Privacy Policy

Introduction

This Privacy Policy explains how datavexison AS ("we", "us", or "our") collects, uses, processes, and protects your personal information when you visit our website, use our services, or interact with us. We are committed to protecting your privacy and ensuring transparency about how we handle your data.

datavexison AS is the data controller for the personal information we collect and process. Our registered office is located at Torvegade 80, 1049 Copenhagen, Capital Region, Denmark, and we are registered under company number CVR25874136.

Data We Collect

We collect various types of personal data when you interact with our website and services. The data we collect includes information you provide directly to us and information collected automatically through your use of our services.

Information You Provide

• Contact information (name, email address, phone number, company name)
• Communication preferences and marketing consent
• Messages and enquiries sent through our contact forms
• Business information related to your restaurant or food service operation
• Account information if you use our analytics services

Information Collected Automatically

• Website usage data (pages visited, time spent, navigation patterns)
• Technical information (IP address, browser type, device information)
• Cookie data and tracking information (subject to your consent preferences)
• Referral source and marketing campaign data

How We Use Your Information

We use the personal data we collect for various legitimate business purposes. How we use your information depends on the services you use and your preferences.

Service Delivery

• Providing restaurant analytics services and dashboard access
• Responding to enquiries and providing customer support
• Processing service requests and consultations
• Managing client relationships and service delivery

Communication and Marketing

• Sending service updates and important notifications
• Providing industry insights and analytics resources (with consent)
• Marketing our services and sharing relevant content (with consent)
• Conducting customer satisfaction surveys and feedback collection

Business Operations

• Improving our website, services, and user experience
• Conducting analytics to understand service usage and performance
• Ensuring security and preventing fraud or misuse
• Complying with legal obligations and regulatory requirements

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

Our website uses different types of cookies including necessary cookies for basic functionality, analytics cookies to understand website usage, and marketing cookies for advertising purposes. For detailed information about the cookies we use, please refer to our Cookie Policy.

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Consent: For marketing communications and non-essential cookies
• Contract: To provide our analytics services and fulfil our contractual obligations
• Legitimate Interest: For business operations, security, and service improvement
• Legal Obligation: To comply with applicable laws and regulations

Data Sharing and Disclosure

We do not sell your personal data to third parties. We may share your information in the following circumstances:

• With service providers who assist in delivering our services (under strict confidentiality agreements)
• With analytics and advertising platforms (Google Analytics, Google Ads) subject to your consent
• When required by law, legal process, or regulatory authorities
• To protect our rights, property, or safety, or that of our clients or others
• In connection with a business transaction such as a merger or acquisition

International Data Transfers

As a Danish company serving clients across Europe, we primarily process data within the European Economic Area (EEA). When we use service providers outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses or adequacy decisions by the European Commission.

Data Retention

We retain your personal data for as long as necessary to provide our services and fulfil the purposes outlined in this policy. Our data retention periods vary depending on the type of information and the purpose for which it was collected.

• Client data: For the duration of the service relationship plus 7 years for legal and accounting purposes
• Marketing data: Until you withdraw consent or request deletion
• Website analytics data: Up to 26 months for Google Analytics data
• Contact enquiries: Up to 3 years unless ongoing business relationship develops

Your Rights

Under GDPR and applicable data protection laws, you have several rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data in certain circumstances
• Restriction: Request limitation of processing in certain situations
• Portability: Request transfer of your data to another controller
• Objection: Object to processing based on legitimate interests or for marketing purposes
• Withdraw Consent: Withdraw consent for processing where consent is the legal basis

To exercise any of these rights, please contact us using the contact information provided below.

Security Measures

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Encryption of data in transit and at rest
• Access controls and authentication systems
• Regular security assessments and updates
• Staff training on data protection and security practices
• Incident response procedures for data breaches

Children's Privacy

Our services are designed for businesses and are not intended for individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete that information promptly.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date. We encourage you to review this policy periodically.

Contact Information

If you have questions about this Privacy Policy, wish to exercise your rights, or need to contact us regarding data protection matters, please reach out using the following contact information:

You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) if you believe we have not handled your personal data in accordance with applicable law.