Privacy Policy

Click here for Danish version

1. Introduction

The purpose of this Privacy Policy is to describe how Ørsted (‘we’ or ‘us’) processes your personal data.

The privacy policy is relevant for you if you are the contact person or otherwise represent a company that is either already an Ørsted customer or wishes to become one. In some places we have indicated "personal companies" for example sole traders and partnerships in parentheses to show that a section is only relevant for these customer groups. Since it is also possible to be a private customer, this policy also applies to you as a private consumer. In some places we have indicated "private customer" in parentheses to show that a section is only relevant for this customer group. 

Our other privacy policies can be found on our websites (orsted.dk and orsted.com). These privacy policies apply to our business relations, shareholders and job applicants, among others.

2. Data controller

The legal entity which is the controller in respect of the processing of your personal data is:

Ørsted Salg & Service A/S

Company reg. no. (CVR no.): 27 21 05 38
Kraftværksvej 53
DK-7000 Fredericia

Tel.: + 45 99 55 35 00
persondata_b2b@secure.orsted.com



3. Processing activities

Purpose Categories of personal data Legal basis for processing Erasure 

Managing potential and existing customer relations

If you, or the company you represent, wish to become a customer of Ørsted, we process personal data about you in order to enter into an agreement on the supply of electricity, natural gas, service or other products.

When you, or the company you represent, are our customer and under a current agreement, we will process your data for the purposes of managing the agreement below for the following purposes:
  • ensure that electricity, natural gas, service or other products are supplied to the correct address.
  • receive payment for our service(s).
  • communicate with.
  • keep your contact details up to date.
  • document the contractual relationship, deliveries etc. 

  • fulfil other obligations to you, the company you represent, or us based on the agreement and applicable legislation.

  • register you in the central register for electricity customers in Denmark (Datahub) in connection with moving or changing supplier. 

We collect data from the following sources:

  • Directly from you.

  • Other representatives from the company you represent.
  • Agencies processing data concerning standardised financial ratios
    (personal companies).

  • Datahub 

We process the following data about you:

General personal data:

  • Contact details, including name, telephone number, email address, company address and company name*.

  • Information can be inferred from our ongoing correspondance.
  • Information concerning orders and services, as well as power consumption and delivery information*.

  • Payment details.

  • Company reg. no. (personal company) 

  • Credit rating (personal company)

  • CPR number and information on name and address protection in the CPR register (private customer). 














We process your personal data as described on the following legal basis:

  • GDPR, Article 6(1)(b) (necessary for the performance of a contract between Ørsted and the company you represent, or measures with a view to entering into a contract between Ørsted and the company you represent).
  • GDPR, Article 6(1)(c) (necessary due to our legal obligations, including compliance with accounting legislation), the Electricity Supply Act and the accompanying regulation on master data. 
  • GDPR, Article 6(1)(f) (necessary due to our legitimate interest in assessing your credit rating) (personal companies) and in addition, process your personal data as part of our ongoing correspondence and ongoing updates to your contact details. 



















We store your personal data as long as it is necessary for the purposes mentioned:

  • As a general rule, we store your personal data for as long as the customer relationship exists with you or your company and then for three years after the expiry of the contractual relationship. 
  • As a general rule we store information that is required in accordance with the Danish Bookkeeping Act (Bogføringsloven), including among other things - invoices, receivables, payment details and similar information for five years from the end of the financial year in question; see the rules of the Danish Bookkeeping Act (Bogføringsloven).
  • If deemed necessary, based on a specific assessment, we may store the data for a longer period than indicated above. This may apply in cases where a dispute arises, to provide documentation to public authorities or others. 



















Using our digital services:

We process your personal data via  cookies and similar technologies when you use our digital services (website or apps).

We use the data for the following purposes:

  • Delivery of the digital service you have requested.
  • Optimisation and development of the user experience of our website and the services we provide.
  • Statistics concerning how our website is used and to improve the website.

Read more about this in our cookie policy.

We also use various third-party cookies and social media plugins to make it easier for you to share content from our website on Facebook, LinkedIn, etc. For this type of processing, Ørsted will in some cases share the data controller responsibility with the supplier of the third-party cookie(s) in question. You can read more about this and find links to the privacy policies of the relevant third parties in the cookie overview, which is included in our cookie policy.

We collect data from the following sources:

  • Directly from you whenever you use our digital services

 We process the following data about you:

General personal data:

  • Data about your behaviour on our digital services (e.g. number of visits, information about how you access our digital services, including IP address, use of browsers and operating system, cookies and your domains of origin, as well as what content you read).
  • Data about clicks on our advertisements, including if you are doing this from the website of another organisation or company.














We process your personal data as described on the following legal basis:

  • GDPR, Article 6 (1)(a) (consent)
  • GDPR, Article 6(1)(f) (necessary due to our legitimate interest in providing the service you have requested, improving the customer experience, developing and improving our digital services (in terms of both functionality and the system itself) and making it possible to share content on social media).



















We store your personal data as long as it is necessary for the purposes mentioned:

  • As a general rule, when you communicate with us we store your personal data for two years from the date of your enquiry.

  • We store personal data for up to three months after the recording of a telephone call.

  • If deemed necessary, based on a specific assessment, we may store the data for a longer period than indicated above. This may apply in cases where a dispute arises, to provide documentation to public authorities or others, and in similar situations.
















Customer communication:

Ørsted processes your personal data in order to communicate with you and to respond to your requests.

Ørsted may record telephone conversations when you contact us and give your consent. In such cases, the conversation will be recorded and stored for documentation purposes and for staff training.

We collect data from the following sources:

  • Directly from you.





We process the following data about you:

General personal data:

  • Name, telephone number, email address and company.
  • Other general personal data to which the enquiry might relate.








We process your personal data as described on the following legal basis:

  • GDPR, Article 6(1)(a) (consent) for recording of telephone conversations.

  • GDPR, Article 6(1)(f) (necessary due to our legitimate interest in being able to respond to your enquiry and communicate with you).








We store your personal data as long as it is necessary for the purposes mentioned:

  • As a general rule, when you communicate with us we store your personal data for two years from the date of your enquiry.
  • We store personal data for up to three months after the recording of a telephone call.
  • If deemed necessary, based on a specific assessment, we may store the data for a longer period than indicated above. This may apply in cases where a dispute arises, to provide documentation to public authorities or others, and in similar situations.



Satisfaction surveys and service messages:

Ørsted processes your personal data when sending out satisfaction surveys and service messages:

  • Users of our online services and customers may receive satisfaction surveys with the purpose of optimising and supporting operations with input from the surveys.
  • Customers personal data may be processes in order for sending out service messages concerning information about the contractual relationship or delivery status.

We process the following data about you:

General personal data:

  • Name, email address, phone number, company, IP-address, and your response to the satisfaction survey.





We process your personal data as described on the following legal basis:

  • GDPR, Article 6(1)(f) (necessary due to our legitimate interest in sending out satisfaction surveys and service messages to support the operation of our online services and customer relations).





We store your personal data as long as it is necessary for the purposes mentioned:

  • Personal data related to satisfaction surveys are stored a long as the relevant area which is to be investigated is ongoing.
  • Personal data relating to services announcements are stored as long as the customer relationship exists and then for three years after the expiry of the contractual relationship.

Marketing, newsletters, company announcements and information about Ørsted: 

We process your personal data for marketing purposes, in order that we can:

  • target our communication with you based on your areas of interest and focus,
  • send you relevant marketing in the form of newsletters, etc.

Further, we use your personal data to send company announcements and other information and to identify anyone else who might be interested in Ørsted.

We also use first and third-party cookies to collect information about your behaviour when you receive our marketing, newsletters, company announcements, and information from Ørsted, to improve our communication with you.

We collect data from the following sources:

  • Directly from you.






We process the following data about you:

General personal data:

  • Name, email address, street address, IP address, country, and role.
  • Newsletter subscription date.
  • Areas of interest.
  • Data you have submitted in response to marketing activities. 
  • Information about whether you choose to open marketing, newsletters, company announcements, and information from Ørsted you receive from us and when you open them (time and date).
  • Information about clicks on links in our marketing, newsletters, company announcements, and information from Ørsted (e.g. which links you choose to click on, what content you read, the number of links you click on and use of email client).


We process your personal data as described on the following legal basis:

  • GDPR, Article 6(1)(a) – consent to the use of cookies in marketing, newsletters, company announcements, and information from Ørsted.
  • GDPR, Article 6(1)(f) necessary to pursuit our legitimate interest in being able to send marketing material, newsletters, company announcements and information from Ørsted that you have given consent to receive for marketing purposes.















We store your personal data as long as it is necessary for the purposes mentioned:

  • We store your personal data for as long as you wish to receive material from us and for two years after that.
  • Personal data collected via cookies will be deleted in accordance with the expiry periods listed in our cookie policy.




















4. Mandatory information

Data marked with an asterisk (*) under clause 3 is mandatory. In order for you to become a customer at Ørsted, we must have your contact details, including name, telephone number, email address, company address, company reg. no. and company name, and we must keep updated records of power consumption and delivery information.


5. Recipients of your personal data

Depending on the circumstances, Ørsted may share your personal data with:

  • Suppliers and dealers with whom we cooperate and who assist our company (meaning service providers, technical support, supplier services and financial institutions)
  • Public authorities

  • Business partners
  • Players in the energy sector (distribution companies, Energinet.dk, public authorities and energy suppliers)

6.  Transfer to third countries

In certain situations, we will transfer personal data to countries outside the EU/EEA. Such transfers to third countries will be made on the following legal basis:

  • The countries have been deemed by the Commission of the European Union to have an adequate level of protection of personal data (so called safe third countries).
  •  If the European Union have deemed, the countries not to have an adequate level of protection of personal data: Ørsted will provide appropriate safeguards for the transfer through standard contractual clauses, as published by the Commission of the European Union, for the transfer of personal data.
    You can obtain a copy of this contract by contacting us at persondata_b2b@secure.orsted.com.

7. Your rights

When we process your data, you have the following rights:

  • You have the right of access to, rectification or erasure of your personal data.
  • You also have the right to object to the processing of your personal data and to have the processing of your personal data restricted.
  • In particular, you have an unconditional right to object to the processing of your personal data for use for direct marketing purposes.
  • If the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time. Your withdrawal of consent will not affect the lawfulness of the processing performed before withdrawal of your consent.
  • You have the right to receive the personal data that you have provided yourself in a structured, commonly used and machine-readable format (data portability).
  • You have the right to lodge a complaint with a data protection authority (in Denmark: The Data Protection Agency).

You can exercise your rights by contacting us, see section 8. These rights may be subject to conditions or restrictions depending on the specific circumstances for a given processing activity.  
If you have requested to receive information from Ørsted, such as newsletters, and you no longer wish to receive these, you can unsubscribe at any time via the email that you receive or by calling us.

8. Contact details

If you wish to contact Ørsted regarding our processing of your personal data, including exercising your rights, please write to persondata_b2b@secure.orsted.com or call us on +45 99 55 35 00.

You can at any time lodge a complaint with your local data protection authority.

In Denmark, the regulator is the Data Protection Agency.


9. Changes in our Privacy Policy

This Privacy Policy replaces all previous versions. We reserve the right to update and amend this policy on an ongoing basis, when we find it relevant and necessary. In the event of significant amendments, we will notify you at orsted.dk or by email.



This Privacy Policy was last updated in May 2026