Privacy policy for Brobizz A/S
Privacy policy
This privacy policy explains how Brobizz A/S processes your personal data when you are in contact with us as a private individual. This may include, for example, your use of Brobizz’s products and Brobizz’s digital platforms, such as the website and app. The privacy policy also covers Brobizz’s processing of personal data in connection with the recording of telephone calls, direct marketing, the sending of service messages, questionnaires and satisfaction surveys, as well as competitions.
When we refer to our “Products” below, we are referring to the solutions offered by Brobizz. At present, we offer Bizz and a number plate payment agreement for private customers. From May 2026, we have also been offering the Storebælt Ticket. You can read more about our Products for private customers here.
An overview of the operators and partners with whom Brobizz’s Products can be used is available at Brobizz.com.
You can read more about your data protection rights under the section ‘4 ’ below.
See also our cookie policy here
1. Data controller
The legal entity responsible for the processing of your personal data is:
Brobizz A/S
CVR number: 31 85 48 22
Address:
Vester Søgade 10
1601 Copenhagen V
Email: persondata@brobizz.com
(Hereinafter referred to as “Brobizz”, “us” and “we”)
2. Description of the processing
2.1. Customer agreement with Brobizz regarding payment collection when using Brobizz’s Products
2.1. Customer agreement with Brobizz regarding payment collection when using Brobizz’s Products
Purpose
When you enter into an agreement with Brobizz as a private customer, we process your personal data in order to administer and maintain your Customer Agreement. This means that we process your data to deliver the agreed Products and collect payment for journeys and crossings.
Brobizz can also process your personal data for the purpose of assisting with the fulfilment of a local agreement, special agreement or similar, entered directly between you and the operator or the partner. In this context, Brobizz may, for example, assist with the conclusion and administration of the discount agreement with the operator or partner. If required by the operator or partner, Brobizz may disclose your personal data to ensure correct billing in accordance with your agreement with Brobizz, an operator or the partner. This may, for example, be the case if your Bizz cannot be read.
Furthermore, Brobizz processes information regarding the time of receipt and opening of emails sent to customers in order to demonstrate that the emails in question have come to your attention.
Brobizz may also use your personal data – e.g. location data – to compile general analyses and statistics with a view to supporting, improving and optimising operations in relation to payment collection.
When you enter into a Customer Agreement with Brobizz as a private customer, you gain access to Brobizz’s self-service tool (“Brobizz self-service”) and our app (“Brobizz App”). When you access the Brobizz website, Brobizz self-service or the Brobizz App, we process the personal data listed below in order to provide our Products to you and give you information about them. You can read more about our use of cookies in the section2.10 .
If you have downloaded the Brobizz App, activated and permitted the app to use your device’s location, and at the same time given your marketing consent to receive direct marketing from Brobizz, this information may be used to send you marketing based on your location, e.g. about operators and partners in the vicinity.
If you have consented to logging in using biometric data (your face or fingerprint) in the Brobizz App, we process your consent for the purpose of ensuring efficient login.
You can read more about the extent to which Brobizz uses the app to send service messages in the section2.52.5 .
You can read more about how Brobizz processes personal data relating to employees of Brobizz’s business customers, partners or suppliers here.
Categories of personal data
Brobizz may process the following general personal data about you when you enter into a Customer Agreement with Brobizz:
- Contact details in the form of name, address, email and telephone number
- Customer number
- Bizz identification number linked to the Customer Agreement
- The registration number of the vehicle linked to the Customer Agreement
- Where applicable, the type of motor vehicle, weight and environmental class of the vehicle
- Number of Products per Customer
- Payment card details
- Where applicable, bank and account number
- Time of opening of emails sent to customers, such as invoices and reminders
- Information about journey transactions when using the Product, including location and time of use of Bizz or number plate payment
- Where applicable, information that you have entered into a local agreement, special agreement or similar with an operator and/or a partner
- IP address used when logging in to Brobizz’s digital platforms
- Time of login to Brobizz’s digital platforms
In addition, Brobizz may process your consent to biometric login if you wish to log in using facial recognition or fingerprints in the Brobizz App on your phone or tablet. If you enable biometric login, the device’s local security features are used for access control, which means that Brobizz does not receive or store your biometric data.
If you use an operator or partner that requires you to add your vehicle’s registration number to the agreement with the operator or partner, Brobizz may process the registration number in connection with Brobizz’s support for the conclusion and administration of the agreement.
If you use one of Brobizz’s Products with an operator or partner, Brobizz does not receive any image data relating to your journey from the operator or partner, but only the information that the Product has been used.
Sources
As a general rule, Brobizz collects your personal data directly from you.
However, we collect information that your Product has been used with an operator or partner from the relevant operator or partner. We may also collect information that you have entered into a local agreement, special agreement or similar directly with an operator or partner from the relevant operator or partner.
If you have provided your vehicle’s registration number, Brobizz may collect information about your vehicle from the Danish Motor Register (“DMR”) in order to ensure that a correct and up-to-date registration number is linked to your Product.
If we suspect that your contact details are out of date, we may collect them from other sources. These may include, for example, BIQ, a network operator or a partner.
Legal basis
The legal basis for Brobizz’s processing of your personal data in the ongoing customer relationship is, in particular, Article 6(1)(b) of the EU General Data Protection Regulation (hereinafter “GDPR”) (performance of a contract), pursuant to which we may process personal data where such processing is necessary for the performance of a contract.
In addition, some of your personal data is processed pursuant to Article 6(1)(c) of the GDPR (legal obligation), as Brobizz is obliged to retain accounting records pursuant to Section 12 of the Danish Bookkeeping Act. This information – which covers identification details, agreement and contract details, transaction details, payment details and any credit-related information – will therefore be retained in accordance with the Danish Bookkeeping Act, even if you terminate your customer relationship before then.
If you wish to use biometric login in the Brobizz App, we process your data with your explicit consent on the basis of Article 6(1)(a) of the GDPR (consent). It is entirely voluntary whether you wish to give your consent, and consent must be renewed 180 days after your last login. If you prefer to log in using your usual login details, you can continue to use this method.
If Brobizz suspects that your contact details are not up to date, we may collect these from BIQ. BIQ retrieves data from the Danish Civil Registration System (CPR) in accordance with Section 38 of the CPR Act.
After the customer relationship has ended, Brobizz may retain your master data and contact details (name, address, email address, telephone number, customer relationship and status), customer number, Bizz identification number of device(s) linked to the customer relationship, number plate(s) linked to the customer relationship, information about transactions linked to your customer account, as well as any case details recorded in connection with your enquiries to Brobizz’s Customer Service on the basis of Article 6(1)(f) of the GDPR (legitimate interest). Brobizz has a legitimate interest in being able to document this information in connection with any claim that may be raised up to the expiry of the general limitation period under Section 3 of the Limitation Act.
When Brobizz processes information regarding the times of receipt and opening of emails sent to customers, this processing is carried out on the basis of Article 6(1)(f) of the GDPR (legitimate interest), where Brobizz’s legitimate interest consists of being able to document that emails sent to customers have come to your attention.
Retention
Personal data relevant to your customer relationship will be retained for as long as the customer relationship exists. In the event of inactivity, Brobizz may terminate the customer relationship after 3 months (if there are no active Products linked to your account) or 36 months (if there is an agreement for Bizz or number plate payment).
If you have chosen to consent to biometric login in the Brobizz App, we will retain your consent and information relating to the login process for 180 days following your last login to the app.
Following the termination of the customer relationship, master data and contact details (name, address, email address, telephone number, customer relationship and status), customer number, Bizz identification number on device(s) linked to the customer relationship, number plate(s) linked to the customer relationship, information about transactions linked to your customer account, and any case information recorded in connection with your enquiries to Brobizz Customer Service will be stored for up to 3 years, so that Brobizz is able to handle any legal claims relating to the customer relationship.
We also retain personal data included in material subject to accounting requirements for 5 years plus the current year in accordance with section 12 of the Bookkeeping Act.
Personal data relating to legal proceedings will be retained for as long as the case is being processed and for up to 10 years after the conclusion of the proceedings.
For the retention period for your enquiries to Customer Service via email, contact form or chat function – see section 2.3 .
For the retention period for telephone enquiries to Customer Service where you have consented to the recording of the telephone conversation – see the section 2.4 .
Recipients
Brobizz may disclose your personal data to an operator or a business partner if this is necessary for payment collection.
Brobizz may also disclose personal data to external companies if this is necessary for us to deliver our Products to you or to collect outstanding payments.
We may also disclose your personal data to public authorities, as we are legally obliged to report certain information. Similarly, we may disclose your personal data to the police if this is necessary for them to carry out their official duties.
Brobizz also uses IT suppliers to whom we may therefore disclose your personal data in connection with the operation, development and hosting of our IT systems, including file management, email services and the provision of our self-service platform.
Our IT suppliers are located in Denmark, Norway, Poland, Ireland and the USA.
We have entered into data processing agreements with our IT suppliers, and they are therefore not permitted to use the information for any purposes other than those specified in the agreements.
2.2. Storebælt Ticket
2.2. Storebælt Ticket
Purpose
On 19 May 2026, Brobizz launched a new product: the Storebælt Ticket. With the Storebælt Ticket, you can drive across the Storebælt Bridge at the express price without having a regular customer relationship with Brobizz.
If you purchase a Storebælt Ticket on our website, we will process your personal data in order to complete the purchase and deliver the ticket in accordance with the terms of the agreement.
Categories of personal data
Brobizz may process the following personal data about you when you purchase a Storebælt ticket:
- Full name
- Email address
- Address
- Telephone number
- Vehicle registration number (number plate)
- Vehicle type (type 1 or type 2)
- Ticket number
Sources
As a general rule, Brobizz collects your personal data directly from you.
Legal basis
When you purchase a Storebælt Ticket, we process your personal data on the basis of Article 6(1)(b) of the GDPR, as the processing is necessary to fulfil the contract in accordance with the terms and conditions.
In addition, some of your personal data is processed pursuant to Article 6(1)(c) of the GDPR (legal obligation), as Brobizz is required to retain accounting records in accordance with section 12 of the Danish Bookkeeping Act. This information – which covers identification details, contract details, transaction details and payment details – will therefore be retained in accordance with the Danish Bookkeeping Act.
Retention
Brobizz retains the personal data collected in connection with your purchase of the Storebælt ticket for 12 months.
We also retain the personal data included in material subject to accounting requirements for 5 years plus the current year in accordance with section 12 of the Danish Bookkeeping Act.
Personal data relating to legal proceedings will be retained for as long as the case is being processed and for up to 10 years after the conclusion of the proceedings.
For the retention period for your enquiries to Customer Service via email, contact form or chat function – see section 2.3 .
For the retention period for telephone enquiries to Customer Service where you have consented to the recording of the telephone conversation – see the section 2.4 .
Recipients
Brobizz also uses IT suppliers to whom we may therefore disclose your personal data in connection with the operation, development and hosting of our IT systems, including file management, email services and the provision of our technical solution behind the Storebælt Ticket.
Our IT suppliers are mainly located in Denmark, Ireland and the USA.
We have entered into data processing agreements with our IT suppliers, and they are therefore not permitted to use the information for any purposes other than those specified in the agreements.
2.3. Enquiries from private customers and other individuals
2.3. Enquiries from private customers and other individuals
Purpose
When you contact Brobizz, we collect information about you for the purpose of responding to and managing your enquiry. In this context, Brobizz uses AI solutions to support efficient case handling.
Your enquiry may also be used to test Brobizz’s AI solutions to the extent that this is deemed necessary and proportionate. See more on this under the section ‘2.11 ’.
Categories of personal data
Brobizz may process the following general personal data about you when you contact Brobizz by telephone, email or chat:
- Contact details in the form of name, email address and telephone number
- Time of contact
- Data from IVR (Interactive Voice Response) in the form of the choices you made in the telephone queue, if you contact us by telephone
- Any other information your enquiry may contain, e.g. Bizz identification number, registration number, customer number, payment details or information regarding vehicle ownership
Sources
Brobizz collects the information directly from you.
If it proves necessary to verify your information in order to handle your enquiry, Brobizz may collect information from BIQ, which retrieves information from the CPR register in accordance with Section 38 of the CPR Act.
Legal basis
When you contact Brobizz – whether you are a customer or not – we process your personal data on the basis of Article 6(1)(f) of the GDPR (legitimate interest), where our legitimate interest is to be able to respond to and communicate with people who contact Brobizz.
If your enquiry contains information relating to criminal offences, this information will be processed in accordance with data protection legislation. If, for example, your enquiry contains information about a criminal offence or criminal sanctions, Brobizz will process the information on the basis of section 8(3), second sentence, of the Data Protection Act, provided that the processing is necessary in the light of a legitimate interest (such as the proper handling of your enquiry) which clearly outweighs the interests of the data subject. If Brobizz’s processing is necessary for the establishment, exercise or defence of legal claims, our processing is carried out on the basis of Section 8(5) of the Data Protection Act, cf. Section 7(1), cf. Article 9(2)(f) of the GDPR. If these legal bases for processing do not apply, the data will be deleted immediately.
We also use AI solutions that assist with the efficient and targeted handling of enquiries. When Brobizz monitors and retrains the AI solution, the legal basis for this processing is Article 6(1)(f) of the GDPR, where our legitimate interest is to ensure that the solution works optimally and provides the correct output.
If the correspondence contains information subject to accounting requirements, Brobizz will process this information on the basis of Article 6(1)(c) of the GDPR (legal obligation). This is because Brobizz is obliged to retain accounting records pursuant to Section 12 of the Danish Bookkeeping Act.
If Brobizz processes your personal data in connection with a dispute or legal proceedings, we may process your data on the basis of Article 6(1)(f) of the GDPR (legitimate interest). Our legitimate interest is to be able to establish, assert and/or defend legal claims.
Retention
If you are a Brobizz customer, we will retain your enquiries and our responses to them for up to 5 years after the customer relationship has ended, so that we are able to handle any legal claims relating to the customer relationship.
If you are not a Brobizz customer, we will store your enquiries and our responses to them at for up to 5 years after the correspondence has ended, so that we are able to handle any legal claims related to the correspondence.
Enquiries to Customer Service via our chat function will be stored for 3 months. Brobizz will then be able to see that you have contacted us via chat for 1 year, even though the correspondence itself has been deleted.
If we are required to retain information about you under the Accounting Act, we will retain your information included in accounting records for 5 years plus the current year.
Personal data relating to legal proceedings is retained for as long as the case is being processed and for up to 10 years after the proceedings have concluded.
Recipients
If your enquiry relates to one of Brobizz’s operators or partners, we may forward your enquiry to the appropriate recipient for them to respond.
We may also disclose your personal data to public authorities, as we are legally obliged to report certain information. Similarly, we may disclose your personal data to the police if this is necessary for them to carry out their duties.
Brobizz uses IT suppliers, and we may therefore entrust your personal data to them in connection with the operation, development and hosting of our IT systems, including file management and email services, as well as the provision of our self-service platform.
Our suppliers are located in Denmark, Norway, Poland, Ireland and the USA.
We have entered into data processing agreements with our suppliers, and they are therefore not permitted to use the information for any purposes other than those specified in the data processing agreements.
2.4. Recording of telephone calls
2.4. Recording of telephone calls
Purpose
If you have contacted Brobizz by telephone and consented to our recording of the telephone call, we may process your personal data for the purpose of documenting the conversation. With your consent, the recording may also be used for the training of our staff and for quality assurance in general.
When you consent to the recording of the call, the audio file is stored, transcribed and analysed by an AI solution. The AI solution analyses the call, focusing on how the customer service representative handled your enquiry. The AI solution supports our training and quality assurance objectives, as it makes it easier to search for relevant calls and identify areas for improvement.
Categories of personal data
If you contact Brobizz by telephone and consent to the recording of the call, Brobizz may process the following general information about you:
- Contact details in the form of name, telephone number and email address
- Customer number
- Bizz identification number associated with the Customer Agreement
- The registration number of the vehicle associated with the Customer Agreement
- Data from the IVR (Interactive Voice Response) system, specifically the choices you made whilst on hold
- Any other personal data that may have been included in the telephone call
Sources
Brobizz collects the information directly from you.
Legal basis
The legal basis for the processing is Article 6(1)(a) of the GDPR (consent). You may withdraw your consent to the processing at any time by contacting Brobizz’s Customer Service department. You can find our contact details at the top of this privacy policy.
Retention
Brobizz stores telephone recordings for up to 3 months from the time the call was recorded.
Recipients
Brobizz uses IT suppliers, and we may therefore disclose your personal data to them in connection with the operation, development and hosting of our IT systems, including file management, storage of recordings and transcription of telephone conversations.
Our suppliers are located in Denmark, Norway and Ireland.
We have entered into data processing agreements with our suppliers, and they are therefore not permitted to use the information for any purposes other than those specified in the data processing agreements.
2.5. Service notifications relating to your customer relationship
2.5. Service notifications relating to your customer relationship
Purpose
If you have entered into a Customer Agreement with Brobizz, we may send you service notifications relevant to your customer relationship.
Your information is processed for the purpose of providing you with essential information about your contractual relationship with Brobizz, an operator or a partner, e.g. a message that your payment details need to be updated.
If you have downloaded the Brobizz App and enabled push notifications on your device, Brobizz may use this digital channel to send service notifications. Similarly, Brobizz may use your location, if this feature is enabled in the Brobizz App, for the purpose of sending relevant service notifications based on your location.
Your personal data is not processed for marketing purposes in connection with service notifications.
Categories of personal data
In connection with the sending of service messages, Brobizz may process the following general personal data about you:
- Contact details in the form of name, address, email and telephone number
- Settings enabled in the Brobizz App, such as whether you have enabled location sharing
- Your location, if you have enabled this in the Brobizz App
- The registration number and vehicle type of the vehicle linked to your Product
Sources
Brobizz has collected the information directly from you in connection with your customer relationship and through your use of the Brobizz App.
Legal basis
Brobizz processes your personal data on the basis of Article 6(1)(f) of the GDPR (legitimate interest), where Brobizz’s legitimate interest is to be able to inform you of important matters relating to your Customer Agreement.
Retention
Personal data relating to service notifications is retained for 12 months.
Recipients
Brobizz uses IT suppliers to whom we may disclose your personal data in connection with the operation, development and hosting of our IT systems, including file management and email services.
Our IT suppliers are located in Ireland, Denmark and the USA.
We have entered into data processing agreements with our suppliers, and they are therefore not permitted to use the information for any purposes other than those specified in the data processing agreement.
2.6. Surveys and satisfaction surveys
2.6. Surveys and satisfaction surveys
Purpose
Brobizz may process your data for the purpose of investigating specific market conditions and optimising and supporting operations. This includes, among other things, user testing satisfaction surveys.
Your personal data is not processed for marketing purposes in connection with surveys or satisfaction surveys.
In some cases, a survey or satisfaction survey may be linked to a competition. You can read more about how we process data in connection with competitions under the section 2.7.
Categories of personal data
In connection with the distribution of surveys and satisfaction surveys, Brobizz may process the following general personal data about you:
- Contact details in the form of name, address, email and telephone number
- The content of your response
- Date and time of the response
In connection with some surveys, responses will be anonymous. You will be explicitly informed of this if it applies to the survey in question.
Sources
The information is collected directly from you.
Legal basis
The legal basis for the processing is Article 6(1)(f) of the GDPR (legitimate interest), where Brobizz’s legitimate interest is to support and improve operations for Brobizz’s customers.
Retention
Responses to surveys and satisfaction surveys are retained for up to 1 year.
Recipients
Brobizz uses IT suppliers to whom we may disclose your personal data in connection with the operation, development and hosting of our IT systems, including file management, email services and the provision of our self-service platform.
Our IT suppliers are located in Denmark, Ireland and Norway.
We have entered into data processing agreements with our IT suppliers, and they are therefore not permitted to use the information for any purposes other than those specified in the data processing agreements.
2.7. Competitions
2.7. Competitions
Purpose
When you take part in one of Brobizz’s competitions, we typically process your personal data for the purpose of increasing the response rate to our surveys and satisfaction surveys.
We also process your information for the purpose of running the competition, contacting the winner, awarding the prize and ensuring the necessary documentation and/or reporting such information.
In certain cases, we run competitions with a view to marketing Brobizz and Brobizz’s Products. In such cases, we also process your personal data for marketing purposes.
Furthermore, Brobizz processes information from competitions for statistical purposes.
Categories of personal data
Brobizz may process the following general personal data about you:
- Contact details such as name, address, telephone number and email address
- Any marketing consent
Sources
The information is collected directly from you.
Legal basis
When we process information in connection with running competitions, this is done on the basis of Article 6(1)(f) of the GDPR (legitimate interest), where our legitimate interest is to be able to run the competition and contact the winner.
In situations where the competition is held for marketing purposes, our processing will be based on Article 6(1)(a) of the GDPR (consent).
If we are obliged to store and/or report information about you to public authorities, we process the necessary personal data on the basis of Article 6(1)(c) of the GDPR (legal obligation). For example, Brobizz is obliged to store accounting records pursuant to Section 12 of the Danish Bookkeeping Act.
Retention
Brobizz processes information about competition entrants who have not won until the competition has ended and the winner has received their prize.
The winner’s contact details are retained for 1 year from the date of receipt of the prize.
However, information subject to accounting requirements in relation to the winner’s prize distribution is retained for 5 years following the end of the financial year in which the prize is awarded.
If you have provided contact details for the purpose of receiving marketing communications, Brobizz will retain your contact details for as long as your marketing consent remains valid.
Recipients
Brobizz may disclose your personal data to public authorities, as we are legally obliged to report certain information.
Brobizz also uses IT service providers to whom we may disclose your personal data in connection with the operation, development and hosting of our IT systems, including file management and email services.
Our IT suppliers are based in Denmark, Ireland and the USA.
We have entered into data processing agreements with our IT suppliers, and they are therefore not permitted to use the information for any purposes other than those specified in the data processing agreement.
2.8. Newsletters
2.8. Newsletters
Purpose
Brobizz processes your personal data when you sign up for our newsletter.
We process your personal data for the purpose of sending you marketing material in the form of our newsletter and managing your marketing consent.
Categories of personal data
In connection with signing up for and sending out newsletters, Brobizz may process the following general personal data about you:
- Contact details such as name, email address, postal address and telephone number
- Information about Products in connection with customer relationships
- Information on whether you have a contractual relationship with an operator or partner
- Information on whether, and if so when, you have opened our newsletter
Sources
Brobizz collects your personal data directly from you.
Legal basis
The legal basis for the processing is Article 6(1)(a) of the GDPR (consent). You may withdraw your consent to the processing at any time and unsubscribe from the newsletter by clicking on “Unsubscribe from newsletter” at the bottom of the latest newsletter. You can also withdraw your consent to the processing at any time via Brobizz’s self-service solution.
Retention
If you withdraw your consent to receive newsletters, we will no longer use your personal data for this purpose.
Recipients
Brobizz uses IT suppliers to whom we may disclose your personal data in connection with the operation, development and hosting of our IT systems, including file management and email services.
Our IT suppliers are based in Ireland and Denmark.
We have entered into a data processing agreement with our IT suppliers, and they are therefore not permitted to use the information for any purposes other than those specified in the data processing agreement.
2.9. Maintenance of a list of blocked Brobizz Products (block list)
2.9. Maintenance of a list of blocked Brobizz Products (block list)
Purpose
In certain cases, Brobizz may record information about your product on Brobizz’s block list if this is necessary to prevent misuse of Bizzes or for the withdrawal and handling of non-functional Bizzes.
Brobizz may register a Bizz on the block list in the following cases:
- If you report your Bizz as stolen
- If you have lost your Bizz
- If your customer relationship has been terminated
- If, at the time of using the Bizz, no valid payment card is linked to it, including if the payment card linked to the agreement has expired (applies to customer relationships where payment is normally made by payment card)
- If you have not complied with the agreed terms of payment (applies to customer relationships where payment is normally made by invoice
- If Brobizz has unsuccessfully requested that you update a payment card
- If your Bizz is 10 years old and is therefore considered obsolete
- If you have provided incorrect, inaccurate or out-of-date personal details for billing purposes – e.g. incorrect name, incorrect address or similar
If any of the above cases are identified, your Bizz will be placed on the block list and reported to EasyGo. EasyGo is a European collaboration between toll collectors and toll service providers that can block Bizzes across toll systems.
You can read more about the EasyGo partnership here.
Categories of personal data
As mentioned above, we may process personal data about you if your Bizz is blocked. In this connection, Brobizz may record the following general personal data about you on our block list:
- Bizz identification number
Sources
Brobizz collects personal data directly from you, an operator or a partner.
Legal basis
If you are registered on Brobizz’s block list, we process your personal data on the basis of Article 6(1)(b) of the GDPR (necessary for the performance of a contract).
We have also obtained permission from the Danish Data Protection Agency to maintain the blacklist pursuant to Section 26(1)(2) of the Data Protection Act.
Retention
Brobizz will delete your details from the block list when the conditions for the block no longer apply. This will, for example, be the case if a valid payment card is linked to your agreement again or if you settle your outstanding balance.
Historical block lists (back-ups) are retained for up to 180 days for transactional purposes.
Recipients
When a Bizz is added to the block list, Brobizz transfers your information from the block list to EasyGo, our data processor. From there, the block list is passed on to operators participating in the EasyGo partnership so that they can block the Bizz at their facilities. We only transfer information regarding the account holder’s Bizz identification number.
Brobizz also uses an IT supplier to whom we may transfer your personal data in connection with the operation, development and hosting of our IT systems, including file management and email services.
Our IT supplier is based in Ireland.
We have entered into a data processing agreement with our provider, and they are therefore not permitted to use the information for any purposes other than those specified in the data processing agreement.
2.10. Cookies on Brobizz’s digital platforms (Brobizz’s website, self-service portal and app)
2.10. Cookies on Brobizz’s digital platforms (Brobizz’s website, self-service portal and app)
Purpose
When you access our website (www.brobizz.com), Brobizz self-service or the Brobizz App, we process personal data about you using cookies. Our purposes for processing are as follows:
- Essential cookies: We use these cookies to enable basic functions (such as page navigation) on our website.
- Statistical cookies: We use these cookies to gain insight into how users interact with our website.
- Functional cookies (preference cookies): We use these cookies to remember your preferences when you visit our website, e.g. your preferred language.
- Marketing cookies: We use these cookies to track users across websites so that we can display the adverts most relevant to each individual user, including to optimise the user experience on Brobizz’s digital platforms.
You can read more about this in Brobizz’s cookie policy.
Categories of personal data
When you visit our website, use Brobizz Self-Service or the Brobizz App, we may process the following general personal data about you:
- The IP address of the device you are using
- The type of device used to access Brobizz’s digital platforms (e.g. computer, tablet or mobile phone)
- General digital behaviour collected via cookies or other tracking technology on the Brobizz website, in Brobizz Self-Service and in the Brobizz App
If you use our app, we may also process the following information about you:
- That you have downloaded the Brobizz App
- When the app was downloaded
- Whether the app is linked to a Customer Agreement or Product
- Settings enabled in the Brobizz App, e.g. whether you have allowed notifications
- Apple ID or Google account
Sources
Brobizz collects information from you via cookies placed on Brobizz’s platforms.
Legal basis
When Brobizz collects your personal data through necessary cookies, this is done on the basis of Article 6(1)(f) of the GDPR (legitimate interest). Our legitimate interest here is to be able to offer you a well-functioning and efficient website.
All other collection of personal data via cookies is based on your consent, cf. Article 6(1)(a) of the GDPR (consent). You may withdraw your consent to our use of cookies on our website at any time by clicking on “Change consent” in our cookie policy.
Storage
Personal data collected via cookies is deleted in accordance with Brobizz’s cookie policy, which you can find here.
https://brobizz.com/en/about/cookie-policy/
Recipients
Brobizz uses IT suppliers to whom we may disclose your personal data. We disclose your data in connection with the operation, development and hosting of our IT systems and marketing solutions, including file management, email services and the delivery of cookies, cookie banners, cookie consent and cookie declarations.
Our suppliers are located in Ireland, the USA and Denmark.
We have entered into data processing agreements with the suppliers who process data on our behalf, and they are therefore not permitted to use the data for any purposes other than those specified in the data processing agreements.
2.11. Development and testing of AI solutions for the efficient handling of customer enquiries
2.11. Development and testing of AI solutions for the efficient handling of customer enquiries
Brobizz maintains a constant focus on the potential of AI when it comes to the efficient and targeted handling of customer enquiries. As a result, Brobizz develops AI solutions (workflows driven by artificial intelligence) for the purpose of handling enquiries from customers and other individuals.
Purpose
The data is processed for the purpose of developing AI solutions that support the efficient handling of enquiries from customers and other individuals.
Categories of personal data
If we assess that it is necessary and appropriate to use personal data for the development and testing of an AI solution, we will typically use specific customer enquiries that we have received via the form on the website or by email. These customer enquiries will never be more than one year old.
When developing and testing based on customer enquiries, we generally process the personal data listed above under the section ‘2.3 ’. This section lists the categories of information that may be recorded when we respond to customer enquiries – e.g. contact details and the content of the enquiry in question.
Sources
The information is collected directly from you, as it originates from your customer enquiry.
Legal basis
We process your personal data on the basis of Article 6(1)(f) of the GDPR (legitimate interest), where Brobizz’s legitimate interest is to be able to develop a technical solution that enables us to handle and respond to enquiries from customers and other individuals more quickly and efficiently.
Retention
The personal data used in the development of AI solutions is retained for 28 days from the time the enquiry has been used to train the AI solution. However, the data is deleted immediately after the test period ends, regardless of whether this is before the 28 days have elapsed.
Recipients
In connection with the development and testing of Brobizz’s AI solutions, Brobizz transfers personal data to an IT supplier that develops and provides IT solutions used, among other things, to optimise operations. This supplier is based in Denmark.
Brobizz also uses an IT supplier to whom your personal data may be transferred in connection with the operation, development and hosting of IT systems, including file management and email services. This supplier is based in Ireland.
The suppliers act as data processors for Brobizz and process personal data exclusively on the instructions of Brobizz. We have entered into written data processing agreements with the suppliers.
Brobizz’s data processors are bound by confidentiality and may not use personal data for purposes other than those specified in the data processing agreements.
Brobizz privatlivspolitik
3. Transfers to countries outside the EU/EEA
In some cases, Brobizz may transfer personal data to countries outside the EU/EEA. These cases are outlined in more detail above and typically involve transfers to the following country: the USA.
If we transfer your personal data to countries outside the EU/EEA, we ensure that the transfers are either made to countries that the Commission has assessed as safe pursuant to Article 45 of the GDPR, or that appropriate safeguards have been put in place. This may, for example, involve us using standard contractual clauses approved by the European Commission in accordance with Article 46 of the GDPR for such transfers.
Some of our IT suppliers may transfer personal data to the US and other countries where they or their sub-processors operate.
If our suppliers transfer the data to a third country and/or an international organisation where the European Commission has assessed that the country or organisation ensures an adequate level of protection, the transfer is made on the basis of Article 45 of the GDPR. This also applies to transfers to companies in the US that are certified under the EU-US Data Privacy Framework, as these also ensure an adequate level of protection.
If transfers from our suppliers are made to a third country and/or an international organisation where the European Commission has not assessed that these ensure an adequate level of protection, these transfers are subject to appropriate safeguards in accordance with Article 46 of the GDPR.
You may obtain a copy of the agreement on these measures by contacting us at persondata@brobizz.com.
4. Your rights
Under the GDPR, you have the following rights:
- You have the right of access, i.e. the right to access the information we process about you and a range of additional information.
- You have the right to rectification, i.e. the right to have inaccurate information about yourself corrected.
- In specific cases, you have the right to erasure, i.e. the right to have information about you deleted before our general erasure deadline.
- You have the right to receive the personal data you have provided in a structured, commonly used and machine-readable format (data portability).
- In certain cases, you have the right to restrict the processing of your data.
In addition, you have the right at any time to object to our processing of your personal data where our processing of your personal data is based on Article 6(1)(e) of the GDPR (processing in the public interest or in the exercise of official authority) or (f) (legitimate interest). You can see our legal basis for the individual processing purposes above.
If you choose to object, we must reassess the necessity of our processing of your personal data, and we may only continue the processing if it is still deemed necessary following your objection.
If the processing of personal data is based on your consent, you also have the right to withdraw your consent at any time. Withdrawal will not affect the lawfulness of the processing carried out prior to the withdrawal of consent. You can read above how to withdraw your consent.
There may be conditions or restrictions on these rights. It is therefore not certain that you, for example, have the right to erasure in a specific case. This depends on the specific circumstances surrounding the processing activities.
You can exercise your rights by contacting persondata@brobizz.com.
In addition, you always have the right to lodge a complaint with the Danish Data Protection Agency regarding our processing of your personal data. See more about this at www.datatilsynet.dk/english.
Last updated 29 May 2026