Privacy policy
Privacy Policy
Last updated: September 2026
Contents
- Introduction
- Data controller
- Members of the benefits programme – Frederiksberg Centret PLUS+, and newsletter recipients
- Members' visits to Danske Shoppingcentre's physical centres
- Members on DSC's websites, apps and emails
- DSC's apps
- Participation in games, competitions and events
- Data subjects' rights
- Disclosure of personal data
- Data processors and transfers to third countries
- Other special circumstances
Introduction
This Privacy Policy applies to Danske Shoppingcentre P/S and Frederiksberg Centret I/S (collectively, “DSC”). In this context, Danske Shoppingcentre P/S includes both the main organisation and all shopping centres in the portfolio, including Frederiksberg Centret. Danske Shoppingcentre P/S is the data controller for all associated centres, which means that the individual centres are not separate data controllers. You can see a list of the shopping centres belonging to Danske Shoppingcentre P/S here.
This Privacy Policy applies to all persons whose personal data is processed by DSC in connection with membership of the PLUS+ benefits programme or receipt of Frederiksberg Centret's newsletter (the “newsletter”).
At DSC, we take the protection of your personal data seriously. This Privacy Policy explains how we process your information in connection with visits to our website, the PLUS+ app, social media pages, shops, purchases and receipt of the newsletter. We understand that sharing personal data is a matter of trust, and we want you to feel confident that we handle your information responsibly. You can always find our updated Privacy Policy at www.danskeshoppingcentre.dk and on the individual shopping centres' websites. These sites also provide further information about your data-protection rights.
Data controller
We are the data controller for the processing of the personal data we process about you. Enquiries about our processing of personal data may be sent to:
Danske Shoppingcentre P/S
Cityringen 24
2630 Taastrup
Denmark
CVR number: 37070726
Email: gdpr@dsc.dk
1. Members of the benefits programme – Frederiksberg Centret PLUS+, and newsletter recipients
1.1 Joining PLUS+ / subscribing to the newsletter
1.1.1 Personal data processed
When you become a member of DSC's PLUS+ benefits programme, DSC processes various ordinary categories of personal data about you. We process the personal data provided when you create and join PLUS+, data collected through your digital behaviour (for example, cookies), and data relating to your physical movements in our centres. This may include:
Contact details and other information (profile information):
Name, address, date of birth, gender, mobile telephone number, email address, household information, car registration number.
Behavioural and transaction data:
Activity history, affiliated centre, purchase history, use of benefits, search behaviour, location data, and points earned and spent.
DSC also assigns every member a membership number, records the date on which the member joined the points scheme, and collects marketing consents for email, mobile and social media, such as Facebook or Instagram.
Subscribing to the newsletter without PLUS+ membership
If you subscribe to our newsletters without being a member of the PLUS+ benefits programme, we process the personal data you provide when subscribing, namely your name, email address and affiliated centre. We may also process information about your interaction with the newsletter, such as whether you open it and click on links.
1.1.2 Purpose
Personal data is processed in order to establish and maintain an up-to-date benefits programme and to provide customers with targeted and personalised content. This includes segmenting members so that offers and marketing are as relevant as possible.
The personal data is also used to enable members to participate in games, competitions and relevant events at the centre.
The email address and telephone number provided are used to send activation links, login codes, service messages, surveys and marketing about products and services from DSC.
The processing is also intended to enable us to send you newsletters containing information, offers and marketing from DSC and the associated centres, and to analyse the effectiveness of our newsletters.
1.1.3 Legal basis
The processing of your information is based on Article 6(1)(a) of the EU General Data Protection Regulation (consent) and Article 6(1)(b) (contractual relationship) in connection with the benefits programme, marketing, the collection and use of points, and participation in gamification, competitions and events.
You may withdraw your consent at any time. We reserve the right to retain anonymised data for statistical purposes where the information can no longer be linked to you.
The processing of your information in connection with receipt of the newsletter is based on your consent, which you may withdraw at any time by unsubscribing from the newsletter. We reserve the right to retain anonymised data for statistical purposes where the information can no longer be linked to you.
1.1.4 Retention period
We retain your information for as long as necessary.
Personal data relating to receipt of the newsletter is retained for as long as you are subscribed. If you unsubscribe, your information will be deleted within a reasonable period, unless we have a legitimate interest or a legal obligation to retain it for longer.
Personal data relating to a PLUS+ member is retained until the member has been inactive for 24 consecutive months or until the account is deleted in the app. DSC will then either delete the information collected or anonymise it.
In certain cases, DSC may have a legitimate interest in retaining the personal data in question or may be legally obliged to retain it.
1.2 During membership
1.2.1 Personal data processed
DSC processes members' profile information, including activity history and movements in the points account (number of points), as described in section 1.1.1.
When a member uses the app or clicks on links in emails and newsletters, DSC also processes information about points earned and used with DSC and associated partners, tenants and shops. This applies both to physical visits to the centres and to online activities.
Members can earn points by scanning purchase receipts through the centre's app. This gives DSC access to information such as the shop name, address, purchase date, purchase amount and line items (the items purchased). DSC also processes information about where, when and how the app is used, as well as data concerning email openings and click behaviour.
Members can customise certain functions in DSC's app through their telephone settings. DSC will then process only the necessary personal data referred to in section 1.1.1.
In addition, where possible, DSC collects information about members' interactions with DSC's digital platforms, such as receipt and opening of emails, and use of apps, websites and social media such as Facebook and Instagram. Further information can be found in section 3, Members on DSC's websites, apps and emails.
1.2.2 Purpose
Information about points earned and spent is used together with profile information to calculate the member's points balance and other membership benefits.
When a member logs into Frederiksberg Centret's app, profile information is combined with data about points earned, points spent and digital behaviour in order to place the member in an interest or shopping-profile group. This provides access to relevant news, services and general offers from partners. The purpose is also to ensure correct segmentation so that the member receives personal discounts and offers selected specifically on the basis of the member's interests and preferences.
DSC also uses information about members' interaction with emails sent by Frederiksberg Centret and their digital behaviour to obtain statistical insight into members' opening rates and use of the digital platforms.
Finally, information about members' interests and digital behaviour is used to improve and develop DSC's centres, offers, digital platforms and services.
1.2.3 Legal basis
The processing of your information is based on Article 6(1)(a) of the EU General Data Protection Regulation (consent) and Article 6(1)(b) (contractual relationship) in connection with the benefits programme, marketing, the collection and use of points, and participation in gamification, competitions and events.
You may withdraw your consent at any time. We reserve the right to retain anonymised data for statistical purposes where the information can no longer be linked to you.
The legal basis for processing information for statistical purposes is Article 6(1)(f) of the EU General Data Protection Regulation (balancing of interests), together with DSC's legitimate interest in developing and improving its centres, the benefits programme, its shop and brand mix, and its offers.
1.2.4 Retention period
We retain your information for as long as necessary.
Personal data relating to a PLUS+ member is retained until the member has been inactive for 24 consecutive months or until the account is deleted in the app. DSC will then either delete the information collected or anonymise it.
In certain cases, DSC may have a legitimate interest in retaining the personal data in question or may be legally obliged to retain it.
1.3 Unsubscribing from the benefits programme
1.3.1 Personal data processed
DSC processes members' profile information, including activity history and movements in the points account (number of points), as described in section 1.1.1.
1.3.2 Purpose
When a member unsubscribes from PLUS+, all membership data will be anonymised, and unused points, information about redemption history and information about points earned will be automatically deleted. This data cannot be restored.
Non-personally identifiable demographic data, such as postcode and age, will nevertheless be retained in order to develop and improve Danske Shoppingcentre's centres, the benefits programme, the shop and brand mix, and its offers.
1.3.3 Legal basis
The processing of your information is based on Article 6(1)(b) of the EU General Data Protection Regulation (contractual relationship).
1.3.4 Retention period
We retain your information for as long as necessary.
When a member unsubscribes from PLUS+, the member's personal data is deleted or anonymised.
In certain cases, DSC may have a legitimate interest in retaining the personal data in question or may be legally obliged to retain it.
2. Members' visits to Danske Shoppingcentre's physical centres
2.1 Personal data processed
DSC processes members' contact details in connection with earning and using points in the physical centres. When a member checks in through Frederiksberg Centret's app, the visit to the relevant centre is recorded. The member's vehicle registration number is also recorded when entering car parks at centres with paid parking. If the member has given consent, the entry may be registered as benefits parking in accordance with the centre's current rules, or the member may be reminded to check in through push notifications in the app.
2.2 Purpose
The member's information is processed in order to record the member's check-in at the centres and other earning and use of points in the physical centres.
2.3 Legal basis
The processing of your information is based on Article 6(1)(a) of the EU General Data Protection Regulation (consent) and Article 6(1)(b) (contractual relationship).
You may withdraw your consent at any time. We reserve the right to retain anonymised data for statistical purposes where the information can no longer be linked to you.
2.4 Retention period
We retain your information for as long as necessary.
Personal data relating to a PLUS+ member is retained until the member has been inactive for 24 consecutive months or until the account is deleted in the app. DSC will then either delete the information collected or anonymise it.
In certain cases, DSC may have a legitimate interest in retaining the personal data in question or may be legally obliged to retain it.
3. Members on DSC's websites, apps and emails (databases)
3.1 Personal data processed
DSC processes members' contact details, points-earning history and any comments members may have provided on DSC's direct or online platforms in connection with their experience of the benefits programme.
DSC also collects information about members' behaviour when receiving emails from DSC and the centres, as well as their general digital interactions with DSC.
3.2 Purpose
The purpose of the processing is to record and confirm members' earning and use of points and to provide information about available membership benefits and opportunities to use points.
The information is also used to provide members with relevant offers and campaigns by email or digitally, based on their areas of interest and previous interactions.
DSC also uses data about members' interaction with emails and digital platforms to obtain statistical knowledge about opening rates and user behaviour, with a view to improving communication and digital solutions.
Finally, information about members' earning and use of points is used to obtain general statistical insight into members' behaviour, enabling DSC to develop and improve its centres, including the shop and brand mix and its offers.
3.3 Legal basis
The processing of your information is based on Article 6(1)(a) of the EU General Data Protection Regulation (consent) and Article 6(1)(b) (contractual relationship) insofar as it concerns marketing.
You may withdraw your consent at any time. We reserve the right to retain anonymised data for statistical purposes where the information can no longer be linked to you.
The legal basis for processing information for statistical purposes is Article 6(1)(f) of the EU General Data Protection Regulation (balancing of interests), together with DSC's legitimate interest in developing and improving its centres, the benefits programme, its shop and brand mix, and its offers.
3.4 Retention period
We retain your information for as long as necessary.
Personal data relating to a PLUS+ member is retained until the member has been inactive for 24 consecutive months or until the account is deleted in the app. DSC will then either delete the information collected or anonymise it.
In certain cases, DSC may have a legitimate interest in retaining the personal data in question or may be legally obliged to retain it.
Personal data collected through cookies is deleted in accordance with DSC's cookie policy. See the cookie policy here.
3.5 Deletion of a PLUS+ profile
A member may always request that their profile and all personal data be deleted directly from the app. Follow these steps to delete a PLUS+ profile:
- Open the app.
- Go to “More”.
- Select “Profile settings”.
- Select “Delete my profile”.
4. DSC's apps
4.1 Personal data processed
As described in section 3, Members on DSC's websites, apps and emails (databases), DSC processes various categories of personal data about members when they log into DSC's apps.
In addition, DSC collects the following personal data, provided that the member has given consent through the settings on their mobile device (for example, a smartphone or tablet, hereinafter referred to as a “telephone”):
- If the member has given permission through the telephone's settings, DSC's app may send notifications to the telephone.
- If the member has given permission for DSC's app to access the telephone's location, the location is recorded.
- If the member has given permission for DSC's app to use the telephone's camera, that access is recorded.
This information is processed to optimise the user experience in the app and offer relevant functions.
4.2 Purpose
Information about permission to send notifications to the telephone is processed so that messages can be sent to the member's telephone about relevant information and offers from DSC, including from our centres.
Information about the telephone's location is processed together with information about permission to send notifications, so that messages can be sent to the member's telephone about relevant information and offers from DSC in the vicinity of the telephone, and to collect information about where in the centre the member has moved. This information may be used in connection with earning points under the benefits programme, for example when checking in at the centre, and to provide targeted marketing to members.
Information about permission to use the telephone's camera is processed together with the telephone's location information to ensure that the member can use the “Scan QR code” function in the app at the relevant centre, for example when the member wishes to earn points upon arrival at a centre. The camera may also be used to participate in virtual activities and competitions.
4.3 Legal basis
The processing of your information is based on Article 6(1)(a) of the EU General Data Protection Regulation (consent) and Article 6(1)(b) (contractual relationship) insofar as it concerns marketing, participation in competitions and the processing of location data, as described above in section 4.1.
You may withdraw your consent at any time. We reserve the right to retain anonymised data for statistical purposes where the information can no longer be linked to you.
4.4 Retention period
We retain your information for as long as necessary.
Personal data relating to a PLUS+ member is retained until the member has been inactive for 24 consecutive months or until the account is deleted in the app. DSC will then either delete the information collected or anonymise it.
In certain cases, DSC may have a legitimate interest in retaining the personal data in question or may be legally obliged to retain it.
5. Participation in games, competitions and events
5.1 Personal data processed
DSC processes members' contact details in connection with participation in games, competitions and events.
5.2 Purpose
The processing is carried out in order to contact the winners of competitions or games. In certain cases, the processing is also carried out so that marketing can be sent to members in connection with participation in games, competitions or events.
5.3 Legal basis
The legal basis for the processing is Article 6(1)(b) of the EU General Data Protection Regulation (contractual relationship) and Article 6(1)(a) (consent) insofar as it concerns marketing and participation in games, competitions and events.
Consent may be withdrawn at any time, but we reserve the right to retain data for statistical use where the personal data has been anonymised so that it can no longer be linked to you.
5.4 Retention period
We retain your information for as long as necessary.
Information about members' participation in games, competitions and events, as well as information about any prizes won, is retained for as long as the member wishes to remain a member of the benefits programme.
You may withdraw your consent at any time. We reserve the right to retain anonymised data for statistical purposes where the information can no longer be linked to you.
6. Data subjects' rights
As a data subject, you have a number of rights under the General Data Protection Regulation regarding how DSC processes your personal data. Further information about your rights is provided below.
As data controller, DSC is obliged to ensure that your information is disclosed only to you and not to unauthorised persons. When you wish to exercise your rights, we will therefore ask you to document your identity, for example by answering security questions or by similar means.
If you wish to exercise your rights or have questions about them, you can contact us at gdpr@dsc.dk.
Right of access
You have the right at any time to request access to the personal data DSC processes about you, the purposes of the processing, the categories of personal data concerned, the recipients of your information and the source from which the information originates.
You also have the right to receive a copy of the personal data DSC processes about you.
Right to rectification
If you discover that the personal data DSC processes about you is incorrect or incomplete, you have the right to have it rectified. If you wish to exercise this right, you must contact DSC in writing.
Right to erasure
In certain cases, you have the right to have your personal data erased, for example if you withdraw your consent and there is no other legal basis for the processing. However, DSC may in certain cases be obliged to retain the information, for example to comply with legal requirements or to establish, exercise or defend legal claims.
A request for erasure may in certain cases be refused because DSC may have a legitimate interest in retaining the personal data in question or may be legally obliged to retain it.
Right to restriction of processing
In certain cases, you have the right to restrict DSC's processing of your personal data so that it consists only of storage. This may apply if you believe that the information DSC processes about you is inaccurate or if the processing is unlawful. Contact DSC if you wish to exercise this right.
Right to data portability
You have the right to receive the personal data processed by DSC in a structured, commonly used and machine-readable format. This right may be exercised where the processing is based on consent or a contract and is carried out by automated means.
Right to object
You have the right at any time to object to DSC's processing of your personal data, including processing for direct marketing. If you do not want your information to be used for this purpose, you can contact DSC and request that this processing be stopped.
Complaints to the Danish Data Protection Agency
If you are dissatisfied with DSC's processing of your personal data, you have the right to lodge a complaint with the Danish Data Protection Agency. You can do so through its website or by contacting it directly.
Danish Data Protection Agency
Carl Jacobsens Vej 35
2500 Valby
Tel. +45 33 19 32 00
dt@datatilsynet.dk
7. Disclosure of personal data
DSC discloses personal data only where required by law or where necessary to fulfil an agreement entered into with an individual member or recipient of DSC's newsletter. The agreement may concern a specific membership benefit that the member has chosen as an extension of DSC's general membership terms, or an agreement concerning a specific service entered into by the customer with DSC.
In such cases, the disclosure will be stated in the terms and conditions when the member or customer enters into the relevant agreement.
8. Data processors and transfers to third countries
DSC uses external partners and suppliers for the operation, development and hosting of, for example, communication and marketing solutions, the preparation of market analyses and IT systems for handling business data.
These partners may act as data processors for DSC and process personal data on the basis of instructions from DSC. Where relevant, DSC has entered into written data-processing agreements with these parties to ensure that personal data is handled correctly.
Data processors are subject to a duty of confidentiality and may process personal data only for the purposes specified in the data-processing agreement.
DSC continuously monitors its data processors to ensure that they comply with their obligations under the agreement.
DSC does not transfer personal data to countries outside the EU/EEA. If a transfer to a third country becomes necessary, it will take place on the basis of an appropriate transfer mechanism, often the European Commission's Standard Contractual Clauses.
9. Other special circumstances
9.1 Children and young people
DSC processes personal data relating to members aged 15–17. This processing also includes their personal data. On DSC's digital platforms, points may be earned and used once a person has reached the age of 15.
9.2 CCTV surveillance
Frederiksberg Centret uses CCTV surveillance in accordance with the applicable legislation on personal data. The purpose of the surveillance is to make DSC's customers feel safe and to reduce the risk of crime. The surveillance is also used to investigate and document incidents relevant to insurance claims. Recordings are stored for 30 days and then deleted in accordance with section 4c(4) of the Danish Act on TV Surveillance.
9.3 Cookies
DSC processes personal data from visitors to its digital platforms through the use of cookies for necessary, statistical, functional and marketing purposes. This includes optimising the user experience. Cookies are small text files containing letters and numbers that are stored on your device and make it possible to collect information about the pages and functions you visit and use. Further information about our use of cookies, their purpose, and how you can delete or reject them can be found in our cookie policy here.