GDPR

Data Controller

MSCD Group I/S is the data controller for personal data submitted through the contact form on this website. We are committed to protecting your privacy and handling your data in accordance with Regulation (EU) 2016/679 (GDPR) and the Danish Data Protection Act (Databeskyttelsesloven).

What Data We Collect

We collect only the personal data you voluntarily provide when submitting the contact form on this website. This data includes:

• Full name
• Email address
• Subject line (optional)
• Message content

We do not collect sensitive personal data (special categories under Article 9 GDPR) and we do not use automated profiling or automated decision-making based on your data.

Purpose of Processing

The personal data you provide is used solely to:

• Respond to your enquiry or request
• Establish, maintain, or manage a business relationship

We do not use your data for marketing without your separate consent, and we do not sell or rent personal data to third parties.

Legal Basis

Processing is based on Article 6(1)(b) GDPR - processing necessary to take steps at the request of the data subject prior to entering into a contract - and Article 6(1)(f) GDPR - our legitimate interest in responding to business enquiries.

Disclosure to Third Parties

Contact form submissions are processed through Web3Forms (web3forms.com), which acts as our data processor. Web3Forms transmits form submissions to our designated email address and does not retain personal data beyond the time needed to deliver the message.

No other third parties receive your personal data unless we are legally required to disclose it.

Storage and Retention

We retain correspondence data - including contact form submissions - for as long as necessary to respond to your enquiry and, if a business relationship is established, for the duration of that relationship plus any legally required retention period (typically 5 years in accordance with the Danish Bookkeeping Act).

Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access - You can request a copy of the personal data we hold about you.
• Right to rectification - You can ask us to correct inaccurate data.
• Right to erasure - You can ask us to delete your data, subject to legal retention obligations.
• Right to restriction - You can ask us to limit how we use your data.
• Right to data portability - You can request your data in a structured, machine-readable format.
• Right to object - You can object to processing based on legitimate interests.

To exercise any of these rights, please contact us at info@mscdgroup.com. We will respond within 30 days.

Complaints to the Danish Data Protection Authority

If you believe we are processing your personal data in violation of GDPR, you have the right to lodge a complaint with the Danish Data Protection Authority (Datatilsynet):