Privacy Policy

Last updated December 2025

Contact

1.1 Below, you will find information regarding the processing of your personal data. Studio 9 Denmark A/S (hereinafter referred to as “we”, “us”, “our”) acts as the data controller with respect to the personal data being processed.

Below you will find our contact details:

Studio 9 Denmark A/S
Havnen 1
8700 Horsens
CVR 36018712
Phone number: +45 4282 0000
E-mail: gdpr@nineunited.com

Purpose, legal basis and retention period

Inquiries and support

If you contact us via our website, we process your name, contact details and other information you provide us with in connection with the inquiry in order to respond to it. The processing is based on our legitimate interest in being able to respond to your inquiries, cf. GDPR Art. 6(1)(f). The data will be deleted after 3 months from the time your last inquiry has been answered or at the time when there is no longer any reason to believe that further correspondence will be necessary.

When you visit www.studio-9.dk, we collect certain information about your use of our website via cookies including, for example, the type of browser you use, the search terms you use, your IP address, including your network location and information about your computer and visited pages, with the purpose of compiling statistics to improve the website and to target our marketing to suit your interest.
The processing takes place in accordance with your consent, cf. GDPR Article 6(I)(a). You can withdraw your consent at any time by clicking on the cookie symbol at the bottom left corner of the page. If you withdraw your consent, this does not affect the lawfulness of the processing that has taken place beforehand.We will retain the information collected via cookies until your consent is withdrawn or (if consent is not withdrawn) for up to 6 months after the personal data in question has been collected.
Furthermore, we collect technically necessary cookies (temporary cookies) which are linked to your current visit on the website and are automatically deleted when you close your browser. The processing is based on our legitimate interest in having a well- functioning website, cf. GDPR Art. 6(1)(f).

Unsolicited applications

First and foremost: Thank you for your interest in our family. If you submit an unsolicited application, your personal data, including the content of your application, your CV, etc., will be processed based on our legitimate interest, cf. GDPR Art. 6(1)(f). As a general rule and for reasons of caution we do delete all unsolicited applications as soon as we receive them. If we store your unsolicited application and related attachments, we will always obtain your consent for storage beforehand, cf. GDPR article 6(1)(a). Our current available positions are listed under “Career” under the “Contact” tab.

Newsletter

If you sign up for our newsletter, we will process the following personal data about you: Name and email address. The processing takes place in accordance with your consent, cf. GDPR Article 6(I)(a). You can withdraw your consent at any time by unsubscribing or by contacting GDPR@nineunited.com. If you withdraw your consent, this does not affect the lawfulness of the processing that has taken place beforehand.

Video surveillance

We conduct video surveillance at our building at Havnen 1, 8700 Horsens, Denmark, for the purpose of preventing crime, which is also our legitimate interest, cf. GDPR article 6(1)(f). If the recordings contain criminal offences, the personal data will be processed in accordance with section 8(1)(3) of the Data Protection Act, cf. GDPR article 10. As a general rule, all footage is retained for a maximum period of 30 days, after which it is deleted. In certain cases, we may disclose the recordings to the police for the purpose of investigating crimes in accordance with section 4(c) of the Danish TV Surveillance Act, cf. section 8(4) of the Data Protection Act.

Legal obligations and rights

We may process the personal data mentioned in the above sections with the purpose of establishing, exercising or defending our legal rights in connection with a dispute, acomplaint or an investigation by a public authority. In such cases, the legal basis for our processing is our legitimate interest in processing the data, which is deemed to outweigh your interest in not having the data processed, cf. GDPR Art. 6(1)(f). The data is erased (if there is no other legal basis for its storage) when, after a concrete assessment, it is no longer considered necessary for the purposes of the dispute, complaint or investigation.

Withdraw your consent

If the processing of your personal data is based on your consent, you may withdraw your consent at any time. If you wish to withdraw your consent, please contact GDPR@nineunited.com. If you withdraw your consent, this does not affect the lawfulness of the processing that has taken place beforehand.

Transfer of your personal data to third parties

Your information may be transferred / disclosed to the following third parties:

– Service providers and suppliers that help with our business activities, including, for example, providers of hosting services, analytics tools, marketing services, IT services, as well as transportation and logistics companies.

– Our affiliated companies, with which we have entered into affiliated data processing agreements.

– External advisors

– Our data processors, who act solely on our instructions

– Other third parties, if you consent, or if they are involved in an acquisition involving all or part of our business or assets therein.

Transfer of your personal data to countries outside the EU / EEA

We generally do not transfer personal data to third countries, and we try to use data processors located within the EU/EEA. We do use a data processor based in a third country (the United States) to handle our newsletters. The transfer basis used is the EU-U.S. Data Privacy Framework. We use systems provided by Microsoft, which means that transfers to a third country (the United States) may occur. Here, the transfer basis used will be the EU-U.S. Data Privacy Framework.

Your rights

Under certain conditions, you have the rights under GDPR, which are listed below. If you wish to exercise your rights, please contact us. You will find our contact details under the section ‘Contact’ at the top of this policy.

The right to insight:
You have the right to request information about or access to your personal information. However, there are exceptions, which means that you will not always receive all the information that is processed.

Right to rectification:
You have the right to have inaccurate personal data about you rectified. You also have the right to have personal data that you believe is incomplete completed.

The right to erasure:
In certain cases, you have the right to request the erasure of your personal data.

The right to restriction of processing:
In certain cases, you have the right to have the processing of your personal data restricted.

The right to data portability:
You have the right to receive a copy of your personal data in a structured, commonly used and machine-readable format. Where technically feasible, you have the right to request that the personal data be transmitted directly to another company or person acting as a data controller.

The right to object:
You have the right to object to the processing of your personal data. This means that you can stop or prevent the processing of your personal data. However, this only applies in certain cases, and we do not have to stop processing your personal data if there are legitimate grounds to continue processing.

Complaint

If you are dissatisfied with our processing of your personal data, please contact us. You will find our contact details under the section ‘Contact’ at the top of this policy. If you wish to complain to the Danish Data Protection Agency about our processing of your personal data, you can contact the Danish Data Protection Agency. You will find their contact details below.

Datatilsynet
Carl Jacobsens Vej 35, 2500 Valby
33193200
dt@datatilsynet.dk
www.datatilsynet.dk