Management of booking or room rental

·  Name

·  Contact information

·  Time of visit

·  Comments specified in the booking or rental agreement (possible)

Processing is necessary for the fulfilment of your visit at us (GDPR Art. 6(1)(b)).

Our legitimate interest in ensuring a fulfilling customer experience (GDPR Art. 6(1)(f)).

For regular bookings, we delete your personal data after your visit.

For room rental agreements, we delete your personal data no later than 2 years after your event has been organised.

Management of gift card

·  Name

·  Company name (possible)

·  Contact information

·  Gift card number

·  Gift card value

Processing is necessary for the purpose of handling your gift card (GDPR Art. 6(1)(b)).

Our legitimate interest in ensuring a fulfilling customer experience (GDPR Art. 6(1)(f)).

We delete your personal data when the gift card is redeemed or at the end of the validity period.

Administration of competitions

·  Name

·  Contact information

·  Competition information

·  Prize information

Processing is necessary for the purpose of handling your participation in the competition (GDPR Art. 6(1)(b)).

The winner's contact information will be stored for 3 years from the receipt of the prize.

Information subject to bookkeeping requirements in relation to the winner's prize distribution is stored for

5 years after the end of the financial year in which the prize is distributed.

Administration of Klub198 membership

·  Name

·  Company name and CVR-nr. (possible)

·  Address

·  Contact information

·  Key and locker-number

·  Membership information, including:

o   Participation in events

o   Purchase history

o   Payments and payment method

o   Inventory

Processing is necessary for the purpose of handling your membership (GDPR Art. 6(1)(b)).

Processing of your personal data for marketing purposes is based on your consent (GDPR Art. 6(1)(a)).

Our legitimate interest in ensuring a satisfactory membership (GDPR Art. 6(1)(f)).

We delete personal data on an ongoing basis and no later than 12 months after cancellation of membership.

We will delete the documentation of consent to marketing cookies for at least 2 years after the consent was withdrawn.

Improving our website and marketing (re-targeting)

·  Ip-address

·  E-mail

·  Time of visit and exposure

Our legitimate interest in using necessary cookies is GDPR Art. 6(1)(f).

The legal basis for the processing of personal data through the use of non-necessary cookies is your consent (GDPR Art. 6(1)(a)).

Consent can be withdrawn at any time.

The maximum storage period for cookies and other similar tracking information depends on the purpose of the individual cookie or tracking information.

The storage periods for individual cookies and similar tracking information are set out in the Cookie Policy.

Other communication with you, for example via our email [email protected]

·  Name

·  Contact information

·  Time of communication

·  Content of our correspondence

Our legitimate interest in ensuring a satisfactory customer experience and adequate communication with you (GDPR Art. 6(1)(f)).

We delete the personal data when we determine that it is no longer necessary for the fulfilment of the purpose.

TV monitoring in order to

Create safety and security for our employees and guests;

Prevent and solve crime and other security incidents;

to protect assets and values and provide insurance documentation, including

documentation, including documentation related to theft, accident and injury;

to prevent and detect unauthorised entry onto our property.

·  Footage from TV monitoring

·  Time

Our legitimate interest to fulfil the purposes (GDPR Art. 6(1)(f)).

If the TV monitoring footage shows criminal offences or contains sensitive information

sensitive, the legal basis for our processing is section 8(3)-(5) of the Danish Data Protection Act and GDPR Art. 9(2)(f) (pursuit of legal claims).

We delete personal data no later than 30 days after it has been recorded, unless it is to be used as documentation in connection with specific cases.

Job applications

·  Application material

Our legitimate interest in processing the application (GDPR Art. 6(1)(f)).

If the application material contains

sensitive data, the legal basis for our processing is your consent (GDPR Art. 9(2)(a)).

We delete the personal data when we consider that it is no longer necessary for the fulfilment of the purpose, but no later than 6 months after the end of a recruitment process.