Privacy Statement

1. Who is responsible for your data

This website is operated by BP Medie ApS. BP Medie ApS is the data controller for all personal data collected through bpmedie.dk.

2. What data I collect and why

Booking requests

When you submit a booking through the booking form, I collect your name, email address, phone number, and preferred date. This data is used to confirm and manage your booking.

Legal basis: Article 6(1)(b) GDPR. Processing necessary to perform a contract or take pre-contractual steps at your request.

Contact form enquiries and chat widget

When you use the contact form or the chat widget on this site, I collect your name, email address, and the content of your message. The chat widget is powered by Cloudflare infrastructure and uses the Claude AI API (Anthropic PBC) to generate responses to your questions. Conversation content is stored in a Cloudflare D1 database. No data is shared with any other party or used for any purpose beyond responding to your enquiry.

Legal basis: Article 6(1)(f) GDPR. Legitimate interest in responding to prospective clients.

Email inquiries

When you email me at contact@bpmedie.dk, your message is received and stored in a private inquiry inbox. The inbox is built on Cloudflare D1 (a database hosted by Cloudflare Inc.) and accessible only to me. To help draft a reply, the content of your email — your name, email address, and message — is passed to the Claude AI API provided by Anthropic PBC. I review and approve every reply before it is sent. No email data is shared with any other party or used for any purpose beyond responding to your inquiry.

Legal basis: Article 6(1)(b) GDPR. Processing necessary to take pre-contractual steps at your request.

Website analytics

I use Burst Statistics to understand how visitors use this website. All analytics data is stored directly on this server and is not shared with any external platform. Burst may set a cookie to distinguish between separate visits.

Legal basis: Article 6(1)(a) GDPR. Your consent, given via the cookie banner.

YouTube video embeds

Some pages include embedded YouTube videos hosted by Google LLC. If you interact with a video, YouTube may collect data including your IP address and browsing behaviour. Google may process this data on servers outside the EU.

Legal basis: Article 6(1)(a) GDPR. Your consent, given via the cookie banner.

Google reCAPTCHA

Forms on this site use Google reCAPTCHA to prevent automated spam submissions. reCAPTCHA collects hardware and software information from your device and sends it to Google LLC for analysis. This may involve data transfers outside the EU.

Legal basis: Article 6(1)(f) GDPR. Legitimate interest in protecting forms from automated abuse.

Facebook Pixel

This website uses the Facebook Pixel, provided by Meta Platforms Ireland Ltd. It collects data about your visit and may be used to show relevant advertising on Facebook and Instagram. Meta may transfer this data to servers outside the EU, including to the United States, under Standard Contractual Clauses.

Legal basis: Article 6(1)(a) GDPR. Your consent, given via the cookie banner.

3. How long I keep your data

Booking records and related correspondence are kept for 5 years from the date of the wedding, in line with Danish business record-keeping requirements.

Email inquiries that do not result in a booking are deleted automatically 24 months after the inquiry is closed. Chat widget conversations are deleted automatically after 12 months. These deletions are carried out by an automated daily process in the Cloudflare D1 database.

Analytics data collected by Burst Statistics is stored on this server and retained for a maximum of 2 years. Cookie consent records are kept for 365 days.

4. Who I share your data with

I do not sell your personal data. The following third-party services process data as part of running this website:

• Cloudflare Inc. (USA): edge infrastructure, D1 database, and scheduled processing for the email inquiry inbox and chat widget. Cloudflare operates under a Data Processing Addendum covering GDPR compliance. Data may be processed in the United States under Standard Contractual Clauses.
• Anthropic PBC (USA): Claude AI API, used to assist in drafting responses to email inquiries and to power the chat widget. Inquiry content is passed to the API for this purpose only. Data may be processed in the United States under Standard Contractual Clauses.
• Google LLC (USA): reCAPTCHA and YouTube. Data may be transferred to the United States under Standard Contractual Clauses.
• Meta Platforms Ireland Ltd: Facebook Pixel. Data may be transferred to the United States under Standard Contractual Clauses.
• Simply.com A/S: website hosting. Servers are located within the EU.

5. Your rights

Under GDPR you have the following rights regarding your personal data:

• Access: request a copy of the data I hold about you.
• Rectification: ask me to correct inaccurate data.
• Erasure: ask me to delete your data, subject to legal retention obligations.
• Restriction: ask me to limit how your data is used.
• Portability: request your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interest.
• Withdraw consent: where processing is based on your consent, withdraw it at any time via the cookie banner or by contacting me directly.

To exercise any of these rights, contact me at privacy@bpmedie.dk. I will respond within 30 days.

6. Complaints

If you believe your data is being processed unlawfully, you have the right to lodge a complaint with the Danish Data Protection Authority:

7. Changes to this statement

I may update this privacy statement when the services used on this site change. The date at the top of the page shows when it was last revised.