Privacy Policy

Data Control

We are the data controller for the processing of personal data relating to our customers and partners. You can find our contact details below:

Zystm A/S
Lillelundvej 18
DK-7400 Herning
CVR No.: 30175700

If you have any questions regarding the processing of your personal data, you can contact us at: info@zystm.com.

Processing Activities

As the data controller under GDPR, we carry out the following processing activities:

Website Visits

When you visit our website, we use cookies to ensure the website functions correctly. You can read more about this in our cookie policy.

Communication with Potential Customers

When you have questions about our site or wish to learn more about our services, you can contact us via:

Contact form
Email
Telephone

Through these channels, we process your personal data in order to engage in a dialogue with you, for example to answer questions about our services. We process only the information you provide in connection with our communication.

Typically, we process the following personal information: name, email address, phone number.

Our legal basis for processing this personal data is Article 6(1)(f) of the GDPR.

We will delete our communication with you when it is clear whether or not you wish to use our services. In exceptional cases, there may be a need to store your personal data for a longer period.

Customers

We need to communicate with our customers to ensure that services are delivered correctly. This may involve processing information such as name, address, services provided, special agreements, payment information, and similar.

Our legal basis for processing this personal data is Article 6(1)(b) of the GDPR.

Once the service has been delivered and any outstanding matters resolved, we will delete the personal data without undue delay.

We offer a newsletter that you can subscribe to voluntarily — and you can unsubscribe at any time.

The purpose of the newsletter is to send registered subscribers emails with news and information about the company, which may include new content on the website and announcements of our services.

We will only send you emails if you have given your explicit consent. This ensures that you have actively chosen to subscribe to the newsletter.

Our legal basis for processing your personal data (i.e., your email address) in connection with the newsletter is Article 6(1)(a) of the GDPR.

We will process your personal data as long as you remain subscribed to the newsletter. Once you unsubscribe, we will stop sending emails to you.

Bookkeeping

We are required to store all accounting documents in accordance with the Bookkeeping Act. This means that we store invoices and similar documents for accounting purposes. These documents may contain personal data such as names, addresses, and service descriptions.

Our legal basis for processing personal data for bookkeeping is Article 6(1)(c) of the GDPR.

We store this information for a minimum of 5 years after the end of the relevant financial year.

Disclosure of Personal Data

We do not disclose your personal data to third parties.

Profiling and Automated Decisions

We do not engage in profiling or automated decision-making.

Data Security

We ensure the security of personal data by implementing appropriate technical and organizational measures.

We have conducted risk assessments of our personal data processing and have implemented appropriate measures to increase data security.

Rights of Data Subjects

Under the GDPR, you have certain rights regarding our processing of your personal data.

If you wish to exercise your rights, please contact us so that we can assist you.

Right to Access (Right of Access)
You have the right to access the personal data we process about you, as well as additional information.

Right to Rectification
You have the right to have inaccurate personal data about yourself corrected.

Right to Erasure
In certain circumstances, you have the right to have your personal data deleted before our normal deletion process.

Right to Restrict Processing
In certain cases, you have the right to restrict the processing of your personal data. If you have this right, we may only process your personal data — except for storage — with your consent, for the establishment, exercise, or defense of legal claims, or to protect a person or important public interests.

Right to Object
In certain cases, you have the right to object to our otherwise lawful processing of your personal data. You can also object to the processing of your personal data for direct marketing purposes.

Right to Data Portability
In certain cases, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transfer this data to another data controller without hindrance.

You can read more about your rights in the Danish Data Protection Agency’s guide on the rights of data subjects at www.datatilsynet.dk.

Withdrawal of Consent

Where our processing of your personal data is based on your consent, you have the right to withdraw your consent at any time.

Complaint to the Data Protection Agency

You have the right to file a complaint with the Danish Data Protection Agency if you are dissatisfied with the way we process your personal data. You can find their contact details at www.datatilsynet.dk.

We encourage you to learn more about GDPR so that you are informed about your rights.