Privacy policy

Gilling Teknik, Danish business registration (CVR) 42762539, owned by Sebastian Gilling Pedersen, Illerupvej 5, st. tv, 8200 Aarhus N, Denmark, is the data controller. Contact: info@gillingteknik.dk.

Enquiries and customers

When you email us or use the contact form, we process your name, email address, company name if supplied, message and any files you send by email. We use this information to answer your enquiry, clarify the project, prepare quotations and carry out the agreed work.

The contact form sends the information over an encrypted connection to our web host and then by email to info@gillingteknik.dk through Simply.com. The message content is not stored in a separate website database. Please do not include sensitive personal data or material you are not entitled to share.

Legal basis

We process information necessary for a contract with you, or steps taken before a contract, under GDPR Article 6(1)(b). General correspondence and business customer contact details are processed under Article 6(1)(f): our legitimate interest in answering relevant enquiries and managing business relationships. Accounting records are retained under Article 6(1)(c) to comply with bookkeeping legislation.

Operation and service providers

The website and domain email are provided through Simply.com. During visits, the hosting provider may process technical information, such as IP addresses and timestamps, for operation, troubleshooting and security. Accounting documents may be stored using Microsoft OneDrive. Relevant service providers process information as part of their services; necessary accounting information may be disclosed to authorities when required by law.

Spam prevention

To limit abuse and duplicate submissions, the form stores keyed hashes of the IP address and message content, a timestamp and delivery status. The raw IP address and message itself are not stored in this control list. Records older than 24 hours are removed on the next form submission; they may remain longer during periods of inactivity. The legal basis is our legitimate interest in secure operation and spam prevention under GDPR Article 6(1)(f). The hosting provider's own operational logs are handled separately as part of technical operation.

Retention

Correspondence and project material are retained for as long as needed for the enquiry, agreement and any claims. Material is reviewed and deleted when no longer needed. Accounting records are kept for five years after the end of the financial year to which they relate.

Your rights

You can contact us to request access and rectification and, where the conditions are met, erasure, restriction, objection or data portability. Statutory retention obligations may limit the right to erasure. You may lodge a complaint with the Danish Data Protection Agency.

Voluntary information and decisions

You decide whether to contact us. Without relevant contact and project information, we cannot answer a specific enquiry or enter into an agreement. We do not use profiling or automated decisions that have legal effects on you.

Last updated: 10 September 2026.