Privacy

How e-thomsen ApS processes personal data from public company registers. Last updated 19 October 2026.

Who is responsible

e-thomsen ApS, CVR 38642812, Denmark, is the data controller. Contact: jesper@e-thomsen.dk.

What we process and where it comes from

• For board members and executives of the largest Danish companies: name, role (for example chair, board member, CEO), start and end dates of the role, whether a board member is employee-elected, and the person's other registered roles in Danish companies. Source: the Danish Central Business Register (CVR), via the Danish Business Authority.
• For board members and executives of the largest Norwegian companies: name, role and the date the role was registered. Source: the Brønnøysund Register Centre, Norway. The register also publishes dates of birth; we use them only to tell apart people with the same name and do not store or show them.
• Company data from the same registers and from published annual reports: ownership, employees and financial figures.

We do not process national identity numbers, addresses, contact details or any special categories of personal data. We do not collect data from the people concerned and do not contact them on the basis of this data.

Why, and on what legal basis

The purpose is research and analysis of board composition, tenure and renewal in the largest Danish and Norwegian companies, presented to a restricted group of readers and used in our advisory work. The analysis is made at board and company level. We do not score, rank or profile individuals, and the data is not used for marketing.

The legal basis is our legitimate interest under Article 6(1)(f) of the GDPR in analysing information that the law requires companies to make public. We have assessed that this interest is not overridden by the interests of the people concerned, because the data is already public, limited to professional roles, and used at board level.

Who can see it

The analysis is published on a password-protected part of this site for invited readers. The site is hosted by Simply.com in the EU. We do not sell or otherwise pass on the data.

How long we keep it

We keep role data for as long as a company is in the analysis and for up to ten years of history, which the analysis of renewal patterns requires. Data on a company that leaves the analysis is deleted at the next annual review. Data subject to a justified objection is removed within 30 days.

Your rights

You have the right to access the data we hold about you, to have it corrected, to object to the processing and to ask for it to be deleted. Corrections to the underlying records must be made in the public registers, and we will update our copy when they are. You can complain to the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk) or, for Norwegian data, to the Norwegian Data Protection Authority (datatilsynet.no).

Sources and licences

Danish data: the Central Business Register (CVR) and annual reports published by the Danish Business Authority. Norwegian data: the Brønnøysund Register Centre, used under the Norwegian Licence for Open Government Data (NLOD 2.0).