1. Home

Privacy Policy

Click here for Danish version

1. Introduction

The purpose of this Privacy Policy is to describe how Ørsted (‘we’ or ‘us’) processes your personal data.

We also refer to our other privacy policies on our websites (orsted.dk and orsted.com). These privacy policies apply to our business relations, shareholders and job applicants, among others.

In some instances, this Privacy Policy specifies ‘personal companies’, such as sole traders and partnerships, in parenthesis, to indicate that the section is only relevant for this customer group.

This Privacy Policy also applies to the processing of personal data concerning any person who serves a business – irrespective of corporate form – as a personal contact in relation to Ørsted, when the business is or wishes to be a customer of Ørsted.


2. Data controller

The legal entity which is the controller in respect of the processing of your personal data is:

Ørsted Salg & Service A/S

Company reg. no. (CVR no.): 27 21 05 38
Kraftværksvej 53
DK-7000 Fredericia

Tel.: + 45 99 55 35 00
erhvervsreklamation@orsted.com


3. Processing activities

Purpose Categories of personal data Legal basis for processing Erasure 

Managing potential and existing customer relations

If you wish to become a customer of Ørsted, we process personal data about you in order to enter into an agreement on the supply of electricity, natural gas, service or other products.

When you are our customer and under a current agreement, we will process your data for the purposes of managing the agreement below for the following purposes:

 

  • ensure that electricity, natural gas, service or other products are supplied to your address.
  • receive payment for our service(s).
  • identify you when you contact us.
  • keep your contact details up to date.
  • fulfil other obligations to you or us based on the agreement and applicable legislation.

We collect data from the following sources:

  • Directly from you.
  • Agencies processing data concerning standardised financial ratios
    (personal companies).

We process the following data about you:

General personal data:

  • Contact details, including name, telephone number, email address, company address, company reg. no., company name*.
  • Credit rating (personal companies).
  • Payment details
  • Information concerning orders and services, as well as power consumption and delivery information*.

We process your personal data as described on the following legal basis:

  • GDPR, Article 6(1)(b) (necessary for the performance of a contract between Ørsted and the company you represent, or measures with a view to entering into a contract between Ørsted and the company you represent).
  • GDPR, Article 6(1)(c) (necessary due to our legal obligations, including compliance with accounting legislation).
  • GDPR, Article 6(1)(f) (necessary due to our legitimate interest in assessing your credit rating) (personal companies).

We store your personal data as long as it is necessary for the purposes mentioned:

  • As a general rule, we store your personal data for as long as the customer relationship exists and then for three years after the expiry of the contractual relationship.
  • In connection with customer relationships, we store accounting data, including invoices, receivables, payment details and similar information necessary to document our accounting records for five years from the end of the financial year in question; see the rules of the Danish Bookkeeping Act (Bogføringsloven).
  • If deemed necessary, based on a specific assessment, we may store the data for a longer period than indicated above. This may apply in cases where a dispute arises, to provide documentation to public authorities or others, and in similar situations.

Using our digital services:

We process your personal data by using cookies and similar technologies when you use our digital services (website or apps).

We use the data for the following purposes:

  • Delivery of the digital service you have requested.
  • Optimisation and development of the user experience of our website and the services we provide.
  • Statistics concerning how our website is used and to improve the website.

Read more about this in our cookie policy.

We also use various third-party cookies and social media plugins to make it easier for you to share content from our website on Facebook, LinkedIn, etc. For this type of processing, Ørsted will in some cases share the data controller responsibility with the supplier of the third-party cookie(s) in question. You can read more about this and find links to the privacy policies of the relevant third parties in the cookie overview, which is included in our cookie policy.

We collect data from the following sources:

  • Directly from you whenever you use our digital services

 We process the following data about you:

General personal data:

  • Data about your behaviour on our digital services (e.g. number of visits, information about how you access our digital services, including IP address, use of browsers and operating system, cookies and your domains of origin, as well as what content you read).
  • Data about clicks on our advertisements, including if you are doing this from the website of another organisation or company.

We process your personal data as described on the following legal basis:

  • GDPR, Article 6 (1)(a) (consent)
  • GDPR, Article 6(1)(f) (necessary due to our legitimate interest in providing the service you have requested, improving the customer experience, developing and improving our digital services (in terms of both functionality and the system itself) and making it possible to share content on social media).

We store your personal data as long as it is necessary for the purposes mentioned:

  • We store your personal data for up to two years from the date on which we registered your visit to our website. The specific retention period depends on the individual cookie. For further details, see our cookie policy.

Customer communication:
Ørsted processes your personal data in order to communicate with you and to respond to your requests.

Ørsted may record telephone conversations when you contact us as a customer and give your consent. In such cases, the conversation will be recorded and stored for documentation purposes and for staff training.

We collect data from the following sources:

  • Directly from you.

We process the following data about you:

General personal data:

  • Name, telephone number, email address and company.
  • Other general personal data to which the enquiry might relate.

We process your personal data as described on the following legal basis:

  • GDPR, Article 6(1)(a) (consent) for recording of telephone conversations.

  • GDPR, Article 6(1)(f) (necessary due to our legitimate interest in being able to respond to your enquiry and communicate with you).

We store your personal data as long as it is necessary for the purposes mentioned:

  • As a general rule, when you communicate with us we store your personal data for two years from the date of your enquiry.
  • We store personal data for up to three months after the recording of a telephone call.
  • If deemed necessary, based on a specific assessment, we may store the data for a longer period than indicated above. This may apply in cases where a dispute arises, to provide documentation to public authorities or others, and in similar situations.

Satisfaction surveys and service messages:

Ørsted processes your personal data when sending out satisfaction surveys and service messages:

  • Users of our online services and customers may receive satisfaction surveys with the purpose of optimising and supporting operations with input from the surveys.
  • Customers personal data may be processes in order for sending out service messages concerning information about the contractual relationship or delivery status.

We process the following data about you:

General personal data:

  • Name, email address, phone number, company, IP-address, and your response to the satisfaction survey.

We process your personal data as described on the following legal basis:

  • GDPR, Article 6(1)(f) (necessary due to our legitimate interest in sending out satisfaction surveys and service messages to support the operation of our online services and customer relations).

We store your personal data as long as it is necessary for the purposes mentioned:

  • Personal data related to satisfaction surveys are stored a long as the relevant area which is to be investigated is ongoing.
  • Personal data relating to services announcements are stored as long as the customer relationship exists and then for three years after the expiry of the contractual relationship.

Marketing, newsletters, company announcements and information about Ørsted: 

We process your personal data for marketing purposes, in order that we can:

  • target our communication with you based on your areas of interest and focus,
  • send you relevant marketing in the form of newsletters, etc.

Further, we use your personal data to send company announcements and other information and to identify anyone else who might be interested in Ørsted.

We also use first and third-party cookies to collect information about your behaviour when you receive our marketing, newsletters, company announcements, and information from Ørsted, to improve our communication with you.

We collect data from the following sources:

  • Directly from you.

We process the following data about you:

General personal data:

  • Name, email address, street address, IP address, country, and role.
  • Newsletter subscription date.
  • Areas of interest.
  • Data you have submitted in response to marketing activities. 
  • Information about whether you choose to open marketing, newsletters, company announcements, and information from Ørsted you receive from us and when you open them (time and date).
  • Information about clicks on links in our marketing, newsletters, company announcements, and information from Ørsted (e.g. which links you choose to click on, what content you read, the number of links you click on and use of email client).

We process your personal data as described on the following legal basis:

  • GDPR, Article 6(1)(a) – consent (when signing up for marketing, newsletter company announcements, and information from Ørsted and cookies in marketing, newsletters, company announcements, and information from Ørsted).
  • GDPR, Article 6(1)(f) (necessary to pursuit our legitimate interest in being able to send marketing material, newsletters, company announcements and information from Ørsted).

We store your personal data as long as it is necessary for the purposes mentioned:

  • We store your personal data for as long as you wish to receive material from us and for two years after that.
  • Personal data collected via cookies will be deleted in accordance with the expiry periods listed in our cookie policy.

4. Mandatory information

Data marked with an asterisk (*) under clause 3 is mandatory. In order for you to become a customer at Ørsted, we must have your contact details, including name, telephone number, email address, company address, company reg. no. and company name, and we must keep updated records of power consumption and delivery information.


5. Recipients of your personal data

Depending on the circumstances, Ørsted may share your personal data with:

  • Suppliers and dealers with whom we cooperate and who assist our company (meaning service providers, technical support, supplier services and financial institutions)
  • Public authorities

  • Business partners
  • Players in the energy sector (distribution companies, Energinet.dk, public authorities and energy suppliers)

6.  Transfer to third countries

In certain situations, we will transfer personal data to countries outside the EU/EEA. Such transfers to third countries will be made on the following legal basis:

  • The countries have been deemed by the Commission of the European Union to have an adequate level of protection of personal data (so called safe third countries).
  •  If the countries have not been deemed by the Commission of the European Union to have an adequate level of protection of personal data: Ørsted will provide appropriate safeguards for the transfer through standard contractual clauses, as published by the Commission of the European Union, for the transfer of personal data to third countries.
    You can obtain a copy of this contract by contacting us at erhvervsreklamation@orsted.com.

 

7. Your rights

When we process your data, you have the following rights:

  • You have the right of access to, rectification or erasure of your personal data.
  • You also have the right to object to the processing of your personal data and to have the processing of your personal data restricted.
  • In particular, you have an unconditional right to object to the processing of your personal data for use for direct marketing purposes.
  • If the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time. Your withdrawal of consent will not affect the lawfulness of the processing performed before withdrawal of your consent.
  • You have the right to receive the personal data that you have provided yourself in a structured, commonly used and machine-readable format (data portability).
  • You have the right to lodge a complaint with a data protection authority (in Denmark: The Data Protection Agency).

You can exercise your rights by contacting us, see section 8. These rights may be subject to conditions or restrictions. For example, you may not have the right to data portability in the case in question. This will depend on the specific circumstances in connection with the processing activities.
If you have requested to receive information from Ørsted, such as newsletters, and you no longer wish to receive these, you can unsubscribe at any time via the email that you receive or by calling us.

8. Contact details

If you wish to contact Ørsted regarding our processing of your personal data, please write to erhvervsreklamation@orsted.com, or call us on +45 99 55 35 00.

If you are unhappy with our response, you can lodge a complaint with your local data protection authority.

In Denmark, the regulator is the Data Protection Agency.


9. Changes in our Privacy Policy

This Privacy Policy replaces all previous versions. It will be necessary to update and amend this policy on an ongoing basis, and we thus reserve the right to update and change it. In the event of significant amendments, we will notify you at orsted.dk or by email.



This Privacy Policy was last updated in September 2023