Privacy Policy

Data Controller

We are the data controller for the processing of personal data we receive about our customers. You can find our contact details below.

Energy Cool
Prins Georg Kvarter 13, DK-7000 Fredericia
VAT no.: DK33067135

Background

Our processing of personal data is carried out in accordance with applicable data protection legislation, including the Danish Data Protection Act and the EU General Data Protection Regulation (GDPR).

Personal data means any information relating to an identified or identifiable natural person. This includes all types of information that can be directly or indirectly linked to a person.

Purposes of processing your personal data

We process your personal data for the following purposes:

When you contact us

If you have questions about our website or want to learn more about our services, you can contact us via:

  • Contact form
  • Email
  • Phone

We will process your personal data in order to respond to your inquiries or deliver a service to you. We only process the information you provide to us as part of our communication.

We will typically process the following ordinary data: name, email address, phone number.

Our legal basis for processing depends on the purpose of the processing. When we answer your questions, our legal basis is GDPR Article 6(1)(f) (legitimate interests). When you are a customer of ours, the legal basis is GDPR Article 6(1)(b) (performance of a contract).

As a general rule, we delete stored communications with you no later than 6 months after our most recent contact.

In special cases, there may be a need to store your personal data for a longer period.

When you are a customer

When you are a customer, we need to register certain information about your company to fulfill our obligations. This includes processing the following ordinary personal data: company name, VAT no., contact person, phone number, email, website, and payment information.

To the extent that we process personal data about our customers, our legal basis is the agreement we enter into, cf. GDPR Article 6(1)(b).

We store the information for as long as you are a customer with us. When the customer relationship ends, we will delete personal data once our outstanding matters are settled. However, we are obliged to retain accounting records for at least 5 years after the end of the most recent financial year.

When you visit our website

Learn more about how we use cookies in our Cookie Policy. The use of cookies takes place in accordance with the Danish executive order on cookies.

Collaboration with third parties

Few can do everything themselves, and the same applies to us. We therefore use external partners and suppliers (data processors and independent controllers) to perform tasks on our behalf.

External parties may, for example, provide systems to organize our work, services, consultancy, IT hosting, and marketing. It is our responsibility to ensure that your personal data is not misused. Therefore, we place high demands on our partners, and our partners must guarantee that your personal data is protected. We therefore enter into agreements with companies that handle personal data on our behalf to increase the security of your personal data.

Disclosure of personal data

We do not disclose your personal data.

Third countries

Your personal data is processed by us. However, we also use suppliers who act as both independent controllers and data processors. No one can manage everything alone.

We are obliged to inform you, on whose behalf we process personal data, that data may be transferred to third countries. Google is our data processor when we send emails to our customers and partners, and we use Stripe to receive payments from customers. For chat, we use LiveChat to answer your questions. These companies are based in the USA, and therefore your data may also be stored there.

The USA is a third country, and there are specific requirements for transferring personal data to third countries. We only transfer data where a valid transfer mechanism under GDPR is in place (e.g., adequacy decision or Standard Contractual Clauses).

Security of processing

We process your personal data in accordance with data protection legislation and relevant regulations in our business area. It is essential for us to safeguard our customers' information. We have therefore implemented technical and organizational measures to ensure compliance with our data protection responsibilities.

Technical and organizational measures

People make mistakes, which is why we train all employees in our guidelines for good data processing practices to reduce errors and create continuous improvements in our data processing. We have also implemented an IT security policy that sets the direction for the company's overall security.

We have introduced access restrictions so that employees only have access to personal data if it is relevant to their job function.

We will continuously assess the need to use encryption or pseudonymization of personal data as a risk mitigation initiative.

To protect our data, we use antivirus programs, regularly renew our passwords, update our systems, and keep up to date with IT developments to protect against vulnerable IT systems and current IT threats.

Your rights

Under the GDPR, you have a number of rights in relation to our processing of information about you. If you wish to exercise your rights, please contact us.

Right of access

You have the right to access the information we process about you, as well as additional information.

Right to rectification

You have the right to have inaccurate information about yourself corrected.

Right to erasure

In special cases, you have the right to have information about you deleted before the time of our general deletion occurs.

Right to restriction of processing

In certain cases, you have the right to have the processing of your personal data restricted. If you have the right to have processing restricted, we may in future only process the information — aside from storage — with your consent, or for the establishment, exercise, or defense of legal claims, or to protect a person or important public interests.

Right to object

In certain cases, you have the right to object to our otherwise lawful processing of your personal data. You can also object to the processing of your data for direct marketing purposes.

Right to data portability

In certain cases, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to have those personal data transmitted from one controller to another without hindrance. You can read more about your rights in the Danish Data Protection Agency’s guidance on the rights of data subjects at www.datatilsynet.dk.

Complaint to the Danish Data Protection Agency

You have the right to file a complaint with the Danish Data Protection Agency if you are dissatisfied with the way we process your personal data. You can find the Agency’s contact information at www.datatilsynet.dk.