Data Controller
We are the data controller for the processing of personal data that we process about our customers and partners. You will find our contact information below.
Kombination ApS
Agro Food Park 13,
DK-8200 Aarhus N
CVR no.: 39848465
Contact: kontakt@kombination.dk
It is not a requirement that our company has an external Data Protection Officer (DPO), but if you have any questions about the processing of your personal data, you can contact us using the information above.
Treatment safety
We keep the processing of personal data secure by having appropriate technical and organisational measures in place.
We have conducted risk assessments of our processing of personal data and have subsequently implemented appropriate technical and organisational measures to increase the security of processing and ensure that personal data is not accidentally or unlawfully destroyed, lost, altered, misused or disclosed to unauthorised persons.
Purpose and basis for processing
Visit website
Purpose: To be able to deliver a secure and functional website.
Basis for processing: Article 6(1)(f) (legitimate interest).
We do not currently use cookies, but we do use WordPress, HubSpot and Google Analytics, which can technically set cookies if the functions are activated (e.g. statistics or marketing).
If we use cookies, we will always obtain your consent in accordance with the GDPR and the Cookie Ordinance.
Communication with potential customers
Purpose: To be able to respond to inquiries, make offers or enter into dialogue.
Information: Name, email, telephone number and information you provide yourself.
Basis for processing: Article 6(1)(f) (legitimate interest).
Data is received via contact form (WordPress/HubSpot) and Outlook.
Customer relations
Purpose: To be able to deliver the agreed service and manage the collaboration.
Information: Name, address, payment information, special agreements, etc.
Basis for processing: Article 6(1)(b) (performance of contract).
Partners and suppliers
Purpose: To be able to manage collaborative relationships.
Information: Contact information, communication, agreements, payment information.
Basis for processing: Article 6(1)(b) and (f).
We do not process sensitive personal data (Article 9).
Disclosure and data processors
We do not disclose personal information to third parties for marketing purposes.
However, we use the following data processors:
- WordPress (website management)
- Outlook/Microsoft 365 (email communication)
- HubSpot (CRM and lead management)
- Google Analytics (statistics and analysis)
- IT supplier (support and operation of systems)
These suppliers only process information on our behalf and according to our instructions.
Some suppliers (e.g. Microsoft, Google and HubSpot) are located outside the EU/EEA. Transfers are made based on the EU Commission's Standard Contractual Clauses (SCC).
Storage period
We only retain personal data for as long as is necessary for the purposes for which it was collected:
- Enquiries: Deleted when the dialogue is completed, unless a collaboration is initiated.
- Leads in HubSpot: Leads in HubSpot are automatically deleted or anonymised after 12 months of inactivity.
- Customers: Deleted no later than 5 years after the end of the financial year due to the Danish Accounting Act.
- Suppliers/collaborators: Deleted when the collaboration ends, unless legal requirements dictate longer storage.
Rights of data subjects
Right to see information (right of access)
You have the right to access the information we process about you, as well as a number of additional information.
Right to rectification (correction)
You have the right to have incorrect information about yourself corrected.
Right to erasure ("right to be forgotten")
In certain cases, you have the right to have your personal data deleted before our general deletion deadline. This may be, for example, if the information is no longer necessary for the purpose for which it was collected, or if you withdraw your consent and there is no other lawful basis for the processing.
Right to restriction of processing
In certain cases, you have the right to restrict the processing of your personal data. If you have the right to restrict the processing, we may only process the data – with the exception of storage – with your consent, or for the establishment, exercise or defence of legal claims, or to protect a person or important public interests.
Right to data portability
In certain cases, you have the right to have your personal data provided in a structured, commonly used and machine-readable format, so that you can store it yourself or transfer it to another data controller.
Right to object
In certain cases, you have the right to object to our otherwise lawful processing of your personal data. This applies, for example, if we process your data based on our legitimate interests (Article 6(1)(f)).
Right to withdraw consent
If processing is based on consent.
We do not make automated decisions or profiling.
Complaint to the Danish Data Protection Agency
You have the right to file a complaint with the Danish Data Protection Agency if you are dissatisfied with the way we process your personal data. You can find the Data Protection Authority's contact information at www.datatilsynet.dk.
We generally encourage you to read more about GDPR so that you are up to date on the rules.
Last updated:
24/09/2025