Billund Lufthavn A/S

Denmark · owned by Independent (Denmark) · bll.dk · 64 vendors

Billund Airport is Denmark's second-largest airport, serving as West Denmark's international airport. The company operates airport facilities, parking services, retail operations, and passenger services.

Resilience scores

Technology vendors

Insights

Last updated 2026-09-13 · revision 74

64 direct vendors, 441 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 5/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Billund Lufthavn A/S exhibits medium migration readiness, primarily due to significant regulatory and data residency complexities, coupled with an unknown core technology landscape. The company's strong financial position, with robust revenue growth, suggests it has the capacity to fund migration initiatives. The adoption of SaaS solutions like Emply and Apcoa Flow for certain services indicates an openness to external, potentially cloud-based, platforms. However, the most substantial challenges to migration readiness stem from the regulatory environment. GDPR and NIS2 Directive are both 'Assessment Required' with 'High' risk, imposing stringent requirements on data protection, cybersecurity, and incident reporting that must be meticulously addressed during any migration to new infrastructure or cloud environments. Furthermore, strict EU data residency requirements mandate that personal data of EU residents be processed within the EU/EEA or in countries with adequacy decisions, significantly limiting cloud provider and region choices and adding complexity to data transfer mechanisms. The current state of the core operational tech stack (e.g., flight operations, baggage handling) is not detailed, making it difficult to assess its readiness for migration; if these are legacy, monolithic systems, migration would be complex and costly. Vendor lock-in risk is explicitly 'Unknown', though the use of specific platforms like Apcoa Flow could imply some level of lock-in for those particular services. The contradictory 'Total Vendors: 0' data point makes a comprehensive assessment of overall vendor lock-in challenging. These regulatory and technical unknowns present considerable hurdles for a smooth and compliant migration.

Compliance

11 in-scope frameworks identified; showing 3.

GDPR (source) — Partially Compliant

Billund Lufthavn A/S is headquartered in Denmark (EU member state) and processes extensive categories of personal data including passenger PII (name, address, email, phone, date of birth, gender, passport number, payment data), sensitive special-category data (disability/health needs under Art. 9 GDPR), CCTV footage, employee and contractor ID-card data (including CPR numbers and criminal record extracts), PNR (Passenger Name Record) data shared with Rigspolitiet, and marketing/newsletter subscriber data. The volume and sensitivity of data processed — including special-category health data and biometric-adjacent passport/CPR data — creates elevated risk. The privacy policy was last updated in May 2019, predating significant EDPB guidance and enforcement developments. No Data Protection Officer (DPO) appointment is publicly disclosed on the website, which is a mandatory requirement under GDPR Art. 37 for organisations processing special-category data at scale. Denmark's Datatilsynet is an active enforcement authority. Non-compliance risks fines up to €20M or 4% of global annual turnover under Art. 83 GDPR.

Evidence: https://www.bll.dk/privatliv, https://www.bll.dk/en/privacy-policy, https://www.bll.dk/cookies, https://www.datatilsynet.dk/, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32016R0679

EU Regulation 1107 — Partially Compliant

EU Regulation 1107/2006 mandates that airports provide assistance to passengers with disabilities and reduced mobility at no extra charge. Billund Lufthavn A/S explicitly references this regulation in its privacy policy as the legal basis for processing special-category health data (disability/special needs information). The airport has a dedicated 'Rejsende med handicap' (Travelling with disability) section on its website. Risk is Medium as the airport demonstrates awareness and has operational procedures, but no independent audit of PRM service quality is publicly available.

Evidence: https://www.bll.dk/privatliv, https://www.bll.dk/rejsende-med-handicap, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32006R1107

Danish Aviation Act — Assessment Required

The Danish Aviation Act (Luftfartsloven) is the primary national legislation governing airport operations in Denmark, implementing EU aviation regulations. It covers airport licensing, safety management, ground handling, slot coordination, and security. Billund Lufthavn A/S operates under a licence from the Danish Transport Authority (Trafik-, Bygge- og Boligstyrelsen). Non-compliance can result in licence suspension or revocation. Risk is High due to the safety-critical nature of aviation operations and the direct regulatory oversight by the Danish Transport Authority.

Evidence: https://www.bll.dk/privatliv, https://www.retsinformation.dk/eli/lta/2017/1149, https://www.trafikstyrelsen.dk/, https://www.bll.dk/om-lufthavnen/fakta-og-historie

Financials

Three-year financials

Financial Resilience Score: 7/10

Billund Lufthavn A/S demonstrates strong financial resilience underpinned by its position as Denmark's second-largest airport and the primary international gateway for western Denmark. Its municipality-anchored ownership structure (Billund, Vejle, Kolding, Herning, Ikast-Brande, Vejen and Fredericia) provides implicit political backing, reduces refinancing risk, and was demonstrated during COVID-19 when the airport received state aid via Danish compensation schemes. The company benefits from a diversified revenue mix combining aviation charges (~45–55%) with substantial non-aeronautical income (~40–50%) from parking, tax-free retail, LEGO store, F&B concessions, and real estate leases—structurally more resilient than pure airline-exposed operators. However, the airport carries meaningful risk from high operational leverage due to its fixed cost base (runway, terminal, security), which amplifies profitability shocks when passenger volumes fluctuate—as evidenced by the significant operating losses during 2020–2021 when traffic fell 70–80%. Concentration on leisure/charter travel (more discretionary than business travel), single-site geographic concentration, airline concentration risk (KLM, Ryanair, British Airways, Sunclass/TUI dominate movements), and competition from Aarhus, Copenhagen and Hamburg airports temper the resilience score. Recovery to near-record traffic in 2024 and ongoing infrastructure improvements (Hærvejsmotorvejen) support the medium-term outlook.

Key strengths: Strategic regional monopoly as only major international airport in Jutland, Diversified aviation and non-aviation revenue mix (~50/50 split), Municipal/public ownership providing implicit political backing, Strong leisure/charter franchise - Denmark's largest charter airport, Cargo hub role serving LEGO Group and regional exporters, Infrastructure investments underway (motorway link improvements), Post-COVID recovery to near record-levels by 2024

Risk factors: High operational leverage from fixed cost base, Concentration on discretionary leisure/charter travel, Single-site geographic concentration, Regulatory pressure on airport charges and ESG/decarbonisation capex needs, Airline concentration - few carriers dominate movements, Competition from Aarhus, Copenhagen and Hamburg airports, Sensitivity to consumer confidence, FX and fuel prices

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report