Privacy Policy

The data controller responsible for your personal data is Hexaren Facility Services ApS.

CVR: 46492102.

Registered address: C/O LegalDesk.dk ApS, Njalsgade 21F, 2., 2300 København S.

Email: hello@hexaren.dk

Phone: +45 22 56 00 70

Contact details, such as name, email address, phone number, company name, and address details you choose to share.

Service request data, such as selected services, property size, preferred date, notes, and messages submitted through forms.

Communication data, such as emails, phone calls, booking requests, and other correspondence with us.

Technical data that may be processed when you visit our website, such as IP address, browser type, device information, and basic server logs.

Application or recruitment data if you contact us about job opportunities.

To respond to inquiries, prepare quotes, schedule services, and communicate with you. The lawful basis is our legitimate interest or steps taken before entering into a contract.

To provide cleaning, facility, and office support services. The lawful basis is performance of a contract.

To manage customer relationships, quality follow-up, and support requests. The lawful basis is legitimate interest.

To comply with legal obligations, including bookkeeping and tax requirements.

To handle recruitment inquiries when you apply for work with us. The lawful basis is legitimate interest or steps taken before entering into an employment contract.

At this time, our website does not intentionally use analytics or marketing cookies.

The website may include links to third-party services, such as Cal.com for meeting booking or WhatsApp for messaging. These services may process your data under their own privacy terms when you use them.

If we add analytics, marketing cookies, or a cookie banner later, this policy will be updated.

Contact and inquiry data is normally retained for up to 12 months after the last interaction, unless a longer period is needed to provide services or resolve a matter.

Customer, contract, invoice, and bookkeeping data may be retained for up to 5 years in accordance with Danish bookkeeping requirements.

Recruitment data is normally deleted within 6 months unless you consent to longer retention or we are legally required to retain it.

We may share personal data with trusted service providers who help us operate our business and website.

This may include website hosting providers, Supabase for contact data storage, Resend for email notifications, Cal.com for meeting booking, accounting or invoicing systems, and professional advisers when necessary.

Where these parties act as data processors, they may only process personal data on our instructions and must apply appropriate security measures.

Some providers may process data outside the EU/EEA. Where this happens, we rely on appropriate safeguards such as the EU Commission’s Standard Contractual Clauses or other lawful transfer mechanisms.

We use appropriate technical and organisational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.

No digital transmission or storage method is completely secure, but we work to keep your information protected and limit access to people and systems that need it.

Under GDPR, you may have the right to access your personal data, request correction, request deletion, restrict processing, receive data portability, object to processing based on legitimate interests, and withdraw consent where processing is based on consent.

You also have the right to lodge a complaint with the Danish Data Protection Agency, Datatilsynet, at datatilsynet.dk.

We may update this Privacy Policy from time to time. The latest version will always be available on this page with the Last updated date shown above.

If you have questions about this Privacy Policy or want to exercise your data protection rights, contact us at hello@hexaren.dk or +45 22 56 00 70.