At Rold Gl. Kro A/S ("Rold Gl. Kro," "we," "us," or "our"), we prioritise confidentiality and data security.
This privacy policy outlines how we process personal data and the rights granted to you as a data subject under data protection legislation.

We kindly ask you to read this privacy policy before submitting any personal data to Rold Gl. Kro.

1. Data Controller and contact information
The data controller responsible for processing your personal data is:
Rold Gl. Kro A/S
Address: Hobrovej 11, Rold, 9510 Arden
Company Registration Number (CVR): 42536873
Email:
Phone number: +45 98 56 17 00

2. When you visit our website
When you visit our website, we may process certain personal data about you. The following sections describe how Rold Gl. Kro processes the personal data of website visitors.

2.1 Cookies
We use cookies on our website to ensure its functionality, prevent misuse, and reduce downtime. In doing so, we may process your personal data, including:

• IP address

• MAC address

• Browser history

• Information about your website usage, including click behaviour

We use cookies to collect this data.

Purposes of processing
Your personal data may be processed for the following purposes:

• Ensuring website functionality

• General marketing

• Product and service development

• Statistics and analysis

Legal basis for processing
Rold Gl. Kro processes your personal data based on:

• Legitimate interests: Our legitimate interests in ensuring the proper functioning of our website and its features, as well as conducting statistics, analysis, support, and service improvement (Article 6(1)(f) of the GDPR).

We request your consent before placing non-essential cookies in accordance with cookie regulations. You can withdraw your consent at any time. For more details on managing your cookie preferences, please refer to our Cookie Policy.

Retention period
Cookies are deleted in accordance with our Cookie Policy, which is available via our website's cookie banner. Some data may be stored in anonymised form for a longer period.

Data sharing
We may share information about your website usage with our partners in social media, advertising, and analytics. These partners may combine this data with other information you have provided or that they have collected from your use of their services. The purpose is to provide you with targeted, personalised marketing via our website or third-party websites. We share your personal data based on our legitimate interest in delivering personalised marketing (Article 6(1)(f) of the GDPR). Such data sharing requires your prior cookie consent for marketing purposes.

Some of our partners may collect and process your data for their own purposes. We encourage you to review their privacy policies, which are available via our cookie banner.

Right to object
You have the right to object to our processing of your personal data for direct marketing purposes. If you do so, you will only receive general marketing communications that are not personalised. You can adjust your cookie settings on our website at any time.

2.2 When you use our contact forms or communicate with us
Types of personal data
When you use our contact forms or otherwise communicate with Rold Gl. Kro, we may process the following personal data:

• Name, email address, phone number

• The subject of your inquiry

• Date of your inquiry

• Any other information you provide. Please refrain from submitting sensitive data unless strictly necessary and ensure it is strongly encrypted if sent via email.

Purposes of processing
Your personal data may be processed for:

• Handling your inquiry

• General communication

• Statistics and analysis

Legal Basis for processing

• Legitimate interests: Our legitimate interest in handling your inquiry, communicating with you, and developing our services (Article 6(1)(f) of the GDPR).

• Contractual obligations: If your inquiry relates to a (potential) agreement, we process your data to take pre-contractual measures (Article 6(1)(b) of the GDPR).

Data sharing
We may share your personal data with external service providers who assist in fulfilling your request, based on our legitimate interest in providing the requested service (Article 6(1)(f) of the GDPR).

Retention period
Your personal data will be retained for one year from the date of your last contact. Data may be stored in anonymised form for longer periods.

2.3 When you purchase a gift card, book a stay, or reserve a table
Types of Personal DataWhen you purchase a gift card, book a stay, or make a restaurant reservation, we process:

• Name, email, phone number

• Address

• Company name (optional)

• Payment details

• Order history

• Digital activity (e.g., website interactions)

If you choose to have a gift card sent directly to a recipient, you must provide their name and email address.

Purposes of processing
Your personal data may be processed for:

• Processing your order

• Managing shipments, complaints, and returns

• Sending marketing communications where permitted

• Statistics and analysis

Legal Basis for Processing

• Legitimate interests: Our legitimate interest in marketing and service improvement, and in processing the gift card recipient’s contact details (Article 6(1)(f) of the GDPR).

• Contractual obligations: To fulfil the agreement with you, including delivering gift cards and handling complaints (Article 6(1)(b) of the GDPR).

Data sharing
We may share your personal data with external partners, such as payment providers for secure payment verification. Payment details are encrypted and not stored by Rold Gl. Kro.

Retention period
We retain your personal data for three years from your last purchase. Financial records are retained for five years in compliance with accounting regulations. Some data may be stored in anonymised form for longer periods.

3. If you subscribe to our newsletter(s)
Types of Personal Data
Rold Gl. Kro collects, processes, and stores your personal data for marketing purposes when you subscribe to our newsletter(s). We may collect, process, and store the following types of personal data about you:

• Name and email address

• Your consent

• Your interests

• Your interaction with our sent materials

Purpose of processing
Your personal data may be processed for the following purposes:

• Marketing

• Analysis and statistics

• Documentation that direct marketing complies with applicable legislation

Legal basis for processing
Rold Gl. Kro processes your personal data based on one or more of the following grounds:

• Consent: We will only use your personal data for direct marketing, including sending newsletters, if you have given your prior explicit consent (Danish Marketing Act, Section 10(1), and General Data Protection Regulation (GDPR), Article 6(1)(a)).

• Legitimate Interests: Processing your personal data for analysis and statistics is based on our legitimate interest in improving and developing our services. The processing of your consent for documentation purposes is based on our legitimate interest in proving that we have conducted direct marketing in accordance with applicable laws (GDPR, Article 6(1)(f)).

Retention period
Your personal data will be retained as long as your consent to receive newsletters remains active.
If you no longer wish to receive our newsletters, you can unsubscribe via the link at the bottom of each email or by contacting us as described below. Withdrawal of your consent does not affect the legality of processing before the withdrawal.

Documentation of your marketing consent will be stored for two years after you have withdrawn your consent. This retention period is based on our legitimate interest in documenting that direct marketing was conducted in compliance with applicable laws (GDPR, Article 6(1)(f)).

4. If you apply for a job at Rold Gl. Kro
When you apply for a job at Rold Gl. Kro, we process your personal data as part of the recruitment process.
We recommend that your application does not contain your national identification number or sensitive personal data, such as information revealing racial or ethnic origin, religion, trade union membership, sexual orientation, or health data.

Types of personal data
Rold Gl. Kro may collect, process, and store the following types of personal data about you:

• Contact details such as name, email address, and phone number

• Information provided in your application, CV, and any attachments

• Relevant publicly available information on the internet and social media, including employment history, activities, skills, performance, and general appearance

• Results of personality tests, if applicable

• Criminal record certificate, if required for the position applied for

• References from previous and/or current employers listed in your application

• Health information, if the position requires specific health conditions

• Any other information you provide during the recruitment process

Purpose of processing
Your personal data will be used to assess whether we wish to offer you a position at Rold Gl. Kro.

Legal basis for processing
Rold Gl. Kro processes your personal data based on one or more of the following grounds:

• Legitimate Interests: We may process your personal data based on our legitimate interest in assessing your application, including information provided in your CV, application, and attachments, as well as relevant publicly available information, personality test results, references, and other information you provide. Processing may also be necessary to establish, exercise, or defend legal claims (GDPR, Article 6(1)(f)). If required for the position, we may later request a criminal record certificate based on our legitimate interest (Danish Data Protection Act, Section 8(3)).

• Consent: If the position requires specific health conditions, we will request your explicit consent before processing such data (GDPR, Article 9(2)(a) and Article 6(1)(a)).

Retention period
If you are offered a position at Rold Gl. Kro, your application and relevant personal data collected during the recruitment process will be stored in your personnel file.
If you are not offered a position, we will retain your application and any additional personal data collected during the recruitment process for 12 months after rejection unless you have given consent for extended retention.
You may withdraw any consent given at any time. Withdrawal will apply to future processing but will not affect the legality of previous processing based on consent. To withdraw consent, please contact us as described below.
Criminal record certificates will be deleted immediately after review.

5. If you are a supplier, business partner, etc.
This section outlines Rold Gl. Kro's policy for processing personal data about owners of sole proprietorships or contact persons at suppliers and other business partners.

Collection of Personal Data
Rold Gl. Kro may collect, process, and store your personal data in the following situations:
() When your company or employer enters into an agreement with Rold Gl. Kro
() When you express interest in our products and services, e.g., by providing a business card

• When you collaborate and communicate with us

Types of personal data
Rold Gl. Kro may collect, process, and store the following types of personal data about you:

• Name, email address, phone number, and similar contact details

• Organisational details such as company name, address, job title, industry, primary workplace, and country

• Contractual details such as orders, invoices, contracts, and other agreements that may include your contact information

• Financial information such as payment terms, bank details, and credit assessments (if applicable to a sole proprietorship)

We may receive such information directly from you (primarily through emails and correspondence) or from a third party, such as your employer.

Purpose of processing
Your personal data may be processed for the following purposes:

• General planning, fulfilment, and administration of collaborations, including contracts

• Administration, such as payment processing, credit assessments, accounting, and auditing, as well as providing support

• Coordination and management of tasks

• Newsletters and other marketing communications

• Responding to your inquiries

• General communication

• Compliance with legal obligations, such as preventing unlawful activities

• Handling potential disputes

Legal basis for processing
Rold Gl. Kro processes your personal data based on one or more of the following grounds:

• Contractual Obligations: In some cases, processing your personal data is necessary to fulfil a contract (GDPR, Article 6(1)(b)).

• Legitimate Interests: Processing may be based on our legitimate interest in managing daily operations in compliance with fair business practices, planning, executing, and administering collaborations, or improving our products and services. Processing may also be necessary to prevent fraud or establish, exercise, or defend legal claims (GDPR, Article 6(1)(f)).

• Legal Obligation: Processing of your personal data may be necessary to comply with legal obligations, such as preventing unlawful activities (GDPR, Article 6(1)(c)).

Retention period
Your personal data will be stored for three years after the termination of the collaboration. However, data may be retained longer in anonymised form.

6. If you visit our inn
This section outlines Rold Gl. Kro’s policy on the processing of personal data concerning guests and other visitors to Rold Gl. Kro.

Types of personal data
When you visit Rold Gl. Kro, we may collect, process, and store the following types of personal data about you:

• Name, email address, phone number, and similar contact details

• Date of birth, nationality, permanent address, passport, or other travel identification where required by applicable law

• Your purchases

• Payment details

• Food preferences (e.g., when dining in our restaurant)

• Photo and video footage related to our security surveillance

Purposes of processing
Your personal data may be processed for the following purposes:

• Managing your reservations, including administration of your stay with us

• Sending communications to visitors

• Compliance with applicable legislation

• Establishing, exercising, or defending legal claims

• Video surveillance – See details below

Legal basis for processing
Rold Gl. Kro processes your personal data based on one or more of the following legal grounds:

• Contractual obligations: In certain cases, processing your personal data is necessary to fulfil a contract (General Data Protection Regulation (GDPR) Article 6(1)(b)).

• Legitimate interests: In most cases, we process your personal data based on our legitimate interest in establishing, defending, or exercising legal claims, as well as protecting our physical premises. Additionally, we process your personal data based on our legitimate interest in planning and evaluating a visit (GDPR Article 6(1)(f)).

• Legal obligations: Processing your payment details and purchase information is necessary to comply with accounting, VAT, and marketing legislation (Data Protection Act Article 6(1)(c)). Certain identification data is required to comply with passport regulations and foreign visitor entry rules (Data Protection Act Article 6(1)(c)).

Video surveillance
We have installed video surveillance for crime prevention and security purposes, in accordance with GDPR Article 6(1)(f) and Data Protection Act Section 8(3).
Recordings may be reviewed in cases of specific suspicion regarding criminal activity, violations of Rold Gl. Kro’s policies, internal/external audits, or dispute resolution.
We may share recordings with the police for criminal investigations, including when legally required (Data Protection Act Section 8(4)). If recordings need to be disclosed for other purposes, we will request your consent if you appear in the footage.

Retention period
Accounting-related data is stored for five years from the end of the financial year to which it pertains.
Security footage recorded for crime prevention purposes is deleted or anonymised within 30 days unless necessary for investigating a specific dispute or legal matter.
We delete details such as date of birth, nationality, permanent address, passport, or travel ID no later than two years after the end of your stay.
Other personal data is deleted three years after your stay, though we may process anonymised data for a longer period.

7. If you visit our social media profiles
This section outlines Rold Gl. Kro’s policy on the processing of personal data collected through Rold Gl. Kro’s social media profiles or pages.
Rold Gl. Kro has profiles or pages on the following social media platforms:

Facebook (Meta Platforms Ireland Ltd.)

• Facebook’s privacy policy is available here

• You can adjust your privacy settings on Facebook here

LinkedIn (LinkedIn Ireland Unlimited Company)

• LinkedIn’s privacy policy is available here

• You can adjust your privacy settings on LinkedIn here

Instagram (Meta Platforms Ireland Ltd.)

• Instagram’s privacy policy is available here

• You can adjust your privacy settings on Instagram here

Rold Gl. Kro and the social media providers are joint controllers of the personal data collected via interactions with our profiles, including posts.
Agreements between Rold Gl. Kro and social media providers define responsibilities for data protection tasks.
For Facebook and Instagram, the provider is responsible for enabling you to exercise your rights, while Rold Gl. Kro is responsible for providing the information in this section.
For LinkedIn, the provider is responsible for responding to rights-related requests.

Collection of personal data
When you visit or interact with our social media profiles, Rold Gl. Kro and the provider may collect, process, and store the following types of personal data:

• Information available on your profile, including name, gender, marital status, workplace, interests, and city

• Whether you “like” or react to our profile

• Comments you post on our content

• Your visits to our profile

• Your IP address

Purposes of processing
Rold Gl. Kro processes your personal data for:

• Improving our products and services, including our social media profiles

• Statistics and analysis

• Communicating with you if you comment, leave a review, or send a message

• General marketing

Social media providers process your data for:

• Improving their ad system

• Providing Rold Gl. Kro with statistics based on profile visits

• Advertising and customising activities on our pages

Legal basis for processing
Processing of your personal data is based on:

• Legitimate interests: Rold Gl. Kro has a legitimate interest in communicating and marketing via our social media profiles and improving our products and services (GDPR Article 6(1)(f)).

Who do social media providers share your data with?
Social media providers may share your data with:

• Other companies within their corporate group

• External partners providing analytics and research services

• Advertisers

• Other visitors to our profiles (if your data is publicly available)

• Researchers and academics

Social media providers may transfer your data outside the EU/EEA in compliance with applicable data protection laws. More details are available in their privacy policies.
For information on who Rold Gl. Kro shares your data with, see the section below.

Retention period
Direct messages are stored for up to one year, depending on their content.
You are encouraged to delete comments, likes, and other interactions on our profiles if you no longer wish them to be visible. Rold Gl. Kro does not delete publicly available interactions.
Refer to the privacy policies of the respective social media providers for information on their data retention periods.

8. Disclosure to other controllers and data processors
To fulfil the above purposes, we may provide third parties with access to your personal data under contractual agreements. These may include IT providers, email service providers, and IT solution vendors. These service providers process data only according to our instructions.

If Rold Gl. Kro undergoes structural changes, such as a full or partial sale of the business, data processing may be based on GDPR Article 6(1)(f) regarding legitimate interests in asset transfers.

In certain circumstances, we may disclose personal data to the police, lawyers, auditors, courts, public authorities, potential buyers, or affiliated companies.
If data is transferred outside the EU/EEA, such transfers are based on the EU-U.S. Data Privacy Framework or EU Standard Contractual Clauses.

9. Your rights

• You have the right to access your personal data

• You have the right to object to our data processing

• You have the right to request correction or deletion of your data, subject to legal obligations

• You can request restrictions on data processing

• In some cases, you can request a copy of your data and transfer it to another controller (data portability)

• You can withdraw consent at any time, and we will delete your data unless we can continue processing it on another basis

10. Links to other websites
Our website may contain links to external sites. We are not responsible for their content or data practices. Please review their privacy policies.


11. Questions and complaints
For inquiries or complaints regarding this privacy policy, contact:

Rold Gl. Kro A/S
Address: Hobrovej 11, Rold, 9510 Arden
CVR: 42536873
Email:
Phone: +45 98 56 17 00

If unresolved, complaints can be directed to the Danish Data Protection Agency:
Carl Jacobsens Vej 35, 2500 Valby
Phone: +45 33 19 32 00
Email: