1.1 On behalf of Dansk Internet Forum (DIFO), Punktum dk administers second-level domain names under the .dk domain (hereinafter “Domain Name”) by appointment of the Danish Agency for Digital Government and on behalf of the Danish state.

1.2 Registrar is a legal person that sells the right of use to Domain Names and may manage Domain Names on behalf of Registrants pursuant to the Contract.

1.3 Punktum dk and the Registrar are obliged to inform each other of changes to the information about the parties that is stated in the Contract when such changes occur.

1.4 The Contract sets out conditions for the collaboration between Punktum dk and the Registrar, including:

selling Domain Names, i.e., processing applications for Domain Names and conclusion of agreements on the right of use to Domain Names,
managing the administration of Domain Names on behalf of Registrants and
Registrars being able to verify the identity and contact details of Registrants and Points of Contact that administer Domain Names if the relevant Point of Contact is different than the Registrant.

1.5 The Contract is subject to Punktum dk’s Terms and Conditions for the Right of Use of a .dk Domain Name in force at any time.

1.6 The parties have the right to use each other’s name and logo in connection with loyal marketing of their own services and activities. The parties must use the materials made available by the other party whose name and logo are used for marketing purposes.

1.7 The Registrar may use resellers to perform actions related to the management of Domain Names on behalf of the Registrar. Where the Registrar uses resellers, the Registrar shall ensure that such resellers comply with the obligations under the Contract. Likewise, the Registrar is still fully obligated to Punktum dk pursuant to the Contract also for the actions and omissions of the resellers.

2. Application and agreement on the right of use to a Domain Name

2.1 The Registrar has the right to receive applications for a Domain Name from a legal or natural person who wants to obtain the right of use to a Domain Name (hereinafter “Applicant”).

2.2 The Registrar has access to electronically enquire and receive replies from Punktum dk as to whether a requested Domain Name is available for registration.

2.3 The Registrar electronically transfers an application for a Domain Name to Punktum dk, along with the following information:

The Domain Name applied for.
The names of at least two authoritative name servers that are registered with Punktum dk.
The Applicant's correct name and contact information in the form of address, telephone number(s) and email address(es). If the Applicant is a legal person, at least one email address must be free of any personal data, unless the Applicant, whose personal data is contained in the e-mail address, has consented to Punktum dk publishing the e-mail address.
CVR number if the Applicant is a legal person with residence in Denmark.
Whether the identity and contact information has been verified.

A Domain Name may only be requested to be registered for a period of one (1) year at a time. This applies both when applying for a Domain Name and when renewing the registration period. The renewal of the registration period may take place no earlier than two (2) months before the expiry of the existing registration period.

In addition, if the application concerns a Domain Name that Punktum dk has offered separately to the Applicant who is on a waiting list, the Registrar must disclose an associated code issued by Punktum dk.

2.4 Punktum dk may conclude an agreement with an Applicant on the right of use to a Domain Name based on the information specified in Clause 2.3 if the Domain Name applied for is not already registered or suspended and the stated authoritative name servers are registered with Punktum dk.

2.5 The Registrar assists Punktum dk with conclusion of an agreement on the right of use to the Domain Name by presenting the Applicant with the following in a single format on its website:

Specification of the Domain Name applied for and the Applicant’s name and address, e-mail address(es) and telephone number(s), which must be identical with the information specified pursuant to Clause 2.3.
Punktum dk’s name and address.
A text written by Punktum dk, containing information about:
- The most significant characteristics regarding the right of use to a Domain Name, including on the termination of the right of use.
- Payment obligation.
- Information that, pursuant to the Danish Consumer Contract Act, the Applicant has no right of withdrawal.
- Other conditions of significant importance to the agreement.
Static link to Punktum dk’s applicable “Terms and Conditions for the Right of Use of a .dk Domain Name”.
Static link to Punktum dk’s applicable personal data policy.
A function whereby the Applicant gives its acceptance of the agreement on the right of use to a Domain Name and thereby to become Registrant of the Domain Name in question.

When the Applicant has accepted the agreement on the right of use to a Domain Name, the Registrar must immediately give notice thereof including information about the correct time for acceptance to Punktum dk in the manner specified by Punktum dk.

The Registrar must, upon request, be able to provide documentation to Punktum dk that an acceptance of the agreement on the right of use to a Domain Name has been obtained from the Applicant for up to one year from the time at which the acceptance was given.

3. Information about end-user pricing

3.1 The Registrar must provide information about end-user pricing on its consumer-facing website, in a clear, unambiguous and easily accessible manner. This includes the total price for a Domain Name, including fees, VAT or other expenses. If the price for the first registration period is an introduction price, the price for the subsequent registration period must also appear on the website.

3.2 If the Domain Name is sold together with other products or services, the price of the Domain Name must be stated separately on the Registrar’s website.

4. Verification of identity and contact information

4.1 The Registrar may choose to verify the identity and contact details of a Registrant and of the Point of Contact administering Domain Names, if these are different than the Registrant.

4.2 Verification by the Registrar must be performed in accordance with the rules set forth in the Addendum to the Registrar Contract on the Verification of Identity and Contact Information.

5. Managing a Domain Name on behalf of a Registrant

5.1 By agreement with a Registrar the Registrant authorizes the Registrar to take certain actions on behalf of the Registrant (hereinafter “Registrar Management”), which collectively include:

Make payments to Punktum dk in connection with a conclusion of an agreement on the right of use to a Domain Name and the renewal thereof, and with a restoration of a Domain Name, which has been suspended, where this is possible according to Punktum dk’s Terms and Conditions for the Right of Use of a .dk Domain Name.
Update the Registrant’s contact information: Email addresses, telephone number (s) and any specified contact person and in addition postal address if the Registrant is resident outside Denmark or cannot be locked to the Civil Registration System (CPR) or the Central Business Register (CVR).
Perform verification of the Registrant's identity and contact information, if the Registrar has chosen to be responsible for this.
Manage name servers: Secure connection of at least two authoritative name servers, change name servers, attend to security measures, including DNSSEC, register name servers under the Domain Name and optionally provide name server service.
Carry out change of Registrant.
Terminate the Registrant’s agreement for the right of use of a Domain Name.

The Registrar must inform Punktum dk in the manner specified by Punktum dk of changes to the Registrant’s contact information when such changes occur.

If the Registrant terminates the agreement for the right of use of a Domain Name before the expiry of the registration period, Punktum dk will pay any excess period fee to the Registrant.

5.2 For Domain Names that are registrant-managed at the time the Registrar Contract enters into force on 1 July 2026 (“existing Domain Names”) the Registrant may continue to take certain actions to manage the right of use to a Domain Name itself or by agreement let a Registrar assist (hereinafter “Registrant Management”). This assistance includes the following:

The Registrar may be appointed billing contact for the Registrant's Domain Name, which means that Punktum dk issues invoices to the Registrar.
The Registrar may be appointed proxy for the Registrant to act on behalf of the Registrant to a limited extent, which include; Initiate change of name servers, attend to security measures, including DNSSEC, change the registration period for a Domain Name, replace the billing contact for the Registrant’s Domain Name etc.
Provide name server service and attend to security measures, including DNSSEC.

The options of the billing contact and the proxy to act on behalf of the Registrant, cf. Clause 5.2, are described in further details on Punktum dk’s website.

5.3 With an agreement pursuant to Clause 5.1 for existing Domain Names the Registrar must ensure the existence of specific, informed, explicit, and verifiable consent from a Registrant.

5.4 Prior to obtaining consent, cf. Clause 5.3, the Registrar must ensure that the Registrant is clearly and unambiguously presented with a text approved by Punktum dk, explaining the following:

The Registrant’s right to Registrar Management, including what Registrant Management means.
The Registrant’s right to appoint a Registrar as billing contact and proxy for the Registrant, including what this means, and how the Registrant’s consent to this can be revoked by using the IT system provided by Punktum dk.

Punktum dk notifies Registrar three months prior to any amendment of approval requirements to the text.

5.5 The Registrar must, upon request, be able to provide documentation to Punktum dk:

That an informed consent has been obtained from the Registrant, cf. Clauses 5.2 and 5.3.
That, if the Registrant has requested the Registrar to notify Punktum dk, that identity and/or contact information is not to be made publicly available:
a) the Registrant has a confidential telephone number pursuant to other legislation,
b) the Registrant has name and address protection pursuant to other legislation, and/or c) the Registrant is a sole proprietorship.
That, if the natural person, whose personal data is contained in the e-mail address, has consented to Punktum dk publishing the e-mail address.

5.6 The Registrar and the Registrant shall determine the terms and conditions for the management of the Domain Name under the agreement pursuant to Clause 5.1.
With Registrar Management it must also be ensured that the Registrant at any time immediately and without conditions is provided with an authentication code so transfer to a new Registrar can be done with undue delay.

5.7 The Registrar may only carry out the actions listed in Clause 5.1 upon the Registrants express authorisation or request. The Registrar must ensure that the request originates from the Registrant.

6. Name server administration

6.1 With Registrar Management the Registrar must ensure that at least two authoritative name servers registered with Punktum dk are connected to a Domain Name. The Registrar can ensure this by using own name servers or a third party’s name servers.

The Registrar must inform Punktum dk in the manner specified by Punktum dk of changes to connected authoritative name servers registered with Punktum dk.

A Registrar using own name servers must offer name server service. This includes registration and maintenance of name servers with server name and IP address, Registrar's company name, CVR number, address, and telephone number as well as the name and email address of the contact person at the Registrar in the system provided by Punktum dk.

6.2 With Registrant Management the Registrar may offer name server service as described above. However, this does not apply if the Registrant arranges a change of name servers.

6.3 Punktum dk is required to secure Domain Name System Security Extensions (DNSSEC) in its systems so they provide quick and easy access to the Registrar's DNSSEC signing of Domain Names under .dk

6.4 The Registrar must offer DNSSEC signing to Registrants to which the Registrar offers name server service. This includes as long as the Registrar has an agreement with the Registrant on DNSSEC on the Domain Name:

Generating key sets (private and public encryption key) for use with DNSSEC.
Registration of a public encryption key in Punktum dk’s system in the manner specified by Punktum dk.
Publishing one or more public encryption keys in DNS.
Generating and publishing signatures whose content is encrypted by using encryption keys.
Maintenance of encryption keys.

The Registrar must inform the Registrant of where DNSSEC signing can be made, if the Registrar does not offer name server service and thus cannot offer DNSSEC signing.

6.5 Regardless of Clause 6.4, with Registrar Management the Registrar must ensure that one or more public encryption key is registered in Punktum dk’s system.

7. Registrar list

7.1 Punktum dk publishes a registrar list on its website, where the Registrar has the right to the presentation of information about its services for Registrants in a form specified by Punktum dk.

7.2 At Punktum dk’s request, the Registrar must provide documentation that its own information on the registrar list is correct. If the Registrar’s information is incorrect, it will not be published on the list.

8. Punktum dk’s release of data

8.1 Punktum dk may release or give access to a Registrant’s contact information and any other information related to the Domain Name to the Registrar if:

The Registrar is managing the Domain Name on behalf of the Registrant in connection with Registrar Management.
The Registrar, by agreement with the Registrant, has been appointed billing contact or proxy for the Registrant.
The Registrar is responsible for verifying identity and contact information.
The Registrar is name server manager for the Domain Name.

Information about the Registrant and the Domain Name can only be released or given access to the Registrar for the period where the Registrar has or has had an agreement with the Registrant.

8.2 The Registrar has the right to access a complete list of Domain Names registered at Punktum dk (hereinafter “the Domain List”).

8.3 The Registrar must not disclose the Domain List to third parties and/or use the Domain List for other purposes than to conduct its business as Registrar.

8.4 Punktum dk may close the Registrar’s access to the Domain List if the Registrar discloses or uses the Domain List in violation of Clause 8.3.

8.5 Punktum dk may release or give access to contact information about the Registrar and other information related to a Domain Name to the Registrant of the Domain Name in relation to the period he or she has been Registrant of the Domain Name.

8.6 Punktum dk may release or give access to information about a Registrar to other natural and legal persons who have a right to such release in pursuance of the Danish legislation.

8.7 With Registrar Management Punktum dk may release information about who is the Registrar of a Domain Name to other natural and legal persons.

9. Punktum dk’s IT support

9.1 The Registrar must – when using links and exchanging information with Punktum dk to comply with the Contract – use the links and IT systems specified and provided by Punktum dk.

9.2 Punktum dk must notify the Registrar of planned interruptions in operation of IT systems used by the Registrar if the interruption is planned to last more than five minutes.

9.3 Notification of interruptions in operation, cf. Clause 9.2, is provided to the Registrar in the manner prescribed by Punktum dk as follows:

one week’s notice for maintenance of an IT system unless the maintenance is justified in need of a security update.
three months’ notice for implementation of major changes to an existing IT system.
three months’ notice for shutdown of an IT system.

10. Information security

10.1 The Registrar takes appropriate technical and administrative security measures for protection of the Registrar’s access to Punktum dk’s IT systems used by the Registrar. The measures must protect the accessibility and the integrity of the IT systems including that access is not circumvented or otherwise compromised and the confidentiality of the Registrar’s login information.

10.2 The parties must notify each other of the name, telephone number and email address of a contact person who may be contacted regarding information security issues.

10.3 The parties inform each other as quickly as possible of a detected IT security incident or remedy of a detected critical vulnerability that has impacted IT systems provided by Punktum dk for use by the Registrar.

10.4 Punktum dk is entitled, without notice, to suspend in whole or in part the Registrar's access to Punktum dk’s IT systems if this is necessary to handle a security incident. Punktum dk may maintain such an interruption until the Registrar has taken appropriate technical and administrative measures to rectify conditions that enabled the security incident.

11. Personal data protection

11.1 According to the Contract, the parties process personal data about the Registrants and any Points of Contact, cf. Clause 2.3, as well as about contact persons employed by the parties.

11.2 Transfer of the Registrants' and any Points of Contact’s personal data between the parties is necessary for the purpose of entering into and fulfilling the Contract.

11.3 The Registrar is data controller for the personal data that the Registrar collects from a Registrant. Upon transfer of this personal data to Punktum dk, Punktum dk becomes data controller as well.

The Registrar is also data controller for the personal data that the Registrar collects from Punktum dk.

11.4 Both parties are individually data controllers and are thus each responsible for their own processing of the Registrants' and any Points of Contact’s personal data in accordance with the personal data regulation in force at any time, to which the parties are subject.

12. Confidentiality

12.1 The parties must observe unconditional secrecy about all the other party’s confidential information that comes to the knowledge of a party. The Parties are permitted to provide information on registrants solely for the purpose of updating a database of domain name registration data in accordance with industry standards or regulations thereon and considering Section 11 of the Contract.

12.2 The parties may only process the other party’s confidential information that is exchanged as part of the compliance of the Contract.

12.3 Confidential information includes all information about circumstances of a party, e.g., processes, systems, contractual relationships, customer data, know-how, employee relationships, intellectual rights, or the like, whether the information is written, spoken, electronic or via another medium or format. Confidential information does not include information which, at the time when a party has gained such information, must be regarded as generally known, or which later becomes generally known without this being due to a breach of the obligation of confidentiality under the Contract.

12.4 The obligation of confidentiality also applies after the termination of the Contract, regardless of the reason for termination.

13. The Registrar’s payments to Punktum dk

13.1 The Registrar pays an annual registrar fee to Punktum dk for the right to sell Domain Names. The registrar fee must be paid in advance. The amount of the registrar fee is stated at Punktum dk’s website, cf. Clause 13.4.

13.2 The amount of the registrar fee is based on cost coverage of Punktum dk’s activities relating to registrars. On this basis, Punktum dk may change the fee with a written notice of three months.

13.3 Upon termination of the Contract, there will be no refund of already prepaid registrar fee, cf. Clause 13.1, by the Registrar.

13.4 For any payment for which the Registrar is liable, cf. Clauses 5.1, 5.2 and 13.1, the Registrar must pay Punktum dk an amount in accordance with Punktum dk’s list prices for fees published on Punktum dk’s website. The Registrar is automatically liable for the payment for the Domain Name to Punktum dk, unless the Registrar has expressly informed Punktum dk that the registration period will not be renewed.

13.5 The Registrar’s payment, cf. Clauses 13.1 and 13.4, is made through the Registrar’s prepaid account with Punktum dk from which Punktum dk is entitled to withdraw an amount owed to Punktum dk.

13.6 The Registrar is obliged to ensure that the amount owed on the account is covered at all times, as long as the Contract is valid.
13.7 Punktum dk does not pay interest on the Registrar’s balance on the prepaid account.

13.8 If the Registrar does not have cover on the prepaid account, Punktum dk may with immediate effect terminate the Registrar's access to sell Domain Names. This means that the Registrar is not allowed to forward applications for Domain Names to Punktum dk, cf. Clause 2.3, or to assist Punktum dk in entering into an agreement on the right to use Domain Names, cf. Clause 2.5.

The Registrar’s access to sell Domain Names is restored when the Registrar has paid into the account an amount, which as a minimum equals the amount owed.

13.9 If the Registrar's prepaid account is unduly over drafted and the Registrar does not pay the amount due within 15 days, Punktum dk may cancel the Contract.

13.10 Punktum dk lays down detailed rules for the calculation of amounts owed by the Registrar to Punktum dk.

14. Credit rating

14.1 The Registrar shall have a good economic and financial standing, and ability to pay, and may not have a bad credit history. Punktum dk can, among other things, utilise credit rating services from reputable credit references agencies to assess the creditworthiness of the Registrar.

15. Controls

15.1 Punktum dk may perform controls of compliance with the Registrar’s obligations under the Contract.

15.2 For control purposes, Punktum dk may require the Registrar to provide the information and written documentation that Punktum dk deems relevant pursuant to the Contract within 14 days. Such information and documentation must be in Danish or English.

If the information and documentation that Punktum dk requires to be provided relates to control of compliance with the Registrar's obligations under Section 10 of the Contract, Punktum dk shall set an appropriate deadline, but at least 8 hours.

15.3 The deadline for providing this information and documentation may be extended if Punktum dk finds specific reason to do so.

15.4 The results of Punktum dk’s controls will be reported to the Registrar.

15.5 If Punktum dk decides that the Registrar is not in compliance with its obligations under the Contract, Punktum dk will give the Registrar 14 days to rectify this non-compliance and send documentation of this remedy to Punktum dk. This does not apply where Clause 18.1 is applicable.

If the matter to be rectified relates to compliance with the Registrar's obligations under Sections 4 or 10 of the Contract, Punktum dk shall set an appropriate deadline, but a minimum of 8 hours in the cases covered by Section 10.

15.6 Punktum dk will give the Registrar a written warning if the Registrar does not provide information and documentation requested by Punktum dk, or if the Registrar does not comply with its obligations after expiry of the remediation period.

Punktum dk sends a warning to the Registrar by the contact person and via his e-mail address as provided by the Registrar.

16. Termination of the Contract

16.1 The Contract is valid until one party’s written termination of the Contract. For Punktum dk, the term of notice is 3 months, and for the Registrar the term of notice is with immediate effect as of Punktum dk’s receipt of notification of termination from Registrar.

16.2 On notification of termination of the Contract, the Registrar’s and Punktum dk’s contractual rights and obligations cease. Any monetary payments due shall continue to be paid to Punktum dk. If the Registrar has a receivable after Punktum dk has established the parties' financial balance, this shall be paid to the Registra

17. Transfer of the Contract

17.1 The Registrar may not without the consent of Punktum dk transfer the Contract and its rights and obligations pursuant to the Contract to a third party.

17.2 In the event that Punktum dk’s function as administrator of Domain Names ceases, Punktum dk is obliged and entitled to transfer the Contract to a new administrator without prior consent from the Registrar.

18. Cancellation of the Contract

18.1 If a party commits material breach of the Contract, the other party is entitled to cancel the Contract with immediate effect. Circumstances considered as constituting material breach include:

The Registrar goes bankrupt.
The Registrar has not paid the amount owed, cf. Clause 13.9.
The Registrar receives 3 notices, cf. Clause 15.6, within a 3-year period.
One party commits fraud against the other party.

19. Compensation

19.1 The parties are liable to each other in accordance with the standard compensation rules of Danish law.

19.2 The total liability in damages between the parties within the Contract is limited to DKK 100,000 per injurious action.

19.3 The parties are not liable in damages within the Contract for losses due to:

Indirect circumstances, such as lost earnings, loss of data and the like, and
force majeure.

Punktum dk is not liable in damages within the Contract for losses due to:

Punktum dk’s decision to reject an application for the right of use to a Domain Name,
Punktum dk’s decision to delete or suspend a registration of a Domain Name,
incorrect information given to Punktum dk by the Registrar or others, including contact details of the Registrant, and
the Registrant’s or Point og Contact’s inability to perform verification of identity and contact information in accordance with Punktum dk’s rules on such verification.

20. Applicable law and venue

20.1 This Contract is subject to Danish law.

20.2 Any disagreement or dispute between the parties regarding the interpretation and scope of the Contract will be settled in the Copenhagen District Court.

21. Signing of the Contract

21.1 The Contract is signed electronically by both parties.

22. Languages

22.1 This Contract exists in Danish and English. In the event of inconsistencies between the two versions, the Danish version is valid.

Addendum to Registrar Contract Verification of Identity and Contact Information

Version 1.2, 1 July 2026

1. Background

1.1 The Danish NIS 2 Act, which implements the NIS 2 Directive, establishes rules which state that both top domain name administrators and Registrars must collect and verify certain items of information about Domain Name Registrants and the Points of Contact who administer the Domain Name if this is different than the Registrant.

A partially overlapping obligation in the Danish Domain Names Act requires Punktum dk to collect and verify certain items of information about Registrants of .dk domain names.

1.2 Punktum dk and the Registrar shall cooperate via this Addendum to the Registrar Contract on these obligations so that only one of the Parties performs the necessary verifications of identity and contact information.

1.3 The Addendum is an integral part of the Registrar Contract which is in force at any given time and has been concluded between Punktum dk and the Registrar.

1.4 The addendum concerns collaboration around certain obligations. The addendum does not change the fact that the Parties are independently responsible for complying with their obligations under the NIS 2 Act, regardless of which of the Parties undertakes a specific verification, for example.

1.5 Similarly, any complaints by Registrants and Points og Contact concerning verifications shall be handled by the Party that has performed the verification.

2. Verification of Identity and Contact Information

2.1 With this addendum, Punktum dk allows Registrars to verify identity and contact information themselves, and this includes the use of resellers or other third parties. The Registrar thus chooses whether it shall be the Registrar or Punktum dk who shall undertake the verification of Registrants and any Points of Contact.

2.2 If the Registrar chooses to perform the verification, Punktum dk shall not perform verification of the Registrant’s or any Point of Contact’s information. However, there may be special cases in which it may be necessary for Punktum dk to perform a verification, regardless of whether this has already been performed by the Registrar.

2.3 Registrars who choose to be responsible for verifying identity and contact information must perform the verification in accordance with the procedure for a registrar’s verification of identity and contact information in force at any time.

2.4 If the Registrar verifies identity and contact information, the Registrar must verify the information listed in the procedure. The Registrar is not obligated to offer its customers all of the verification methods listed in the procedure.

2.5 The Registrar is liable to Punktum dk pursuant to this addendum and the Registrar Contract regardless of whether the verification has been performed by the Registrar or by a reseller or other third party.

2.6 The verification of a Registrant’s identity and contact details must be completed within 30 days. If this does not happen, Punktum dk can suspend all of the Registrant’s Domain Names for a period of 30 days, after which they will be deleted.

The deadline for responding to a verification may be shortened to 10 days if exceptional circumstances so require.

3. Payment

3.1 The Registrar does not have to pay a fee for the ability to verify identity and contact information. Similarly, the Registrar shall not receive any price reduction or payment from Punktum dk in exchange for verifying identity and contact information.

4. Checks

4.1 Punktum dk may conduct checks on compliance with the Registrar’s obligations under this Contract Addendum in accordance with the rules of the Registrar Contract.