Forbrugsforeningen af 1886

Denmark · owned by Independent (Denmark) · forbrugsforeningen.dk · 12 vendors

Forbrugsforeningen af 1886 is a Danish consumer membership association that offers its members cashback bonuses when shopping at thousands of partner stores and webshops across Denmark. Members pay an annual fee and automatically earn bonus rewards at participating retailers spanning categories such as travel, groceries, fashion, and home goods. The association is headquartered in Copenhagen and operates as an independent member-owned organisation.

Resilience scores

Technology vendors

Insights

Last updated 2026-09-13 · revision 3

12 direct vendors, 229 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 4/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Forbrugsforeningen's migration readiness is assessed as medium-low. Opportunities for migration are present due to a modern internal tech stack, including Next.js and a Headless CMS (Uniform), which suggests a decoupled architecture well-suited for cloud adoption and modern deployment patterns like microservices or serverless. However, significant challenges exist. The unknown regulatory environment, specifically the applicability of NIS2 and undetermined data residency requirements, could introduce complex compliance hurdles and necessitate specific architectural choices during migration. Financial stability and growth history are unknown, making it difficult to assess the company's capacity to fund a potentially large-scale migration effort. Vendor lock-in risk is explicitly unknown, but the reliance on 16 external services, including specific integrations like Loyal Solutions, MitID (Danish Digital Identity Integration), and various payment gateways (Dankort, Visa, Mastercard), suggests potential dependencies that could complicate or increase the cost of migrating these functionalities. The lack of clarity on the total number of distinct vendors (due to the "Total Vendors: 0" data point) prevents a full assessment of vendor concentration and its impact on migration flexibility.

Compliance

9 in-scope frameworks identified; showing 3.

PSD2 — Assessment Required

Risk is Medium because: (1) Forbrugsforeningen's data processor Loyal Solutions A/S is explicitly approved by Finanstilsynet as an account information service provider (AISP) under PSD2 — this regulatory approval directly relates to Forbrugsforeningen's bonus tracking service which relies on access to member payment transaction data; (2) Forbrugsforeningen itself may be subject to PSD2 obligations depending on whether it is classified as a payment service provider or merely a client of one; (3) the transition from a physical FBF payment card (a payment instrument) to a digital bonus platform (October 2025) changes the regulatory classification and may affect PSD2 applicability; (4) Finanstilsynet actively supervises payment service providers in Denmark; (5) if Forbrugsforeningen previously operated as a payment instrument issuer (physical FBF card), it may have been directly regulated under PSD2/payment services law.

Evidence: https://www.forbrugsforeningen.dk/medlem/om-os/databeskyttelsespolitik, https://www.forbrugsforeningen.dk/medlem/om-os/vedtaegter, https://www.finanstilsynet.dk/en

GDPR (source) — Partially Compliant

GDPR risk is assessed as Medium rather than High because Forbrugsforeningen has demonstrably implemented several key compliance measures: a formally appointed DPO (dpo@fbf.dk), a comprehensive and recently updated privacy policy (April 16, 2025) citing specific GDPR articles, documented lawful bases for all processing activities, data processor agreements with all vendors, and a stated default of EU/EEA data processing. However, risk remains Medium because: (1) the organization processes highly sensitive personal data including CPR numbers (Danish national ID), payment card data (PAN, CVV, expiry), trade union membership (special category data under GDPR Art. 9), transaction histories, and location data — all of which attract heightened regulatory scrutiny; (2) third-country transfers occur in connection with Visa/Mastercard payment processing, introducing transfer risk; (3) no independent audit or certification of GDPR compliance has been publicly disclosed; (4) Datatilsynet (the Danish DPA) is an active enforcement authority with a track record of issuing fines; (5) the organization's size and the sensitivity of data processed (CPR numbers, special category trade union data) place it in a higher-scrutiny category. Partial compliance status reflects that while documented policies exist, no third-party verification of actual compliance implementation has been found.

Evidence: https://www.forbrugsforeningen.dk/medlem/om-os/databeskyttelsespolitik, https://www.forbrugsforeningen.dk/medlem/om-os/vedtaegter, https://www.forbrugsforeningen.dk, https://www.datatilsynet.dk/english

Danish Bookkeeping Act — Assessment Required

Risk is Medium because: (1) Forbrugsforeningen explicitly references the Bogføringsloven (Bookkeeping Act) in its privacy policy as a legal basis for retaining transaction data and member information for 6 years; (2) the 2022 revised Bogføringsloven introduced new digital bookkeeping requirements including mandatory use of approved digital bookkeeping systems and cloud storage requirements; (3) the organization has a minimum capital of DKK 100 million and is subject to annual audit requirements per its statutes; (4) non-compliance with bookkeeping requirements can result in criminal liability for management; (5) the new digital bookkeeping requirements (phased in from 2024-2026) require assessment of whether Forbrugsforeningen's current systems meet the updated standards.

Evidence: https://www.forbrugsforeningen.dk/medlem/om-os/databeskyttelsespolitik, https://www.forbrugsforeningen.dk/medlem/om-os/vedtaegter

Financials

Three-year financials

Financial Resilience Score: 7/10

Forbrugsforeningen af 1886 demonstrates strong financial resilience through its ~140-year continuous operating history, which is highly unusual and implies a robust, tested business model. As a member association, it benefits from recurring, predictable revenue from annual membership fees (132 DKK/year) combined with commission income from a large network of Danish retail partners. The two-sided network structure creates natural moats: as either members or partners grow, value increases for the other side. Its legal form as a foreningen means no shareholder pressure for dividends, allowing surpluses to be reinvested into member benefits. The long-standing strategic partnership with Lån & Spar Bank is a significant anchor — this partner alone paid over 25 million DKK back to members in interest in 2025, indicating meaningful scale of financial flows through the association. However, precise financial figures (revenue, EBIT, equity) could not be retrieved for the last three fiscal years, limiting quantitative assessment. Key risks include competition from modern digital cashback and loyalty apps, concentration in the Danish market only, payment/regulatory exposure under PSD2 and interchange rules, aging demographics of traditional consumer associations, and dependency on continued participation of major retail partners.

Key strengths: ~140 years of continuous operation since 1886, Recurring membership fee revenue base (132 DKK/year), Two-sided network effects between members and partner retailers, Long-standing strategic partnership with Lån & Spar Bank, Association legal form — no shareholder dividend pressure, Broad partner network across all major consumer categories, Lån & Spar paid 25+ MDKK back to members in 2025 alone

Risk factors: Competition from digital cashback and loyalty apps (Pluspris, credit card cashback, retailer-specific programs), 100% concentration in Danish retail market — no international diversification, Payment card and regulatory risk (PSD2, interchange-fee regulation, card-scheme rules), Aging membership demographics — challenge acquiring younger consumers, Partner churn risk — reliance on continued participation of major retail chains, Precise recent financial figures not publicly retrievable in this session

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report