Privacy
Only what is needed
The controller for the website and booking enquiries is Mikkel Freltoft Krogsholm, mikkelkrogsholm@gmail.com.
Purpose and legal basis
Name, email, phone number, dates, guest count and message are used only to assess and answer your enquiry. Processing is necessary to take steps before a possible rental agreement (GDPR Article 6(1)(b)); abuse prevention relies on legitimate interests (Article 6(1)(f)). Your data is not used for marketing.
Recipients, retention and transfers
The enquiry is delivered to the configured administration channel and may trigger an email notification through Resend. When the private administration service is configured, it is the primary recipient; otherwise Resend is the technical delivery channel. The public website has no database. Information is kept only for as long as handling the enquiry and any contract, accounting or legal claims require; the controller sets the specific deletion practice. Resend may use processors outside the EEA under the safeguards described in its data processing addendum.
IP address and map
The server holds an IP address in memory for rate limiting for about 15 minutes. If delivery of a valid enquiry cannot be confirmed, the same form details may be held temporarily for no more than 15 minutes so you can safely retry from the same page; they are then deleted. A short-lived, cryptographically opaque attempt identity may be held by the running process so an identical retry does not count twice; it contains no readable form content. Durable duplicate handling belongs to the selected delivery recipient. The map loads only after you open it; OpenStreetMap may then receive your IP address. The text list works without the map.
Your rights
You may request access, correction, deletion, restriction or portability, or object to processing, by contacting the address above. You may complain to the Danish Data Protection Agency. No automated decision-making or profiling takes place.
Contact about personal data
Questions about processing can be sent to the controller at the address above. Mention which enquiry and approximate date your request concerns, but do not send sensitive information in ordinary email. Identity may be checked before information is disclosed or erased so that another person cannot gain access to your data.