request erasure of your personal data and rectification of the data processed if relevant. Please note that VDX may not always be obliged to comply with such a request.

Furthermore, if you wish to exercise your right to access your personal data, to object to it being processed, to request erasure or to rectify processed data, please contact us at:  [email protected]. Further, if you have any complaints about VDX’ processing of your personal data, you may contact the Danish Data Protection Agency.