Last updated: [072726]

1. Who we are 

Heimdall Audio I/S CVR: 46607953 Address: Bakkevej 1, 1, 118. 6000 Kolding. Email: contact@heimdallaudio.com Website: www.heimdallaudio.com

Heimdall Audio (“we”, “us”, “our”) is the data controller responsible for your personal data as described in this policy, in accordance with the EU General Data Protection Regulation (GDPR) and the Danish Data Protection Act (Databeskyttelsesloven).

2. What personal data we collect

Depending on how you interact with us, we may collect:

• Contact details: name, email address, phone number, company name
• Business/invoicing data: billing address, CVR number (if applicable), payment details
• Communication: emails, messages, or call notes related to project briefs, feedback, and contracts
• Project-related data: information you share about your production (titles, credits, delivery specs) – not the audio/creative content itself, which is covered separately in our Terms & Conditions / confidentiality clause.
• Website data: if you use a contact form on heimdallaudio.com, we collect what you submit (name, email, message).

We do not knowingly collect sensitive personal data (health, religion, political views, etc.) and ask that you don’t include such information in project briefs or messages to us.

3. Why we process your data

4. Who we share data with

We do not sell or rent your personal data. We may share limited data with:

• Our secured digital bookkeeping platform – for invoicing and accounting records
• Our banking provider – for payment processing
• SIMPLY (our mailing provider) – for business communication
• SIMPLY (our web provider) – for hosting heimdallaudio.com

All third-party processors are bound by data processing agreements where required under GDPR Art. 28. We do not transfer your data outside the EU/EEA unless a processor is certified under an approved transfer mechanism (e.g. EU-U.S. Data Privacy Framework, Standard Contractual Clauses).

5. How long we keep your data

• Invoicing and accounting records: 5 years from the end of the relevant financial year, as required by the Danish Bookkeeping Act
• Contract and project communication: retained for the duration of the business relationship plus 5 years for legal/liability purposes
• Marketing consent (if applicable): until you withdraw consent

6. Your rights

Under GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate data
• Erase your data (“right to be forgotten”), where legally possible
• Restrict or object to processing
• Data portability, where applicable
• Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, contact us at: contact@heimdallaudio.com. We will respond within one month as required by law.

You also have the right to lodge a complaint with the Danish Data Protection Agency:

Datatilsynet Carl Jacobsens Vej 35, 2500 Valby www.datatilsynet.dk

7. Data security

We take reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse (e.g. password-protected systems, limited access among partners).

8. Cookies and website data

heimdallaudio.com uses essential cookies. [We use cookies for the purposes described above, and we obtain your consent before non-essential cookies are set, via a cookie banner on the site.] This is overseen separately from GDPR – by the Danish Agency for Digital Government (Digitaliseringsstyrelsen) rather than the Data Protection Agency named in Section 6.

9. Changes to this policy

We may update this privacy policy from time to time. The “last updated” date at the top reflects the most recent revision. Material changes will be communicated to active clients where relevant.

10. Contact

Questions about this policy or how we handle your data: Heimdall Audio I/S – contact@heimdallaudio.com