Privacy policy and GDPR for Customers and Suppliers

1. Data Controller
Hytek A/S Virkelystvej 6 9870 Sindal CVR: 27912699 Phone: +45 98 93 69 44 E-mail: info@hytek.dk
Hytek A/S is the data controller for the processing of personal data about our customers and suppliers.

2. What personal data do we process – and for what purposes?
We only process the information that is necessary to fulfill the purposes described below. The information is collected directly from you or from your company in connection with cooperation, purchases, deliveries or communication.

2.1 Administration of customer relationships and orders
Purpose: To be able to handle inquiries, offers, order processing, delivery and general customer service.
Information:
   • Name, address, email, phone number
   • Company information
   • Order and purchase history
   • Communication with us
Legal basis:
   • Legitimate interest (GDPR art. 6(1)(f)) in administering customer relationships and delivering our products
   • Contract (GDPR art. 6(1)(b)) when the customer is a private individual
Storage:
   • Information is deleted 1 year after termination of the customer relationship, unless there is still a legitimate need
   • Information included in accounting records is stored for 5 years, cf. the Danish Accounting Act

2.2 Fulfillment of contracts
Purpose: To enter into and fulfill contracts with customers and suppliers.
Information:
   • Contact information
   • Contract information
   • Delivery and payment information
Legal basis:
   • Legitimate interest (GDPR art. 6(1)(f)) for contracts between businesses
   • Contract (GDPR art. 6(1)(b)) for contracts with private individuals
Storage:
   • Contract material is stored for 5 years after the end of the contract

2.3 Invoicing and accounting
Purpose: To be able to issue invoices, handle payments and comply with accounting legislation. Information:
   • Name
   • Contact information
   • Payment information
   • Invoice and transaction data
Legal basis:
   • Legal obligation (GDPR art. 6(1)(c)) cf. the Danish Accounting Act
Storage:
   • Accounting data is stored for 5 years

2.4 Communication about products and services
Purpose: To be able to communicate about products, services, offers and relevant updates.
Information:
   • Name
   • Email
   • Phone
   • Communication with us
Legal basis:
   • Legitimate interest (GDPR art. 6(1)(f)) in marketing relevant products to existing customers
   • Consent (GDPR art. 6(1)(a)) for newsletters or other voluntary registration
Storage:
   • Information is deleted 1 year after the last contact, unless you are still a customer or there is a business need
   • Consent can be withdrawn at any time

2.5 Compliance with legal requirements
Purpose: To comply with applicable legislation, including the Danish Accounting Act, tax legislation and documentation requirements.
Information:
   • Information included in statutory documentation
Legal basis:
   • Legal obligation (GDPR art. 6(1)(c))
Storage:
   • Stored in accordance with legal requirements (typically 5 years)

3. Sharing of information
We only share personal data when necessary and objective:
   • Public authorities when we are legally obliged
   • Trusted data processors, e.g. hosting, IT operations, accounting, transport
   • Suppliers in connection with deliveries
All data processors have entered into a data processing agreement with us.

4. Your rights
You have the following rights under the GDPR:
   • Right of access
   • Right to rectification
   • Right to erasure
   • Right to restriction of processing
   • Right to object
   • Right to data portability
   • Right to complain to the Danish Data Protection Agency: www.datatilsynet.dk
We respond to all inquiries as soon as possible and no later than within 30 days.

5. Security
We have implemented appropriate technical and organizational security measures to protect your information against unauthorized access, loss, misuse or alteration.

6. Changes to this Policy
We may update this Privacy Policy from time to time. The most recent version will always be available on our website or upon request.

February 2026