Privacy and Cookie Policy for NPEA A/S

Last updated: 23 September 2025

Data controller

We are the data controller for the processing of personal data across the websites we operate in the group. You can find our contact details below:

NPEA A/S

Gedebjergvej 5

4700 Næstved

CVR no.: 41712856

Phone: 55 77 01 01 00

Email: info@npea.dk

It is not a requirement that we have an external DPO. If you have any questions about the processing of your personal data, you are welcome to contact us.

Websites covered by this policy

This privacy policy applies to the following websites owned or operated by NPEA A/S:

https://havnefronten-farvejle.dk

https://stoberiet64.com

https://golfhaven.nu

https://mullerupstrandhuse.dk

https://maycon.dk

https://easy-stay.dk

https://stenlaengepark.dk

https://nymarkshaven.dk

https://marinahusene.dk

https://karrebaeksminde-strandhotel.dk

https://mulleruphavn.dk

All websites use forms to collect information such as name, email address, phone number, postcode and property or product interest. Some sites support newsletters or registration on waiting lists.

NPEA A/S is the data controller for the processing of personal data on all pages mentioned above.

Treatment activities

Visit on website

When you visit our website, we use cookies for the following purposes:

  • Necessary cookies: Making sure the site works technically correct (e.g. forms and navigation)
  • Statistical cookies: Helps us analyse how the website is used. We use Independent Analytics, which does not transfer data to third countries.
  • Marketing cookies (only with consent): Used to show you relevant adverts, for example on Facebook and Instagram, via Facebook Pixel.

We use Complianz Pro as our consent banner and cookie manager. Complianz registers your preferences and keeps a log of given consent. Complianz also performs regular scanning of cookies on our websites.

You can change your settings or withdraw your consent at any time via the "Change cookie settings" link at the bottom of the page.
Read more in our cookie policy and see how you can delete cookies in your browser via:
 https://digst.dk/sikkerhed/digitale-tilsyn/sporingsteknologiomraadet/cookievejledningen/

Communication with potential customers

You can contact us via:

Contact form

E-mail

Phone number

In this way, we process personal data in order to enter into dialogue with you and, for example, answer questions about homes, projects or properties.

We typically process information such as:

  • Name
  • Email address
  • Phone number
  • Postcode
  • Interests, e.g. housing type
  • Number of rooms

Legal basis: Article 6(1)(f) of the General Data Protection Regulation (legitimate interest).

We delete the communication when it is clear whether you wish to use our service and no later than 12 months after the last contact. In some cases, longer storage may be necessary, for example if there is a specific inquiry or dialogue pending.

Processing of personal data in property transactions and rentals

In connection with the completion of property transactions, rental agreements or advice in relation to housing projects, we process a number of data about you as a customer, buyer, tenant or stakeholder. This applies to e.g:

  • Name, address, email, phone number
  • Date of birth and social security number
  • Financial information (e.g. RKI registration, payment information)
  • Information related to housing wishes and purchase/rental agreement

 

Purpose and legal basis:
The processing is carried out in order to be able to perform advisory and brokerage tasks, enter into agreements, and fulfil legal requirements (e.g. bookkeeping and tax obligations), cf. Article 6(1)(b) and (c) of the General Data Protection Regulation.
Processing of CPR number only takes place with your explicit consent, cf. section 11(2)(2) of the Danish Data Protection Act.

Disclosure to third parties:
We disclose your data to relevant actors to the extent necessary, including:

  • Property manager
  • Lawyer and/or bank
  • Public authorities (e.g. SKAT)
  • Utility companies (e.g. in connection with moving and unloading)
  • RKI (by credit rating or financial background check)

Your social security number will only be disclosed to utility companies where it is necessary for proper registration and only if you have given your consent.

Storage period:
We retain data for up to 10 years after the case is closed to fulfil our documentation and advisory responsibilities. CPR numbers are deleted when there is no longer a legitimate need.

Consent and revocation:
You can withdraw your consent at any time. Withdrawal does not affect the lawfulness of the processing that has taken place before the withdrawal. Enquiries can be made to info@npea.dk.

Customers and stakeholders

When you sign up for a waiting list, request material or show interest in a project, we process your data in order to:

  • Manage write-ups and enquiries
  • Communicate with you about relevant projects and homes

Legal basis: Article 6(1)(b) of the GDPR (fulfilment of a contract or preparation thereof).

We keep the data for the duration of the relationship and delete it no later than 24 months after the last activity or enquiry, unless you request earlier deletion.

Newsletters and marketing

You can sign up for newsletters via our websites. It is voluntary and you can always unsubscribe.

Purpose: To send information about relevant projects and the group.
Treatment:

  • We use simple opt-in
  • Detects IP and time

Legal basis: Article 6(1)(a) of the General Data Protection Regulation (consent)

We store the data for as long as you are subscribed. If you unsubscribe, documentation of consent will be stored for up to 2 years, cf. the Consumer Ombudsman's guidelines, section 11.3.
If you have not interacted with newsletters for 12 months, your data is automatically deleted due to inactivity.

We also use marketing cookies and Facebook Pixel to show you relevant adverts on social media, including Facebook and Instagram.
This means that certain information about your use of the website may be shared with Meta Platforms Ireland Limited.
Processing only takes place if you have given your consent via our consent banner (Complianz), cf. Article 6(1)(a) of the General Data Protection Regulation.

Job applications

Unsolicited applications: Processed on the basis of our legitimate interest in assessing potential candidates, cf. Article 6(1)(f) of the General Data Protection Regulation. If there is no current need, the application will be deleted within 3 months of receipt.

Job vacancies: When recruiting for a specific position, data is processed as part of the preparation of a contract, cf. Article 6(1)(b). Applications are deleted no later than 6 months after the end of the recruitment, unless you consent to longer storage.

If you are invited for an interview, you will receive separate information about our processing of your data in connection with the recruitment process.

Sensitive information: We request that you do not submit health information, social security number or trade union information. Such information will be deleted immediately upon receipt.

Data processors

We use the following data processors:

  • Brevo - sending newsletters and forms
  • simply.com - Hosting and email operations
  • Compliance - Consent management, cookie management, Google Consent Mode v2, consent registration and data request processing
  • Picasso - Booking engine (when used on relevant sites)

We have entered into data processing agreements with all suppliers and ensure adequate data protection.

Transfer to third countries

We primarily use suppliers within the EU/EEA. In some cases, data may be transferred outside the EU/EEA, but only if there is a valid transfer basis, e.g. the EU Commission's Standard Contractual Clauses (SCC). Prior to transfer, we assess the recipient country's level of protection and ensure that your rights are maintained.

Profiling and automated decisions

We do not make automated decisions within the meaning of Article 22 of the GDPR, i.e. decisions made solely by IT systems without human involvement.

However, in some cases, we use general segmentation based on information such as residential interest and geography to ensure that our marketing is relevant. This type of segmentation has no legal effect or material impact on you.

If you do not wish to be included in segmentation, you can object at any time by contacting us at info@npea.dk.

Treatment safety

We protect your personal data through appropriate technical and organisational measures. This includes access control, encryption, regular updates and security management procedures.

Registering and changing consent

We register your consent to the use of cookies and marketing via Complianz Pro.

You have the right to access, change or withdraw your consent. This is done via The Complianz banner. "Change cookie settings".

Complianz keeps a log of consents given and documentation of this is stored for up to 2 years in accordance with applicable guidelines.

We conduct risk assessments and continuously train our employees in GDPR and data security to ensure responsible handling and breach prevention.

Your rights

You have the right to:

  • Insight into your information
  • Correction
  • Deletion
  • Limitation
  • Objection
  • Data portability

If you wish to exercise your rights, please contact us at info@npea.dk.

This policy applies to the entire Group and affiliated websites mentioned above.

Cookie policy

Last updated: 23 September 2025

1. What are cookies?

Cookies are small text files that are stored on your device (computer, tablet or mobile) when you visit our websites. They are used to improve the functionality of the website, remember your preferences and - if you consent - show you relevant adverts.

2. What types of cookies do we use?

Cookie typePurposeExamples and examplesStorage period
Necessary cookiesEnsures that the website works properly and is technically stable.Session ID, form selectionSession / up to 1 year
Statistical cookiesHelps us understand how the website is used. We use Independent Analytics, which does not share data with third parties and is GDPR compliant.Visitor statisticsUp to 2 years
Marketing cookies (only with consent)Used to show you relevant adverts and measure the effectiveness of our marketing.Meta Pixel (Facebook/Instagram)Up to 1 year

3. Consent and cookie settings

When you visit our website for the first time, we display a cookie banner from Complianz Pro where you can choose which types of cookies you accept.

Necessary cookies are set without consent as they are technically necessary.

Statistical and marketing cookies are only set if you give your consent.

You can always change your cookie settings via the banner. The banner is discreetly hidden on the page, but can always be opened again via the "Change cookie settings" link at the bottom of the website.

4. How to avoid or delete cookies

You can control or delete cookies yourself in your browser. See the guide at the Danish Agency for Digitisation:
Cookie guide

5. Contact us

If you have any questions about our use of cookies, you are welcome to contact us:

NPEA A/S
Gedebjergvej 5
4700 Næstved
CVR no.: 41712856
Email: info@npea.dk

Change log

  1. September 2025 - Updated with integration of Complianz Pro (consent banner, consent log, cookie management), clarification of the use of Independent Analytics for statistics, and addition of Facebook Pixel under marketing cookies. Privacy policy and cookie policy are combined in one document.
  2. May 2025 - First version of the policy published.

Sign up for our newsletter

Stay updated with exclusive offers and news from Easy Stay. Sign up now and make the most of your stays!