Privacy Policy – Danish Graphene

1. Data Controller

This website is owned and operated by:

Danish Graphene ApS
Tysklandsvej 7, 7100 Vejle, Denmark
Email: contact@danishgraphene.com
CVR: 41406704

We act as the data controller for personal data collected through our website in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679.

2. What Personal Data We Collect

When you use our website, we may collect the following categories of personal data:

Technical data: IP address, browser type, operating system, device information, and cookies.
Usage data: Pages visited, actions taken on the site, and referring website.
Identification data: Name, company name, phone number, address, and email (if you provide them voluntarily).
Transaction data: Order details, billing and shipping address, and payment method.
Newsletter data: Name and email address when you subscribe to our newsletter.

We only collect personal data that is relevant, adequate, and limited to what is necessary for the specified purposes.

3. Legal Basis for Processing

We process your personal data on the following lawful bases:

Performance of a contract: When you place an order or make a purchase.
Consent: For newsletter subscriptions, marketing emails, and optional cookies.
Legitimate interest: For improving website functionality, fraud prevention, and internal analytics.
Legal obligation: To comply with applicable laws (e.g., tax or accounting requirements).

You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

4. Purpose of Processing

We use your data for the following purposes:

To provide and deliver goods and services
To handle your requests and orders
To process payments securely
To improve the performance and content of our website
To analyse traffic and user behaviour via cookies
To send newsletters and marketing material if you opt in
To comply with legal obligations

5. Newsletter Subscription

If you choose to subscribe to our newsletter:

We will collect your name and email address.
We will use your email to send you updates about our products, offers, and company news.
Your consent is recorded as required under GDPR Article 7.
You may unsubscribe at any time using the link provided in every email or by contacting us directly.

We use secure third-party email marketing platforms that are GDPR-compliant and only process data on our behalf.

6. Use of Cookies

Our website uses cookies to enhance functionality, measure website traffic, and personalize content and ads.

You will be asked to accept or reject cookies on your first visit. You can always change your preferences or delete cookies via your browser settings. Read our full cookie policy here:
http://minecookies.org/cookiehandtering

Some cookies may be placed by third parties (e.g., analytics or advertising providers). See more:
https://danskemedier.dk/cookie-wall

7. Disclosure of Personal Data

We may share your data with:

Service providers (e.g., hosting, email delivery, analytics, and payment services) under data processing agreements
Couriers and logistics companies for order delivery
Regulatory or legal authorities where required by law

We do not sell your personal data to third parties. Transfers outside the EU/EEA only occur to recipients offering an adequate level of protection or through binding agreements (e.g., standard contractual clauses).

8. Data Retention

We retain your personal data only as long as necessary to fulfill the purpose for which it was collected, including legal, accounting, or reporting requirements. Retention periods vary based on data type and processing context.

9. Your Rights

You have the following rights under the GDPR:

Right of access – know what personal data we hold about you
Right to rectification – request correction of inaccurate or incomplete data
Right to erasure – request deletion of your data under certain conditions
Right to restriction – request limited processing of your data
Right to data portability – receive your data in a structured, commonly used format
Right to object – object to processing based on legitimate interests or direct marketing
Right to withdraw consent – at any time, if processing is based on your consent

To exercise your rights, please contact: contact@danishgraphene.com

You also have the right to lodge a complaint with the Danish Data Protection Authority (Datatilsynet):
https://www.datatilsynet.dk

10. Security Measures

We have implemented appropriate technical and organizational measures to safeguard your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

These include SSL encryption, access controls, secure data hosting, and staff training.