How I handle your personal data

When you contact me or become a client, I receive information about you. Here you can read what that information is, what I use it for, how long I keep it, and what rights you have.

Data controller

Nørby Boligrådgivning ApS
CVR 46728262
Kærvej 113, 7190 Billund, Denmark
Phone +45 29 49 80 53
Email fie@norbybolig.dk

If you have questions about how I handle your data, you can always contact me directly.

When you contact me

If you write through the form on this website, by email, or call me, I process the information you give me. This is typically your name, email, phone number, what your enquiry is about, and your message.

I use this information to answer you and to give you an offer of advice. The legal basis is that you have asked me to, and my legitimate interest in answering enquiries, under Article 6(1)(b) and (f) of the General Data Protection Regulation.

Do not send your CPR number or health information through the form. If I need them, we agree on how you send them securely.

When you are a client

When I advise you on a property purchase or draft a legal document, I process the information needed for the task. This may be:

• name, address, email and phone number
• information about the property and the transaction, including the purchase agreement, condition report, land register information and correspondence with the seller's agent
• financial information, to the extent it matters for the transaction or the document
• information about family and ownership, when I draft a will, prenuptial agreement, co-ownership agreement or future power of attorney
• CPR number, when it is needed for registration or required by law

The legal basis is our agreement, under Article 6(1)(b), and the duties the law places on me, under Article 6(1)(c), including the Danish Bookkeeping Act and the Danish Anti-Money Laundering Act. I process CPR numbers under section 11(2) of the Danish Data Protection Act.

If a task involves sensitive information, for example about health in connection with a future power of attorney, I process it only to the extent the task requires, and with your explicit consent or because it is necessary to establish a legal claim, under Article 9(2)(a) and (f).

This website and cookies

This website does not use cookies, and I do not use statistics or tracking tools. That is why you are not asked to consent to cookies.

The website is hosted by Netlify. As with any website, the server technically registers your IP address when you visit. The fonts on the site are loaded from Google Fonts, which therefore also receives your IP address.

Who receives your data

I never sell your data. I share it only when necessary:

• with the suppliers who run my website, email and IT, and who process the data on my behalf under a data processing agreement
• with other parties to your transaction, for example the seller's agent, your bank or the Danish Land Registration Court, when this is part of the task
• with public authorities, when the law requires it

Netlify and Google are US companies. Transfers of data to the United States are based on the European Commission's decision on the EU-U.S. Data Privacy Framework or on the European Commission's standard contractual clauses.

How long I keep your data

• Enquiries that do not lead to an agreement are deleted no later than 6 months after our last contact.
• Accounting records are kept for 5 years from the end of the financial year, as the Danish Bookkeeping Act requires.
• Information I must keep under the Anti-Money Laundering Act is kept for 5 years after the client relationship has ended.
• My file on your property transaction is kept for 10 years after the transaction is completed, so I can document my advice if a claim is raised later.
• Copies of wills, prenuptial agreements and future powers of attorney are kept for as long as the document is in force, unless you ask me to delete them.

Your rights

You have the right to know what information I hold about you and to receive a copy of it. You can also ask me to correct inaccurate information, delete information, restrict my processing of it, or object to the processing. If you have given consent, you can withdraw it at any time. In certain cases you also have the right to receive your data in a common machine-readable format.

Some of these rights have exceptions, for example when the law requires me to keep the information. If I cannot meet your request, I will tell you why.

Complaints

If you are unhappy with how I handle your data, I would like to hear it first. You can also complain to the Danish Data Protection Agency, Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, Denmark, datatilsynet.dk.

Last updated September 2026.