Privacy & Cookie Policy

Privacy Policy for CASAL ApS

(Version 1.0 – effective from 01.11.2025)

1. Data controller

Casal ApS
CVR: 45705420
Nyhavn 14, 4th floor
1051 Copenhagen K
Email: info@casal.dk
Phone: +45 51 16 87 87

CASAL ApS (“Casal”, “we”, “us”) is the data controller for the processing of your personal data when you visit our website, contact us, receive marketing material, or participate in the Casal Co-Living concept as a potential or existing owner.

2. Purposes of processing

2.1. Contact requests and meeting booking

When you contact us or book a meeting via Casal.dk, we process:

• Name

• Email

• Phone

• Messages and areas of interest

Purpose: Answering inquiries, advising on homes, investment, and Casal Co-Living.

Legal basis: GDPR art. 6(1)(f) (legitimate interest in answering inquiries).

2.2. Newsletters, marketing, and event sign-ups

When you sign up for our newsletter or participate in events, we process:

• Name

• Email & phone number

• Interaction with emails (opens, clicks, preferences)

• Information about areas of interest (Mallorca, property types, etc.)

Purpose: To send newsletters, invitations, property information, and relevant marketing.

Legal basis: Your consent, cf. GDPR art. 6(1)(a) and the Marketing Practices Act.

Withdrawal: Can be done at any time via the link at the bottom of newsletters.

2.3. Use of the Casal Co-Living platform (owners and buyers)

As a potential or existing Casal owner, we collect:

• Contact information

• Passport/ID information for legal requirements in P/S structure

• Signatures (digital)

• Information about share distribution and ownership

• Communication history

• Data for usage agreements, ownership agreements, and administration agreements

• Booking data in the Casal platform (weeks, points, usage history)

Purpose:

• Administration of P/S companies

• Preparation of contracts

• Fulfillment of legal requirements (KYC/AML)

• Operation of booking platform and owner access

• Provision of member service and community benefits

Legal basis:

• Fulfillment of contract, GDPR art. 6(1)(b)

• Compliance with legal obligations, art. 6(1)(c)

• Legitimate interest in managing ownerships and platform, art. 6(1)(f)

2.4. Cookies and behavioral data

We use cookies for:

• Statistics and performance (Google Analytics)

• Marketing and advertising (Meta Pixel, LinkedIn Insight Tag)

• Improving user experience

We collect, among other things:

• IP address

• Browser data

• Actions on the page

• Click and scroll behavior

Legal basis: Your consent via the cookie banner, cf. the Cookie Order.

A detailed cookie overview can be found in our cookie policy.

3. Use of data processors and data recipients

We only share personal data with third parties that provide necessary services to Casal.

Typical recipients:

• Klaviyo (email automation and CRM)

• Frisbii (platform for operating Casal Co-Living)

• Microsoft/Azure or AWS (hosting)

• Meta / Google / LinkedIn (marketing and advertising – only with cookie consent)

• Auditors, lawyers, and financial institutions (in connection with purchase/sale of shares and P/S administration)

We only use data processors that comply with GDPR, and we use the EU’s standard contracts for transfers outside the EU/EEA.

4. Storage period

We only store your information for as long as necessary.

Examples:

• Contact requests: up to 12 months

• Newsletter data: Until you withdraw your consent

• Contracts and owner data in P/S: 5 years for accounting law purposes

• Cookie data: After the cookie policy’s expiration

5. Your rights

You have the right to:

• Access your data

• Have data corrected

• Have data deleted

• Restriction of processing

• Data portability

• Objection to direct marketing

• Withdrawal of consent

Requests are sent to: info@casal.dk

You also have the right to complain to the Danish Data Protection Agency.

6. Security

We protect your data through technical and organizational security measures:

• Encryption

• Access control

• Data processing agreements

• Logging and backup

• Minimal storage of personal data

7. Changes to the policy

We update the policy in the event of changes in legislation or our systems.
The latest update date appears at the top of the page.

8. Contact

If you have questions about data protection, contact:

Casal ApS
Email: kontakt@casal.dk
Att: Data Controller

————————————————————————————————————————————————————-

Cookie policy for CASAL ApS

COOKIE POLICY FOR CASAL.DK

(Version 1.0 – dd.mm.2025)

What are cookies?

Cookies are small text files that are stored on your device to ensure functionality, improve the user experience, and target marketing.

What types of cookies do we use?

1. Necessary cookies

Ensures the website’s basic functions, including contact forms and sessions.
Legal basis: GDPR art. 6(1)(f). Consent not required.

2. Statistical cookies

Collects anonymized data for analysis, e.g., via Google Analytics.
Legal basis: Consent.

3. Marketing cookies

Used for advertising, retargeting, and measurement via, for example:

• Meta Pixel

• LinkedIn Insight Tag

• Google Ads / Tag Manager

Legal basis: Consent.

What information is collected via cookies?

• IP address (partially anonymized)

• Browser and device

• Visited pages

• Click and scroll behavior

• Time on page

• Marketing interaction (views, clicks, conversions)

How long are cookies stored?

Each cookie has its own lifespan, typically between 1 day and 24 months.
You can always see a full cookie overview in your cookie banner.

How do you withdraw consent?

You can always change or withdraw your consent in the cookie banner settings.
You can also delete cookies manually in your browser.

Contact

If you have any questions, please contact us at info@casal.dk.

2. CONSENT DECLARATIONS

These texts can be inserted into forms, pop-ups, newsletter sign-ups, and booking flows.

2.1. Consent to newsletter (marketing)

“By signing up for the newsletter, I consent to Casal ApS sending me news, inspiration, property updates, event invitations, and marketing by email. I can withdraw my consent at any time via the link at the bottom of each email.”

2.2. Consent to contact and advice

“I consent to Casal ApS contacting me by phone and email regarding my housing preferences, inquiries about Casal Co-Living, and other relevant advice. Consent can be revoked at any time by contacting info@casal.dk.”

2.3. Consent to marketing on digital platforms (Meta, LinkedIn, etc.)

“I consent to Casal ApS using my information for targeting and personalized marketing on social media and digital platforms. This includes, for example, Meta (Facebook/Instagram), Google, and LinkedIn. I can withdraw my consent at any time.”

2.4. Consent to the processing of data when purchasing a share in Casal Co-Living

“I consent to Casal ApS processing my personal data as part of the process of purchasing, administering, and operating a Casal Co-Living share, including the preparation of P/S documents, contracts, and booking access. Consent can be revoked at any time, but a withdrawal may affect my ability to enter into or maintain ownership.”

3. FORM TEXTS

3.1. Contact form on Casal.dk

“When you submit the form, we process your information in order to respond to your inquiry. Read more in our privacy policy.”

3.2. Book-a-meeting form

“Casal processes your information in order to contact you, prepare for the meeting, and send material about Casal Co-Living. You can read more in our privacy policy.”

3.3. Download-brochure form

“By submitting, you agree that Casal may send you the requested material and contact you about related properties and investments.”

3.4. Sign-up for events

“We use your information to manage your participation and contact you before and after the event.”

4. INTERNAL GDPR PROCEDURE FOR CASAL HQ + FRANCHISE

This is an internal guideline for use by Casal’s organization – HQ and all markets.

4.1. Roles

• Casal ApS HQ (Denmark) is the data controller.

• Local franchise partners function as data processors, unless they independently collect data (in which case they become joint data controllers).

All markets operate according to the same standard.

4.2. Basic principles (GDPR article 5)

1. Data minimization – only collect necessary data

2. Purpose limitation – data is only used for agreed purposes

3. Storage limitation – data is deleted when necessary

4. Integrity and confidentiality – data must be secured

5. Legality, transparency, and fairness

4.3. Workflows for employees

Contact and leads

• All inquiries are only registered in Casal’s CRM

• No storage on private devices

• No forwarding of data without secure mail

Contracts and P/S documents

• All owner data is stored in a closed, access-controlled system

• Only relevant employees have access

• ID documents are deleted when the law allows it

Marketing

• Marketing may only take place on the basis of valid consent

• Use of Facebook/Google/LinkedIn tracking may only take place with cookie consent

Booking platform (Casal Co-Living)

• Users may only have access to their own information

• Logging of access is managed centrally

• Deletion is performed upon termination of ownership

4.4. Data breach

All employees must immediately report:

• Lost device

• Misdirected email

• Unauthorized access

• Suspicion of hacking

HQ assesses notification obligation within 72 hours.

Prices on website – SOME – sales listings

All prices for shares and owner expenses are subject to change without notice on this website – SOME channels and in individual sales listings. No claims can be made for the maintenance of prices that have been changed in our sales material if it has been changed before a purchase agreement has been entered into.