Privacy policy

In short

• If you ask for an estimate in the rental estimate or write to us in a form, we store your answers on our own server in Germany. Only our team can see them, and we get an email about your enquiry. The same details are added as a task in our task list ClickUp, which runs in the United States, where the team deletes them by hand.
• If you sign up for a viewing or BY Direkte, or send us your home, the details are stored in our database on our own server in Germany. A home you send us is also added as a task in ClickUp, which runs in the United States.
• If you sign up for the newsletter, our server sends your email address, and your first name if you give it, to Klaviyo, which sends the newsletter.
• If you are a client or a tenant and sign in to Mit BY, we fetch your data from our own systems while you view the page and show them only to you.
• Analytics and marketing cookies need your consent, and you choose each one separately. See the cookie policy.
• Address suggestions and Google reviews are fetched by our server. In those cases your browser only talks to our own domain.
• If you stay in one of our holiday homes and are not a Danish citizen, the law requires us to register you when you arrive. The register is kept only on our own server for 1 year and shown only to the police if the police ask for it. See the guest register.
• The maps are from Google Maps. On the page for a home, the map loads by itself when it is about to come into view, and on the overviews of homes only when you choose the map view. Google receives your IP address when a map loads. See the maps.
• You can always see, correct or delete your data. Write to team@byadministration.dk.

Data controller

The data controller is BY Administration ApS, CVR 45652491, Brorsonsgade 4, kl., 1624 København V, Denmark.

Email team@byadministration.dk, phone +45 50 52 15 37.

When you ask for an estimate

The rental estimate form is on the rental income calculator, the rent calculator and several of our pages. It has five steps, and when you send it we receive:

Purpose: to prepare your personal estimate and contact you about your property. We use the campaign parameters, the first page of the visit and the domain of the page you came from to see where enquiries come from and which of our adverts, links and pages work.

Legal basis: your request for an estimate, that is, steps before a possible agreement with us (Article 6(1)(b) of the GDPR), and your consent to be contacted (Article 6(1)(a)), which you can withdraw at any time. We process the campaign parameters, the first page of the visit and the domain of the page you came from on the basis of our legitimate interest in knowing where enquiries come from and in measuring our marketing (Article 6(1)(f)). We only keep the domain, never the full address or what you searched for. The first page and the domain are only remembered while you are on the site and are not stored in your browser.

How it is stored: your request is saved on our own server before we reply, so it cannot be lost. Our team reads it in our admin, which only staff with a personal login can open. We record who last changed an enquiry and log who deletes one. At the same time, the server sends an email with your answers to our team’s inbox through Brevo, and right after that the same details are added as a task in ClickUp, our task list, where the team follows up on new customers. Apart from that, your request is not passed on. The task in ClickUp is not deleted automatically together with the request here; the team deletes it in ClickUp by hand. Enquiries about a home to rent and withdrawals are not sent to ClickUp. Job applications are added to a separate list in ClickUp, see the section on job applications. Only the address is looked up in BBR and Plandata, see address suggestions.

Your IP address is used in the server’s memory to limit submissions to 5 in 10 minutes, and as with every visit it appears in the web server’s access log, see hosting and security. It is not stored with your request.

Your estimate is prepared by a person on our team. We make no automated decisions about you.

When you start and send the form, our analytics record it with the name of the form and the type of rental. They never receive your name, email or phone number.

When you write to us in a form

The forms on pages such as contact, cleaning, commercial cleaning, property photography and property management send us your name and email, your phone number and an address if you give them, and your message, together with the topic, the address of the page, the first page of the visit, the domain of the page you came from and campaign parameters as in the rental estimate. If you ask for a meeting, the phone number is required. If you write on behalf of an owners’ association, you also send its name and CVR number, the number of units, the chair’s name and, if any, its current administrator.

Purpose and legal basis: to reply and give you a quote, that is, steps before a possible agreement with us (Article 6(1)(b)), and your consent to be contacted (Article 6(1)(a)).

The onboarding form on get started sends us whether you want to rent out short-term or long-term, the address of the home, your first name, your phone number and your email. If you fill them in, it also sends the size and number of rooms, what makes the home special, when it can be ready, your last name, company or CVR number and a message, together with the language, the address of the page, the first page of the visit, the domain of the page you came from and campaign parameters as in the rental estimate. The purpose is to assess your home and give you a proposed agreement. You get a receipt by email through Brevo. When you send the form, our analytics records it with the rental type and the name of the form, but never your name, email or phone number.

These forms are stored and handled like estimates: on our own server, in our admin and with an email to our team.

When you book a meeting

If you book a meeting in the calendar on book a meeting, you send us your name and email, your phone number if you give it (it is required for a phone meeting), the time and type of meeting you choose and what you want to talk about, together with the language, the address of the page, the first page of the visit, the domain of the page you came from and campaign parameters as in the rental estimate.

Purpose and legal basis: to hold the meeting with you, that is, steps before a possible agreement with us (Article 6(1)(b)), and your consent to be contacted (Article 6(1)(a)).

The calendar is our own and runs on our own server, where the booking is stored. It appears both in the calendar and as an enquiry in our admin, which only staff with a personal login can open, and is added as a task in ClickUp, as described under the forms above. Emails about the meeting are sent through Brevo: to you the receipt, the confirmation with a calendar invitation, a reminder the day before and a notice if we cannot take the time or the meeting is cancelled, and a notice to our team when you request or cancel a meeting. We do not store the link in the emails that lets you cancel, only a fingerprint of it. As with the forms, your IP address is only used in the server’s memory to limit the number of requests.

Confirmed meetings also appear in the calendar on Nour’s phone with the time, the type of meeting and your name, but not your email, your phone number or what you want to talk about.

The booking is deleted automatically 12 months after the meeting. The enquiry in our admin follows the rule for enquiries, see how long we keep data.

When you apply for a job

If you apply through careers, we receive your name and email, your phone number and LinkedIn address if you give them, the area and hours you are applying for, your message and up to three files, such as your CV, in PDF, Word, JPG or PNG, together with the language, the address of the page, the first page of the visit, the domain of the page you came from and campaign parameters as in the rental estimate.

Purpose and legal basis: to assess your application and contact you about it, that is, steps before a possible employment contract (Article 6(1)(b)), and your consent to us storing the application (Article 6(1)(a)).

The application and files are stored on our own server, where our team opens them in our admin. Our team gets an email about the application through Brevo, but the files are never attached to it. Right after that, the application and its files are added as a task in our task list ClickUp, which runs in the United States, in a list used only for applications. The task is not deleted automatically together with the application on our server; the team deletes it in ClickUp by hand no later than 6 months after the last contact. This applies to applications sent from 1 November 2026.

Viewings, BY Direkte and “Add your home”

Three forms are written to our database, the same one our admin also uses for rentals:

• If you sign up for a viewing of one of our homes to rent, you send us your name, email, phone number, the number of people, the time and a message if you write one.
• If you join the home list or BY Direkte, you send us your name, email, phone number, the postcodes you are looking in, the most the home may cost, the number of rooms and residents, when you can move in and what you write about yourself. We also store on your sign-up which page on the site you signed up from (without anything after “?”), such as the page about homes to rent in Østerbro.
• If you send us your home or commercial premises under Add your home, you send us your name, email, phone number, whether you own it as a private person or through a business (and if you choose to, the company name and CVR number), how many properties you would like to rent out, the address, size, the rent you have in mind, a message and up to 20 photos, together with the language you wrote in. For a home also, if you choose to, the type of home, number of rooms, how you hold it and your wishes for the letting: available from and lease period, furnishing, pets, smoking, suits sharers, number of residents, energy label, utilities on account, deposit, prepaid rent and facilities. For commercial premises also, if you choose to, the kind of premises, whether the letting is registered for VAT and when it is available. We do not look up the CVR number.

Purpose and legal basis: to give you a place at the viewing, send you homes that suit you or assess your home. This is to perform an agreement with you or to take steps before one (Article 6(1)(b)). We store the page you signed up from to see which of our pages lead people to sign up; that is our legitimate interest (Article 6(1)(f)), and it is deleted together with the sign-up.

The details are saved on our server briefly, while we write them to the database. Once that succeeds, they are deleted from the temporary copy straight away. The database runs on our own server at Hostinger in Frankfurt, Germany, the same one our admin uses.

The photos of your home stay on our server, where they are not public, with a link that cannot be guessed. The photos are only shown on the site if we list the home for rent. A home or commercial premises you send us is also added as a task in ClickUp, which runs in the United States, with your contact details, your other answers and the photos, without location (GPS) and the other data a camera stores in the photo. You and our team get an email about it through Brevo.

If you choose to pay for BY Direkte, we send you on to Stripe’s payment page. You enter your card details with Stripe, and we never see them. If you do not complete the payment, you are not signed up, and we send you no emails. If you have not been on the list before, we delete the details after 7 days.

“Rent this home”

If you send an enquiry about an available home with “Rent this home”, you send us your name, email, phone number, when you want to move in, how many adults and children will live in the home, whether you have pets (and which) or smoke, your occupation, and if you choose to, your household income, whether you can give a reference from a previous landlord, and what you write about yourselves, together with the language, the address of the page, the first page of the visit, the domain of the page you came from and campaign parameters as in the rental estimate. We do not ask for your CPR number, age or documentation here; we only ask for that if it becomes relevant.

Purpose and legal basis: to assess your enquiry and contact you about the home, that is, steps before a possible tenancy agreement (Article 6(1)(b)). The enquiry is stored on our own server and can only be opened in our admin. Our rentals team gets an email about it through Brevo, but your income is only shown in our admin, never in the email. You get a receipt by email through Brevo. When you send the form, our analytics records it with the name of the form, but never your name, email or phone number.

If you also tick the home list, we add you to the free home list with your name, email and phone number, and the home’s page as the page you signed up from. As criteria we use the home’s postcode, number of rooms and total monthly cost, your answers about moving in, the number of residents and pets, and what you write about yourselves. If you are already on the list, you keep your own criteria. After that the same applies as for the home list above, and you can unsubscribe at any time. Without the tick, we do not add you.

Stays you book with BY Stays

If you book a stay directly with us on BY Stays, we receive your first name, last name, email and phone number, your country, a message if you write one, and the stay’s dates, number of adults and children and price. If the price is DKK 5,000 or more, we also receive your address. If you book for a company, we receive the company’s name, country and address and its VAT or company number if you enter it. The details are saved on our own server before you are sent on to payment. You pay with Stripe and enter your card details there; we never see them. Once the payment has gone through, we create the reservation in Hostaway, our booking system, with your name, email, phone number, your country and your address if we have it, your message if you write one, the number of adults and children, your language and the stay. If you book for a company, we send neither the company’s name, number nor address to Hostaway; they are kept only by us and on your receipt. You get a confirmation by email through Brevo, which is also your receipt, and our team is told about the booking. We can see the booking in our admin, which only staff with a personal login can open.

The purpose is to deliver the stay you have booked, take the payment and give you a receipt that meets the Danish VAT rules. Legal basis: our agreement with you about the stay (Article 6(1)(b)), the Danish Bookkeeping Act for the payment and the Danish VAT Order for the receipt (Article 6(1)(c)). The VAT Order requires the buyer’s name and address on the receipt when the price is DKK 5,000 or more, and when a company asks for a full invoice (sections 58 and 66). That is why we only ask for your address in those cases. We also use your country to be able to report where our guests come from, for example when Statistics Denmark asks us to (our legitimate interest, Article 6(1)(f)). A quote you never pay for is deleted after 7 days. Paid bookings are kept for as long as we need to document the stay and the payment. See also the terms for stays.

Before you arrive, our team sends you a personal link to a guide to your stay on our own site, from our own mailbox and not through Brevo. The guide shows your first name, the dates of your stay and the home’s address, entrance, house rules and emergency numbers, and from 48 hours before check-in until check-out also the code and the wifi. To show the code, our server asks Hostaway whether the reservation is still valid and keeps the answer for up to 5 minutes. The page loads no statistics and nothing from third parties, we ask search engines not to show it, and the link stops working 7 days after check-out. The map and the route from the airport are links to Google Maps that only open when you tap them, and your browser does not send the link to the guide along. Our team may get a reminder through Brevo 48 hours before you arrive, with your name, email, the stay and the link to the guide. Legal basis: our agreement with you about the stay (Article 6(1)(b)). Guests who are not Danish citizens also register in the guide; see the guest register.

Referral to our finance partners

If you ask for a referral in the form, you send us your name, email, phone number, whether you are buying privately or through a company, the purpose of your purchase and, if you like, an area and a short message. We do not ask about your finances, and you should not write about your finances, your health or your CPR number in the message. As with the other forms, the language, the page address, the first page of the visit, the domain of the page you came from and campaign parameters are included.

Purpose and legal basis: to call you, tell you which of our partners lend for that kind of purchase, and refer you if you want us to. These are steps you have asked for yourself (Article 6(1)(b)). The enquiry is stored like the site’s other enquiries, only staff with separate access in our admin can see it, and it is never added to ClickUp. You get a receipt through Brevo, and the team gets an email through Brevo that there is a new enquiry, without your name.

The partner: we only pass on your name, email, phone number and the purpose of your purchase to the partner you have said yes to yourself, after you have been given the partner’s name in our conversation (Article 6(1)(a)). The partner is an independent controller of what it receives and asks for the information it needs itself. We store when you said yes, to which partner and who at our end registered it, because the agreement with the partner and the bookkeeping of the fee are based on it (Article 6(1)(c) and (f)).

You can withdraw your consent and ask us to delete your information by writing to us. You should also ask the partner to delete what we have already passed on to it. We keep the record of a referral that has already been made until the deadline below.

The property finance pages load neither Meta nor Microsoft Clarity, not even when you have consented to analytics and marketing. When you send the form, our analytics records it with the form’s name, but never your answers, name, email or phone number.

Parking spaces: “Rent out your parking space” and the waiting list

If you send us your parking space under Rent out your parking space, you send us your name, email and phone number, the space’s address or postcode and location, the number of spaces, the type, whether it is covered, charger, access, car size and possibly dimensions and level, how you are connected to the space, and your answers on whether you may rent it out. You can also send the rent you would like, when the space is available, a minimum rental period, whether the tenant may be a company, a message, up to 6 photos and one document, such as the association’s articles or your landlord’s consent, and whether you rent out as a private person or as a business. As with the other forms, the language, the page address, the first page of the visit, the domain of the page you came from and campaign parameters are included.

Purpose and legal basis: to assess the space and your right to rent it out, give you a proposal and find a tenant, that is, steps before an agreement with you (Article 6(1)(b)).

The enquiry is stored on our own server and can only be opened in our admin. The photos are stored without location (GPS) and the other data a camera stores in the photo, and they are not public. The team gets an email about the enquiry through Brevo, you get a receipt through Brevo, and the enquiry is added with the photos as a task in ClickUp, as described under the forms. We do not show the space publicly before we have spoken with you.

If you join the waiting list, you send us your name, your email, your phone number if you write it, the areas and possibly the postcode you are looking in, the most you will pay in rent, types of space, whether you have an electric car, when you need the space, and whether you rent as a private person or a company. We store the consent text as it stood next to the tick box (“Yes, contact me by email or phone when a parking space that fits becomes available. I can unsubscribe at any time.”) and the time.

Purpose and legal basis: to contact you by email or phone when a parking space that fits becomes available. The legal basis is your consent (Article 6(1)(a)), which you can withdraw at any time with the link in the email or by writing to us. The sign-up only counts once you have confirmed it in the email we send you through Brevo. The email has a link so you can unsubscribe with one click. The sign-up is stored in our database on our own server and as an enquiry in our admin. It is not added to ClickUp.

When a space fits and you say yes to going ahead, we give the owner of the space your name and contact details so you can agree the rest. If the owner’s association needs to know who uses the space, the association can receive them too. The owner and the association are independent controllers of what they receive.

When you send a form or confirm your sign-up, our analytics records it with the form’s name, but never your name, email or phone number. If a page about parking spaces shows a map, it is from Google Maps and is loaded in the same way as the maps on the home pages, see the maps.

The guest register for guests who are not Danish citizens

If you stay in one of our holiday homes and are not a Danish citizen, we must register you when you arrive (the Danish Aliens Order, executive order no. 1354 of 17 November 2025, section 36). This also applies to children and a spouse travelling with you; you register them. If you booked directly with us, you do it in the guide to your stay, which you get a personal link to. If you send us a copy of your passport or ID card, for example because you booked through Airbnb or Booking.com, our team registers you from the copy. Danish citizens are not registered.

We receive your full name, your date of birth, your nationality, your permanent address and the type and number of your passport or other travel document (not for Nordic citizens), and the arrival and departure dates of the stay. Your signature is your name and your tick in the guide, with the time; if our team registers you from the copy, the team member’s name and the time are recorded instead. If you have sent us a copy of your passport or ID card yourself, we keep the copy with the registration as documentation of the check of your travel document that the rule requires, and delete it together with the registration. The email or message you sent the copy with is not part of the register: an email is kept in our email at Migadu (see when you contact us), and a message through, for example, Airbnb or Booking.com is also kept by them and in Hostaway under their own rules. If you have not sent a copy, we may ask to see your passport.

Purpose and legal basis: to comply with our legal obligation to keep a register of guests who are not Danish citizens (Article 6(1)(c), under section 36 of the Aliens Order, issued under section 42 of the Danish Aliens Act). The register must always be available to the police, and the police can ask us for information from it (section 42(1) of the Aliens Act and section 38 of the Aliens Order). We do not use the information for anything else.

The details in the register are kept only on our own server at Hostinger in Frankfurt, Germany. They are not sent to Hostaway or anyone else, only to the police if the police ask for them. Only staff with a personal login to our admin can see them, and every view, every view of the copy of your travel document and every export to the police is logged. The copy is never part of an export to the police, but we can show it to the police if the police ask for it.

Retention: the rule requires us to keep the details for at least 1 year and at most 2 years after they are entered (section 36(6)). We delete them automatically 1 year after the latest entry, and within 6 hours if the booking is cancelled before arrival. The copy of your travel document is deleted together with the registration. Until then we cannot delete them, because the law requires us to keep them (Article 17(3)(b)), but you can always see them and have them corrected.

Tenants

If you rent a home we manage for the owner under a long-term lease, we process data about you while the lease runs, and for a while afterwards.

What we collect, and from where: your full name, address, phone number and email, plus the lease’s finances: the rent and any additional payments for heating, water and electricity, the deposit and prepaid rent. The last ones belong to the lease itself, not to you personally, but are part of what we administer for you and the owner. Our team enters the information when the lease is created or you are added as a tenant, not you yourself in a form on the site: we get them from you or from the owner you rent from. If you sign the lease or an inspection report digitally, we also store the name you type, the date you choose, our server’s own timestamp, and your IP address and browser as proof of the signature. The last two are never shown in our admin or in the document itself, only the name and date are. Documents we share with you may come from an upload or from a task in our internal task list, ClickUp, that our team has linked to your lease.

Purpose: to administer your lease for the owner, share documents with you and let you follow them and your rent in Mit BY.

Legal basis: our legitimate interest in administering your lease for the owner, who has asked us to do so, including sharing documents with you and letting you follow the lease in Mit BY (Article 6(1)(f)). The inspection report and its deadline follow the Danish Rent Act, lejeloven, which applies to the lease agreement you are party to with the owner. Being able to see who an agreement was made with after it ends is part of the same legitimate interest.

Recipients: the owner you rent from only sees your first name, the lease period, the rent for the lease, the signed lease and inspection reports, and the documents our team has marked “Also owner”. If a document we share with you originally came from ClickUp, ClickUp is also a data processor. See the full list of recipients and transfers outside the EU in recipients and transfers outside the EU.

How it is stored: your access to Mit BY is described in the section below. We do not delete your data in the database or the documents we share automatically: your tenant record can only be deleted once it is no longer linked to any lease, and a document is only removed when our team deliberately does so.

Your rights are the same as for everyone else we process data about, see your rights.

Mit BY for owners and tenants

Mit BY, in Danish, is the page where you follow your property: as an owner we rent out for, or as a tenant of one of our long-term homes. Both happen on the same login.

Signing in: with a link we send to your email through Brevo, instead of a password. The link works for 15 minutes and only once. If it is your very first link as an owner, sent by our team (for example “Give access” or “Send welcome”), it instead works for 72 hours; every other link, including a tenant’s first invitation, follows the usual 15 minutes. We do not store the link itself, only a fingerprint of it.

Access as an owner: any email registered as yours in our accounting system e-conomic, or as the owner’s email on a customer in our settlement system, can sign in as soon as that customer has at least one home or one lease with us, without us first having to give that particular email access. We can also give an email access manually beyond that, and we can always block a specific email so it cannot sign in, even if it belongs to a customer. Giving access back always lifts an earlier block. If our team removes an owner’s access in the admin, we block the email at the same time, otherwise it would simply get access again on its own the next time we fetch your data. When our team invites you, we note the time, and we do the same when you sign in yourself, so we do not send you an invitation you do not need.

Access as a tenant: if you have an active lease with us, or it ended at most 30 days ago, you can sign in with the email on the lease. Access is looked up in our database every time you sign in or open the page, so it ends immediately if you are removed from the lease.

If you have both an owner’s and a tenant’s access, or several customer numbers at once, for example a private one and a company, you see each section separately on the same page. As an owner you see your homes, bookings and statements, and for your long-term homes the tenant’s first name, the lease period, the rent, the signed lease and inspection report as PDFs, and the documents our team has marked “Also owner”. As a tenant you only see your own home, the lease period, the rent and the other amounts from your own lease (on-account payments, deposit and prepaid rent), and the documents our team has shared with you, never any of the owner’s finances.

When you view the page, our server fetches your data where it already is: homes and statements in our settlement system on the same server, bookings and the homes’ names and photos in Hostaway, your name and email in our accounting system e-conomic, and leases, lease contracts and inspection reports in the database our admin also uses. Mit BY does not copy the data and never changes it. The server keeps answers from e-conomic and Hostaway’s home list in memory for up to an hour, a home’s bookings for up to 5 minutes; a tenant’s leases, and the block and exception lists, are fetched fresh every time. Your browser fetches the photos of your homes directly from Hostaway.

Legal basis: as an owner, our agreement with you about renting out your home (Article 6(1)(b)); we show you the tenant’s first name and rent on the basis of our legitimate interest in letting you follow the rental of your own home (Article 6(1)(f)). As a tenant, the basis is the same as in Tenants above.

Once you are signed in, a cookie remembers it for 30 days, whether you sign in as an owner or a tenant, see the cookie policy.

Address suggestions

When you type an address in the rental estimate, the onboarding form or “Add your home”, your browser sends the text to our own server, which fetches suggestions from the Danish Agency for Climate Data’s public address register (the Adressevælger service). The register only sees our server’s request, not your IP address. Suggestions may be kept in our server’s and your browser’s cache for up to a day.

When you choose an address from the suggestions, our server looks it up in BBR (the Danish Building and Housing Register, via Datafordeleren) and in Plandata.dk to fill in the size and number of rooms and show the address’s local plan and zone. The same lookup happens when our team opens your request in our admin, also if you typed the address yourself instead of choosing a suggestion. BBR only receives the address and Plandata only the address’s coordinates, never your name or contact details, and the answers may be kept in our server’s cache for up to a day. When your request is added to ClickUp, our server looks the address up in the Adressevælger service again to place it on the map in the task. Here too, the service only receives the address.

The newsletter

If you sign up for the newsletter at the bottom of the page, our server sends your email address, and your first name if you gave it, to Klaviyo, Inc. in the United States, which manages the list and sends the newsletter. Klaviyo’s own script does not run on our site.

Legal basis: your consent (Article 6(1)(a)). You can unsubscribe at any time.

Klaviyo is certified under the EU-US Data Privacy Framework (dataprivacyframework.gov). By default, Klaviyo records whether you open the newsletter (Klaviyo) and which links you click. If you unsubscribe, your profile stays with Klaviyo marked as unsubscribed, so you get no more emails, until we delete it (Klaviyo).

Offers by email to clients

When you sign a management agreement with us, you can tick a box yourself to let us email you offers on cleaning and property photography for your home. The box is not ticked in advance, and you can sign without it. We store your answer, yes or no, on the agreement together with the wording of the box and the time. If you said yes, the offer comes in the email confirming the agreement. The email is sent through Brevo, which records which links in it you click. Legal basis: your consent (Article 6(1)(a) and section 10 of the Danish Marketing Practices Act). You can always say no thanks by pressing No thanks to offers in the email or by replying “No thanks” to an email from us, and we will send you no more offers. We store your no thanks on the agreement with the time.

When you contact us

If you call or write to us, we use the information to reply and to help with your property. The legal basis is our legitimate interest in answering enquiries (Article 6(1)(f)) or steps before an agreement with you (Article 6(1)(b)).

The bubble with Nour at the bottom of the page only opens WhatsApp, your text messages app or the phone when you tap it. No third-party script runs in the bubble. If you write on WhatsApp, WhatsApp also processes the message under its own terms.

When you tap a phone number, an email address, WhatsApp or SMS, our analytics record that contact was made and which way. They do not record what you write.

Our email is hosted by Migadu-Mail GmbH in Switzerland, whose servers are in France and Germany. Switzerland is covered by a European Commission decision that it protects personal data adequately (European Commission).

Analytics and marketing

We would like to count which pages are read and see whether our adverts work. We only set cookies for this with your consent, and you choose analytics and marketing separately. The switches are off until you turn them on. The full list of cookies is in the cookie policy.

Our own page counter

Without cookies, we count how many times each page is viewed. When you arrive on the site from elsewhere, we also count a visit together with the domain of the page you came from, such as google.com, the campaign link’s source, medium and name if you came through a campaign link, and whether you came from a Google ad or a link from Facebook or Instagram (only yes or no, never the click’s ID). The counter sets no cookies and stores nothing in your browser. We only keep totals per day: the page without anything after “?”, the domain and the campaign link’s details. Never your IP address, the full address you came from or anything that could recognise you, so we cannot see how many different people visited the site either. If you send us an enquiry, we also count it in the daily totals together with the source, the page you arrived on, the campaign and the name of the form you used, such as the estimate, Get started or “Rent this home”, but without your name or contact details, and the count stays even if the enquiry is deleted. We count a sign-up to the home list or BY Direkte in the same way under the form’s name, also without your name or contact details. If you tap a phone number, an email address, WhatsApp, SMS or “Book a meeting”, we count the tap in the daily totals together with the channel, such as WhatsApp, the place on the page, such as the bubble with Nour or the footer, the page you tapped on, and the source, the page you arrived on and the campaign. We cannot see whether you actually called or sent a message, and we never record what you write. The daily totals are kept permanently, as they say nothing about any individual visitor. Your IP address is only used in the server’s memory to limit how many counts can come from the same place, and as with every visit it appears in the web server’s access log, see hosting and security. Nothing is counted in Mit BY, the stay guide or other pages with a personal link. Legal basis: our legitimate interest in knowing which pages and contact channels are used and whether our marketing works (Article 6(1)(f)).

Google Analytics 4

Shows which pages are read, where visitors come from and which buttons are used. The Google tag loads on every page. Until you consent to analytics, it sets no cookies and only sends cookieless signals without an identifier (Google consent mode). Google Analytics 4 does not log IP addresses, and for visitors in the EU the location is looked up on servers in the EU before the IP address is discarded (Google).

Microsoft Clarity

Shows how the pages are used, such as clicks and scrolling, as combined heatmaps and replays of visits. Clarity only loads after you consent to analytics. If you have also consented to marketing, Clarity may share data with Microsoft Advertising (Microsoft). Clarity always masks what you type in form fields, so it is not included in the recordings (Microsoft).

Meta Pixel

The Meta Pixel only loads after you consent to marketing. It measures whether an advert on Facebook or Instagram led to a visit or an enquiry.

Legal basis: your consent (Article 6(1)(a)). You can withdraw it with “Change your cookie choice” at the bottom of every page.

Google reviews

The Google reviews on our pages are fetched by our own server from Google’s Places API when you scroll to them. Your browser only asks our domain, so Google gets no information about you from that view. Reviewers’ names and texts are shown as they appear on Google, and we do not store them. If you tap a name or the link to all reviews, you open Google, and Google’s terms apply.

The maps from Google Maps

All maps on the site are from Google Maps. On the page for a home, both homes to rent and holiday homes, your browser loads the map under «Where you will live» or «Where you will stay» by itself when the map is about to come into view on the screen, usually when you scroll to it. On the overviews of homes to rent and holiday homes, the map only loads when you choose the map view, or when you open a link straight to it. Otherwise your browser does not talk to Google Maps.

When the map loads, Google receives your IP address and the details a browser sends along, such as browser type, language and screen size, which area the map shows, and the address of the page the map is on (without anything after «?»). The map also loads fonts from Google Fonts. Google Maps set no cookies and stored nothing in the browser when we measured it on 26 September 2026. We and Google are joint controllers for collecting the details and sending them to Google when the map loads. What Google does with them afterwards, Google does as an independent controller under the Google Privacy Policy, and your use of the map is covered by the Google Maps/Google Earth Additional Terms of Service.

Homes with a hidden address are shown on the maps near where they are, never at the exact address. That applies to all homes on the booking pages. On the page for a home, the map shows the area as a circle, and only a home to rent whose address is on the page has a pin on the address. The legal basis is our legitimate interest in showing where the homes are (Article 6(1)(f) of the GDPR).

Hosting and security

The site runs on a virtual server at Hostinger International Ltd. in Cyprus, our data processor. The server is in Hostinger’s data centre in Frankfurt, Germany, and the data processing agreement is part of Hostinger’s terms (Hostinger). All traffic to the site is encrypted with HTTPS.

Like every web server, ours receives your IP address and technical details about your browser when you visit. The web server writes them to an access log with the time and the address of the page you visit. The contents of your cookies are not logged, and only the people who run the server can read the log.

The site’s own operational messages, which may contain an email address, are kept in the server’s system log and deleted after 5 weeks at most. Every night we take a backup of the site’s data on the same server, and each backup is deleted after 15 days. Hostinger also takes a weekly copy of the whole server, stored separately from it, and keeps the two most recent (Hostinger). So when we delete your data, it is gone from our own backups within 15 days, and from Hostinger’s once both weekly copies have been replaced.

Fonts, images and videos are served from our own server, so they are not fetched from third parties. The exceptions are the photos of the homes in Mit BY, which are fetched from Hostaway, and the maps from Google Maps, which load map images and fonts from Google when a map loads (see the maps).

Recipients and transfers outside the EU

Transfers to the United States rely on the European Commission’s decision on the EU-US Data Privacy Framework, which covers Google, Microsoft, Klaviyo, Render, Stripe and Meta. For ClickUp, they rely on the European Commission’s standard contractual clauses, which are part of ClickUp’s data processing agreement (ClickUp).

How long we keep data

Your rights

You have the right to see the data we process about you and to have it corrected or deleted. Data the law requires us to keep, such as the guest register, we only delete once the deadline has passed. You can also ask us to restrict processing, object to processing based on our legitimate interest, and receive the data you gave us in a common format. If you gave consent, you can withdraw it at any time. That does not affect processing that took place before you withdrew it.

Write to team@byadministration.dk. We reply without undue delay and within one month at the latest.

If you are unhappy with how we handle your data, you can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, phone +45 33 19 32 00 (how to complain, in Danish).

Changes

We update this policy when the site or our processing changes. The date at the top shows when it was last changed.