Privacy policy

Introduction

This privacy policy explains how Odsherred Zoo Rescue ("we", "us", "our") collects, uses, and protects your personal data when you use our website and services. We are committed to protecting your privacy in accordance with the EU General Data Protection Regulation (GDPR) and the Danish Data Protection Act (Databeskyttelsesloven).

Data controller

The data controller for the personal data processed through this website is:

Data we collect

We collect personal data only when necessary for our services. The categories of data we collect include:

• •Account information: name, email address, and password when you create an account.
• •Payment data: billing details processed securely by our payment provider Stripe. We do not store your full card details on our servers.
• •Contact form submissions: name, email, and message content when you contact us.
• •Newsletter signups: your email address when you subscribe to our newsletter.
• •Website analytics: we use Plausible Analytics, which is cookieless and does not collect any personal data. No IP addresses or identifiable information are processed.
• •Ticket and donation records: purchase amounts, dates, and associated email for order fulfillment.

Legal basis for processing

We process your personal data on one or more of the following legal bases under GDPR Article 6:

• •Consent (Article 6(1)(a)): newsletter subscriptions. You may withdraw consent at any time.
• •Contract (Article 6(1)(b)): processing necessary to fulfill ticket purchases, donations, and animal sponsorships.
• •Legitimate interest (Article 6(1)(f)): improving our services, website security, and fraud prevention.
• •Legal obligation (Article 6(1)(c)): tax records, accounting requirements, and compliance with Danish law.

Data sharing with third parties

We share your data only with trusted service providers necessary to operate our services:

• •Stripe (payments): processes your payment data securely. Stripe is PCI DSS Level 1 certified. Privacy policy: stripe.com/privacy.
• •Resend (transactional email): sends order confirmations and account emails. Privacy policy: resend.com/legal/privacy-policy.
• •Plausible Analytics (website analytics): collects no personal data. Fully GDPR compliant without cookies. Privacy policy: plausible.io/privacy.
• •Brevo (newsletter): processes your email address for newsletter delivery. Privacy policy: brevo.com/legal/privacypolicy.

We never sell, rent, or trade your personal data to third parties for marketing purposes.

Data retention

We retain your personal data only for as long as necessary:

• •Account data: retained while your account is active, deleted within 30 days of account deletion request.
• •Transaction records: retained for 5 years as required by Danish accounting law (Bogforingsloven).
• •Contact form messages: retained for 12 months, then deleted.
• •Newsletter subscriptions: retained until you unsubscribe.
• •Analytics data: Plausible retains aggregated, non-personal statistics indefinitely.

Your rights under GDPR

Under the GDPR, you have the following rights regarding your personal data:

• •Right of access: request a copy of the personal data we hold about you.
• •Right to rectification: request correction of inaccurate personal data.
• •Right to erasure: request deletion of your personal data ("right to be forgotten").
• •Right to restriction: request that we limit the processing of your data.
• •Right to data portability: receive your data in a structured, machine-readable format.
• •Right to object: object to processing based on legitimate interests.
• •Right to withdraw consent: withdraw consent at any time for consent-based processing.

How to exercise your rights

To exercise any of your rights, please send an email to info@odsherredzoo.dk with the subject line "Data rights request". We will respond within 30 days as required by GDPR. We may ask you to verify your identity before processing your request.

Supervisory authority

If you believe that our processing of your personal data violates data protection legislation, you have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet):

Changes to this policy

We may update this privacy policy from time to time. Significant changes will be communicated on our website. The "last updated" date at the top of this page indicates when the policy was last revised.

Contact us

If you have questions about this privacy policy or wish to exercise your rights, please contact us at info@odsherredzoo.dk or use our contact form.