Privacy Policy

1. Data Controller

IT Aware Aps is the data controller for the processing of your personal data in accordance with the GDPR (the European Union General Data Protection Regulation).

As the data controller, we are committed to protecting your personal data and respecting your rights regarding this data.

2. Data Collection and Purpose

We collect personal data such as name, email address, phone number and company information for the following purposes:

• Account management and user verification
• Delivery and administration of our services
• Communication regarding your account and services
• Billing and payment processing
• Compliance with legal and regulatory requirements
• Improvement of our services through analysis

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Fulfillment of a contract with you
• Compliance & Legal
• Protection of legitimate interests of IT Aware or third parties
• Your login code

1. Data Controller

We only share your personal data with third parties when necessary to deliver our services or when you have given consent. This may include:

• Payment processors and banking partners
• Hosting and cloud service providers
• Legal and financial advisors
• Regulatory and public authorities when required by law

We ensure that all third parties process your data in accordance with this privacy policy and applicable legislation.

5. Data retention

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, or where we are required to do so by law. In general, we retain:

• Account data: As long as your account is active plus 30 days after closure
• Transaction data: At least 5 years for accounting purposes
• Marketing data: Until you withdraw consent

6. Your Rights

You have the following rights regarding your personal data:

• Right of access: Request a copy of your personal data
• Right to rectification: Have inaccurate data corrected
• Right to erasure: Request deletion of your data under certain circumstances
• Right to restriction: Restrict the processing of your data
• Right to data portability: Receive your data in a structured format
• Right to object: Object to the processing of your data
• Right not to be subject to automated decision-making

To exercise these rights, contact us using the contact information below.

to security

We implement comprehensive technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure or destruction:

• Encryption of data during transmission (SSL/TLS)
• Encryption of sensitive data at rest
• Access control and authentication
• Regular security audits and penetration tests
• Employee Training

8. International data transfer

Your personal data is primarily processed in Denmark and the EU. If we transfer data outside the EU/EEA, we ensure adequate protection through standard contractual clauses or other lawful mechanisms.

9. Contact regarding compliance

If you have questions about this privacy policy or wish to exercise your rights, please contact us:

You also have the right to file a complaint with the Danish Data Protection Agency if you believe that the processing of your data violates the GDPR.