Privacy Policy
1) DATA CONTROLLER
Nørrebro Teater is the data controller responsible for the processing of your personal data.
2) CONTACT
If you have any questions regarding the processing of personal data, you can contact us by phone at +45 35 35 27 60 (Mon–Fri, 11:00–12:00) or by email at nbt@nbt.dk.
3) YOUR RIGHTS
You have the following rights:
a) You have the right to request access to, rectification, or erasure of your personal data.
b) You have the right to object to the processing of your personal data and to request restriction of processing.
c) You have the unconditional right to object to the processing of your personal data for direct marketing purposes, such as receiving newsletters.
d) If the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.
e) You have the right to receive the personal data you have provided in a structured, commonly used, and machine-readable format (data portability).
f) You have the right to lodge a complaint with the Danish Data Protection Agency at www.datatilsynet.dk.
4) PROCESSING OF PERSONAL DATA
We process personal data about you when:
4.1 You are a customer / purchase tickets
4.2 You follow us on social media
4.3 You visit our website
4.4 You receive our newsletter
4.5 You are a job applicant
4.6 You are an employee
4.7 You are a board member
Below, we outline the specific purposes for processing your data:
4.1 WHEN YOU ARE A CUSTOMER / PURCHASE TICKETS
When you purchase tickets, we process personal data about you.
If you purchase tickets for guest performances, there may be joint controllership between us and the producer. In such cases, the producer will act as an independent data controller for their own purposes, and we will act independently according to this policy. Joint responsibility applies only during the registration phase.
a) Purpose
To enter into agreements, sell, and deliver the service or product you have purchased.
We also use your data to inform you about relevant performances or events, including changes or cancellations.
Additionally, we process data to comply with legal obligations under accounting laws and for business development purposes, such as surveys and market analysis.
Finally, data is used to create a customer profile for managing your purchases.
b) Legal basis
Processing is necessary to perform a contract.
After delivery, processing is based on our legitimate interests (e.g. business development, legal claims).
We are also legally required to store certain data under accounting legislation.
c) Retention period
Purchase data is stored for 5 years in accordance with accounting laws.
Customer profile data is stored for up to 3 years after your last interaction.
Marketing-related data is anonymised or deleted after 3 years.
d) Recipients
Data is shared with data processors handling ticket sales and with partners such as Scenit/Teaterbilletter.
Data may be transferred to third countries (e.g. the USA) under the EU-U.S. Data Privacy Framework.
e) Obligation
Providing personal data is necessary to complete a purchase.
4.2 SOCIAL MEDIA
When you interact with us on social media, both we and the platform act as independent data controllers beyond the initial collection.
Purpose: Marketing and communication
Legal basis: Legitimate interest
Retention: As long as you follow or interact with us
Recipients: Social media platforms and data processors
Obligation: Required to interact with us on these platforms
4.3 WEBSITE VISITS
We collect data through cookies when you visit our website.
Purpose: Optimisation of website and user experience
Legal basis: Consent
Retention: Up to 2 years
Recipients: Data processors and possible transfers to the USA
Obligation: Not required to provide data
4.4 NEWSLETTERS
We send newsletters and collect engagement statistics.
Purpose: Marketing and communication, including partner theatres
Legal basis: Consent or legitimate interest (existing customers)
Retention: Up to 5 years after last newsletter
Recipients: Data processors, possibly in third countries (e.g. USA)
Obligation: Required to receive newsletters
4.5 JOB APPLICANTS
Purpose: Recruitment
Legal basis: Pre-contractual measures or disclosed data
Retention:
• Up to 3 months after recruitment process
• Unsolicited applications: up to 6 months
4.6 EMPLOYEES
Purpose: HR and payroll administration, documentation, and communication
Legal basis: Contract, legal obligations, or legitimate interests
Retention: Typically 5 years after employment ends (longer in specific cases)
4.7 BOARD MEMBERS
Purpose: Governance and organisational responsibilities
Legal basis: Legal obligations and legitimate interests
Retention: Minimum 5 years
5) CCTV SURVEILLANCE
Nørrebro Teater uses CCTV in and around entrances and common areas to ensure safety and prevent incidents.
Data controller: Nørrebro Teater, Ravnsborggade 3, Copenhagen
Legal basis: Legitimate interest (GDPR Art. 6(1)(f))
Retention: Typically 30 days unless required for a specific incident
Access: Limited to relevant staff; may be shared with police if necessary
For access or deletion requests, contact: nbt@nbt.dk
Updated 8 April 2026