Your information, your choices

Good neighbours, clear choices

Your profile is private and your house number is optional. Read what information we use, who has access and how to correct or delete it.

Open to everyone

News and events

For your event organisers

Details for your event

You and administrators only

Account and private requests

Who runs the site, and who can see my information?

The website and Facebook group are an unofficial neighbourhood initiative run by Sylvester and Sheila Damgaard from Julemosegård 27. We do not represent the landlord, property management or a residents’ association.

The data controller for the website is Sylvester Damgaard, Julemosegård 27, 3540 Lynge, Denmark. Questions about your data and your rights can be sent directly to sn@cbox.dk.

Sylvester works professionally in information security, including work relating to SOC 2 and HIPAA, and is used to treating data with great care and a strong focus on security. He brings that experience to developing and running this website.

Your profile is private. Only you and the site administrators can see it. Administrators use the information to help you and run the site. Other users cannot look up you or your house number.

Designated organisers can see registrations for their own event: participant numbers, any reservations, the contact person’s name and phone number, and your house number if you have provided it. The participant list is not public.

What does GDPR mean for this neighbour site?

The website is a neighbourhood initiative run by Sylvester and Sheila Damgaard in their spare time. It aims to make it easier to meet, share activities and be good neighbours.

GDPR does not apply only to businesses. There is an exception for purely personal or household activities, but private ownership alone does not exempt a website. It depends on how personal information is processed in the particular circumstances.

We use restricted access, clear purposes and options to correct and delete your information. Here we explain how this works on the site.

What is my house number used for?

Your house number is optional. If you save it on My profile, it is filled in on new registrations. You can change or remove it before saving a registration.

Changing the house number on your profile does not change existing registrations. You can edit those under My registrations. Other users cannot see your house number.

Do I need Facebook or the newsletter?

No. You can use the website without Facebook. Your account here is separate from the Facebook group, and your profile details and registrations are not automatically shared there.

The newsletter is an optional way to hear about local activities and community news. Your subscription becomes active once you confirm your email. You can unsubscribe in your profile or through the unsubscribe link in a newsletter email.

What does the site store?

Your account stores your name, email, a protected version of your password, language, optional house number, and the times of account creation and email verification. Your newsletter preference is stored with the time you subscribed or unsubscribed. Login uses an essential session cookie.

When you register, we store the event, participant numbers, any reservations, the contact person’s name and phone number, an optional house number and the registration status. Each event’s registration form shows which details are requested.

Du kan tilmelde dig uden en bruger. Vi gemmer din e-mail sammen med tilmeldingen og sender et personligt link til at se, rette eller afmelde den. Linket giver kun adgang til den konkrete tilmelding. Loginlinks og midlertidige kladder bruges til at lade dig fortsætte, hvor du slap.

Privacy requests are stored with the message, status, response deadline and reply. They are available only to you and administrators with specific permission to handle them.

Where is the information stored?

Cbox, CVR 26796164, Julemosegård 27, 3540 Lynge, står for den tekniske drift. Hjemmesiden og databasen hostes hos Hetzner i Finland. Hjemmesidens sikkerhedskopier opbevares i 90 dage.

When you delete information from the site, it may remain in a backup for up to 90 days. Backups are used to recover from service failures. After a restore, deletions and corrections must be reapplied before the site reopens to users.

E-mails sendes via Resend, som behandler modtageradresse, mailindhold og leveringsoplysninger i USA. Resends databehandleraftale indeholder EU-standardkontraktbestemmelser for overførslen. Din egen mailudbyder behandler derefter mailen efter sine vilkår.

Cloudflare beskytter forbindelsen til hjemmesiden og leverer statiske filer. Tjenesten behandler blandt andet IP-adresse og tekniske oplysninger om forespørgslen. Hjemmesiden anvender ikke Cloudflares analyse-script til at måle dine besøg.

Facebook modtager ikke dine profiloplysninger eller tilmeldinger fra hjemmesiden. Følger du et link til Facebook, gælder Facebooks egne vilkår dér.

Why do we use your information?

We use account information and registrations to provide the features you request. The newsletter is a separate opt-in that you can withdraw.

We use email verification and necessary security information to protect the site against misuse. Privacy requests are used to respond to and handle your rights. Information must not be used for other purposes without an appropriate basis.

The legal bases are providing the account and registration features you request (GDPR Article 6(1)(b)), consent to the newsletter (Article 6(1)(a)), our legitimate interest in secure operation and protection against misuse (Article 6(1)(f)), and fulfilling duties concerning privacy requests (Article 6(1)(c)).

We do not collect civil registration numbers. An event may have optional fields for names, email addresses, phone numbers, menu choices and allergies. This information is used only for that event and can be seen by you, site administrators and the assigned organisers. Only provide another adult’s information with their knowledge and agreement. A parent or guardian provides information about children.

Allergy information is optional and is only stored with your explicit consent to plan and run the event (GDPR Article 6(1)(a) and Article 9(2)(a)). You can remove the information and withdraw consent under My registrations, including after the registration deadline. This does not affect the lawfulness of processing before withdrawal. Allergy information is not included in confirmation emails.

How long do we keep your information?

Your account is stored while you use it or until you delete it. We review accounts regularly so information is not kept without a purpose.

Database records are not automatically deleted because of their age. Registrations and their optional details are retained as history. You can remove optional details without cancelling your registration, or contact us to request deletion.

Deletion takes place when you use the site’s deletion features or ask us to do so. We review your request and the records it covers, including past registrations and privacy requests.

Newsletter exports on the server are removed when an account changes and during regular cleanup once they are more than 24 hours old. Backups expire after 90 days. Emails, operational logs and older form submissions have separate cleanup procedures and are included in the review of an access or erasure request.

Resend oplyser, at mailindhold og leveringslogs gemmes i 30 dage på standardabonnementer, og at deres backups gemmes i 7 dage. Ved behov for tidligere sletning kontakter vi Resend som en del af din henvendelse.

How do I request access, correction or erasure?

Under My profile, you can download a copy of your information in JSON format and delete your account. The copy includes your profile details, event registrations, newsletter preferences and personal data requests. Keep it safe on your own device.

You can also request full access, correction, erasure or restriction of processing, or object to processing. Where the rules provide this right, you can obtain your data to transfer it to another service. You can withdraw consent without affecting the lawfulness of earlier processing.

Write to sn@cbox.dk or use the private form on your profile. You do not need an account to exercise your rights. We normally respond within one month. If a complex request needs more time, we will explain why before the deadline.

The right to erasure has exceptions. If particular information must be retained under the rules, we will explain what, why and for how long. An automatic export may not include older forms, emails or administrator notes; we review these when you request full access.

Can I change my mind or remove something?

Yes. You can edit your profile and event registrations and change your newsletter preference. Deleting your account under My profile also deletes your registrations and private requests and unsubscribes you from the newsletter.

You can cancel under My registrations. Cancelling or deleting your account releases any reserved places or materials for others, regardless of the type of event.

Stories and news from residents

When you submit a story, we store the text and link it to your account. Only you and the administrators can see it before approval. Once published, the text and your name are public. Contact us to have a contribution corrected or removed. Deleting your account removes unpublished contributions and the author name on published stories; we review the published text itself on request.

Anything you are unsure about?

Contact Sylvester directly if you have questions about your information.

sn@cbox.dk