At Guld Broen Fragt ApS, we take your privacy and the protection of your personal data seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.guldbroenfragt.dk or utilize our international logistics and commodity supply services.

Our processing of personal data is carried out in strict compliance with the EU General Data Protection Regulation (GDPR) and the Danish Data Protection Act (Databeskyttelsesloven).

1. Data Controller – How to Contact Us

Guld Broen Fragt ApS is the data controller responsible for the processing of your personal data. If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

• Company Name: Guld Broen Fragt ApS
• CVR Number (Danish Business Registration): 46508971
• Address: Nupark 51, 7500 Holstebro, Danmark
• Email: info@guldbroenfragt.dk
• Phone: +45(23)260802 | +45(25)944769 | +45(71)923630

2. Categories of Personal Data We Collect

As a B2B logistics and commodity trade corporation, we primarily process business-related information. However, this may include personal data relating to representatives, contact persons, and employees of our clients, suppliers, and partners.

We may collect and process the following categories of data:

• Contact Information: Name, corporate email address, business telephone number, job title, and company name.
• Contractual & Transactional Data: Information required to fulfill logistics contracts, international supply agreements (for petroleum products, chemistry, fertilizers, grains, oils), billing details, and bank account information.
• Technical & Usage Data: IP address, browser type, operating system, and information about how you interact with our website (collected via cookies and analytical tools).

We do not collect or process sensitive personal data (special categories of data under Article 9 of the GDPR) through this website.

3. Purposes and Legal Basis for Processing

We process your personal data under the following legal bases:

A. Performance of a Contract (GDPR Article 6(1)(b))

To initiate, manage, and execute transport, shipping, and supply agreements with your company, including customs clearance, routing, and tracking.

B. Legal Obligation (GDPR Article 6(1)(c))

To comply with applicable Danish and international laws, including accounting regulations (Bogføringsloven), maritime customs declarations, international trade compliance, and tax obligations.

C. Legitimate Interests (GDPR Article 6(1)(f))

To maintain and optimize our business relationships, respond to business inquiries submitted via our contact forms, secure our website from cyber threats, and evaluate website performance.

4. Retention of Your Personal Data

We store your personal data only for as long as necessary to fulfill the purposes for which it was collected, or to meet legal retention periods.

• Inquiries and CRM data: Retained for up to 2 years after the last contact, unless a contract is established.
• Financial and Contractual records: In accordance with the Danish Bookkeeping Act (Bogføringsloven), financial data, commercial invoices, and related transaction details are securely archived for 5 years from the end of the relevant financial year.

5. Disclosure and Transfer of Personal Data

To provide our international multimodal logistics services, we may share relevant operational data with trusted third parties, including:

• Subcontractors, port operators, rail network operators, and shipping lines.
• Customs brokers, border control authorities, and tax administrations.
• IT service providers, hosting companies, and analytical software platforms acting as our data processors under strict Data Processing Agreements (DPAs).

International Data Transfers

When transferring data outside the EU/EEA (e.g., managing international trade lanes), we ensure appropriate safeguards are enforced, such as the EU Standard Contractual Clauses (SCCs), guaranteeing a level of data protection equivalent to the GDPR.

6. Your Data Protection Rights

Under the GDPR, you possess the following rights regarding our processing of your personal data:

• Right of Access: You have the right to request copies of your personal data held by us.
• Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or incomplete.
• Right to Erasure ("Right to be Forgotten"): You can request the deletion of your data, subject to legal retention exemptions (such as the Danish Bookkeeping Act).
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data under certain conditions.
• Right to Object: You have the right to object to our processing of your personal data based on legitimate interests.
• Right to Data Portability: You can request the transfer of your data to another organization or directly to you in a structured, machine-readable format.

To exercise these rights, please contact us at info@guldbroenfragt.dk

7. Right to Lodge a Complaint

If you believe that Guld Broen Fragt ApS is processing your personal data in violation of data protection laws, you have the right to lodge an official complaint with the Danish Data Protection Agency:

• Datatilsynet
• Address: Carl Jacobsens Vej 35, 2500 Valby, Denmark
• Phone: +45 33 19 32 00
• Website: www.datatilsynet.dk