Privacy Policy for Danish PCB ApS

Last updated: 10 September 2026

Danish PCB ApS processes personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Danish Data Protection Act. This privacy policy applies to our business customers (B2B), private customers/consumers (B2C), partners, and visitors to our website.

1. Data Controller and Contact Point

Danish PCB ApS
CVR no. (Business Reg. No.): DK46519450
Address: Gudrunsvej 26, 2. mf, 8220 Brabrand
Email: info@danishpcb.dk

Danish PCB ApS is not legally required to appoint a Data Protection Officer (DPO), as our core activities do not involve large-scale regular and systematic monitoring or the processing of special categories of personal data. All inquiries regarding data protection can be sent directly to our contact email above.

2. What Data We Process and Purpose

We only collect and process personal data necessary to operate our business, manufacture and deliver printed circuit boards (PCBs), and provide customer service:

• Customer and contact information (B2B & B2C):
  • Business customers (B2B): Contact person's name, job title, company name, CVR/VAT number, work email, phone number, delivery and billing address, and PCB order specifications.
  • Private customers (B2C): Name, residential address, delivery address, email address, phone number, and PCB order specifications.
  • Purpose: Handling inquiries, quotes, order confirmations, production, delivery, and customer service.
  • Legal basis: Performance of a contract (GDPR Art. 6(1)(b)) and legitimate interest in communicating with contact persons at our business customers (GDPR Art. 6(1)(f)).
• Technical design files and specifications (Gerber, BOM, schematics, CAM files, etc.):
  • Data: Uploaded design and production files, bills of materials (BOM), technical specifications, Gerber files, and associated technical email correspondence.
  • Confidentiality: All design files and technical documents are treated with strict confidentiality and shared exclusively with necessary manufacturing partners for PCB production purposes.
  • Purpose: Quotations, design for manufacturability (DFM) reviews, PCB manufacturing, quality assurance (QA), and managing re-orders.
  • Legal basis: Performance of a contract or pre-contractual steps (GDPR Art. 6(1)(b)) and legitimate interest in maintaining engineering records and technical support (GDPR Art. 6(1)(f)).
• Billing and payment details:
  • Data: Transaction data, payment details/status, invoice history, and CVR/VAT number if applicable.
  • Purpose: Invoicing, payment settlement, and compliance with statutory bookkeeping obligations.
  • Legal basis: Legal obligation (GDPR Art. 6(1)(c) / the Danish Bookkeeping Act) and performance of a contract (GDPR Art. 6(1)(b)).
• Newsletters and direct marketing:
  • Danish PCB ApS does not send newsletters or engage in direct marketing. We do not process personal data for marketing purposes.
• Technical web and server logs:
  • Data: IP address, browser type, operating system, and visit timestamps.
  • Purpose: IT security, operational stability, and prevention of misuse.
  • Legal basis: Legitimate interest in maintaining network and information security (GDPR Art. 6(1)(f)).

3. Sources of Personal Data (GDPR Art. 14)

We primarily obtain data directly from you. For business customers and partners, we may in certain cases also collect contact information (name, title, work email, phone number) indirectly via:

• Your employer or colleagues in connection with orders and business relations.
• Publicly available sources such as the Danish Central Business Register (CVR) or your company's official website.

This processing is based on our legitimate interest in conducting B2B communication and collaboration (GDPR Art. 6(1)(f)).

4. Cookies and Tracking Technologies (Danish Cookie Order)

Our website uses only functional and optional analytical technologies:

• Strictly necessary cookies: Required for the technical operation of the website (e.g., session management, language preferences, and security). These are set without prior consent pursuant to Section 4 of the Danish Cookie Order.
• Analytics and performance cookies: Used exclusively for aggregated website optimization and placed only if you have granted prior, informed consent via our cookie banner (Section 3 of the Danish Cookie Order and GDPR Art. 6(1)(a)).
• No marketing cookies: We do not use third-party marketing, advertising, or cross-site tracking cookies.

You can change or revoke your cookie consent at any time via the cookie settings on our website or by clearing cookies in your browser settings.

5. Obligation to Provide Data and Consequences of Non-Provision (GDPR Art. 13(2)(e))

Providing contact, delivery, and billing details, as well as necessary technical design files, is a mandatory requirement to enter into a contract for PCB quotation, manufacturing, and delivery. If you choose not to provide this required information, we will unfortunately be unable to process your inquiry or complete your order.

6. Profiling and Automated Decision-Making (GDPR Art. 13(2)(f))

We do not engage in automated decision-making or profiling that produces legal effects or similarly significantly affects you (GDPR Art. 22). Any instant pricing tools on our website operate purely as technical quotation calculators for manufacturing parameters.

7. Data Sharing and Transfers to Third Countries

We never sell personal data. We exclusively share data with necessary and trusted partners and service providers:

• Manufacturing and fabrication partners: Technical design files (Gerber, BOM, etc.) are shared with specialized manufacturing partners and PCB fabrication facilities for the physical production of your circuit boards. All partners are bound by strict non-disclosure agreements (NDAs) and Data Processing Agreements (DPAs).
• Server and cloud hosting: Hetzner Online GmbH (servers located within the EU/EEA).
• Freight and delivery: Carrier partners (for physical delivery of printed circuit boards).
• Payment and accounting: Bookkeeping and financial systems as well as payment service providers.

Transfers to third countries (outside the EU/EEA):

Where PCB fabrication or IT infrastructure is handled by manufacturing partners or facilities located outside the EU/EEA (e.g., specialized PCB production or cloud services in the US or Asia), transfers take place strictly under a valid legal transfer mechanism pursuant to GDPR Chapter V:

• For certified US vendors: The EU-US Data Privacy Framework.
• For other international manufacturing and technology partners: The EU Commission Standard Contractual Clauses (SCCs) pursuant to GDPR Art. 46, accompanied by required technical and organizational safeguards.

8. Technical and Organizational Security Measures (GDPR Art. 32)

We have implemented appropriate technical and organizational measures to safeguard your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. This includes data transmission encryption (TLS/HTTPS), access controls with robust password policies, continuous security updates, and role-based access restrictions.

9. Data Retention

• Customer and order history: Retained for as long as the customer relationship is active, and for up to 3 years after the completed order/relationship for warranty and claim purposes (the Danish Sale of Goods Act / Limitation Act).
• Bookkeeping and invoice records: Retained for 5 years after the end of the financial year pursuant to statutory requirements in the Danish Bookkeeping Act.
• Technical design files and specifications: Retained for up to 3 years following project completion or the latest re-order to facilitate re-orders, handle warranty claims, and ensure quality assurance, unless deletion is requested earlier.
• Technical server logs: Retained for up to 6 months (180 days), after which they are automatically deleted, unless a specific security incident requires extended retention for investigation.

10. Your Rights and Right to Object

Under the GDPR, you have the following rights:

• Access and rectification: The right to access the personal data we hold about you and have inaccurate information corrected.
• Erasure ("Right to be forgotten"): The right to have your data erased, unless statutory retention obligations require otherwise (e.g., bookkeeping).
• Restriction of processing: The right to request temporary restriction of the processing of your data.
• Withdrawal of consent: The right to withdraw your consent at any time.
• Data portability: The right to receive your data in a structured, commonly used, and machine-readable format.
• Right to object (GDPR Art. 21): You have the right to object to our processing where the legal basis is our legitimate interests (Art. 6(1)(f)).
• Unconditional right to object to direct marketing: Although we do not engage in direct marketing, you have a statutory unconditional right at any time to object to any direct marketing processing.

If you wish to exercise your rights, please contact us at info@danishpcb.dk.

11. Complaints to the Danish Data Protection Agency

You have the right to lodge a complaint regarding our processing of personal data with the Danish Data Protection Agency (Datatilsynet):

• Website: www.datatilsynet.dk
• Address: Carl Jacobsens Vej 35, DK-2500 Valby, Denmark
• Email: dt@datatilsynet.dk
• Phone: +45 33 19 32 00