Privacy Policy

Last updated: 30 September 2026

1. Who is responsible for your personal data?

PLC Denmark, Kærvej 24, 9800 Hjørring, Denmark, VAT/CVR DK43692488, is responsible for the personal data described in this policy. Contact us at info@plcdenmark.com.

This policy covers visitors to plcdenmark.com, customers, business contact persons and people contacting us about buying or selling industrial automation equipment.

2. Information we collect

Depending on your interaction with us, we process your name, company name, business contact details, billing and delivery addresses, telephone number, email address, VAT details, order details, payment status and correspondence. Enquiries may include equipment lists, photographs and other information you choose to send. Please avoid including unnecessary personal or sensitive information.

When you use our website, technical information may include your IP address, browser and device information, pages visited and security logs. Cookies and similar technologies are explained in our separate Cookie Policy.

3. Why we use your information and our legal grounds

  • Orders, delivery and customer service: to prepare quotations, process orders, arrange payment and delivery, and handle returns and warranty enquiries. Where you are personally a party to the contract, the legal basis is GDPR Article 6(1)(b). For employees and contact persons of business customers, our legitimate interest in managing business relationships is the basis under Article 6(1)(f).
  • Enquiries and equipment purchase offers: to respond to your messages and evaluate equipment offered to us. The basis is steps requested before a contract under Article 6(1)(b), where applicable, or our legitimate interest in responding to enquiries and running our business under Article 6(1)(f).
  • Accounting and legal obligations: to maintain accounting records and meet applicable legal requirements, under Article 6(1)(c).
  • Website operation and security: to operate the webshop, prevent misuse and investigate technical problems, based on our legitimate interest in providing a reliable and secure service under Article 6(1)(f).
  • Optional cookies and tracking: where consent is required, processing is based on your consent under Article 6(1)(a). You can withdraw consent through the website's cookie settings.
Information necessary for processing an order must be provided for us to fulfil it. Without the required contact, delivery and payment information, we may be unable to complete your order.

4. Who receives information?

Relevant information is shared with the payment, shipping, hosting, email and backup providers described below where needed for the purposes above. Evolve Design assists us with website administration and backups and may have access to website data for those tasks. Public authorities may receive information where required by law. Providers acting on our behalf must process information under our instructions and appropriate data processing agreements. Payment providers and carriers may also act as independent controllers for their own services.

Our business email service for info@plcdenmark.com is provided by Nordicway. Invoices and accounting documents are stored on our business PC. We do not use a separate accounting software service.

Payment processing is provided through Scanpay. Shipping information is handled through Shipmondo and the selected carrier, including PostNord or DHL. Our website and email are hosted by Nordicway. Only the information needed for each service is shared.

5. Processing locations and international transfers

Nordicway states that its hosting servers are located in Germany and its hosting backups are stored within the EU. Our separate website backups are sent to Dropbox through UpdraftPlus. Dropbox states that data may be processed in the United States and other countries, using mechanisms including the EU–US Data Privacy Framework, adequacy decisions and standard contractual clauses, as applicable.

Shipmondo's published subprocessor list includes hosting in Ireland and Germany and support or development providers in the United States. International deliveries also require sharing the necessary recipient and shipment information with carriers and customs authorities in the destination and transit countries.

You can contact info@plcdenmark.com for information about the safeguards relevant to your data and how to obtain a copy. Further information is available in Dropbox's privacy policy and Shipmondo's data processing agreement.

Dropbox describes reliance on the EU–US Data Privacy Framework and standard contractual clauses where applicable. Shipmondo’s listed US support and development providers include Intercom and Anthropic. Intercom’s published data processing terms describe reliance on its EU–US Data Privacy Framework certification, with standard contractual clauses as a fallback. Transfer safeguards depend on the recipient and service; contact us for information relevant to your data and how to obtain a copy.

6. How long we retain information

Accounting records are generally retained for five years from the end of the financial year to which they relate. This requirement does not mean that all information we hold about you must be kept for five years.

Retention of other information is assessed according to its purpose, including enquiries, ongoing business relationships, order handling, complaints and legal claims. WooCommerce currently has no automatic deletion periods configured for customer accounts or orders; deletion is handled manually, subject to legal recordkeeping requirements and outstanding matters.

Cookie retention periods are described in the Cookie Policy. Website backups made through UpdraftPlus are currently scheduled monthly, retaining up to 22 scheduled file and database backup sets. Some manual backup sets are retained until manually deleted. Nordicway states that daily hosting backups are kept for 14 days and mirrored backups for three months. Copies in backups may therefore remain after deletion from the live system.

We review old enquiries and correspondence annually and delete information no longer needed for business relationships, complaints, legal claims or statutory recordkeeping.

7. Your rights

Subject to the conditions in the GDPR, you may request access to your personal data, correction, deletion, restriction of processing and data portability. You may object to processing based on legitimate interests, and you may object to direct marketing at any time. Where processing relies on consent, you may withdraw that consent without affecting the lawfulness of earlier processing.

Contact info@plcdenmark.com to exercise your rights. We may need information to verify your identity. Deletion rights are subject to applicable exceptions, including legal recordkeeping obligations.

You can complain to the Danish Data Protection Agency (Datatilsynet), www.datatilsynet.dk, or your competent supervisory authority.

8. Security

Our website uses HTTPS for communication with your browser. Website administration and backup handling are carried out by PLC Denmark and Evolve Design. Security measures vary between the website, service providers and locally stored documents; no online service can guarantee absolute security.

9. Cookies and planned analytics

Google Analytics and Google Ads are planned for future use. These services are not currently used by us. This policy and our cookie information will be updated before those services are introduced.

See our Cookie Policy for information about cookies and consent settings.

10. Changes and contact

We update this policy when our processing changes. The published version will show its last updated date. Questions can be sent to info@plcdenmark.com or to PLC Denmark at the address above.