Privacy Policy
Last Updated: May 6, 2026
1. Data Controller
We are the data controller responsible for processing the personal data of our customers, users, and business partners. You can find our contact details below:
Our company is not required to appoint an external Data Protection Officer (DPO). However, if you have any questions regarding our processing of your personal data, please contact us using the details above.
2. Purpose and Scope
This Privacy Policy explains how we collect, use, disclose, and safeguard personal data when you use our Software-as-a-Service (SaaS) platform, our website, or when you otherwise interact with us.
We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.
3. Processing Activities
3.1. Visits to Our Website and the RealBee platform
When you visit our website or the RealBee platform, we use cookies and similar technologies to ensure functionality, optimize performance, and analyze traffic. You can manage your cookie preferences at any time via the "Manage Cookies" link in our website footer.
Legal basis: Article 6(1)(f) of the GDPR (legitimate interest – ensuring functionality and optimization of the website).
3.2. Account Registration and Platform Use
When you create an account or use our platform, we process personal data to provide and manage your access to our services.
We typically process the following data:
- Name
- Company name
- Email address and login credentials
- Billing and payment details
Purpose: To create and manage your account, deliver our software services, ensure platform security, and provide customer support.
Legal basis:
- Article 6(1)(b) of the GDPR (performance of a contract), and
- Article 6(1)(f) (legitimate interest in maintaining system security and improving our services).
We retain account information for as long as your account is active and delete or anonymize it within a reasonable period after termination, unless legal obligations require longer retention.
3.3. Communication and Support
If you contact us via email, contact form, chat, or telephone, we process your personal data to respond to your inquiry and provide support.
Typical information includes:
- Name
- Contact information
- Company name
- Contents of your inquiry
Legal basis: Article 6(1)(f) of the GDPR (legitimate interest in responding to inquiries and maintaining customer relations).
We delete correspondence once the matter is resolved unless retention is necessary for documentation purposes.
3.4. Marketing and Newsletters
If you subscribe to our newsletter or other marketing communications, we will process your personal data to send you updates about our services, new features, events, and offers.
Legal basis: Article 6(1)(a) of the GDPR (consent).
We store documentation of your consent for two years after your last interaction, in line with the Danish Consumer Ombudsman’s guidance on marketing practices.
3.5. Bookkeeping and Compliance
We retain accounting records (such as invoices, receipts, and payment documentation) in accordance with the Danish Bookkeeping Act.
Legal basis: Article 6(1)(c) of the GDPR (legal obligation).
Retention period: five years after the end of the financial year.
3.6. Job Applications
We process personal data from job applicants for recruitment purposes.
Legal basis: Article 6(1)(f) of the GDPR (legitimate interest in recruiting qualified candidates).
4. Data Processors
We use trusted third-party service providers to support the operation of our SaaS platform and business activities. These partners may process personal data on our behalf (as “data processors”).
Examples include:
- Cloud hosting providers (e.g. Vercel, AWS, or Google Cloud)
- Large Language Model (LLM) providers (OpenAI)
- Email and communication tools
- Analytics services
- Payment processors
4.1 On the use of Third party Artificial Intelligence providers
User input is sent to our LLM-provider via an API-service to generate content for the RealBee platform. However, the input data is not used to train the AI models. We ensure that our providers comply with strict data protection standards.
5. Disclosure of Personal Data
We do not sell or otherwise disclose personal data to third parties. We may, however, share data when legally required or to protect our rights, comply with legal obligations, or enforce contractual terms.
6. Transfers to Third Countries
We primarily use data processors within the EU/EEA or those storing data within these regions. Where transfers outside the EU/EEA occur (e.g. to service providers in the U.S.), we ensure that appropriate safeguards are in place — such as Standard Contractual Clauses (SCCs) approved by the European Commission.
7. Data Security
We take data protection seriously and have implemented appropriate technical and organizational measures to secure your personal data against unauthorized access, loss, misuse, or disclosure.
These include encryption, access controls, secure hosting environments, continuous monitoring, and staff GDPR awareness training. For further details on how we protect the data users input into the RealBee platform, please contact us.
8. Retention of Personal Data
We retain personal data only for as long as necessary to fulfill the purposes described in this policy or as required by law. When data is no longer needed, it will be deleted or anonymized.
9. Your Rights
Under the GDPR, you have the following rights:
- Right of access – to obtain confirmation and information about how your data is processed.
- Right to rectification – to have inaccurate or incomplete personal data corrected.
- Right to erasure – to request deletion of your data in certain circumstances.
- Right to restriction – to request that processing is limited in specific cases.
- Right to object – to object to processing based on legitimate interests or for direct marketing.
- Right to data portability – to receive your data in a structured, commonly used, machine-readable format.
To exercise your rights, please contact us at sb@realbee.dk
10. Withdrawal of Consent
If our processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
11. Complaints
If you are dissatisfied with how we process your personal data, you have the right to file a complaint with:
The Danish Data Protection Agency (Datatilsynet)
Carl Jacobsens Vej 35, 2500 Valby, Denmark
Website: www.datatilsynet.dk
12. Updates to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on our website and will indicate the date of the most recent revision.