Privacy Notice

Last updated: 04-09-2026

This Privacy Notice explains how Alba Project Group processes personal data when you visit our website, contact us, communicate with us by email or telephone, or otherwise interact with us as a customer, supplier, business partner, applicant, consultant, or other external contact.

We are committed to protecting your personal data and processing it in accordance with the General Data Protection Regulation, the Danish Data Protection Act, and other applicable data-protection legislation.

 

1. Who we are

The data controller responsible for processing your personal data is:

Alba Project Group
Ragnagade 7, 1. sal
2100 København Ø
Denmark
CVR number: 40 86 28 97

If you have questions about this Privacy Notice or our processing of your personal data, or if you wish to exercise your rights, please contact:

IT
IT@albapg.dk

2. Personal data we process

The personal data we process depends on how you interact with us.

 

2.1 Website and analytics information

When you visit our website, we may process:

  • Country or approximate geographical location.
  • IP address and technical identifiers.
  • Browser, device, and operating-system information.
  • Pages visited and interactions with the website.
  • Date, time, and duration of visits.
  • Cookie and consent preferences.
  • Other technical information necessary to operate, secure, and improve the website.

Where possible, website statistics are processed in anonymized or aggregated form.

 

2.2 Contact forms, emails, and other communications

When you contact us, including by email, we may process:

  • Your name.
  • Your email address.
  • Your telephone number.
  • Your job title, employer, and other professional information.
  • The content of your message and subsequent correspondence.
  • Email metadata, including sender, recipients, date, time, subject, and routing information.
  • Your signature and contact details.
  • Documents, images, and other attachments you provide.
  • Information necessary to respond to or follow up on your enquiry.
  • Records of our communication and handling of the matter.

 

Please avoid including sensitive or unnecessary personal data unless it is relevant to your enquiry.

3. Our purposes for processing personal data

We process personal data only where we have a valid purpose and legal basis.

 

3.1 Responding to enquiries and managing communications

We process contact details, correspondence, attachments, and related information to:

  • Receive and respond to enquiries.
  • Provide requested information.
  • Follow up on communications.
  • Route messages to the appropriate employee.
  • Maintain an appropriate record of business correspondence.
  • Protect our systems and communications against spam, fraud, malware, and other security threats.

 

Depending on the circumstances, the legal basis is:

  • Article 6(1)(b) GDPR, where processing is necessary to take steps at your request before entering into a contract or to perform a contract with you.
  • Article 6(1)(f) GDPR, based on our legitimate interests in communicating with customers, suppliers, business partners, and other external contacts, administering our activities, documenting correspondence, and protecting our organization.

 

3.2 Website operation, security, and statistics

We process website and technical information to:

  • Operate and maintain the website.
  • Protect the website and our systems against misuse and security threats.
  • Understand how the website is used.
  • Improve website performance, content, and usability.
  • Maintain aggregate statistics.

The legal bases are:

  • Article 6(1)(f) GDPR, based on our legitimate interests in operating, securing, maintaining, and improving our website.
  • Article 6(1)(a) GDPR, where processing requires and is based on your consent, such as certain analytics or non-essential cookies.

You may withdraw your consent at any time through the cookie settings available on the website. Withdrawal does not affect processing that took place before the withdrawal.

4. How we process communications

When you contact us by email, telephone, or through our contact form, your personal data may be stored and processed in our email, communication, security, and document systems.
Authorized employees may use these systems to:
  • Receive, read, organize, and respond to your communication.
  • Forward your enquiry to the appropriate employee.
  • Search, summarize, and manage correspondence.
  • Protect our systems against spam, malware, fraud, and other security threats.
  • Maintain records where necessary for operational, contractual, security, or legal purposes.

Access to communications is limited to employees and service providers who require access for their work or to operate and protect our systems.

Authorized employees may use productivity and AI-assisted tools within our Microsoft 365 environment to help search, organize, summarize, draft, and manage communications. Such tools support employees in carrying out their work and do not make decisions on our behalf without human involvement unless specified. 

5. How long we keep your data

We keep personal data only for as long as necessary for the purpose for which it was collected, or for as long as required by law.

 

  • Contact form submissions and general enquiries: Normally kept for up to 12 months after the enquiry has been concluded, unless continued communication or another legitimate reason requires longer retention.

  • Email correspondence: Kept for as long as necessary to support our business operations, communications, contractual obligations, legal requirements, security needs, and record-keeping purposes.
  • Analytics and statistics: Kept according to the settings of the relevant analytics service and, where possible, in anonymized or aggregated form.

  • Cookies: Kept for the period stated in our cookie settings, or until you delete them from your device.

Personal data may be retained for longer where required by law or where necessary in connection with a dispute, investigation, or legal claim.

 

6. Who we share your data with

We do not sell or rent your personal data. Data may be shared with:

  • Google Analytics for website analytics and statistics, subject to your consent.
  • Amazon Web Services (AWS) for hosting and infrastructure services.
  • WordPress and related service providers for operation, maintenance, and security of the website.
  • Microsoft 365 (Microsoft Ireland Operations Limited and affiliated Microsoft service providers) for email, communication, collaboration, document storage, security, and productivity services.
We may also disclose personal data where required by law or where necessary to protect our legal rights.

 

7. Cookies

Our website uses cookies and similar technologies for:

 

  • Essential website functionality.
  • Website security and preferences.
  • Analytics and statistics, subject to your consent where required.
You can review or change your choices through the cookie settings on our website. You can also delete cookies through your browser settings.

 

8. Your rights

Under applicable data-protection legislation, you may have the right to:

  • Obtain access to personal data we hold about you.
  • Request correction of inaccurate or incomplete personal data.
  • Request deletion of personal data in certain circumstances.
  • Request restriction of processing in certain circumstances.
  • Object to processing based on our legitimate interests.
  • Receive personal data in a structured, commonly used, and machine-readable format where applicable.
  • Withdraw consent at any time where processing is based on your consent.

The exercise of these rights may be subject to conditions, limitations, and exceptions under applicable law.

To exercise your rights, please contact us using the contact details provided in this Privacy Notice.