LEGAL

Privacy Policy

Privacy Policy

Privacy Policy

Last updated: 7 September 2026

SPLY ApS processes personal data about customers, prospective customers, suppliers, business partners, website visitors and other people who interact with us. This Privacy Policy explains what personal data we collect, why we process it, how we use it, how long we retain it and your rights.

Data controller

SPLY ApS is the data controller for the processing described in this Privacy Policy. SPLY ApS · CVR: 38486160 · Lyngsø Allé 3, 1. 2970 Hørsholm · Denmark · Email: info@sply.dk

Personal data we collect

Depending on how you interact with us, we may process your name, job title, company, email address and telephone number; information in correspondence; customer, supplier or business relationship information; website form submissions; IP address, browser, device and technical logs; website usage information; and marketing preferences. We may also receive professional contact information from publicly available sources, professional networks, referrals or other legitimate business sources. We do not intentionally collect special categories of personal data through our website.

Why we process personal data

Enquiries and provision of services — We process personal data when you contact us, request information, discuss a potential engagement, request a proposal or use our services. Our legal basis is GDPR Article 6(1)(b), where processing is necessary to enter into or perform a contract, and Article 6(1)(f), based on our legitimate interest in responding to enquiries and managing business relationships.

Customer, supplier and partner administration — We process personal data to manage contracts and projects, communicate with customers, suppliers and partners, administer invoicing and payments, maintain business records, and meet contractual and regulatory requirements. Our legal basis is GDPR Article 6(1)(b), Article 6(1)(c) where required by law, and Article 6(1)(f) for legitimate business interests.

Business development and marketing — We may use professional contact information to communicate with existing or prospective customers and business partners about SPLY and our services. Our legal basis is GDPR Article 6(1)(f), or Article 6(1)(a) where consent is required. You can object to direct marketing at any time by contacting info@sply.dk.

Website operation and security — We process technical information to operate and maintain our website, identify technical issues, protect systems against misuse and security threats, and understand website use. Our legal basis is GDPR Article 6(1)(f). Where consent is legally required for cookies or similar technologies, processing takes place only after consent has been provided.

Cookies and analytics

Our website may use cookies and similar technologies for functionality, analytics and other purposes. Cookies that are not strictly necessary are used only where permitted by law and, where required, after you have given consent. You can manage or withdraw consent through the cookie settings available on our website. Further information is available through those settings or our Cookie Policy.

Who we share personal data with

We may share personal data with service providers supporting our business, including website hosting and infrastructure, email and collaboration services, CRM and business administration systems, IT and information security services, analytics and marketing services, accounting and financial services, and legal and professional advisory services. Providers acting on our behalf must process information in accordance with applicable data protection requirements and our instructions. We may also disclose personal data where required by law, regulation, court order or a competent authority. We do not sell personal data.

International transfers

Some service providers may process personal data outside the European Economic Area. Where personal data is transferred to a country without an adequacy decision from the European Commission, we use an applicable legal transfer mechanism, such as the European Commission’s Standard Contractual Clauses, together with additional safeguards where required.

How long we retain personal data

We retain personal data only for as long as necessary for the purposes for which it was collected and to meet applicable legal, contractual and regulatory requirements. Retention periods depend on the information and our relationship with you. Business correspondence is retained as reasonably necessary to manage the relationship; contractual and accounting information may be retained for the period required by law; marketing information is retained until no longer required or you object; and technical logs only as long as necessary for security, operational and troubleshooting purposes. When data is no longer required, it is deleted or anonymised in accordance with our retention procedures.

Information security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss or destruction. These measures include access controls, authentication, system security, backup procedures, supplier controls and internal information security procedures. Access is limited to people who require it for legitimate business purposes.

Your rights

Subject to applicable law, you may have the right to request access to, correction or deletion of your personal data; request restriction of processing; object to processing based on legitimate interests or direct marketing; request data portability; and withdraw consent where processing is based on consent. Withdrawal does not affect prior lawful processing. To exercise your rights, contact info@sply.dk. We may need to verify your identity before responding.

Complaints

If you have questions or concerns about how we process personal data, contact us at info@sply.dk. You also have the right to lodge a complaint with the Danish Data Protection Agency: Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, Denmark.

Changes to this Privacy Policy

We may update this Privacy Policy when our processing activities, systems or legal requirements change. The latest version will always be available on this page together with the date of the most recent update.