Privacy Policy
Last updated: 27 October 2026
BAUM CPH ApS ("BAUM", "we", "us", or "our") respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store, and protect personal information when you visit our website, https://ba-um.dk, or communicate with us.
We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Danish data protection legislation.
1. Who We Are
The data controller responsible for your personal data is:
BAUM CPH ApS
CVR No.: 43102109
Frederiksvej 41, 2000 Frederiksberg, Denmark
Website: https://ba-um.dk
Email:dk@baum.ltd
For any questions regarding this Privacy Policy or how we handle your personal data, please contact us using the email address above.
2. Information We Collect
We may collect and process the following categories of personal data:
Information you provide
When you contact us by email or through our website, we may collect your name, email address, company name, telephone number, and any information you choose to share in your message.
Technical information
When you visit our website, certain technical information may be processed, including your IP address, browser type, device information, pages visited, and access times, where collected by our website hosting or security services.
Business communications
If you engage with us professionally, we may process contact details and correspondence necessary to manage our business relationships and projects.
We do not intentionally collect sensitive personal data through our website. Please avoid including such information in general enquiries.
3. How We Use Your Information
We process personal data for the following purposes:
To respond to enquiries and communicate with you.
To discuss potential projects, collaborations, and business opportunities.
To manage existing client and professional relationships.
To operate, maintain, and secure our website.
To understand and improve website performance, where applicable.
To comply with applicable legal obligations.
4. Legal Basis for Processing
Under Article 6 of the GDPR, we rely on the following legal bases, depending on the purpose of processing:
Legitimate interests — Article 6(1)(f)
To respond to general enquiries, maintain professional relationships, and ensure the security and functionality of our website, where our legitimate interests are not overridden by your rights and freedoms.
Contractual necessity — Article 6(1)(b)
Where processing is necessary to take steps at your request before entering into a contract or to fulfil a contract with you.
Legal obligation — Article 6(1)(c)
Where we are required to process or retain information to comply with applicable laws.
Consent — Article 6(1)(a)
Where we ask for your consent, such as for optional analytics, marketing communications, or non-essential cookies, where applicable.
You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before your consent was withdrawn.
5. Cookies and Similar Technologies
Our website may use cookies or similar technologies to support essential website functions, maintain security, and, where enabled, understand how visitors interact with the website.
Strictly necessary cookies may be used without consent where permitted by applicable law.
Non-essential cookies and similar technologies, including those used for analytics or marketing, will only be activated after obtaining consent where required.
Where such technologies are used, we provide information about their purposes, providers, and duration, together with appropriate consent controls.
You can change or withdraw your cookie consent through the cookie settings available on our website, where applicable.
6. Sharing Your Information
We do not sell your personal data.
We may share personal data with trusted service providers who assist us in operating our website, managing communications, providing IT infrastructure, or delivering our professional services.
Such providers may include website hosting companies, email service providers, and other technology suppliers.
Where these providers process personal data on our behalf, we require appropriate contractual and technical safeguards in accordance with applicable data protection law.
We may also disclose personal data where required by law or to protect our legal rights.
7. International Data Transfers
Some of our service providers or professional collaborators may be located outside the European Economic Area (EEA).
Where personal data is transferred outside the EEA, we ensure that an appropriate legal transfer mechanism applies, such as an adequacy decision by the European Commission or Standard Contractual Clauses, together with supplementary safeguards where necessary.
You may contact us for further information about the safeguards applicable to relevant transfers.
8. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy.
The retention period depends on the nature of the information, the purpose of processing, and any applicable legal requirements.
For example:
General enquiries and correspondence are retained for as long as reasonably necessary to respond and manage relevant follow-up communications.
Client and contractual information may be retained for the duration of the business relationship and any applicable statutory retention period.
Technical and security data are retained only for the period necessary for the relevant operational or security purpose.
Information processed on the basis of consent is retained in accordance with the stated purpose and applicable retention criteria, unless another lawful basis requires continued retention.
When personal data is no longer required, we delete or anonymise it securely, unless continued retention is legally required.
9. Your Rights
Under the GDPR, you have the following rights, subject to applicable legal conditions and exceptions:
Access: Request information about the personal data we hold about you.
Rectification: Request correction of inaccurate or incomplete personal data.
Erasure: Request deletion of your personal data in certain circumstances.
Restriction: Request restriction of certain processing activities.
Data portability: Receive certain personal data in a structured, commonly used, and machine-readable format.
Objection: Object to processing based on legitimate interests, including profiling where applicable.
Withdrawal of consent: Withdraw consent at any time where processing is based on consent.
You also have the right not to be subject to certain decisions based solely on automated processing that produce legal or similarly significant effects.
To exercise your rights, please contact us at dk@baum.ltd.
We will respond in accordance with the time limits set out in the GDPR, normally within one month.
10. Data Security
We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction.
These measures are reviewed and adapted where necessary, taking into account the nature of the information and associated risks.
11. Third-Party Websites
Our website may contain links to external websites, platforms, or services.
We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies when visiting their websites.
12. Complaints
If you have concerns about how we process your personal data, please contact us first so that we can address your enquiry.
You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) or another competent supervisory authority.
Danish Data Protection Agency (Datatilsynet)
Website: https://www.datatilsynet.dk
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, website functionality, or legal requirements.
The latest version will always be published on this page, with the date of the most recent update indicated above.
14. Contact
For questions, requests, or concerns relating to privacy and personal data, please contact:
BAUM CPH ApS
Frederiksvej 41, 2000 Frederiksberg, Denmark
CVR No.: 43102109
Email: dk@baum.ltd
BAUM LTD. & BAUM CPH ApS | All rights reserved