Privacy policy

This Privacy Policy outlines how Scandic IT ApS (“Scandic IT”) collects, processes, and protects personal data in compliance with the General Data Protection Regulation (GDPR) and applicable Danish laws.

1. Personal Data We Collect

We collect and process the following types of personal data:

Contact information (name, email, phone number, address)
Company details (company name, VAT number, billing/shipping address)
Order history and transaction details
Technical data such as IP address, browser type, and device information when using our website
Any other information provided voluntarily in communication with us

2. How We Use Your Data

We process personal data for the following purposes:

Fulfilling and managing orders, invoices, and deliveries
Providing customer support and responding to inquiries
Maintaining and improving our website and services
Complying with legal and regulatory obligations
Preventing fraud and ensuring security
Sending service-related communications

3. Legal Basis for Processing

We process personal data based on the following legal grounds:

Performance of a contract: Processing necessary to fulfill orders and provide services.
Legal compliance: Processing required to meet legal obligations.
Legitimate interests: Processing for business improvements and fraud prevention, where such interests do not override your rights.
Consent: In cases where explicit consent is required, such as for marketing communications.

4. Data Sharing and Third Parties

We do not sell or rent personal data. However, we may share data with third parties in the following cases:

Service Providers: Trusted partners that assist in logistics, payments, IT infrastructure, or marketing.
Legal Obligations: When required by law, such as compliance with tax regulations or law enforcement requests.
Business Transfers: In case of mergers, acquisitions, or business restructuring.

All third-party processors are contractually obligated to handle your data securely and in compliance with GDPR.

5. Data Storage and Security

Scandic IT implements appropriate technical and organizational measures to protect personal data from unauthorized access, loss, or misuse. Data is stored securely and retained only as long as necessary to fulfill contractual, legal, or business obligations.

6. Your Rights

You have the following rights under GDPR:

Right to Access: Request a copy of the personal data we hold about you.
Right to Rectification: Correct inaccurate or incomplete data.
Right to Erasure: Request deletion of your data, subject to legal limitations.
Right to Restriction: Request limited processing of your data.
Right to Data Portability: Request transfer of your data to another provider.
Right to Object: Object to processing based on legitimate interests or direct marketing.
Right to Withdraw Consent: Withdraw consent for processing where applicable.

To exercise your rights, contact us at sales@scandic-it.com.

7. Cookies and Tracking

Our website may use cookies and tracking technologies to enhance user experience, analyze traffic, and for advertising purposes. Users can manage cookie preferences in their browser settings.

8. Data Retention

Personal data is retained for as long as necessary for legal, contractual, and business purposes. When no longer required, data is securely deleted or anonymized.

9. Changes to This Policy

Scandic IT reserves the right to update this Privacy Policy as necessary. Changes will be posted on our website, and significant updates will be communicated where required.

10. Governing Law

This Privacy Policy is governed by Danish law. Any disputes will be resolved under the jurisdiction of the Danish courts.

By using our services or interacting with us, you acknowledge and agree to this Privacy Policy.

Privacy Policy

Company Information