Table of contents:

  1. Introduction
  2. Data controller
  3. Information
  4. Purposes of processing personal data
  5. Disclosure
  6. Rights
  7. Deletion of information
  8. Right to complain
  9. Changes

1. Introduction

Action-cards.com is owned and operated by:

Copenhagen Risk & Safety Group ApS
(CVR: 35481621)
C/O Ivan T. Hermann
Askevænget 47, 3. th
2830 Virum

At Copenhagen Risk & Safety Group ApS, we take the processing of your personal data very seriously. The purpose of this Privacy Policy is to set out, in a clear and straightforward way, how we handle your personal data.

Our Privacy Policy, which complies with EU legislation on data protection (GDPR) (the “General Data Protection Regulation”), is described in more detail below.

This privacy policy applies when Copenhagen Risk & Safety Group ApS, CVR no. 35 48 16 21, processes personal data about you. It informs you about which personal data Copenhagen Risk & Safety Group ApS processes about you, and which rights you have in this regard (the “Privacy Policy”).

2. Data controller

The data controller is:

Copenhagen Risk & Safety Group ApS
CVR no. 35 48 16 21
www.cors-group.com

(“Copenhagen Risk & Safety Group ApS” or the “Data Controller”)

If you wish to contact us, you can do so in the following ways:

By post
Letter marked “Personal data” sent to:
c/o Ivan T. Hermann
Askevænget 47, 3.th.
2830 Virum

By telephone
Telephone: +45 22 75 69 75

By email
Email: persondata [at] cors-group [dot] com

Copenhagen Risk & Safety Group ApS is the data controller, which means that we are responsible for the processing of your personal data, including ensuring that it is processed in accordance with EU data protection legislation.

If you have questions, comments or complaints regarding the Privacy Policy or compliance with it, you can always contact Copenhagen Risk & Safety Group ApS using the contact details above.

3. Information

Copenhagen Risk & Safety Group ApS collects, stores and processes data from you and about you so that we can give you the best possible safety advice.

Copenhagen Risk & Safety Group ApS collects data in various ways and at various times. Examples of how Copenhagen Risk & Safety Group ApS collects data:

Methods of collection:

  • A sales situation where a quote is requested for one of our services, products or a cooperation agreement.
  • Questionnaires, both online and in print.
  • When you make a purchase in our webshop.
  • Visit registration in connection with the use of our digital services (see the section on cookies).
  • From social media, advertising and analytics providers, and public registers.
  • Via data from our Action-cards®.

Copenhagen Risk & Safety Group ApS stores and processes, among other things, the following personal data (“INFORMATION”) about you:

For invoicing and bookkeeping:

  • Name
  • Address
  • Email address
  • Mobile and private telephone number
  • Card details, which are forwarded in encrypted form to our payment provider. We do not have access to your card details.

For marketing:

  • Name
  • Address
  • Email address
  • Mobile and private telephone number

For accident registration:

  • Name
  • Address
  • Email address
  • Mobile and private telephone number
  • The data you submit via Action-cards®, the Action-cards® form (e.g. type of accident, time and action taken) or other types of data that are relevant for optimising safety on an evidence basis.

4. Purposes of processing personal data

We only process and store the INFORMATION for the following purposes:

  • Invoicing and bookkeeping in connection with the sale of products and services.
  • Marketing.
  • Analysis purposes, in order to be able to advise on optimising safety.
  • Debt collection cases, if applicable.

5. Disclosure

Copenhagen Risk & Safety Group ApS uses the following data processors:

NameFunction
StripePayment gateway – Stripe a payment service provided by Stripe Inc., which allows users to make online payments. Personal Data collected: various types of Data as specified in the privacy policy of the service. Place of processing: See the Stripe privacy policy – Stripe Privacy Policy
MailChimpNewsletter system – MailChimp, The Rocket Science Group LLC Georgia 675 Ponce De Leon Ave NE, Suite 5000 Atlanta, Georgia 30308, Terms of use: Overview of Privacy Policy: Mailchimp Privacy Policy
(opbevaring af samme informationer som brugerne oplyser ved køb af action-cards bortset fra betalingsinformationer)
SimplySimply handles the hosting of the Action-cards website (WordPress content management system, CMS).
DantrykPrinting and shipping of Action-cards®.
CapsuleCapsule is CORS Group ApS’s CRM system. Capsule Privacy Policy.

Data processing takes place subject to data processing agreements that meet applicable requirements.

Personal data may be disclosed to:

  • Stripe – Payment gateway.
  • Mailchimp – Sending of newsletters.
  • Simply – Hosting of website and webshop.
  • Dantryk – Printing and shipping of Action-cards®.
  • Capsule – CORS Group ApS’s CRM system.
  • The company’s accountant, bank and legal advisor(s) (e.g. in debt collection cases).

6. Rights

Your rights under the General Data Protection Regulation are as follows:

  • You have the right to be informed about the collection/processing and disclosure of information about yourself for the purpose of personal data processing.
  • You have the right to access the personal data that has been processed about you.
  • You have the right to object to the Company’s electronic processing of personal data if you believe that personal data has been processed in violation of applicable EU data protection legislation.
  • You have the right to demand rectification, deletion or blocking of information that is incorrect or misleading.

7. Deletion of information

The period for which we keep your data depends on the type of data in question and on our legal basis for processing that data.

Common to all types of data is that your data will be deleted as soon as we no longer have a lawful reason to process it.

Personal data and data for invoicing and bookkeeping will be deleted automatically 5 years and 6 months after your most recent purchase from Copenhagen Risk & Safety Group ApS.

For accident registration, personally identifiable information (i.e. name, address and contact information) will be deleted when it can no longer be used for optimising safety. The remaining information will be used in anonymised form for statistics, analysis, etc.

Member information will be deleted no later than 2 weeks after the profile is deleted, provided that information arising from a purchase or similar will be kept as stated above.

8. Right to complain

If you have complained to Copenhagen Risk & Safety Group ApS about the processing of your personal data and you believe that you have not been met in accordance with applicable legislation, you can also complain to the Danish Data Protection Agency (Datatilsynet):

Datatilsynet
Borgergade 28
1300 København K
Tel.: 33 19 32 00
dt [at] datatilsynet [dot] dk

Or see their current contact details at: www.datatilsynet.dk.

9. Changes

Changes to our Privacy Policy will be announced by publishing the new terms and conditions on our website.

Last updated: 26 September 2025.