Data protection guidelines (EU GDPR)

1. Introduction

We, Express Weddiv (operator of the website https://www.heiraten-in-daenemark.dk), take the protection of your personal data very seriously. This privacy policy explains what information we collect, how we use that information, and what rights you have in relation to your data. We are committed to protecting your data in accordance with the General Data Protection Regulation (GDPR) and other relevant data protection laws.

2. Who we are

Our website address is: https://www.heiraten-in-daenemark.dk. We offer services related to marriage in Denmark, including advice and assistance with the application and document management. Our clients can use a secure online portal to upload their personal documents required for the marriage application.

3. Collection and processing of personal data

We collect and process personal data exclusively in accordance with the principles of the GDPR, in particular on the basis of the legal basis in Art. 6 GDPR.

a) Comments and communications

When visitors leave comments on our site we collect the data shown in the comment form, the visitor’s IP address and the user agent string (to identify the browser) to help spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The privacy policy of the Gravatar service can be found here: https://automattic.com/privacy/. After your comment is approved, your profile picture will be publicly visible in the context of your comment.

b) Media

If you are a registered user and upload photos or other documents to our secure portal, please be careful not to upload files with embedded location data (EXIF GPS). This is especially true for sensitive documents required for the marriage proposal. Visitors to our website do not have access to these uploaded files; they are only viewed by authorized employees.

c) Cookies

If you leave a comment on our website, this may be consent to save your name, email address and website in cookies. This is a convenience feature so that you do not have to enter this data again when you write another comment. These cookies are saved for one year.

If you have an account for our secure portal and you log in to this website, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is deleted when you close your browser.

When you log in to the portal, we set up some cookies to save your login information and display options. Login cookies expire after two days and display options cookies expire after one year. If you select "Stay logged in" when logging in, your login will be maintained for two weeks. When you log out of your account, the login cookies are deleted.

When you upload or edit documents, an additional cookie is stored in your browser. This cookie does not contain any personal data and only refers to the ID of the document you have just edited. The cookie expires after one day.

d) Embedded content from other websites

Posts on this website may include embedded content (e.g. videos, images, posts, etc.). Embedded content from other websites behaves as if the visitor has visited the other website directly. These websites may collect data about you, use cookies, embed additional third-party tracking services, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to the other website.

4. Purpose of data processing

The personal data we collect is processed for the following purposes:

  • Fulfillment of contract: Provision of our services, including the secure management and verification of uploaded documents, as well as processing payments (Art. 6 Para. 1 lit. b GDPR).
  • Customer support: Processing of inquiries, support in using our portal and provision of individual support (Art. 6 Para. 1 lit. b GDPR).
  • Legal obligations: Compliance with legal requirements, e.g. tax retention obligations or the obligation to document application processes (Art. 6 Para. 1 lit. c GDPR).
  • Legitimate interests: Protecting our IT infrastructure, preventing fraud, and improving our services (Art. 6 Para. 1 lit. f GDPR).

5. Transfer of data to third parties

We will only share your personal information with third parties if:

  • You have given your express consent (Art. 6 para. 1 lit. a GDPR),
  • the transfer is necessary to fulfil a contract (Art. 6 para. 1 lit. b GDPR),
  • we are legally obliged to do so (Art. 6 Para. 1 lit. c GDPR)Or
  • the transfer is based on legitimate interests (Art. 6 para. 1 lit. f GDPR).

The recipients of your data may include:

  • Service provider: IT service providers, payment service providers, hosting providers who act on our behalf and are contractually obliged to comply with the GDPR. These service providers support us in the secure management of your data and the provision of our portal.
  • Authorities: Tax authorities, regulatory authorities, law enforcement authorities, as required by law or as part of the application process.

6. Transfer to third countries

Your personal data will only be transferred to third countries (countries outside the European Economic Area) if this is necessary to fulfil the contract, if you have given us your consent, or if this is done on a legal basis or based on legitimate interests. In this case, we ensure that appropriate protective measures are taken in accordance with Art. 44 ff. GDPR (e.g. by concluding standard contractual clauses of the EU Commission).

7. Storage period

We only store your personal data for as long as it is necessary to fulfil the purposes for which it was collected, or as required by statutory retention periods. Comments and their metadata are stored indefinitely so that we can automatically recognise and approve follow-up comments. We store user profiles and the information they contain as long as the user account is active. Documents uploaded to the portal are stored for the duration of the application process and beyond in accordance with statutory retention periods.

8. Rights of data subjects

You have the right:

  • To request information (Art. 15 GDPR): about the processing of your personal data and to receive a copy of the stored data.
  • To request rectification (Art. 16 GDPR): incorrect or incomplete data.
  • To request deletion (Art. 17 GDPR): Your personal data, unless there are statutory retention periods to the contrary.
  • To request restriction of processing (Art. 18 GDPR): under certain circumstances.
  • To object (Art. 21 GDPR): against the processing of your data if it is based on legitimate interests.
  • To request data portability (Art. 20 GDPR): the release of your data in a common, machine-readable format.
  • To lodge a complaint (Art. 77 GDPR): with a supervisory authority if you believe that the processing of your data violates applicable law.

9. Data security

We use technical and organizational measures to protect your data, especially the documents uploaded to the portal, from unauthorized access, loss, misuse or destruction. Our website and portal use HTTPS encryption to secure the transmission of your data. Your data is stored exclusively on servers within the European Union that are subject to strict security standards. These measures include, among other things, encryption technologies, regular security checks and the use of firewalls. Our security measures are regularly reviewed and adapted to technological developments.

10. Where your data is sent

Visitor comments may be checked through an automated spam detection service. When requesting a password reset, your IP address will be included in the reset email. Documents uploaded to the portal are stored securely on our servers and are only viewed by authorized employees.

11. Changes to the Privacy Policy

We reserve the right to change this privacy policy at any time in order to adapt it to current legal or technical requirements. The latest version can be found on our website.

12. Contact

If you have any questions or concerns regarding the processing of your personal data or to exercise your rights, please contact:

Express Weddiv SL

Email: info@heirat.dk

Phone: +4570726130