Data Privacy Policy

Introduction

alphaproluxisum AS ("we", "us", or "our") is committed to protecting and respecting your privacy. This privacy policy explains how we collect, use, and protect personal data when you visit our website, use our services, or interact with us.

We are the data controller for the purposes of the General Data Protection Regulation (GDPR) and other applicable data protection laws. Our registered office is located at Istedgade 145, 5011 Odense, Southern Denmark.

Data We Collect

We collect personal data in several ways when you interact with our services. The types of data we collect include:

Information You Provide Directly

• Contact information including name, email address, phone number, and company details
• Account registration information for our analytics platform
• Communication preferences and correspondence with our support team
• Restaurant operational data when using our analytics services
• Payment information for billing and subscription management

Information Collected Automatically

• Website usage data including pages visited, time spent, and navigation patterns
• Technical information such as IP address, browser type, and device information
• Performance analytics data from our dashboard usage
• Log files and error reports for system maintenance and security

How We Use Your Information

We use the personal data we collect for legitimate business purposes and in accordance with applicable laws. The specific ways we use of your data include:

Service Provision

• Providing access to our restaurant analytics dashboards and related services
• Processing payments and managing your subscription
• Delivering technical support and customer service
• Maintaining and improving our platform functionality

Communication

• Responding to your enquiries and support requests
• Sending important service updates and notifications
• Providing information about new features or services (with your consent)
• Conducting customer satisfaction surveys and feedback collection

Legal and Security

• Complying with legal obligations and regulatory requirements
• Protecting against fraud, security threats, and abuse
• Enforcing our terms of service and other agreements
• Maintaining accurate business records and audit trails

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use and how to control them, please refer to our Cookie Policy.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your data only in the following circumstances:

• Service Providers: Trusted third-party vendors who assist us in operating our business, such as payment processors, hosting providers, and analytics services
• Legal Requirements: When required by law, court order, or regulatory authority
• Business Protection: To protect our rights, property, or safety, or that of our users or others
• Business Transfers: In connection with a merger, acquisition, or sale of business assets

All third-party service providers are contractually bound to protect your data and use it only for the specified purposes.

Your Rights

Under GDPR and other applicable data protection laws, you have the following rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Request transfer of your data to another service provider
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Withdraw consent for processing where consent is the legal basis

To exercise any of these rights, please contact us using the details provided in the contact section below.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.

Retention Periods

• Account Data: Retained for the duration of your subscription plus 7 years for financial records
• Website Analytics: Typically retained for 26 months in accordance with Google Analytics settings
• Marketing Data: Retained until consent is withdrawn or the purpose is no longer valid
• Support Communications: Retained for 3 years for quality assurance and training purposes

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and penetration testing
• Access controls and authentication systems
• Employee training on data protection and security practices
• Incident response procedures and breach notification protocols

International Data Transfers

Your personal data is primarily processed within the European Economic Area (EEA). When we transfer data outside the EEA, we ensure adequate protection through:

• European Commission adequacy decisions
• Standard Contractual Clauses approved by the European Commission
• Binding Corporate Rules or other approved transfer mechanisms

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date.

Your continued use of our services after any changes indicates your acceptance of the updated privacy policy.

Contact Information

If you have any questions about this privacy policy, wish to exercise your data protection rights, or need to contact us regarding data protection matters, please reach out to us:

You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) or your local supervisory authority if you believe we have not handled your personal data in accordance with applicable laws.