PRIVACY POLICY — OFFICEDROPIN.COM
Operated by Nordic Lens · Andreas Lukoschek · CVR 45401103 · Denmark
Last updated: April 2026 · Version 2.1
This Privacy Policy explains how we collect, use, and protect your personal data when you visit officedropin.com.
We are committed to transparency and to protecting your rights under the EU General Data Protection Regulation (GDPR), the Danish Data Protection Act, and applicable EU privacy and cookie laws.
—
1. Data Controller
The data controller responsible for the processing of your personal data is:
Nordic Lens
Owner: Andreas Lukoschek
Vesterled 8
7260 Sønder Omme
Denmark
CVR no.: 45401103
Email: hello@officedropin.com
Website: https://officedropin.com
If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact us at the email address above.
As a sole proprietorship below the threshold for mandatory appointment of a Data Protection Officer (DPO), Nordic Lens is not required to appoint a DPO under Article 37 GDPR.
—
2. Personal Data We Collect
We collect and process the following categories of personal data depending on how you interact with our website.
2.1 Data you provide directly
– Email address (waitlist / newsletter / contact form)
– Name (if voluntarily provided)
– Message content submitted via contact form
– Business contact information when communicating regarding photography assignments
2.2 Data collected automatically
– IP address
– browser type and version
– operating system
– device type
– referring URL
– visited pages and timestamp
– cookie preferences and consent records
2.3 Data collected after consent only
Where analytics tools are activated in the future (for example Rank Math Analytics or similar tools), analytics data such as:
– page views
– session duration
– traffic sources
– interaction metrics
will only be processed after explicit consent.
We do not intentionally collect special categories of personal data under Article 9 GDPR.
We do not use automated decision-making or profiling within the meaning of Article 22 GDPR.
—
3. Purposes and Legal Bases for Processing
We process personal data only where we have a lawful basis under Article 6 GDPR.
| Processing Activity | Purpose | Legal Basis |
|—|—|—|
| Waitlist / newsletter | launch updates and editorial news | Art. 6(1)(a) Consent |
| Contact form | respond to enquiries | Art. 6(1)(f) Legitimate interest |
| Server logs | website security and fraud prevention | Art. 6(1)(f) Legitimate interest |
| Cookie consent storage | proof of consent | Art. 6(1)(c) Legal obligation |
| Legal compliance | legal obligations | Art. 6(1)(c) |
| Photography assignments | commissioned business services | Art. 6(1)(b) Contract |
| Editorial publication of office imagery | content publication | Art. 6(1)(f) Legitimate interest |
Where we rely on legitimate interest, we have carried out a balancing assessment to ensure that our interests do not override your fundamental rights.
You have the right to object at any time under Article 21 GDPR.
4. Newsletter and Waitlist
If you subscribe to our waitlist or newsletter, we process your email address solely for:
– launch updates
– editorial stories
– workplace and employer branding content
– selected OfficeDropIn updates
Legal basis: Art. 6(1)(a) GDPR — Consent
Newsletter subscriptions are confirmed via a double opt-in process.
After signing up, users receive a confirmation email and must actively confirm their subscription by clicking the link provided.
For compliance and proof of consent, we store the IP address, date and time of the confirmation.
Only after this confirmation will the email address be added to our active mailing list.
You may withdraw your consent at any time by clicking the unsubscribe link in any email or by contacting us at:
Withdrawal does not affect processing carried out before withdrawal.
Your email address will be removed from active mailing lists within a reasonable period after unsubscribe.
We comply with the Danish Marketing Practices Act (Markedsføringsloven) regarding prior consent for email communication.
—
5. Cookies and Tracking Technologies
Our website uses cookies and similar technologies in compliance with:
– GDPR
– ePrivacy requirements
– Danish Cookie Order
5.1 Necessary cookies
These cookies are essential for website functionality and security.
Examples:
– session cookies
– consent record cookies
– security tokens
These do not require consent.
5.2 Non-essential cookies
Analytics and non-essential cookies are only activated after explicit user consent.
We do not use pre-ticked boxes.
We do not use cookie walls.
Consent can be changed at any time through the cookie settings link in the footer.
—
6. Third-Party Service Providers
We use selected service providers acting as processors under Article 28 GDPR.
| Provider | Purpose |
|—|—|
| MailPoet / Automattic | newsletter and waitlist |
| Cloudflare | security, CDN, spam protection |
| Domaintechnik.at | website hosting | Server location: EU / Austria
| Infomaniak | domain / DNS services | Switzerland
—
Where personal data may be transferred outside the EU/EEA, we rely on Standard Contractual Clauses (SCCs) and other appropriate safeguards.
7. Photography, Editorial Content and Image Rights
OfficeDropIn publishes commissioned photographic and editorial content relating to:
– workplaces
– office interiors
– employer branding
– company culture
– business environments
This content may include photographs taken on behalf of companies or in cooperation with companies.
Where individuals are identifiable, processing is based on:
– Art. 6(1)(a) GDPR — consent, where explicit consent has been obtained
– Art. 6(1)(f) GDPR — legitimate interest, where publication is justified for editorial, documentary, or commercial purposes
Before publication, we assess:
– whether individuals are identifiable
– context of the image
– intended editorial purpose
– reasonable expectations of individuals shown
Individuals may object to publication under Article 21 GDPR.
Removal requests can be sent to:
—
8. Copyright and Usage Rights
Unless otherwise agreed in writing, all photographs, texts, editorial content, layouts, and visual material published on this website remain the intellectual property of:
Nordic Lens / Andreas Lukoschek
All rights reserved.
No content may be:
– copied
– reproduced
– redistributed
– commercially reused
– modified
– republished
without prior written permission.
This includes use on:
– websites
– social media
– press publications
– AI training datasets
– third-party platforms
– commercial presentations
Company logos and trademarks remain the property of their respective owners.
Where content has been produced for client companies, contractual usage rights apply separately.
—
9. Data Retention
We retain personal data only as long as necessary.
| Data Type | Retention |
|—|—|
| newsletter data | until unsubscribe |
| contact form data | up to 12 months |
| server logs | up to 30 days |
| cookie consent | minimum 12 months |
Data no longer required is securely deleted or anonymised.
—
10. Your Rights Under GDPR
You have the right to:
– access your data
– rectification
– erasure
– restriction
– portability
– objection
– withdraw consent
– lodge a complaint
Requests can be sent to:
We respond within one month.
You also have the the right to lodge a complaint with
the Danish Protection Agency (Datatilsynet): https://www.datatilsynet.dk
Spervisory Authority (Denmark) | Datatilsynet
Carl Jacobsens Vej 35 | 2500 Valby | Danmark
—
11. Data Security
We use appropriate technical and organisational security measures including:
– HTTPS encryption
– access controls
– Cloudflare protection
– spam and bot protection
– regular updates
In case of a data breach, we will notify Datatilsynet within 72 hours where required.
—
12. Supervisory Authority
You may lodge a complaint with:
Datatilsynet
Carl Jacobsens Vej 35
2500 Valby
Denmark
https://www.datatilsynet.dk
—
13. Children’s Data
This website is intended for adult professionals and business users.
We do not knowingly collect personal data from minors under 18.
14. Changes to this Policy
We may update this Privacy Policy from time to time.
The latest version date is always shown at the top of this page.
—
15. Contact
For privacy-related enquiries:
Nordic Lens — Andreas Lukoschek
Vesterled 8
7260 Sønder Omme
Denmark
CVR / VAT-ID: 45401103
Email: hello@officedropin.com