Legal
Privacy policy
Last updated 13 September 2026
HY Digital processes only the personal data needed to answer your enquiry and deliver the work we agree on. This policy describes what that data is, why we process it, how long we keep it, and the rights you have under the General Data Protection Regulation (GDPR) and the Danish Data Protection Act.
Data controller
The controller responsible for processing your personal data is:
- HY Digital
- Danish company registration (CVR) no. 41385308
- Kratmosevej 22, 2950 Vedbæk, Denmark
- E-mail: ai@hydigital.dk
- Phone: +45 31 56 60 42
When you contact us
When you write or call, we process the information you provide: typically your name, e-mail address, phone number, organisation and the content of your enquiry.
The purpose is to answer the enquiry and, where relevant, to prepare an agreement on advisory or development work.
The legal basis is Article 6(1)(b) GDPR (steps prior to entering into a contract) and Article 6(1)(f) GDPR (our legitimate interest in responding to enquiries we receive).
When you are a client or partner
If we enter into an agreement, we process the contact and billing details needed to deliver the service, communicate about the engagement and meet our bookkeeping obligations.
The legal basis is Article 6(1)(b) (performance of the contract) and Article 6(1)(c) (legal obligations, including the Danish Bookkeeping Act).
Personal data we access at a client as part of an engagement is processed on the client’s behalf as a data processor under a written data processing agreement. It is not covered by this policy.
When you visit the website
The website sets no cookies and uses no analytics or marketing tools. Fonts and all other files are served from our own hosting, not from third parties. See our cookie policy for details.
Our hosting provider processes the technically necessary data that accompanies any website visit, including IP address, browser type and time of access, in order to deliver the site and protect it from abuse. The legal basis is Article 6(1)(f).
How long we keep data
- Enquiries that do not lead to an agreement are deleted no later than 12 months after our last contact.
- Data in agreements, invoices and other accounting records is kept for 5 years from the end of the financial year it relates to, as required by the Danish Bookkeeping Act.
- Other data is deleted once the purpose of processing has been fulfilled.
Recipients and processors
We do not sell or disclose your data to third parties for marketing. We use the following processors, who process data on our behalf and on our instructions:
- Cloudflare, Inc. – hosting and delivery of the website.
- one.com (One.com Group AB) – e-mail.
Cloudflare may process data outside the EU/EEA, including in the United States. Transfers rely on the European Commission’s standard contractual clauses and Cloudflare’s certification under the EU-U.S. Data Privacy Framework.
Where we involve external specialists in an engagement, this happens by agreement with the client and under confidentiality obligations.
Your rights
Under the GDPR you have the right to:
- access the data we process about you,
- have inaccurate data corrected,
- have data erased when there is no longer a lawful basis for processing it,
- have processing restricted in certain cases,
- object to processing based on our legitimate interest,
- receive the data you have provided to us in a structured, commonly used and machine-readable format.
To exercise any of these rights, write to ai@hydigital.dk. We respond without undue delay and within one month at the latest.
Complaints
If you are dissatisfied with how we process your personal data, you are welcome to contact us first. You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, www.datatilsynet.dk.
Changes
We update this policy when our processing changes, for example if we start using cookies or new processors. The date at the top shows the current version.