Privacy Policy

What data we process

We process the data you give us and the data that is created when you use the service:

• Account: name, email address and password. The password is stored in hashed form and cannot be read by us.
• Listings: property address, property details, photos, floor plans, documents and the phone number you choose to provide.
• Bookings: name, email address and phone number when you book an open-house viewing — also if you book without an account.
• Activity: which listings you create and which ones you like.
• Emails: verification links, booking messages and password resets.
• Technical data: IP address, browser and device, used for operations, security and debugging.

Purpose and legal basis

We process your data to be able to provide the service:

• Account, listings and bookings: because it is necessary to perform our agreement with you (GDPR Article 6(1)(b)).
• Email verification, security and abuse prevention: because we have a legitimate interest in keeping the service secure and trustworthy (Article 6(1)(f)).
• Operations, debugging and improvement: legitimate interest in keeping the service stable and working.
• Newsletters and marketing: only with your consent (Article 6(1)(a)). We do not send newsletters today.

If some data is required to create an account or a listing, we cannot do it without that data.

Cookies and local storage

We use only one necessary cookie: bolig_session. It keeps you logged in, cannot be read by JavaScript (HttpOnly) and is deleted when you log out.

We do not use cookies for statistics, advertising or tracking — which is also why you do not see a cookie banner.

While you create a listing, your answers are stored temporarily in your browser's local storage so you do not lose them on reload. They are only sent to us when you save the listing.

The bot protection (Cloudflare Turnstile) processes technical information about your browser when you use a protected form, to tell humans from bots.

If we introduce analytics later, we will update this policy and ask for consent where required.

Who we share data with

We only share data with providers that help us run the service, and only as far as necessary:

• Hetzner — hosting of the service and data (EU).
• Cloudflare — security (bot protection), DNS and traffic delivery.
• Mailgun — sending emails such as verification and booking messages.
• Sentry — error monitoring, so we can find and fix bugs.
• Datafordeler and Adressevælger (KDS) — address and building data (BBR) lookups when you create a listing.

Some providers may process data outside the EU/EEA. Where that happens, it is done on a lawful transfer basis, such as the European Commission's Standard Contractual Clauses.

We do not sell your data, and we only disclose it to authorities if we are legally required to.

How long we keep data

• Account data is kept for as long as you have an account. If you delete your account, we delete the data.
• Listings with photos and documents are kept until you delete them or your account.
• Booking data is kept for as long as needed to manage the viewing and document what happened.
• Security and error logs are kept for a limited period and are only used for operations and security.
• When data is no longer needed, we delete or anonymise it.

Your rights

Under the GDPR you have the right to:

• access the data we process about you.
• have incorrect data corrected.
• have data deleted (the right to be forgotten).
• have processing restricted.
• object to processing based on our legitimate interest.
• receive your data in a common format (data portability).

You can delete your account from your profile. To use any of your other rights, contact us using the details below. You can also complain to the Danish Data Protection Agency (Datatilsynet) — see datatilsynet.dk.

Security

Access to data is limited to what is necessary, the connection to the site is encrypted with HTTPS, and passwords are stored hashed. The session key lives in an HttpOnly cookie that cannot be read by scripts in the browser.

Changes to this policy

We update this policy when we change the way we process data. The date of the latest update is shown at the top of the page.

Data controller

Company

Aterionet

Address

Fuglehaven 20, 8660 Skanderborg

Email

[email protected]