Privacy Policy

Introduction

structpovexum AS ("we", "our", or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website structpovexum.top or use our analytics services.

Data Controller Information

structpovexum AS is the data controller for the personal data we process. Our registered office is located at Torvegade 12, 8030 Aarhus, Central Denmark. Company registration number: CVR25896314.

Data We Collect

We collect information that you provide directly to us, information we collect automatically when you use our services, and information from third-party sources. The types of data collection include:

Personal Information You Provide

• Contact information (name, email address, phone number)
• Business information (company name, business type, role)
• Account credentials and preferences
• Communication records and correspondence
• Payment and billing information

Automatically Collected Information

• IP address and device identifiers
• Browser type and version
• Operating system information
• Website usage data and analytics
• Cookies and tracking technologies

Business Data

• Salon booking and appointment data
• Treatment and service information
• Customer behaviour patterns (anonymised)
• Revenue and business metrics

How We Use Your Information

We process your personal data for various purposes based on different legal grounds. The use of your data includes providing our analytics services, improving our platform, and maintaining customer relationships:

• Providing and maintaining our analytics services
• Processing payments and managing accounts
• Communicating with you about our services
• Improving and personalising our platform
• Conducting research and analytics
• Complying with legal obligations
• Protecting against fraud and security threats

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Contract: To perform our services and fulfil contractual obligations
• Legitimate Interest: To improve our services and maintain business operations
• Consent: For marketing communications and optional features
• Legal Obligation: To comply with applicable laws and regulations

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about our use of cookies, please refer to our Cookie Policy.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

• With service providers who assist in our operations
• When required by law or legal process
• To protect our rights and prevent fraud
• In connection with business transfers or mergers
• With your explicit consent

Data Retention

We retain your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Account information: For the duration of your account plus 3 years
• Business analytics data: Up to 5 years for trend analysis
• Communication records: 3 years from last contact
• Payment information: As required by tax and accounting laws

Your Rights

Under GDPR and other applicable privacy laws, you have the following rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to certain types of processing
• Right to Withdraw Consent: Withdraw consent for consent-based processing

To exercise these rights, please contact us using the information provided below.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and audits
• Access controls and authentication systems
• Employee training on data protection
• Secure hosting infrastructure

International Data Transfers

Your personal data is primarily processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses approved by the European Commission.

Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected such information, we will take steps to delete it promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the new Privacy Policy on our website and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Supervisory Authority

You have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) if you believe we have not handled your personal data in accordance with applicable laws.