Privacy Policy – Summit Steel ApS

Last updated: November 2026

This policy explains which personal data Summit Steel ApS processes, why we do it, and what rights you have.

Data controller

Summit Steel ApS
CVR 45820076
Phone: +45 27 43 40 20
Email: summitsteelsolutions@gmail.com

If you have questions about how we handle your data, please contact us. We are not required to appoint a data protection officer (DPO).

What data we process

Visiting the website

When you visit the website, our web host processes your IP address and technical information about your browser so the site can be displayed and protected against misuse. The website only uses technically necessary cookies and no cookies for statistics or marketing.

Legal basis: our legitimate interest in running a secure website (Article 6(1)(f) GDPR).

Enquiries and quotes

When you contact us through the form, by email or by phone, we process the information you give us: typically name, company, phone number, email and a description of the job. We only use it to answer your enquiry and give you a quote.

Legal basis: our legitimate interest in answering enquiries (Article 6(1)(f) GDPR).

Retention: We delete the data once it is clear that the enquiry will not lead to a job.

Customers

If you become a customer, we process your name, address, contact details, information about the job and payment, so we can carry out and invoice the work.

Legal basis: performance of our contract with you (Article 6(1)(b) GDPR).

Retention: The data is deleted when the job has been delivered and paid for, unless we need to keep it for accounting purposes or a possible claim.

Accounting

Invoices and other accounting records may contain personal data. They are kept for 5 years from the end of the financial year they relate to.

Legal basis: our legal obligation under the Danish Bookkeeping Act (Article 6(1)(c) GDPR).

Data processors

We use suppliers who process data on our behalf and only on our instructions:

Simply.com (Denmark): web hosting and operation of the website.
Bunny Fonts, BunnyWay d.o.o. (Slovenia): delivery of the website’s fonts. Your IP address is sent to their servers when the page loads.
Wordfence, Defiant Inc. (USA): security and protection against attacks. May process IP addresses.
Google (Gmail): our email service.

Disclosure and transfers outside the EU

We do not share your data with others unless it is necessary to carry out the job or we are required to by law. We do not use profiling or automated decision-making.

We prefer suppliers in the EU/EEA. Where data is processed outside the EU/EEA, for example in the USA, this only happens on a valid transfer basis, such as the European Commission’s standard contractual clauses or the EU-U.S. Data Privacy Framework.

Security

We protect your data with appropriate technical and organisational measures, including an encrypted connection (HTTPS), access control and up-to-date software.

Your rights

You have the right to:

access the data we hold about you
have incorrect data corrected
have your data deleted
have the processing restricted
object to the processing
receive your data in a common format (data portability)

Complaints

If you are not satisfied with how we handle your data, you can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, www.datatilsynet.dk.