Privacy Policy
1. Data Controller
SBO Nordic ApS
Company Registration No. (CVR): 45499227
Frederiksholms Kanal 30
1220 Copenhagen K
Denmark
Email: info@sbonordic.com
SBO Nordic ApS is the data controller responsible for the processing of personal data collected when you visit our website or contact us.
2. What Information We Collect
When you use our contact form, we collect the information you choose to provide, including:
-
Name
-
Email address
-
Company name (if provided)
-
Telephone number (if provided)
-
The content of your message
Please do not submit sensitive personal data through the contact form.
When you visit our website, we may automatically collect certain technical information, including:
-
IP address
-
Browser type and version
-
Device type
-
Pages visited
-
Date, time, and duration of visits
This information is collected through cookies and similar technologies. Please see Section 7 for more information.
3. Purposes and Legal Basis for Processing
We process your personal data for the following purposes:
Responding to Enquiries
When you contact us through our contact form or by email, we process your information in order to respond to your enquiry and, where relevant, follow up on it. The legal basis is:
-
Article 6(1)(f) GDPR, based on our legitimate interest in managing and responding to enquiries
-
Article 6(1)(b) GDPR where the processing is necessary to take steps prior to entering into a contract or for the performance of a contract
Operating and Improving the Website
We process technical information to ensure the functionality, security, and ongoing improvement of our website. The legal basis is Article 6(1)(f) GDPR (legitimate interests).
Analytics and Statistics
Where analytics or statistical cookies are used, these will only be activated with your consent. The legal basis is Article 6(1)(a) GDPR (consent). We do not send newsletters or marketing communications unless you have explicitly consented to receive them.
4. Sharing of Personal Data
We do not sell your personal information.
We may share your information with trusted service providers who assist us in operating our website and communications, including:
-
Wix.com Ltd. (website hosting, website operation, and contact form management)
-
Microsoft Ireland Operations Limited (Microsoft 365 email and communication services)
These providers process personal data solely on our behalf and under appropriate data processing agreements.
5. Transfers Outside the EU/EEA
Some of our service providers or their subcontractors may process personal data outside the European Union (EU) or European Economic Area (EEA), including in the United States or Israel. Where such transfers occur, we ensure that they are protected through an appropriate legal transfer mechanism, including:
-
An adequacy decision issued by the European Commission (for example, Israel or organizations certified under the EU-U.S. Data Privacy Framework)
-
The European Commission’s Standard Contractual Clauses (SCCs)
6. Retention of Personal Data
We retain information submitted through our contact form and other enquiries for up to 12 months after our last communication with you. If your enquiry results in a customer relationship, we may retain the information for as long as the relationship continues and thereafter to the extent necessary to:
-
Comply with legal obligations, including bookkeeping and accounting requirements
-
Document contractual relationships
-
Establish, exercise, or defend legal claims
When personal data is no longer required, it will be securely deleted or anonymized.
7. Cookies
Our website uses cookies and similar technologies. Essential cookies are used to ensure that the website functions properly and remains secure. Analytics, statistics, and any marketing cookies are only placed after you have provided your consent through our cookie banner. You may change or withdraw your consent at any time through the cookie settings available on the website.
8. Your Rights
Under applicable data protection laws, including the GDPR, you have the right to:
-
Access the personal data we hold about you
-
Request correction of inaccurate personal data
-
Request deletion of your personal data in certain circumstances
-
Request restriction of processing in certain circumstances
-
Object to processing based on our legitimate interests
-
Receive your personal data in a structured, commonly used, and machine-readable format
-
Withdraw your consent at any time where processing is based on consent
The withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.
To exercise any of your rights, please contact us at: info@sbonordic.com
We will respond as soon as reasonably possible and, in accordance with applicable data protection laws, no later than one month from receipt of your request.
9. Complaints
If you believe that our processing of your personal data does not comply with applicable data protection laws, you have the right to lodge a complaint with the Danish Data Protection Agency.
The Danish Data Protection Agency (Datatilsynet)
Carl Jacobsens Vej 35
2500 Valby
Denmark
We would, however, appreciate the opportunity to address your concerns first and encourage you to contact us before submitting a complaint.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in legislation, technology, or our processing activities. The latest version will always be available on this page, and the "Last updated" date at the top of this document indicates when the policy was most recently revised.
Last updated: September 23, 2026