Privacy policy
Last updated: 12 October 2026
1. Data controller
Torup Bakkegård & Orelund I/S Middelfartvej 105, 5610 Assens, Denmark CVR no. 30105249 Phone: +45 6479 1222 Email: info@torupbakkegaard.dk We are the data controller for the personal data you provide through this website. If you have questions about how we process your data, please contact us.
2. When you visit the website
When you visit the website, our hosting provider processes technically necessary data such as your IP address, browser type and the time of the visit. This data is only used to deliver the site securely and to detect and prevent abuse and errors. The legal basis is our legitimate interest in running a secure website, cf. Article 6(1)(f) of the GDPR. Log files are kept briefly and are deleted automatically within 30 days. If you say yes in the cookie banner, we use a statistics tool to see how the website is used (page views, how you found us, device and approximate location). Statistics data is kept for 14 months. The legal basis is your consent, cf. Article 6(1)(a), and you can withdraw it at any time under "Cookie settings". We store a record of your choice (random ID, yes/no, time — no IP address) to be able to document consent, cf. Article 7(1); it is deleted after 2 years. We use no marketing tools, and we do no profiling. Read more in our cookie policy.
3. Job applications
When you apply for a position through the website, we process your name, email address, phone number, message and CV. The purpose is to assess your application and possibly invite you to an interview. The legal basis is Article 6(1)(b) (steps prior to a potential employment contract). Please do not include your Danish CPR number, health information or other sensitive data in your application or CV. Your application and CV are deleted automatically 6 months after we receive them. If you are hired, the application is transferred to your personnel file and handled under our rules for employee data.
4. Inquiries about Aspargesladen
When you send an inquiry through the form, we process your name, email address, phone number and the details of your event. The purpose is to answer your inquiry and send you an offer. The legal basis is Article 6(1)(b) and (f). Inquiries are deleted automatically 2 years after we receive them. If the inquiry leads to an agreement, the necessary information is kept in accordance with the Danish Bookkeeping Act (5 years after the end of the financial year).
5. Protection against spam and abuse
To protect the forms against spam and automated attacks, we store an encrypted (one-way hashed) version of your IP address together with the time of submission. Your IP address cannot be read from the stored value. It is only used to limit the number of submissions and is deleted automatically after 24 hours. The legal basis is Article 6(1)(f).
6. Recipients and data processors
The data is processed by the employees who need it (recruitment, sales and event planning). We never disclose or sell your data. To run the website we use data processors who may only process the data on our instructions and under a data processing agreement: • Website hosting — servers in the EU (Frankfurt, Germany). • Database and file storage — in the EU (Frankfurt, Germany). • Sending e-mails (login codes and internal notices about new applications and inquiries). • Web statistics — only if you have given consent. Some of our suppliers are US companies. If data is transferred to or accessed from a country outside the EU/EEA, this is based on the European Commission's decision on the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses, cf. Chapter V of the GDPR.
7. Security
We protect your data with appropriate technical and organisational measures. All traffic is encrypted (HTTPS), applications and CVs are kept in a closed archive, and only selected employees have access to the administration. Logging in requires a one-time code sent to the employee's e-mail.
8. Cookies
The website only sets cookies for statistics, and only if you have given consent in the cookie banner. Read more in our cookie policy.
9. Your rights
Under the GDPR you have the right to: • Access the data we process about you • Rectification of inaccurate data • Erasure of your data • Restriction of processing • Data portability • Object to processing based on our legitimate interests Contact us at info@torupbakkegaard.dk to exercise your rights. We reply within one month at the latest. You can lodge a complaint with the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, phone +45 33 19 32 00, dt@datatilsynet.dk — www.datatilsynet.dk.
10. Changes
We update this policy when our processing changes. The current version and the date of the latest update are always available on this page.