Privacy Policy

Last updated May 2026

Contact

Below, you will find information regarding the processing of your personal data. 

Nine United A/S (hereinafter referred to as “we”, “us”, “our”) acts as the data controller with respect to the personal data being processed.   

Below you will find our contact details:

 

Nine United A/S
Havnen 1
8700 Horsens
CVR 25934458

Phone number: +45 4282 0000
E-mail: gdpr@nineunited.com

 

Purpose, legal basis and retention period

Inquiries and support

If you contact us via our website, we process your name, contact details and other information you provide us with in connection with the inquiry in order to respond to it.

The processing is based on our legitimate interest in being able to respond to your inquiries, cf. GDPR Art. 6(1)(f).

The data will be deleted after 3 months from the time your last inquiry has been answered or at the time when there is no longer any reason to believe that further correspondence will be necessary.

 

Cookies

When you visit www.nineunited.com, we collect certain information about your use of our website via cookies including, for example, the type of browser you use, the search terms you use, your IP address, including your network location and information about your computer and visited pages, with the purpose of compiling statistics to improve the website and to target our marketing to suit your interest.

The processing takes place in accordance with your consent, cf. GDPR Article 6(I)(a). You can withdraw your consent at any time by clicking Cookie settings at the bottom of the page. If you withdraw your consent, this does not affect the lawfulness of the processing that has taken place beforehand. 

We will retain the information collected via cookies until your consent is withdrawn or (if consent is not withdrawn) for up to 6 months after the personal data in question has been collected.
Furthermore, we collect technically necessary cookies (temporary cookies) which are linked to your current visit on the website and are automatically deleted when you close your browser. The processing is based on our legitimate interest in having a well-functioning website, cf. GDPR Art. 6(1)(f).
You can read more about our use of cookies in our cookie policy.

 

Job agent

If you sign up for our job agent service, we will process your first name, last name and email address in connection with the creation of your job profile in Talentech (Talentech is our data processor and acts solely on our instructions). The processing takes place in accordance with your consent, cf. GDPR Article 6(I)(a). You can withdraw your consent at any time by unsubscribing which can be done through your Talentech-profile or via a link in the e-mails you receive. It is also possible to withdraw your consent by contacting GDPR@nineunited.com. If you withdraw your consent, this does not affect the lawfulness of the processing that has taken place beforehand.

 

Unsolicited applications

First and foremost: Thank you for your interest in our family. 
If you submit an unsolicited application, your personal data, including the content of your application, your CV, etc., will be processed based on our legitimate interest, cf. GDPR Art. 6(1)(f). As a general rule and for reasons of caution we do delete all unsolicited applications as soon as we receive them. Instead, we encourage you to sign up for our job agent, where you will be regularly updated on available positions. You can read more about how we process your personal data when using our job agent in the section above.   

If we store your unsolicited application and related attachments, we will always obtain your consent for storage beforehand, cf. GDPR article 6(1)(a).

 

Video surveillance

We conduct video surveillance at our building at Havnen 1, 8700 Horsens, Denmark, for the purpose of preventing crime, which is also our legitimate interest, cf. GDPR article 6(1)(f).  

As a general rule, all footage is retained for a maximum period of 30 days, after which it is deleted.

In certain cases, we may disclose the recordings to the police for the purpose of investigating crimes in accordance with section 4c(1)(3) of the Danish TV Surveillance Act

 

Rental to private individuals

In connection with the letting of rental properties, we process several types of general personal data, where the basis for processing is GDPR article 6(1)(b). Furthermore, we process your CPR number. The processing takes place in accordance with your consent, cf. the Data Protection Act section 11(2)(2), cf. GDPR article 7. You can withdraw your consent at any time by contacting GDPR@nineunited.com. If you withdraw your consent, this does not affect the lawfulness of the processing that has taken place beforehand.
The lease agreement, as well as documentation of consent obtained for the processing of the CPR number, will be retained for five years after the lease has been terminated.   

Please note that we disclose your information to selected utility companies.  

 

Commercial rentals

In connection with the letting of rental properties, we might process general type of personal data belonging to the tenant's employees, including the names of the employees staying at the property. The basis for processing is GDPR article 6(1)(b). The lease agreement, which might contain personal data, will be retained for eleven years after the lease has been terminated.      

Please note that we may disclose your information to selected utility companies. 

 

Whistleblower

If you submit a report through our whistleblower portal, we will process additional personal data about you in connection with our handling of the case. The processing of your personal data is based on GDPR 6(1)(c) and (e), cf. Act on the Protection of Whistleblowers, section 22. If you submit sensitive personal data the processing is based on GDPR article 9(2)(g), cf. Act on the Protection of Whistleblowers, section 22. If you submit personal data regarding criminal offences the processing is based on the Data Protection Act, section 8(3). We are currently unable to inform you how long we will keep your report, as the specific storage period depends on several factors, including the case handling itself. However, we can currently inform you that we will only store the report for as long as we have a purpose for doing so.

 

Legal obligations and rights

We may process the personal data mentioned in the above sections with the purpose of establishing, exercising or defending our legal rights in connection with a dispute, a complaint or an investigation by a public authority. In such cases, the legal basis for our processing is our legitimate interest in processing the data, which is deemed to outweigh your interest in not having the data processed, cf. GDPR Art. 6(1)(f). The data is erased (if there is no other legal basis for its storage) when, after a concrete assessment, it is no longer considered necessary for the purposes of the dispute, complaint or investigation.

 

Withdraw your consent

If the processing of your personal data is based on your consent, you may withdraw your consent at any time. If you wish to withdraw your consent, please contact GDPR@nineunited.com. If you withdraw your consent, this does not affect the lawfulness of the processing that has taken place beforehand.

 

Transfer of your personal data to third parties

Your information may be transferred / disclosed to the following third parties:

  • Service providers and suppliers that help with our business activities, including, for example, providers of hosting services, analytics tools, marketing services, IT services, as well as transportation and logistics companies.

  • Our affiliated companies, with which we have entered into affiliated data processing agreements.

  • External advisors

  • Our data processors, who act solely on our instructions

  • Other third parties, if you consent, or if they are involved in an acquisition involving all or part of our business or assets therein.

 

Transfer of your personal data to countries outside the EU / EEA

We generally do not transfer personal data to third countries, and we try to use data processors located within the EU/EEA.
We use systems provided by Microsoft, which means that transfers to a third country (the United States) may occur. Here, the transfer basis used will be the EU-U.S. Data Privacy Framework.

 

Your rights

Under certain conditions, you have the rights under GDPR, which are listed below. If you wish to exercise your rights, please contact us. You will find our contact details under the section ‘Contact’ at the top of this policy.  

  • The right to insight:
    You have the right to request information about or access to your personal information. However, there are exceptions, which means that you will not always receive all the information that is processed.

  • Right to rectification:
    You have the right to have inaccurate personal data about you rectified. You also have the right to have personal data that you believe is incomplete completed.

  • The right to erasure:
    In certain cases, you have the right to request the erasure of your personal data.

  • The right to restriction of processing:
    In certain cases, you have the right to have the processing of your personal data restricted.

  • The right to data portability:
    You have the right to receive a copy of your personal data in a structured, commonly used and machine-readable format. Where technically feasible, you have the right to request that the personal data be transmitted directly to another company or person acting as a data controller.

  • The right to object:
    You have the right to object to the processing of your personal data. This means that you can stop or prevent the processing of your personal data. However, this only applies in certain cases, and we do not have to stop processing your personal data if there are legitimate grounds to continue processing.

 

Complaint

If you are dissatisfied with our processing of your personal data, please contact us. You will find our contact details under the section ‘Contact’ at the top of this policy.
If you wish to complain to the Danish Data Protection Agency about our processing of your personal data, you can contact the Danish Data Protection Agency. You will find their contact details below.

 

Datatilsynet
Carl Jacobsens Vej 35, 2500 Valby
33193200

dt@datatilsynet.dk
www.datatilsynet.dk