In short
We aim to be transparent about how we process your data. In practice:
- We use a cookieless, self-hosted analytics tool — no cross-site tracking.
- Embedded videos and magazines only load when you click — no contact with YouTube, Vimeo or Issuu before that.
- If you sign up for our newsletter or contact us, your information is used solely for that purpose.
- You have a range of rights under the GDPR, and you can always contact us or complain to the Danish Data Protection Agency.
Visitor statistics (Rybbit)
We use Rybbit, a cookieless analytics solution which we self-host on our own server in the EU. Rybbit sets no cookies in your browser and does not use fingerprinting.
For each page visit we record, in anonymised form:
- Which page was visited, and for how long
- Which country the visit came from
- Which device type and browser was used
- Which source the visit came from (e.g. search engine or direct link)
About your IP address: Your IP address is briefly held in server memory to derive the country of your visit and — together with a daily rotating key — to generate an anonymous session identifier (known as user-ID salting). The raw IP address is never logged or written to disk, and the session ID cannot be reversed to an IP address. After 24 hours, the session ID is irrevocably anonymous.
Legal basis: Legitimate interest, under GDPR Art. 6(1)(f) — our interest in understanding how the website is used so we can improve it. Because the data is aggregated and not personally identifiable, no consent is required under the Danish Cookie Order.
Embedded third-party content
Some pages contain content hosted by third parties:
- Videos (YouTube/Vimeo): We use a privacy-friendly player that shows a static preview image. Only when you click play do we contact YouTube (via
youtube-nocookie.com) or Vimeo (with the "Do Not Track" flag set). No data is transmitted to them before that. - The fair magazine (Issuu): The magazine uses the same click-to-open approach: first a local cover image, and the reader from Issuu only loads once you click to open it. Issuu's cookies are therefore not set until your click.
Before clicking, a short notice on the preview reminds you that third-party content will be loaded. Your click therefore constitutes informed consent under GDPR Art. 6(1)(a).
Withdrawing consent: When a video or the magazine is open, a "Close" button is shown at the top. Clicking it removes the content again, so no further data is transmitted to the third party. Cookies that are already set can be deleted in your browser settings — see How to delete cookies.
When you interact with embedded third-party content, your data is processed under that provider's privacy policy. We have no control over what information they collect.
Newsletter
When you sign up for our newsletter, we ask for your email address. It is used solely to send you the newsletter with information about the Health & Rehab fair.
Legal basis: Your consent, under GDPR Art. 6(1)(a). You give consent by entering your email and clicking subscribe. You can withdraw your consent at any time via the unsubscribe link in every email — or by writing to us.
Data processor: We use Mailchimp (Intuit Inc., USA) to send the newsletter. This means your email address is transferred to the USA. The transfer is made on the basis of the EU Commission's Standard Contractual Clauses (SCCs) and the EU-US Data Privacy Framework. We have signed a data processing agreement with Mailchimp.
Retention: Your email address is retained for as long as you are subscribed. If you unsubscribe, your address is removed from our active mailing list immediately.
Email and enquiries
If you contact us by email, we process the information you provide — typically your name, email address and the content of your message — solely for the purpose of answering your enquiry.
Legal basis: Legitimate interest in being able to respond to your enquiry, under GDPR Art. 6(1)(f). If the enquiry leads to an exhibitor agreement, the basis becomes performance of a contract, Art. 6(1)(b).
Retention: Correspondence is deleted when the purpose has been fulfilled. If the enquiry is of a commercial nature, it is retained for up to 5 years after the end of the financial year, as required by the Danish Bookkeeping Act § 12.
Hosting and infrastructure
The website is hosted on a server in the EU (Germany), and we use Cloudflare as our CDN and DNS provider. Cloudflare may, to the extent necessary, process connection data (such as IP addresses) in order to deliver the content securely and reject abuse. We have signed data processing agreements with our subprocessors.
Your rights
Under the GDPR you have the following rights regarding any personal data we may process about you:
- Access — you can be informed of what data we hold about you.
- Rectification — you can have inaccurate data corrected.
- Erasure ("the right to be forgotten") — in certain cases, you can have your data deleted.
- Restriction of processing.
- Objection to processing based on legitimate interest.
- Data portability — you can receive your data in a machine-readable format.
- Withdrawal of consent — if the processing is based on consent (e.g. newsletter).
You can exercise your rights by writing to [email protected].
Complaint to the supervisory authority: If you are dissatisfied with our processing of your data, you can file a complaint with the Danish Data Protection Agency. Contact details are available at datatilsynet.dk.
How to delete cookies
If you have opened a video or the magazine and want to remove any cookies set by YouTube, Vimeo or Issuu, you can do so in your browser settings:
- Safari: Settings → Advanced → Website Data → Remove All Website Data (or search for issuu.com, youtube.com, vimeo.com and remove them individually).
- Chrome: Settings → Privacy and security → Cookies and other site data → See all cookies and site data → search and delete.
- Firefox: Settings → Privacy & Security → Cookies and Site Data → Manage Data → search and remove.
- Edge: Settings → Cookies and site permissions → Manage and delete cookies and site data → See all cookies and site data.
You can withdraw a previously given consent at any time. This does not affect the lawfulness of processing carried out before the withdrawal.
Data controller
Health & Rehab is organised by Danish.Care, which is the data controller for the website.
Danish.Care
Forskerparken 10E23
5230 Odense M, Denmark
CVR: 10 41 53 16
[email protected]
Changes to this policy
We may update this privacy policy from time to time, for example if we add new features to the website. The current version is always available here.
Last updated: 20 April 2026.