Privacy & Cookie Policy

The data controller responsible for your personal data is:

We process personal data in accordance with the EU General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679 — and the Danish Data Protection Act (Databeskyttelsesloven).

We collect personal data only when you actively provide it or when it is generated by your use of our website.

• To reply to contact and sales enquiries within 24 hours.
• To evaluate job applications and communicate with candidates.
• To understand how visitors use our website and improve its content.
• To deliver relevant advertising on third-party platforms (only with your consent).

We do not sell, rent, or trade your personal data to third parties.

We use the following sub-processors. Each is bound by a Data Processing Agreement and processes data only on our behalf.

SCCs = Standard Contractual Clauses (EU Commission decision 2021/914).

• Contact enquiries — kept for 2 years, then permanently deleted.
• Job applications — kept for 6 months after the recruitment process ends. We may ask your consent to retain your CV longer.
• Analytics data — aggregated and anonymised; retained for 14 months in Google Analytics.
• Cookie consent records — stored in your browser's local storage and not transmitted to our servers.

You have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you.
• Right to rectification — ask us to correct inaccurate data.
• Right to erasure — ask us to delete your data (“right to be forgotten”).
• Right to restriction — ask us to limit how we process your data.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interest.
• Right to withdraw consent — withdraw cookie or marketing consent at any time via the Cookie Settings link in our footer.

To exercise any right, email hello@velacommerce.dk with the subject “Data Request”. We will respond within 30 days. You also have the right to lodge a complaint with the Danish Data Protection Authority (datatilsynet.dk).

A cookie is a small text file stored in your browser. We also use browser localStorage for storing your theme preference and cookie consent record. No cookie data is shared with third parties without your explicit consent.

Our website is served over HTTPS (TLS 1.2+). Form submissions are encrypted in transit. We apply access controls, periodic security reviews, and principle-of-least-privilege on all data stores. No transmission over the internet is 100% secure; we cannot guarantee absolute security but we take reasonable technical and organisational measures.

We may update this policy as our services evolve or as regulations change. Material changes will be flagged on this page with an updated “Last updated” date. If we make significant changes that affect your rights, we will display a notice on the site.