Privacy policy
Last updated: 2026-07-02
This privacy policy describes how Engii-Soft A/S processes your personal data when you visit our website, join the waitlist for our beta, or use EngiiCore. We process your data in accordance with the General Data Protection Regulation (GDPR) and the Danish Data Protection Act.
Data controller
Engii-Soft A/S
[address], [postcode and city]
Company reg. no. (CVR): [CVR no.]
Email: [email]
Data Protection Officer (DPO)
We are not legally required to appoint a Data Protection Officer and have not done so. For any data-protection questions, you can always contact us at [email].
When we are controller, and when we are processor
For visitors, waitlist sign-ups and our own account holders we are the data controller — that is what this policy covers. When your company uses EngiiCore and puts data into the service (e.g. about its own staff or customers), we process that data as a processor on the company's behalf under our Data Processing Agreement (DPA); there, your employer is the controller.
What personal data do we process?
Depending on how you use us, we process:
- Waitlist data: name, company, email and number of employees.
- Account data: name, email, phone number, job title and login credentials.
- Payment and billing data: company name, address, CVR and payment details (card details are handled by our payment provider, not by us).
- Usage data: how you use the service, log files and device data.
- Technical data when you visit the site: IP address, device and browser type, and your behaviour on the site — collected via cookies you have consented to.
- Data about your cookie choices, i.e. your consent and the time it was given.
Purposes and legal basis
We process your personal data for the following purposes:
- To provide, administer and support the service and your account. Legal basis: performance of the contract (GDPR Art. 6(1)(b)).
- To manage the waitlist and contact you about our beta. Legal basis: your consent (Art. 6(1)(a)).
- To invoice and keep accounts. Legal basis: performance of the contract (Art. 6(1)(b)) and legal obligation under the Danish Bookkeeping Act (Art. 6(1)(c)).
- To measure and improve the website and our marketing. Legal basis: your consent (Art. 6(1)(a)).
- To ensure the operation and security of the service. Legal basis: our legitimate interest (Art. 6(1)(f)).
Cookies
We use cookies for, among other things, statistics and marketing. Analytics and marketing cookies are set only with your consent.
Recipients and processors
We only share your data with trusted providers who process data on our behalf (processors). We do not sell your data. Our processors include:
- Hosting and operations, including Microsoft 365 / SharePoint.
- Payment provider [name] for handling payments.
- Anthropic (Claude) for our AI chatbot — see our AI policy.
- Google, LinkedIn/Microsoft and Meta for statistics and marketing — only if you have consented.
Transfers to third countries
Some processors may process data outside the EU/EEA, including in the USA (e.g. Google, Microsoft, Meta and Anthropic). Transfers rely on the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
Retention
We keep your data only as long as necessary for the purposes it was collected for. Waitlist data is deleted no later than [X] months after beta launch, or when you ask us to. Account data is deleted after the customer relationship ends, per our Terms of Service and DPA. Accounting records are kept for 5 years as required by the Danish Bookkeeping Act. Records of consent are kept as long as necessary to demonstrate compliance.
Your rights
Under the GDPR you have the following rights:
- The right of access to the data we process about you.
- The right to rectification of inaccurate data.
- The right to erasure (“the right to be forgotten”).
- The right to restriction of processing.
- The right to object to the processing.
- The right to data portability.
- The right to withdraw a consent — without affecting the lawfulness of processing before the withdrawal.
To exercise your rights, contact us at [email]. We will respond as soon as possible and within one month at the latest.
Complaints to the Danish Data Protection Agency
You can lodge a complaint about our processing of your personal data with the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, dt@datatilsynet.dk, www.datatilsynet.dk.
Changes
We may update this privacy policy. The current version is always available on this page. The date of the latest update is shown at the top.