Privacy Policy

At House of Dalsgaard, we respect your privacy. This Privacy Policy explains how we process your personal data when you visit our website, contact us, create a customer account, order a work or are registered as the owner of a House of Dalsgaard work.

We process personal data only when we have a legitimate purpose and a lawful basis for doing so.

1. Data Controller

House of Dalsgaard is the data controller responsible for processing your personal data.

House of Dalsgaard

Danish Business Registration No. (CVR): 46803698

Astrupvej 179

9870 Sindal

Denmark

Email: kontakt@houseofdalsgaard.com

Telephone: 93 98 70 78

You are welcome to contact us if you have questions about our processing of your personal data or wish to exercise your rights.

2. What Information Do We Process?

The information we process depends on your relationship with House of Dalsgaard.

When You Contact Us

If you send us an enquiry or otherwise contact us, we may process:

• Name
• Email address
• Telephone number
• The content of your enquiry
• Information about the desired work or project
• Files and images you choose to send
• Subsequent correspondence

We use this information to respond to your enquiry, assess a potential commission and, where relevant, initiate a customer relationship or ordering process.

For specific requests for a quotation, an individual order or a potential customer project, we process the information to take steps at your request before potentially entering into a contract.

For general enquiries not connected with a specific quotation or order request, we assess the relevant legal basis separately — typically to respond to your enquiry and operate our business responsibly.

Ordinary contact and project enquiries submitted through the website do not require separate consent for this case handling. We rely on consent only where processing requires it, such as for non-essential cookies or marketing.

If an enquiry does not result in a customer relationship or order, we generally delete or anonymise the information no later than two years after the last relevant contact, unless we have a specific lawful need to retain it for longer.

When You Create a Customer Account

We process the information necessary to create and administer your account, including your name and email address and, where relevant, your telephone number.

In connection with login and secure operation, we may also process technical information such as IP address, browser/user agent, sessions and login timestamps.

We use this information to provide the customer portal, identify you and protect your account and our systems against misuse.

When You Order or Commission a Work

We may process:

• Contact details
• Enquiries and correspondence
• Information about the requested work
• Individual preferences and specifications
• Project and order information
• Agreed prices and relevant calculations
• Delivery information
• Files and images associated with the project

This processing is carried out to enter into and fulfil our agreement with you.

Information about completed customer projects is generally retained for up to five years after project completion where there remains a relevant documentation or business need.

Information constituting accounting records is retained for the period required by law. Under the Danish Bookkeeping Act, accounting records must generally be kept for five years from the end of the financial year to which they relate.

3. Registered Works, Certificates and Ownership

House of Dalsgaard maintains a register of individual physical works.

A registered work may be associated with, among other things:

• A unique HOD number
• Design and classification
• Manufacturing details
• Materials and finish
• Images of the individual work
• Certificate and certificate status
• Ownership and transfer information

When you are registered as the owner of a work, your customer account may be linked to the work's ownership record.

The purpose is to document the work's authenticity, certificate and provenance, and to enable subsequent changes of ownership to be documented and registered.

Long-Term Documentation of Works

Information about the work itself, including its HOD number, manufacturing details, certificate and necessary provenance history, may be retained long-term, generally for as long as House of Dalsgaard has a legitimate need to document the work's authenticity and history.

This does not mean that identifying personal data about a previous owner will necessarily be retained for the same period.

When we no longer have a lawful need to identify a previous owner, ownership details may be removed or anonymised while the historical record is preserved.

A work's history may therefore continue to show, for example, that a previous period of ownership existed without retaining the former owner's name, email address or other directly identifying information.

This processing is based on House of Dalsgaard's legitimate interest in documenting the authenticity, certificates and provenance of original works and preventing forgery or misleading representations of a work's history.

4. Transfer of Ownership

If a registered work is transferred to a new owner, we process the information necessary to carry out and document the transfer.

This may include information about the current owner, the new owner's email address, the work concerned, and the status and time of the transfer.

If the new owner does not yet have a House of Dalsgaard account, their email address may be used to identify the intended recipient and subsequently link the work to their account.

The fact that a transfer occurred may subsequently form part of the work's provenance, while personal data may be deleted or anonymised when there is no longer a lawful need to retain it.

5. Public Verification

House of Dalsgaard offers public verification of registered works.

Public verification may display information about a work, such as:

• HOD number
• Design and classification
• Manufacturing details
• Images of the work
• Certificate status

The purpose is to allow others to check whether a work has been registered and documented by House of Dalsgaard.

The owner's name, email address, telephone number and other private information are not disclosed through public verification.

6. Our Legal Bases for Processing

The applicable legal basis depends on why we process the information.

Contract and pre-contractual steps apply, among other things, when we process information to handle a specific quotation or order enquiry, prepare or discuss an order, carry out a project, deliver a work or administer a relevant customer relationship.

Legal obligation applies when the law requires us to process or retain certain information, such as accounting records.

Consent is used only where processing requires your consent, such as for any non-essential cookies or similar technologies, or for marketing where required. Ordinary responses to contact and project enquiries are not based on consent.

Legitimate interests may apply, among other things, to necessary security and prevention of misuse, responses to general enquiries not linked to a specific quotation or order, and our interest in documenting the authenticity, certificates and provenance of original House of Dalsgaard works.

When relying on legitimate interests, we balance our interests against your rights and interests.

7. How Long Do We Retain Information?

We do not retain personal data for longer than necessary for the purpose for which it was collected, unless the law or another lawful purpose requires longer retention.

As a general rule, we apply the following principles:

General enquiries that do not lead to a customer relationship: deleted or anonymised no later than two years after the last relevant contact.

Completed customer projects: relevant customer and project information is generally retained for up to five years after completion, unless shorter or longer retention is necessary or required.

Accounting records: retained in accordance with applicable law. The Danish Bookkeeping Act generally requires retention for five years from the end of the relevant financial year.

Customer accounts: retained while the account is active or necessary for an existing customer relationship or registered ownership. An inactive account with no relevant works or other necessary history may be deleted or anonymised after two years of inactivity.

Technical security and session information: retained only as long as necessary for functionality, security and prevention of misuse.

Private project files and images: generally follow the retention period applicable to the matter or project to which they relate.

HOD number, work details, certificate and necessary provenance: may be retained long-term as part of House of Dalsgaard's work register. Identifying owner details are deleted or anonymised when there is no longer a lawful need to retain them.

8. Deletion of a Customer Account

You may request deletion of your customer account and personal data.

If the account contains no information that we remain legally required or entitled to retain, the information may be deleted.

If the account contains history relating, for example, to a registered work, certificate, ownership or records that must be retained by law, we may instead delete or anonymise personal data that is no longer necessary.

For example, an HOD number, certificate and anonymised provenance history may be retained even if the previous owner's account and directly identifying information are removed.

9. Data Processors and Technical Providers

House of Dalsgaard uses external technical providers to operate our website and services.

These include:

• Vercel: hosting and delivery of our website frontend and aggregated, anonymised visitor statistics (Web Analytics).
• Render: hosting and operation of our API/backend.
• Neon: database infrastructure.
• Cloudflare: storage and delivery of images and files, including via R2.
• Resend: delivery of relevant emails, including transactional emails.

These providers may process personal data on our behalf to the extent necessary to provide their services.

We use appropriate data processing agreements and other necessary safeguards where a provider acts as a data processor.

We do not sell your personal data.

10. Transfers Outside the EU/EEA

Some of our providers or their subprocessors may be established outside the EU/EEA or may process information there.

If personal data is transferred to a country outside the EU/EEA, we ensure that the transfer is based on a valid mechanism under data protection law, such as an adequacy decision or the European Commission's Standard Contractual Clauses, where relevant.

11. Private Files and Images

If you send us files or images in connection with an enquiry or project, these may be stored with the relevant case.

Private attachments are treated as private and are not made publicly available as ordinary public material.

Images of a completed physical work registered as documentation may, however, form part of the work's documentation and appear on relevant work pages and in public authenticity verification.

We do not publish private customer photographs or project materials as work documentation unless the material is intended for that purpose or we otherwise have a lawful basis for publication.

12. Cookies, Login and Visitor Statistics

We use necessary technologies for login, session management, security and basic website functionality, among other purposes.

We use Vercel Web Analytics for general visitor statistics on public pages. The statistics are aggregated and help us understand website usage. We do not use cookie-based third-party analytics such as Google Analytics.

You can read more about cookies, statistics and retention in our Cookie Policy.

Cookies and similar technologies requiring consent are used only after the necessary consent has been obtained.

13. Security

We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, disclosure and unauthorised access.

Access to administrative functions and private customer information is restricted and requires authentication and appropriate access rights.

Private customer attachments are handled separately from publicly accessible images and media.

14. Your Rights

When we process personal data about you, you have a number of rights under data protection law.

Depending on the processing involved, you may have the right to:

• Access the information we process about you
• Rectification of inaccurate information
• Erasure of information
• Restriction of processing
• Object to processing
• Data portability for certain information
• Withdraw consent

Your rights are not absolute. For example, we may be legally required to retain certain information or have another lawful basis for continuing to process it.

If you wish to exercise your rights, please contact us at: kontakt@houseofdalsgaard.com

15. Complaints to the Danish Data Protection Agency

If you are dissatisfied with how we process your personal data, you are welcome to contact us first.

You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet).

16. Changes

We may update this Privacy Policy if our services, personal data processing, providers or applicable rules change.

The current version will be published on this page with the date of the latest update.