Privacy Policy & Data Protection

The ESCPH Parents Association (“PA”, “we”, “us”) is committed to protecting the personal data of all parents and community members who use this website. This policy explains what data we collect, why, and how it is handled.


Who we are

The PA is a voluntary, non-profit parents organisation operating at European School Copenhagen. This website is managed by the PA board. For data-related questions, contact us at paescph@gmail.com.


What data we collect and why

We collect personal data only where necessary and only for specific, legitimate purposes:

DataPurposeLegal basis
Name, email addressOrder confirmation, pickup notification, donation receiptsContract fulfilment
Child’s school levelRouting pickup instructions to the correct collection pointContract fulfilment
Payment dataProcessed securely via MobilePay — we never see or store your card or account detailsContract fulfilment
Donation/subscription historyManaging recurring donations and renewal remindersContract fulfilment
Contact form submissionsResponding to your enquiry or support requestLegitimate interest

We do not collect data we don’t need. We do not sell, rent, or share your personal data with third parties for marketing purposes.


How your payment data is handled

All payments are processed through MobilePay, operated by Vipps MobilePay. When you pay via MobilePay, your financial data is handled entirely within the MobilePay platform — the PA never has access to your bank details, card number, or MobilePay PIN.

MobilePay’s own privacy policy applies to the payment transaction. You can read it at mobilepay.dk.


Who has access to your data

Your data is accessible only to current PA board members acting as administrators of this website. Access is restricted by role-based login credentials. We do not use external marketing agencies or data processors beyond the core website infrastructure listed below.

Third-party processors used by this site:

  • MobilePay / Vipps MobilePay — payment processing
  • SiteGround — website hosting (EU-based servers)
  • FluentCRM — email automation, stored on our own server (no third-party SaaS)

How long we keep your data

  • Order and donation records: 5 years (required for accounting purposes under Danish law)
  • Contact form submissions: deleted after 12 months if no ongoing correspondence
  • Subscription records: kept for the duration of the subscription plus 12 months

Your rights under GDPR

As a resident of the EU/EEA you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data (where no legal retention obligation applies)
  • Withdraw consent at any time where processing is based on consent
  • Object to processing based on legitimate interest
  • Lodge a complaint with the Danish Data Protection Authority (Datatilsynet) at datatilsynet.dk

To exercise any of these rights, contact us at paescph@gmail.com. We will respond within 30 days.


Cookies

This website uses essential cookies only — required for the shop, login sessions, and security. We do not use advertising or tracking cookies. A cookie notice is displayed on your first visit.


Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of the site after an update constitutes acceptance of the revised policy.


Contact

Parents Association · European School Copenhagen paescph@gmail.com