Privacy Policy for the use of messaging services on social media

When you write to Carlsberg Camping via Messenger on our Facebook page, we process a number of personal data about you. Below you can read how we handle your data securely and lawfully.

1. The data controller

Carlsberg Camping is the data controller for the processing of the personal data we collect about you in connection with messaging enquiries.

Carlsberg Camping ApS
VAT no.: 32274889
Sundbrovej 19, 5700 Svendborg, Denmark
mail@carlsbergcamping.dk

2. Purpose of the processing

We process your personal data in order to:

Receive, read and reply to your enquiry via Messenger.
Forward your conversation to our internal mail system (Microsoft 365), so that the right employee can respond to you quickly.
Maintain an overview of ongoing dialogue and previous correspondence with you.
Document agreements to the extent necessary to deliver the service you have contacted us about (e.g. a booking, a quote or a complaint).

3. What personal data do we process?

When you write to us on Messenger, we process the following information:

Your Messenger profile name (first and last name) as shown on your public Facebook profile.
The content of the messages you send us (text and any media).
A technical Page-Scoped User ID (PSID) issued by Meta, so we can send replies back to the correct recipient. The PSID is stored encrypted and hashed in our system.
Timestamps for each message.
Any additional contact information you choose to provide in the conversation (e.g. email, phone number, address, arrival date).

We do not collect any further information from your Facebook profile beyond the above.

4. Legal basis for the processing

Our processing of your data is carried out on the following legal grounds (GDPR):

Performance of a contract or pre-contractual steps (Art. 6(1)(b)): When your enquiry concerns a booking, a quote or an agreement with us.
Legitimate interests (Art. 6(1)(f)): To respond to general enquiries, keep the dialogue together and provide good customer service.
Legal obligation (Art. 6(1)(c)): If the enquiry leads to an invoice or other transaction subject to bookkeeping requirements, we retain the necessary correspondence in accordance with the Danish Bookkeeping Act.

5. Use of third-party tools and disclosure

To receive and handle your Messenger messages, we use the following systems:

Meta Platforms Ireland Ltd. (Facebook Messenger) provides the Messenger platform itself and is an independent data controller for that part. See Meta’s privacy policy at facebook.com/policy.
Microsoft 365 (Outlook/Exchange Online) is used to receive a copy of your conversation as an email in our shared inbox, so that staff can respond quickly and consistently.
Our own “Messenger bridge” server runs in a closed environment under our control and forwards messages between Messenger and Outlook. Your messages are stored locally in an encrypted database solely for this purpose.

We never sell your data. We only disclose your information to third parties if it is necessary to fulfil your enquiry (e.g. a shipping company for delivery), or if we are legally required to do so.

6. Storage and deletion

Active conversations: Your messages are stored in our Messenger bridge and in our Outlook inbox for as long as the conversation is relevant to ongoing dialogue or service.
Closed conversations: When a conversation is no longer necessary for the purpose for which it was collected, we delete it from our Messenger bridge. Emails in Outlook are archived in accordance with our general internal guidelines.
Material subject to bookkeeping requirements: If the enquiry forms part of the documentation for a transaction (booking, sale, complaint), the relevant correspondence is retained for up to 5 years from the end of the financial year in question, in accordance with the Danish Bookkeeping Act.
The Messenger thread itself on Facebook is administered by Meta and is subject to Meta’s retention rules. You can delete the thread from your own Messenger account at any time.

7. Security

We have implemented appropriate technical and organisational measures to protect your information:

Communication between Messenger, our server and Microsoft 365 is encrypted (TLS).
Access to our Messenger bridge and Outlook inbox is limited to employees with a work-related need and is protected by multi-factor authentication.
The internal database where conversations are temporarily stored uses encrypted storage of your Page-Scoped User ID.

8. Meta disclaimer

The Messenger platform itself is provided by Meta (Facebook). Carlsberg Camping’s use of Messenger for customer communication is neither sponsored, endorsed, administered by, nor associated with Meta beyond the ordinary platform terms.

9. Your rights

Under the General Data Protection Regulation, you have a number of rights with regard to our processing of information about you:

Right of access: You can find out what information we hold about you.
Right to rectification: You can ask to have incorrect information corrected.
Right to erasure (“the right to be forgotten”): You can ask to have your information deleted, unless we are legally required to retain it.
Right to restriction of processing: You can ask us to restrict the processing of your information in certain situations.
Right to object: You can object to our processing when it is carried out on the basis of legitimate interests.
Right to data portability: In certain cases, you can have your information provided to you in a structured, commonly used format.
Right to lodge a complaint: You have the right to lodge a complaint with the Danish Data Protection Agency (www.datatilsynet.dk) if you are dissatisfied with the way we process your personal data.

If you wish to exercise your rights, you can contact us at the email address listed at the top.

10. Changes to the privacy policy

We reserve the right to update this privacy policy. The version in force at any given time will be available on our website.

Last updated: 26 April 2026.