Privacy Policy

Data Controller

We are the data controller for the processing of personal data we process about our customers and partners. You can find our contact information below.

SoundWheel ApS
Vester Bregningemark 7
5970 Ærøskøbing
VAT no.: DK42360597

It is not a requirement that our company has an external DPO, but if you have any questions regarding the processing of your personal data, you can contact us via info@soundwheel.com.

Processing Activities

As the data controller according to GDPR, we have the following processing activities.

Website Visits

When you visit our website, we use cookies to ensure the website functions, which you can read more about in our cookie policy.

Communication with Potential Customers

When you have inquiries about our site or wish to learn more about our services, you can contact us via:

  • Contact form
  • Email

Through this, we will process your personal data, so we can engage in a dialogue with you, for example, answer questions about our services. We only process the information you provide us with in connection with our communication.
We will typically process the following general information: name, email.
Our legal basis for processing this personal data is GDPR Article 6(1) (f).
We delete our communication with you when it becomes clear whether you want our services or not.
If there is a special need to store your personal data for a longer period, this may be the case.

Customers

We need to communicate with our customers to ensure that the service is provided correctly. Through this, we can process information such as name, email, services, special agreements, payment information, and similar.
The legal basis for processing this personal data is GDPR Article 6(1) (b).
Once the service is provided and any outstanding matters are completed, we will immediately delete the personal data.

Newsletter

We have a newsletter that you can voluntarily subscribe to - and you can always unsubscribe from it.
The purpose of the newsletter is to send subscribed emails with new information from the company, which may include new content on the website, advertising our services.
We will only send you emails if you have given your active consent to do so. This initially requires you to provide your email address, to which we will subsequently send an email so that you can confirm the subscription. In this way, we ensure that you have actually subscribed to the newsletter, i.e., given active consent.
Our legal basis for processing your personal data (i.e., email address) in connection with the newsletter will be GDPR Article 6(1) (a).
We will process your personal data as long as you are still subscribed to the newsletter. Upon unsubscribing from the newsletter, we will also cease sending it to you. If we have not sent you a newsletter in 1 year, your consent will expire due to our inactivity.
Upon unsubscribing from the newsletter, we will retain your previously given consent for 2 years after its last use due to statute of limitations requirements according to the Consumer Ombudsman's spam guidelines section 11.3.

Accounting

We are required to retain all accounting documents according to the Bookkeeping Act. This means that we keep invoices and similar documents for accounting purposes. These may contain general personal data such as name, address, service description.
Our legal basis for processing personal data for accounting purposes is GDPR Article 6(1).
We retain this information for a minimum of 5 years after the current accounting year has ended.

Job Applications

We gladly accept job applications to assess whether they match a staffing need in our company.
If you send your job application to us, our legal basis for processing your personal data is GDPR Article 6(1) (f).
If you have submitted an unsolicited application, HR will immediately assess whether your application is relevant, and then delete your information if there is no match.
If you have applied for an advertised job, we will dispose of your application if you are not hired, and immediately after the right candidate is found for the job.
If you are involved in a recruitment process and/or are hired for the job, we will provide you with separate information on how we process your personal data in this regard.

Data Processors

Few can do everything themselves, and the same goes for us. Therefore, we have partners and use suppliers, some of whom may be data processors.
External suppliers may, for example, provide systems to organize our work, services, consulting, IT hosting, or marketing.

  • Mailchimp: Newsletter and SoundFlows.
  • OneSignal: Push notifications for apps.
  • Postmark: Transactional emails for login and other functions.
  • Linode: Hosting of SoundWheel's servers.
  • Mixpanel: Recording of usage for statistics.
  • Google Analytics: Recording of usage for advertising and statistics.
  • Meta Pixel: Recording of usage for advertising and statistics.

It is our responsibility to ensure that your personal data is handled properly. Therefore, we set high standards for our partners, and our partners must guarantee the protection of your personal data.
We therefore enter into agreements with companies (data processors) who handle personal data on our behalf to enhance the security of your personal data.

Disclosure of Personal Data

We do not disclose your personal data to third parties.

Profiling and Automated Decisions

We do not perform profiling or automated decisions.

Transfers to Third Countries

As a starting point, we use data processors in the EU/EEA, or who store data in the EU/EEA.
In some cases, this is not possible, and in these cases, data processors outside the EU/EEA may be used if they can provide appropriate protection for your personal data.

Processing Security

We ensure the security of processing personal data by implementing appropriate technical and organizational measures.
We have conducted risk assessments of our processing of personal data, and have subsequently implemented appropriate technical and organizational measures to enhance processing security.
One of our most important measures is to keep our employees updated on GDPR through ongoing awareness training, GDPR courses, and by reviewing our GDPR procedures with employees.

The Rights of Data Subjects

Under the GDPR, you have a number of rights regarding our processing of information about you.
If you wish to exercise your rights, you must contact us so that we can assist you with this.

Right to Access (Right of Access)

You have the right to access the information we process about you, as well as a number of additional details.

Right to Rectification (Correction)

You have the right to have incorrect information about yourself corrected.

Right to Erasure

In certain cases, you have the right to have information about you erased before the time for our regular general deletion occurs.

Right to Restriction of Processing

In certain cases, you have the right to have the processing of your personal data restricted. If you have the right to restrict processing, we may in the future only process the information - except for storage - with your consent, or for the purpose of establishing, asserting, or defending legal claims, or to protect a person or important public interests.

Right to Object

In certain cases, you have the right to object to our otherwise lawful processing of your personal data. You can also object to the processing of your information for direct marketing.

Right to Data Portability

In certain cases, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to have this personal data transferred from one data controller to another without hindrance.
You can read more about your rights in the Data Protection Agency's guidance on the rights of data subjects, which you can find at www.datatilsynet.dk.

Withdrawal of Consent

When our processing of your personal data is based on your consent, you have the right to withdraw your consent.

Complaint to the Data Protection Agency

You have the right to lodge a complaint with the Data Protection Agency if you are dissatisfied with the way we process your personal data. You can find the contact information for the Data Protection Agency at www.datatilsynet.dk.
We generally encourage you to read more about GDPR to stay updated on the rules.