Scroll to top

Privacy Policy

Last updated: August 20, 2025

 

Data & More ApS (“we,” “us,” or “our”) is committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. As the data controller, we process your personal data in a fair, transparent, and lawful manner. This Privacy Policy explains how we collect, use, store, and protect your personal data, as well as your rights regarding your data.

 

1. Contact Information

For questions or concerns about this Privacy Policy or our data processing practices, please contact our Data Privacy Manager (DPM):

Name: Kristian Boe Helweg Hansen
Address: SOHO Business Center, Flæsketorvet 68, 1711 Copenhagen V, Denmark
Phone: (+45) 4290 1070
Email: dpm@dataandmore.com
CVR: 38185659

2. Purpose of Data Processing

We process your personal data to provide and improve our services, fulfill contractual obligations, and comply with legal requirements. The specific purposes include:

  • Processing your purchases and delivering our services.
  • Personalizing communication and marketing to your preferences.
  • Improving our website, products, and services through analytics.
  • Complying with legal obligations, such as tax or accounting requirements.
  • Ensuring the security and integrity of our systems.

We only process personal data that is relevant, necessary, and limited to these purposes.

3. Types of Data We Collect

We collect and process the following categories of personal data:

3.1 General Personal Data

  • Contact Information: Name, email address, phone number, and postal address.
  • Purchase Data: Order details, payment information, and billing history.
  • Communication Data: Correspondence with us, including emails and support requests.
  • Usage Data: Information about how you interact with our website, such as pages visited, time spent, and browser type.

3.2 Technical Data (Collected via Website)

When you visit our website (www.dataandmore.com), we collect the following non-identifiable data:

  • IP address.
  • Browser type and version.
  • Operating system.
  • Pages visited and timestamps (your “electronic footprint”).
  • Referring websites or search engines.

This data is collected for statistical purposes to optimize our website and user experience. We cannot identify individuals based on this information.

3.3 Cookies

Our website uses session cookies to enhance functionality. These cookies are temporary and deleted when you close your browser. You can disable cookies in your browser settings without affecting your ability to use our website.

4. Legal Basis for Processing

We process your personal data based on one or more of the following legal bases under GDPR:

  • Consent (Article 6(1)(a)): For certain processing activities, such as personalized marketing, we will obtain your explicit consent. You may withdraw consent at any time by contacting us.
  • Contract (Article 6(1)(b)): To fulfill our contractual obligations, such as processing purchases or delivering services.
  • Legal Obligation (Article 6(1)(c)): To comply with applicable laws, such as tax or accounting regulations.
  • Legitimate Interests (Article 6(1)(f)): For purposes such as improving our services, ensuring website functionality, or preventing fraud, provided these interests do not override your rights and freedoms.

We will inform you of the specific legal basis at the time of data collection.

5. Data Sharing

We do not share your personal data with third parties without your consent, except in the following cases:

  • Service Providers: We may share data with trusted third-party processors (e.g., payment processors or IT service providers) who act under our instructions and comply with GDPR.
  • Legal Requirements: We may disclose data to comply with legal obligations or respond to lawful requests from public authorities.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to a successor entity, subject to equivalent data protection standards.

All third parties are contractually obligated to protect your data and process it only for specified purposes.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or to comply with legal requirements. For example:

  • Purchase-related data is retained for 5 years to comply with Danish accounting laws.
  • Marketing consent data is retained until you withdraw your consent.
  • Website usage data is retained for up to 12 months for analytics purposes.

When data is no longer needed, we securely delete or anonymize it.

7. Data Security

We have implemented technical and organizational measures to protect your personal data from unauthorized access, loss, alteration, or disclosure. These measures include:

  • Encryption of sensitive data during transmission and storage.
  • Access controls to limit data access to authorized personnel only.
  • Regular security audits and updates to our systems.
  • Internal policies and staff training on data protection.

8. Your Rights

Under GDPR, you have the following rights regarding your personal data:

  • Right to Access (Article 15): You can request information about the data we process, its purpose, and any recipients.
  • Right to Rectification (Article 16): You can request correction of inaccurate or incomplete data.
  • Right to Erasure (Article 17): You can request deletion of your data when it is no longer necessary or if you withdraw consent.
  • Right to Restrict Processing (Article 18): You can request that we limit the processing of your data under certain conditions.
  • Right to Data Portability (Article 20): You can receive your data in a structured, commonly used, and machine-readable format.
  • Right to Object (Article 21): You can object to processing based on legitimate interests, including for marketing purposes.
  • Right to Withdraw Consent: You can withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise these rights, please contact our DPM using the details in Section 1. We will respond to your request within one month, unless complex or numerous requests require additional time.

9. International Data Transfers

If we transfer your personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:

  • Transfers to countries with an adequacy decision by the European Commission.
  • Standard Contractual Clauses (SCCs) approved by the European Commission.
  • Binding Corporate Rules (BCRs) for intra-group transfers, where applicable.

10. Complaints

If you believe our processing of your personal data violates GDPR or other applicable laws, you may lodge a complaint with us directly using the contact details in Section 1. You also have the right to file a complaint with the Danish Data Protection Agency:

Danish Data Protection Agency
Address: Carl Jacobsens Vej 35, 2500 Valby, Denmark
Phone: (+45) 33 19 32 00
Email: dt@datatilsynet.dk
Website: www.datatilsynet.dk

11. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of significant changes via email or a prominent notice on our website. The latest version will always be available at www.dataandmore.com/privacy-policy.

By using our services or website, you acknowledge that you have read and understood this Privacy Policy. For further information, please contact our DPM.