Privacy Policy

1) Data controller and contact

Data controller: CG Biocomposite ApS

Address: Ved Stigbordene 39, 2. tv, 2450 København SV, Denmark

Privacy contact e-mail: mads.spurmortensen@seanovate.net

2) What personal data we collect

We collect personal data when you submit our contact form.

Contact form data:

• E-mail address
• Company
• Message content (which may include personal data if you choose to share it)

We also collect certain information automatically when you use our website, including through cookies and similar technologies, see section 6.

3) How we use your data and our legal basis

We use your data for the purposes below.

4) How long we keep your data

Inbound enquiries: We keep contact form submissions and related CRM records for up to 36 months, unless you ask us to delete them earlier, or we need to keep them longer for legal reasons (for example, to handle a dispute).

5) Who we share data with

We share personal data only as needed for the purposes described above, including with these service providers.

Service providers (processors):

• HubSpot (CRM)
• Make (automation workflows, for example sending contact form details into HubSpot)
• Google Analytics (website analytics, subject to your cookie choices)

We may also share data with professional advisers (for example legal, accounting) where necessary, and with authorities if required by law.

6) Cookies and Google Analytics

We use a cookie banner to manage cookies on our website.

• Necessary cookies help the site work and are usually always on.
• Analytics cookies (including Google Analytics) help us understand how visitors use the site. These are used only when you allow them through the cookie banner, where required.

You can change your cookie preferences at any time via the cookie banner controls (if your banner provides a "manage preferences" option), or by adjusting your browser settings. Please note that blocking some cookies may impact site functionality.

7) International transfers

Some of our service providers may process data outside the EU or EEA. When this happens, we use appropriate safeguards required by the GDPR, such as the EU Commission's Standard Contractual Clauses, and additional measures where relevant.

8) Your rights under the GDPR

You have the right to:

• Request access to your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Request restriction of processing
• Object to processing based on legitimate interests
• Request data portability (where applicable)
• Withdraw consent at any time (where processing is based on consent, for example analytics cookies)

To exercise your rights, contact us at mads.spurmortensen@seanovate.net.

9) Complaints

If you believe we have not handled your personal data correctly, you can contact us first — we'll try to fix it quickly. You also have the right to lodge a complaint with your local data protection authority in the EU or EEA. In Denmark, the supervisory authority is Datatilsynet.

10) Security

We use appropriate technical and organisational measures designed to protect personal data. No method of transmission or storage is 100% secure, but we work to protect your information in line with industry practices.

11) Children

Our website and services are not directed at children, and we do not knowingly collect personal data from children.

12) Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the "Last updated" date above.