Danduct Clean
Privacy policy
Version 2, September 2026. For Danduct’s content review before launch.
1. Controller
Danduct Clean, Teglvænget 63, DK-7400 Herning, Denmark, CVR DK66399710, is the data controller. Contact: danduct@danduct.com, +45 42 45 35 30. Write to this address for privacy matters.
2. What we process and why
| Purpose | Data | Legal basis | Kept for |
|---|---|---|---|
| Orders and delivery | Name, company, VAT number, e-mail, phone, billing and delivery address, items, amounts, payment status | Contract (GDPR art. 6(1)(b)); legal obligation for accounting records (art. 6(1)(c)) | Accounting records: 5 years after the financial year |
| Price enquiries and contact | Name, company, e-mail, phone, country, your message | Contract / pre-contract steps (art. 6(1)(b)) | 24 months after the last contact |
| Distributor and admin accounts | E-mail, login, account settings | Contract (art. 6(1)(b)) | While the account exists |
| Complaints and warranty | Order data, correspondence, photos | Legal obligation and legitimate interest (art. 6(1)(c) and (f)) | Until the claim is closed, then as accounting records |
| Website operation and security | IP address, browser, pages requested, error logs | Legitimate interest in a secure, working site (art. 6(1)(f)) | Server logs up to 30 days |
We do not use your data for profiling or automated decisions, and we do not sell it.
3. Recipients and processors
- Stripe Payments Europe Ltd. (Ireland): payment processing. Stripe receives your card details directly; Danduct never sees them. Stripe is an independent controller for the payment itself.
- Supabase Inc.: database and login for orders, enquiries and accounts.
- Vercel Inc.: hosting of the website and its logs.
- Resend Inc.: sending of order and enquiry e-mails.
- Parcel carrier and freight forwarder: name, address and phone number, so the goods can be delivered.
- Uniconta: invoicing and accounting.
- Danduct's accountant and public authorities where the law requires it.
Some providers are based in the USA. Danduct must ensure a valid transfer basis, such as the EU-US Data Privacy Framework or EU standard contractual clauses. The specific provider configuration and retention must be verified before launch.
4. Cookies
The site uses cookies and browser storage for language, business/private price view, your cart, and distributor and administrator login. The current version has no analytics or marketing cookies. Details are in the cookie policy.
5. Your rights
You may ask for access to your data, correction, deletion, restriction, data portability, and you may object to processing based on legitimate interest. Write to danduct@danduct.com; we answer within one month. Data we must keep under the Bookkeeping Act cannot be deleted before the retention period ends. You may complain to Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, datatilsynet.dk.
6. Changes
We update this policy when our processing changes. The version and date are shown at the top.