GDPR Information

Last updated: August 4, 2026

Introduction

The General Data Protection Regulation (GDPR) is a European Union regulation that governs how organizations process and protect personal data. As a business operating in Denmark, we comply with GDPR requirements and respect your data protection rights.

Data Controller

For the purposes of GDPR, the data controller is:

Nord Bakery
Nørrebrogade 147
2200 København N
Denmark
Email: [email protected]

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contractual necessity: Processing is necessary to fulfill our contract with you when you place an order
• Legitimate interests: We have a legitimate interest in operating our business and improving our services
• Consent: Where required, we obtain your explicit consent before processing certain types of data
• Legal obligation: We process data to comply with legal requirements such as accounting and tax obligations

Your Rights Under GDPR

You have the following rights regarding your personal data:

Right to Access

You have the right to obtain confirmation of whether we are processing your personal data and to request a copy of that data.

Right to Rectification

You can request that we correct inaccurate or incomplete personal data about you.

Right to Erasure

You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

Right to Restriction of Processing

You can request that we restrict processing of your personal data in specific situations, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format and to transmit that data to another controller.

Right to Object

You may object to our processing of your personal data based on legitimate interests. We will cease processing unless we have compelling legitimate grounds that override your interests.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

How to Exercise Your Rights

To exercise any of your GDPR rights, please send a request to [email protected]. We will respond to your request within one month, although this period may be extended in complex cases.

When submitting a request, please provide sufficient information to allow us to verify your identity and locate your data in our systems.

Data Protection Officer

For questions about how we handle your personal data or to exercise your rights, you may contact us at the email address above.

Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet):

Datatilsynet
Carl Jacobsens Vej 35
2500 Valby
Denmark
Phone: +45 33 19 32 00
Email: [email protected]

International Data Transfers

We primarily store and process data within the European Economic Area. If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority without undue delay, in accordance with GDPR requirements.