# Privacy Policy (GDPR)

WebHosting A/S
Last updated: 17 October 2026

## 1. Introduction

WebHosting A/S takes the protection of personal data seriously. We process personal data in accordance with applicable data protection legislation, including the EU General Data Protection Regulation (GDPR) and the Danish Data Protection Act.

This Privacy Policy explains what personal data we collect, how we use it, how long we retain it, and what rights you have.

## 2. Data Controller

The data controller responsible for the processing of personal data is:

WebHosting A/S
Naverland 2  
2600 Glostrup  
Denmark

CVR number: 25674138  
Website: https://www.webhosting.dk  
Email: gdpr@webhosting.dk

If you have any questions about how we process personal data, please contact us at gdpr@webhosting.dk.

## 3. What Personal Data Do We Collect?

We collect and process only personal data that is relevant to our business and our interactions with you.

This may include:

- Name, address, email address and other contact details.
- Information about your company and your position.
- Information you provide to us through email, contact forms or support requests.
- Information relating to customers, subscriptions, orders, billing and customer service.
- Technical information about the use of our website and services, including IP addresses, log files and security-related information.
- Other information necessary to provide and administer our products and services.

We generally collect information directly from you. In certain circumstances, information may also be obtained from publicly available sources or business partners, where legally permitted.

## 4. Purposes and Legal Basis for Processing

We process personal data for the following purposes:

- **Customer service and communication:** To respond to enquiries and provide support.
- **Provision of services:** To establish, administer and deliver the products and services ordered by our customers.
- **Administration and billing:** To manage customer relationships, payments and accounting.
- **Operations and security:** To maintain, troubleshoot and protect our website, hosting environments, servers and other IT systems.
- **Prevention of abuse:** To detect and address spam, fraud, unauthorised access and other security incidents.
- **Marketing:** To provide information about our products and services where we have a lawful basis to do so.
- **Legal compliance:** To comply with our legal obligations.

We process personal data on one or more of the following legal bases:

- Processing is necessary for the performance of a contract with you.
- Processing is necessary to comply with a legal obligation.
- Processing is necessary for our legitimate interests, provided these interests are not overridden by your interests or fundamental rights and freedoms.
- You have given your consent, where consent is the appropriate legal basis.

## 5. Hosting, Customer Data and Data Processing

When WebHosting A/S provides hosting, server operations or related IT services, we may process personal data on behalf of our customers.

In these circumstances, the customer will normally be the data controller for personal data uploaded to or stored on their systems or websites, while WebHosting A/S may act as a data processor, processing personal data in accordance with the customer's instructions.

We process such data in accordance with the relevant agreements and applicable data protection legislation. Where required, we enter into a data processing agreement with the customer.

We access customer data only where there is a relevant operational, security, support-related or legal basis for doing so.

## 6. Disclosure of Personal Data

We disclose personal data only where necessary, lawful and relevant.

This may include disclosure to:

- Data centre, hosting and IT infrastructure providers.
- Accounting, payment and customer service system providers.
- Other data processors supporting our services.
- Professional advisers, including accountants and auditors.
- Public authorities where we are legally required to do so.

Our data processors may process personal data only in accordance with our instructions and the applicable data processing agreements.

We do not sell personal data to third parties.

## 7. Transfers of Personal Data Outside the EU/EEA

If we transfer personal data to recipients outside the EU/EEA, we ensure that the transfer complies with applicable data protection legislation.

This may include transfers based on an adequacy decision adopted by the European Commission or appropriate safeguards, such as the European Commission's Standard Contractual Clauses, where required.

## 8. Retention of Personal Data

We retain personal data only for as long as necessary for the purposes for which it was collected or for as long as required by law.

The retention period depends on factors including the nature of the data, the purpose of processing and any applicable legal requirements.

Information forming part of accounting records is retained for the period required by applicable accounting legislation. Operational and security log files are retained as necessary and in accordance with our established procedures.

When personal data is no longer required, we securely delete or anonymise it unless continued retention is required by law.

## 9. Cookies and Similar Technologies

Our website may use cookies and similar technologies to ensure functionality, remember preferences and, where applicable, analyse website usage or support marketing activities.

Where required by law, we obtain your consent before using non-essential cookies.

You can find further information about our use of cookies in our cookie policy, where available, and manage your cookie preferences through the cookie settings available on our website.

## 10. Security

We implement appropriate technical and organisational security measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unauthorised access.

Access to personal data is restricted to individuals who have a legitimate business need to access it.

As a provider of hosting and IT services, we place particular importance on secure operations, access controls and the handling of security incidents.

## 11. Your Rights

Subject to the conditions and limitations set out in applicable data protection legislation, you may have the following rights in relation to your personal data:

- **Right of access:** You may request information about the personal data we process about you.
- **Right to rectification:** You may request the correction of inaccurate personal data.
- **Right to erasure:** You may, in certain circumstances, request the deletion of your personal data.
- **Right to restriction of processing:** You may, in certain circumstances, request that we restrict the processing of your personal data.
- **Right to data portability:** In certain circumstances, you may receive personal data you have provided to us in a structured, commonly used and machine-readable format.
- **Right to object:** You may, in certain circumstances, object to our processing of your personal data.
- **Right to withdraw consent:** Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

You can exercise your rights by contacting us at gdpr@webhosting.dk. We will respond within the time limits prescribed by applicable law.

If we process personal data on behalf of a customer as a data processor, your request may need to be directed to that customer, who acts as the data controller.

## 12. Complaints to the Danish Data Protection Agency

If you believe that we process your personal data in breach of applicable data protection legislation, you are welcome to contact us so that we can attempt to resolve the matter.

You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet).

Website: https://www.datatilsynet.dk/

## 13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, for example if our processing activities change or new legal requirements apply.

The current version will be available on our website, together with the date of the latest update.

---

WebHosting A/S
Naverland 2, 2600 Glostrup, Denmark  
CVR number: 25674138  
https://www.webhosting.dk  
gdpr@webhosting.dk