Eagleox Drift
Privacy policy
1. Who is the data controller?
Eagleox Technologies ApS, CVR 40310371, Platanvej 32, 3600 Frederikssund, Denmark, is the data controller for the personal data we process about you as a customer or contact. Write to oliver@eagleox.com if you have questions.
2. What data do we process?
- Contact details: name, email, phone number, company name and job title, when you contact us or become a customer.
- Customer details: agreements, invoices, payments and our correspondence with you.
- Access details: the logins to your systems we need to deliver the service. They are stored encrypted.
- Time log: what we worked on and how long it took.
We don't collect sensitive personal data about you.
3. Why, and on what legal basis?
- To answer enquiries and send offers: our legitimate interest in replying to you (GDPR Article 6(1)(f)).
- To deliver the service and invoice: performance of our agreement with you (Article 6(1)(b)).
- To comply with the Danish Bookkeeping Act: legal obligation (Article 6(1)(c)).
4. When we look after your website
When we host and maintain your website, we process data about your visitors and customers on your behalf. You are the data controller and we are the data processor. This is covered by a separate data processing agreement, which we sign with every customer.
5. Who do we share data with?
We never sell your data. We use these suppliers, who process data on our behalf:
- Hosting: Simply.com
- Email: Proton
- Accounting and invoicing: Dinero
We only use suppliers in the EU/EEA or with a valid transfer basis.
6. How long do we keep data?
- Enquiries that don't lead to an agreement: up to 12 months.
- Customer details: for as long as the agreement runs and 3 years after, so we can handle any claims.
- Accounting records: 5 years after the end of the financial year, as the Danish Bookkeeping Act requires.
- Access details: deleted no later than 30 days after the agreement ends.
7. The accessibility check
When you use our free webshop check, we fetch the page you enter once and scan it. We don't store the address, the page or the result. To prevent misuse, we count how many scans come from the same connection within an hour. We do this with a one-way code (hash) of the IP address, not the address itself, and the count is deleted automatically after at most two hours. The legal basis is our legitimate interest in protecting the service (Article 6(1)(f)).
8. Cookies
This site uses no cookies and no analytics or tracking tools. If you choose a language yourself, we store that choice locally in your browser so the site remembers it. It is not sent to us.
9. Your rights
You have the right to access, correct and delete your data, to restrict or object to processing, and to receive your data in a portable format. Write to oliver@eagleox.com and we'll reply within one month.
You can complain to the Danish Data Protection Agency (Datatilsynet) at datatilsynet.dk.