Last updated · 11 May 2026

Privacy policy

1. Data controller

Zelfware ApS is the data controller for personal data processed in connection with this website (zelfware.ai). We process your data in accordance with the EU General Data Protection Regulation (GDPR) and Danish data protection law.

Contact for data inquiries: privacy@zelfware.ai.

2. What we collect

We collect personal data when you:

  • Submit the contact form - name, work email, company, phone, and any message you choose to send.
  • Use the pricing calculator - your selections (industry, project scope, features, integrations, company size, compliance needs, timing) plus the contact details above when you request a personalised estimate.
  • Browse the site - technical data such as IP address (truncated where possible), browser, device, referrer and pages viewed, collected via Google Analytics for aggregate analysis.

We do not knowingly collect special categories of personal data.

3. Why we collect it and the legal basis

  • To respond to your inquiry and prepare a personalised estimate or proposal - legal basis: pre-contractual measures at your request (GDPR Art. 6(1)(b)) and our legitimate interest in operating our business (GDPR Art. 6(1)(f)).
  • To analyse site usage and improve the site - legal basis: your consent (GDPR Art. 6(1)(a)), expressed via the cookie banner shown on first visit.
  • To comply with legal obligations (e.g. accounting rules, dispute records) - legal basis: legal obligation (GDPR Art. 6(1)(c)).

4. Sub-processors

We use the following sub-processors to operate the site:

  • Google LLC (Google Tag Manager, Google Analytics) - for analytics and traffic measurement.
  • Make (Celonis Inc.) - webhook endpoint that receives form submissions from this site.
  • Our hosting provider - to serve the site from EU-based infrastructure.

These sub-processors process personal data only on our instructions and under appropriate data processing agreements.

5. Retention

  • Inquiries and calculator submissions are kept for up to 24 months from your last interaction, after which they are deleted, unless we enter into a contract with your organisation (in which case retention is governed by that contract and by applicable accounting rules).
  • Aggregated analytics data is retained for up to 14 months in line with Google Analytics defaults.

6. International transfers

Your data is processed primarily within the EU/EEA. Where sub-processors transfer data outside the EU/EEA (for example, Google for analytics), the transfer is safeguarded by the EU Standard Contractual Clauses and any applicable adequacy decisions issued by the European Commission.

7. Cookies

We use cookies and similar technologies for analytics and site functionality. You can manage your preferences via the cookie banner shown on first visit, or by clearing your browser cookies at any time. Strictly necessary cookies (required for the site to function) do not require consent.

8. Your rights

Under the GDPR, you have the right to:

  • Request access to your personal data (Art. 15)
  • Request correction of inaccurate or incomplete data (Art. 16)
  • Request erasure of your data (Art. 17)
  • Restrict processing (Art. 18)
  • Data portability (Art. 20)
  • Object to processing based on legitimate interest (Art. 21)
  • Withdraw consent at any time, without affecting the lawfulness of prior processing (Art. 7(3))
  • Lodge a complaint with the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk)

To exercise any of these rights, contact us at privacy@zelfware.ai. We will respond within one month, as required by the GDPR.

9. Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or alteration. Our infrastructure is hosted within the EU and access is logged.

10. Changes

We may update this policy from time to time. Material changes will be highlighted on this page with a new "last updated" date at the top. Where required, we will seek fresh consent.