Privacy policy
Find out what personal data we process, why we process it and how to exercise your rights.
Last updated 27 October 20261. Who is responsible?
Polyplader.dk is operated by Genplast A/S. We are the controller of personal data processed in connection with the website, enquiries and customer relationships. This notice also covers business customers’ and suppliers’ contact persons.
Genplast A/S
Svoldrupvej 18 · 9640 Farsø
CVR: 41281529
2. Enquiries, quotations and orders
When you contact us by form, email or phone, we process the information you provide: name, company, email address, any telephone and company registration numbers, subject, message and project information. An order may also involve billing and delivery details. Drawings and attachments may contain personal data.
We use this information to answer enquiries, provide advice and quotations, administer agreements, deliver goods and handle service or complaints. For business contact persons, the basis is our legitimate interest in communicating and conducting the business relationship under GDPR Article 6(1)(f). If you are personally a contracting party, including as a sole trader, Article 6(1)(b) applies where processing is necessary for that agreement or steps you request before it.
Accounting data is processed to comply with Danish bookkeeping law under GDPR Article 6(1)(c). Evidence needed for specific legal claims may be processed under Article 6(1)(f); the interest is establishing, exercising or defending the claim.
Fields marked * are required to submit the contact form. Without contact details and a description, we cannot handle your enquiry normally. Other information is optional unless needed for a specific agreement or required by law. Do not send national identification numbers, health information or other sensitive information in the form.
3. Website features
Using the website involves technical data such as IP address, time, requested page and browser information for delivery, operation, troubleshooting and protection against abuse. The basis is our legitimate interest in a functioning and secure website under Article 6(1)(f). This is separate from analytics and marketing tracking.
Language preferences and enquiry drafts are stored locally in your browser. Drafts may include product choices, notes and drawings. Saving a product in an enquiry does not automatically send the draft to us. We receive the information only when you actively send or share it with us. Essential login and cart features may also use local storage.
With your consent, we use Google Analytics 4 for statistics about visits, viewed pages, traffic sources, device and browser, and use of website features. Google receives technical information and cookie identifiers. Statistics cookies and related processing are based on your consent under GDPR Article 6(1)(a). You can change or withdraw consent via Cookie settings at the bottom of the page. We do not use website cookies for advertising.
4. Where does the data come from?
Data normally comes from you. In a business relationship, a colleague, your employer or a business partner may provide your name, role and work contact details. Relevant company information may also come from company websites or public business registers. We use it for the specific contact and relationship under Article 6(1)(f).
5. Who may receive the data?
Google Ireland Limited processes statistics data for Google Analytics 4 when you accept statistics. See the cookie policy for cookies, purposes and duration.
We use Simply.com for website hosting and email and Uniconta A/S for accounting and invoicing. Simply.com processes data held on the website and in our email correspondence. Uniconta processes relevant customer, invoice and accounting data.
Relevant employees process the data for the purposes described. Providers of hosting, technical operation, email and accounting may process data as part of their work for us. Processors may only process data under our instructions and must be covered by a data processing agreement.
For deliveries, necessary contact and address details may be shared with carriers. Auditors, legal advisers and public authorities may receive data where necessary for their role, a specific legal claim or a legal obligation. Some of these recipients are independent controllers.
6. Where is the data processed?
Simply.com states that its servers and data are located in Denmark. Uniconta’s published list of subprocessors includes companies in Denmark and Bulgaria. Both countries are in the EU. Which subprocessors process data depends on the features used.
When Google Analytics is used, statistics data may be processed by Google outside the EU/EEA, including in the USA. Google describes its transfer basis and safeguards in its international data transfer information. Transfers require a valid basis, such as a GDPR Article 45 decision or Article 46 standard contractual clauses. Contact us about processing countries and relevant safeguards.
Simply.com: processing and subprocessors
Uniconta: subprocessors
Google’s international data transfers
7. How long do we keep data?
Enquiries and quotations that do not lead to an order are retained while the matter is being handled and afterwards only while there is a specific need for follow-up or evidence. That need is assessed from the matter’s content, latest contact and any outstanding issues. Data that is no longer needed must be deleted.
Customer and agreement data is retained during the relationship and afterwards to the extent needed for specific obligations, complaints or legal claims. Applicable time limits and the specific case determine the need; not all contact details therefore require the same retention period.
Accounting records are generally retained for five years from the end of the financial year concerned under section 12 of the Danish Bookkeeping Act. Simply.com states that its logs for customers’ websites are automatically deleted after three weeks. Relevant information retained separately to investigate a specific security incident or legal claim may be kept until the case is closed and the need for evidence has ended.
Local enquiry drafts and language preferences have no automatic expiry. You can delete them by clearing Polyplader.dk’s website data in your browser. This can also delete drawings and sign you out. Specific cookie lifetimes are listed in the cookie policy.
8. Your rights
- Access: You can find out whether we process data about you and obtain access to it.
- Rectification: You can have incorrect data corrected and incomplete data completed.
- Erasure and restriction: Where the rules provide for it, you can have data deleted or processing restricted. A statutory retention duty may prevent erasure.
- Objection: For reasons relating to your particular situation, you may object to processing based on legitimate interests. You may always object to direct marketing.
- Portability: Where the conditions are met, you may receive data you provided in a structured, commonly used, machine-readable format and transfer it to another controller. This applies to automated processing based on consent or contract.
- Consent: If processing is based on consent, you may withdraw it at any time. This does not affect the lawfulness of processing before withdrawal.
Email Info@polyplader.dk to exercise your rights. We may ask for information necessary to confirm your identity. We respond without undue delay and normally within one month. If a lawful extension of up to two further months is necessary, we will explain why within the first month.
9. Complaints to the supervisory authority
You may complain to the Danish Data Protection Agency about our processing of your personal data. You do not have to contact us first, but we are happy to help clarify the matter.
Datatilsynet · Carl Jacobsens Vej 35 · 2500 Valby
+45 33 19 32 00 · dt@datatilsynet.dk
10. Recommendations, external links and changes
The material test offers an indicative product recommendation based on your choices. It does not make an automated decision with legal or similarly significant effects on you. The website is not used for such automated decision-making.
The website connection uses HTTPS. When you actively follow an external link, for example to Google Maps, the external provider’s processing and privacy policy apply. We update this notice when our processing changes. If data is to be used for a new purpose, we provide the required information before the new processing begins.