Data Privacy Policy

This privacy policy explains how soilbaling AS collects, uses, and protects your personal data when you use our website and services. We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR).

Last updated: January 2026

Data Controller Information

The data controller responsible for your personal data is:

soilbaling AS
Gothersgade 85
5026 Odense
Southern Denmark
Registration Number: CVR25361479
Email: privacy@soilbaling.world
Phone: +45 32147128

Data We Collect

We collect various types of personal data when you interact with our website and services. The data we collect includes information you provide directly to us, information we collect automatically through your use of our services, and information we receive from third-party sources when you choose to integrate external services with our platform.

Information you provide to us:

  • Contact information including name, email address, phone number, and company details
  • Account information when you create an account or subscribe to our services
  • Communication data when you contact us through forms, email, or phone
  • Payment information when you purchase our services
  • Restaurant operational data that you choose to upload or integrate with our analytics platform

Information we collect automatically:

  • Technical information including IP address, browser type, operating system, and device information
  • Usage data including pages visited, time spent on pages, and interaction patterns
  • Cookie and tracking technology data as described in our cookie policy

How We Use Your Information

We use your personal data for various legitimate business purposes. How we use your information depends on the services you use and your preferences. We use the data we collect to provide, maintain, and improve our restaurant analytics services, to communicate with you about your account and our services, and to comply with legal obligations.

Specifically, we use your data to:

  • Provide and deliver our restaurant analytics services and customer support
  • Process transactions and send related information including confirmations and invoices
  • Communicate with you about products, services, offers, and events
  • Monitor and analyse usage patterns to improve our services
  • Detect, prevent, and address technical issues and security threats
  • Comply with legal obligations and protect our rights and interests

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner or by visiting our cookie policy page.

Our use of cookies and similar technologies is governed by our separate cookie policy, which provides detailed information about the types of cookies we use, their purposes, and how you can control them.

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

  • Consent: When you have given clear consent for specific processing activities
  • Contract: When processing is necessary to perform our services or take steps before entering into a contract
  • Legitimate interests: When we have legitimate business interests that are not overridden by your privacy rights
  • Legal obligation: When we must process data to comply with legal requirements

Data Sharing and Disclosure

We do not sell, trade, or rent your personal data to third parties. We may share your information in the following circumstances:

  • With service providers who assist us in operating our business and providing services
  • When required by law, regulation, or legal process
  • To protect our rights, property, or safety, or that of our users or the public
  • In connection with business transfers, such as mergers or acquisitions
  • With your explicit consent for specific sharing purposes

International Data Transfers

Your personal data is primarily processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, including adequacy decisions, standard contractual clauses, or other approved transfer mechanisms under GDPR.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. The specific retention period depends on the type of data and the purpose for processing.

Generally, we retain:

  • Account information for the duration of your relationship with us plus 7 years for legal compliance
  • Communication records for 3 years after the last contact
  • Technical and usage data for 2 years unless longer retention is required for security purposes
  • Marketing data until you withdraw consent or we no longer have a legitimate interest

Your Rights

Under GDPR and applicable data protection laws, you have several rights regarding your personal data:

  • Right of access: Request copies of your personal data
  • Right to rectification: Request correction of inaccurate or incomplete data
  • Right to erasure: Request deletion of your personal data in certain circumstances
  • Right to restrict processing: Request limitation of processing in certain situations
  • Right to data portability: Request transfer of your data in a structured format
  • Right to object: Object to processing based on legitimate interests or for marketing purposes
  • Right to withdraw consent: Withdraw consent for consent-based processing

To exercise these rights, please contact us using the contact information provided below.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, secure data transmission, regular security assessments, and staff training on data protection.

Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected such data, we will take steps to delete it promptly.

Contact Information

If you have questions about this privacy policy, wish to exercise your rights, or need to contact us about data protection matters, please reach out to us:

Privacy Contact:
Email: privacy@soilbaling.world
Phone: +45 32147128
Address: soilbaling AS, Gothersgade 85, 5026 Odense, Southern Denmark

Complaints

If you believe we have not handled your personal data in accordance with applicable laws, you have the right to lodge a complaint with the relevant supervisory authority. In Denmark, this is the Danish Data Protection Agency (Datatilsynet).

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, services, or legal requirements. We will notify you of any material changes by posting the updated policy on our website and, where appropriate, through other communication channels. Your continued use of our services after such changes constitutes acceptance of the updated policy.

For questions about this privacy policy or our privacy practices, please contact us at privacy@soilbaling.world.