Privacy Policy

Who we are

Suggested text: Our website address is: https://bergsauto.dk.

Privacy policy for Bergs Auto ApS

Last updated: 11 October 2026 [change to the date of publishing]

At Bergs Auto ApS we take your privacy seriously. This page explains what personal data we collect when you visit our website, ask us to buy your car, ask us to find you a car, buy from us, or contact us. It also explains why we need the data, how long we keep it, and what rights you have.

1. Who is responsible for your data

Bergs Auto ApS is the “data controller”. You can reach us here:

Bergs Auto ApS Saturnvej 9, 6000 Kolding, Denmark CVR no.: [CVR number] Phone: +45 52 19 39 19 Email: [vb@bergsauto.dk: confirm, or give another address for privacy questions]

2. What we do with your data

A. You ask us to buy your car (the “Sell your car” form)

• Data: your name, phone number and email; details about the car (registration number, mileage, make and model, year, gearbox, condition, registration tax and VAT status); the photos and documents you upload; anything you write in the note field.
• Why: to assess the car, make you an offer and contact you. This is necessary to take steps at your request before an agreement is made (GDPR Art. 6(1)(b)).
• Where it is kept: your enquiry and photos are stored in our business systems, [Monday.com and Google Drive: confirm once the form is connected]. See section 3.
• How long: if we buy the car, we keep the records for 5 years from the end of the financial year, as the Danish Bookkeeping Act requires (Art. 6(1)(c)). If no deal is made, we delete your enquiry and photos after [12 months].
• Your photos: we only use them to assess the car [confirm: we do not reuse them for advertising]. Photos can contain location data (GPS). If you prefer, remove it before you upload.
• Please note: only upload what is needed. Do not upload ID documents or anything showing your CPR number.

B. You buy from us, or sell to us, as a business (export customers and dealers)

• Data: the contact person’s name, company, phone and email; the vehicle concerned; invoices, payment details and export documents.
• Why: to carry out the agreement (Art. 6(1)(b)) and to meet our legal duties, such as bookkeeping (Art. 6(1)(c)).
• How long: 5 years from the end of the financial year.

C. You tell us which car you are looking for (the “Can’t find your vehicle?” form)

• Data: your name, phone number and email; what car you are looking for; your budget and timeframe; your message.
• Why: to look for a suitable car and contact you. This is a step taken at your request before an agreement is made (Art. 6(1)(b)).
• How long: until we have answered you and the search is finished, and no longer than [12 months]. If it leads to a deal, section B applies instead.

D. You contact us (contact form, email, phone or WhatsApp)

• Data: your name, phone or email, your message, and which team member you chose.
• Why: to answer you. This is our legitimate interest in handling enquiries (Art. 6(1)(f)), or a step before an agreement (Art. 6(1)(b)).
• How long: until your enquiry is handled, and no longer than [12 months]. If it leads to a deal, section A or B applies instead.
• WhatsApp: if you write to us on WhatsApp, WhatsApp (Meta) handles the messages under its own privacy policy. We see your number and your messages.

E. You visit our website

• Data: your IP address, browser and device type, the pages you visit and the time. Our hosting provider, [Simply.com: confirm], logs this for security and to keep the site running.
• Why: our legitimate interest in running a safe and working website (Art. 6(1)(f)).
• How long: [number of days: the host’s normal log period].
• Content from other companies: our pages show vehicle photos from Google Drive and a Google Map on each car page. They load fonts from Google Fonts [until we host them ourselves], and the “Sell your car” form uses Google reCAPTCHA to stop spam [once switched on]. The PDF and share features on car pages use a tool loaded from Cloudflare’s network (cdnjs). When this content loads, your IP address is sent to Google or Cloudflare.
• Statistics: if you agree, we use Google Analytics (through the MonsterInsights plugin) to see how the site is used.
• Cookies: cookies that are not strictly necessary (statistics, marketing) are only used if you agree in our cookie banner (Art. 6(1)(a)). We store your cookie choice so that we can show we respected it. Read more in our [Cookie policy: link to the real page].

3. Who we share your data with

• Public authorities, such as Motorstyrelsen and the Danish Tax Agency, when we deregister your car and handle the export. [confirm]
• Service providers (called data processors) who help us run our business. They may only use the data on our instructions, under a data processing agreement. They are:
  • Monday.com: we use it to keep track of enquiries and cars. [confirm]
  • Google Drive: stores photos and documents. [confirm]
  • [Name of our email provider]: form submissions reach us by email.
  • [Simply.com]: hosts the website.
  • [Accounting system]: for invoices and bookkeeping.
• Google, Cloudflare and Meta/WhatsApp, as described in section 2.
• Buyers abroad, only if the export documents contain your personal data, and only what is needed. [confirm]

We never sell personal data.

Some of these providers, such as Google, Cloudflare and Meta, are based in the USA, and [Monday.com and our email provider may store data outside the EU: confirm where their servers are]. Data is transferred under the EU–US Data Privacy Framework or the EU’s standard contractual clauses.

4. Your rights

You have the right to:

• see what data we hold about you (access)
• have wrong data corrected
• have your data deleted, in certain cases
• have our use of your data restricted, in certain cases
• object to our use of your data, in certain cases
• receive your data in a common, machine-readable format (data portability)
• withdraw a consent at any time, where we rely on consent

To use your rights, contact us using the details in section 1. We reply within one month.

5. Complaints

You can complain to the Danish Data Protection Agency (Datatilsynet): www.datatilsynet.dk. We hope you contact us first, so we can try to solve it.

6. Security

We limit access to personal data to the people who need it, and we use secure connections on the website.

7. Changes

We may update this policy. The date at the top shows when it was last changed.

Suggested text: When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

Suggested text: If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies

Suggested text: If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Suggested text: Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who we share your data with

Suggested text: If you request a password reset, your IP address will be included in the reset email.

How long we retain your data

Suggested text: If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

Suggested text: If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where your data is sent

Suggested text: Visitor comments may be checked through an automated spam detection service.