Home About Us Technology Sustainability Knowledge Centre Contact Us

Privacy Policy

Information on how HPNow ApS collects and processes personal data.

1. Introduction

This document sets out how HPNow ApS ("HPNow", "we", "us") collects and processes personal data about external persons as part of the operation of our business and the activities described in Section 3.

2. Data Controller

HPNow is the data controller in respect of the processing activities described in this Privacy Notice unless otherwise mentioned below in Section 3.

If you have any questions regarding our processing of your personal data, please contact us:

HPNow ApS
CVR-no.: 37258822
Sydmarken 32F, 2860 Søborg
E-mail: info@hpnow.com

3. Processing Activities

3.1 Sale and Delivery of Products and Services

When you order goods or services from us, we process personal information about you for the purpose of delivering your order and to manage the customer relationship.

Categories of personal information:

  • Name
  • Business contact information (address, telephone number and email address)
  • Information on correspondence and trading history, including invoices and similar information

Legal basis: Article 6(1)(b) GDPR (performance of a contract), Article 6(1)(c) GDPR (legal obligations), and Article 6(1)(f) GDPR (legitimate interests in providing customer service).

Retention: For as long as an active customer relationship exists, plus five years from the end of the year when the relationship ended.

3.2 Operation of Website and Social Media Profiles

We process personal information about visitors to our website and social media pages (LinkedIn, Instagram, Facebook) to provide relevant, secure, well-functioning services and improve content relevance.

Categories of personal data:

  • Electronic identification data (IP address, MAC addresses, and device identifiers)
  • Device type, operating system, and browser information
  • User preferences (language, location)
  • Search history
  • User movement on website and social media pages, including clicked links and visited sub-pages

Data is collected through cookies and tracking technologies. When visiting our LinkedIn and Facebook profiles, platform providers collect personal information made available to us as anonymised statistics. We are joint controllers with these platform providers.

Legal basis: Article 6(1)(f) GDPR (legitimate interests in providing a relevant and well-functioning website).

Retention: Depends on the specific cookie. For LinkedIn and Meta retention, refer to their respective privacy policies.

3.3 Suppliers and Other Business Partners

We process personal information about contact persons at suppliers and business partners to manage business relationships.

Categories of personal data: Name, business email, telephone number, address, and information on the specific relationship including historic purchases and agreements.

Legal basis: Article 6(1)(b), 6(1)(c), and 6(1)(f) GDPR.

Retention: Throughout the business relationship and five years from the end of the year of the latest interaction.

3.4 Recruitment

We process personal data about job candidates to identify the best fit for positions. This includes name, contact information, educational background, occupation history, competencies, and recruitment test results.

Legal basis: Article 6(1)(a) GDPR (consent where required), Article 6(1)(b) GDPR (contract), and Article 6(1)(f) GDPR (legitimate interest in selecting the best-fit candidate).

Retention: For unsuccessful candidates, information is deleted within 6 months from the end of the month when the recruitment process concluded. Unsolicited applications are stored for 12 months from receipt.

3.5 General Business Administration

We process personal data about persons not covered in sections 3.1–3.4 to handle queries and other interactions, including name, email address, telephone number, address, and the reason for the interaction.

Legal basis: Article 6(1)(b) and 6(1)(f) GDPR.

Retention: For relationships involving financial transactions, five years from the end of the year of the latest transaction. Otherwise, three years from the end of the year of the latest interaction.

3.6 Contact Form Processing

Enquiries submitted via the website contact form are transmitted to Formspree Inc. (USA), which acts as a data processor on behalf of HPNow. The transfer is covered by EU Standard Contractual Clauses. Formspree processes submitted data solely for the purpose of delivering it to HPNow and does not use it for any other purpose. HPNow's processing of enquiries received this way falls under section 3.5 above.

4. Transfer of Personal Data Outside the EU/EEA

HPNow uses Microsoft Office products. Personal data may be transferred to Microsoft, LinkedIn, and Meta in the USA. All three organisations are covered by the EU–US Data Privacy Framework.

For other transfers outside the EU/EEA, we take necessary steps to ensure personal data receives protection essentially equivalent to EU/EEA levels, typically through EU Standard Contractual Clauses. Copies are available on request via the contact details in section 2.

5. Your Rights

When we process your personal data, you have the following rights:

  • Withdrawal of consent — where processing is based on your consent, you may withdraw it at any time
  • Access — you may request a copy of your personal data and related processing information
  • Rectification — you may have incorrect or incomplete data corrected
  • Erasure — in special circumstances, you may request deletion before our ordinary erasure time
  • Restriction — in certain cases, you may request that processing is restricted
  • Data portability — you may request a copy of provided data in a machine-readable format
  • Object to processing — where processing is based on legitimate interest, you may object based on your situation. You have an unconditional right to object to direct marketing.

To exercise any of these rights, contact us at the address in section 2. For more information, visit www.datatilsynet.dk.

6. Making a Complaint

You may file a complaint with the relevant supervisory authority if you believe our processing infringes your rights. In Denmark, this is the Danish Data Protection Agency, Carl Jacobsens Vej 35, DK-2500 Valby — dt@datatilsynet.dk — or through www.datatilsynet.dk.

We recommend contacting us before filing a complaint.

7. Updating Our Privacy Policy

HPNow may update this privacy policy when necessary to fairly describe our personal data processing. For material changes, you will be notified directly where possible.

This privacy policy was last updated in May 2026.