Privacy Policy

This Privacy Policy explains how Duuo ApS (“Duuo”, “we”, “us” or “our”) collects, uses, stores, and protects your personal data when you visit our website www.duuo.dk, interact with us, or use our services.

We are committed to protecting your privacy and handling your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Danish data protection law.

1. Data Controller

The data controller responsible for your personal data is:

Duuo ApS
CVR: 38890972
Address: Langebrogade 6 G, 1411 København K
Email: kontakt@duuo.dk

2. Personal Data We Collect

We may collect and process the following categories of personal data:

• Contact details – name, email address, phone number.
• Account and communication data – when you contact us, sign up for a service, or subscribe to updates.
• Technical data – IP address, browser type, device information, time zone settings.
• Usage data – information about how you interact with our website (pages visited, duration of visit, clicks, etc.).
• Application and HR data – if you apply for a job or work with us as an employee, we process information provided through our HR platform (see section 8).

3. Purpose and Lawful Basis for Processing

We process your personal data for the following purposes and legal bases:

• To provide and improve our services (performance of a contract).
• To respond to inquiries and communicate with you (legitimate interest).
• To send newsletters, updates, and marketing (consent, where required).
• To analyse website traffic and improve functionality (legitimate interest/consent via cookies).
• To comply with legal obligations (e.g. bookkeeping, employment law).

4. Cookies and Tracking

We use cookies and similar technologies to enhance your browsing experience and collect information about how our website is used.

When you first visit our website, you will be asked to accept or manage cookies through our cookie banner. You can change your cookie preferences at any time in your browser settings.

For more details, please see our Cookie Policy.

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Examples include:

• Contact and communication data: up to 12 months after the last interaction.
• Contract and customer data: up to 5 years (in line with Danish bookkeeping rules).
• Job applications: normally deleted within 6 months unless consent for longer storage is given.
• Employee data: retained for the duration of employment and as required by employment law.

6. Sharing of Personal Data

We may share your data with trusted third parties who help us operate our business, such as:

• Website hosting providers
• Analytics and marketing services
• Payment and invoicing systems

These parties act as data processors and only process your data on our instructions.

We ensure that all processors provide appropriate security and GDPR compliance.

7. International Transfers

If we transfer personal data outside the EU/EEA (e.g. through cloud or analytics providers), we ensure that appropriate safeguards are in place, such as the EU Commission’s Standard Contractual Clauses (SCCs).

8. HR Data (Hailey HR)

For managing employee contracts, job applications, and HR processes, we use the HR platform Hailey HR.

Hailey HR is fully GDPR-compliant and processes personal data on our behalf under a data processing agreement.

9. Security of Your Data

We use appropriate technical and organisational measures to protect your personal data. However, no method of transmission or electronic storage is 100% secure, and we cannot guarantee absolute security.

10. Your Rights

Under GDPR, you have the following rights:

• Right of access – request a copy of your personal data.
• Right to rectification – correct inaccurate or incomplete data.
• Right to erasure – request deletion of your data where legally possible.
• Right to restriction – limit how we process your data.
• Right to portability – receive your data in a structured, machine-readable format.
• Right to object – object to processing based on legitimate interests or direct marketing.
• Right to withdraw consent – where processing is based on consent.

You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet). See: https://www.datatilsynet.dk

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website, with the “Last updated” date shown at the top.

If significant changes are made, we will notify you by email (if applicable) or by a notice on our website.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at:

Duuo ApS
Email: kontakt@duuo.dk
Address: Langebrogade 6 G, 1411 København K

‍

‍