Privacy policy

CIS Nordic ApS, company registration no. (CVR) 45886662, c/o BLOXHUB, Bryghuspladsen 8, 3., 1473 Copenhagen K, Denmark. Contact: mail@cisnordic.dk or +45 22 83 28 22.

We process information to answer enquiries, assess projects and quotations, prepare preliminary budgets, arrange meetings and site visits, and enter into and perform agreements. The legal bases are GDPR Art. 6(1)(b) for requested pre-contract steps and contracts, Art. 6(1)(f) for our legitimate interest in B2B project dialogue, and Art. 6(1)(c) where processing is required by law.

We process name, company, role, email and phone; project name, address, type, phase, scope, timeline and budget information; preferences for solutions, materials, samples, meetings and visits; descriptions, notes and submitted drawings, images, quotations and other project material. We also record the privacy acknowledgement, any upload-rights confirmation, language, form, source page, timestamp and reference. Technical anti-abuse data includes a keyed hash of the IP address and submission time, not raw IP addresses or user-agent strings. Without required contact and project information, we may be unable to assess or answer the enquiry.

We use Lovable/Lovable Cloud, including its database and private file storage. Once enabled, Lovable’s built-in email function will process information for form receipts and internal notifications. Other project participants receive information only where necessary for the specific task or required by law. Access is limited to people with a work-related need. International transfers take place only under a valid data-protection transfer mechanism where applicable.

The current form flow does not use AI to analyse uploads and makes no automated decisions or profiling.

Enquiries and project material are kept only while needed to assess or follow up the enquiry, manage an offer, project or customer relationship, meet legal documentation duties, or handle potential claims. Inactive enquiries are reviewed regularly and deleted when further follow-up is no longer reasonably expected. Accounting material follows applicable statutory periods. Technical anti-abuse records are retained only while needed for security and retention review.

You may request access, correction, deletion, restriction and portability where applicable, and object to processing based on legitimate interests. Contact mail@cisnordic.dk. You may complain to Datatilsynet, the Danish Data Protection Agency.