Privacy Policy

Effective date: 1 September 2026

This policy explains how Prezio ApS ("Prezio", "we") handles personal data when you visit www.prezio.eu, contact us, create an account, use our sandbox or API, and when we work with you as a customer, prospect or supplier.

1. Who we are

Prezio ApS, Carit Etlars Vej 20, 1814 Frederiksberg C, Denmark. CVR 44734737.

Questions and requests about personal data: privacy@prezio.eu

2. Scope

This policy covers personal data for which Prezio is the controller, including data about account holders, whether using the free sandbox or a paid plan.

When a customer uses the Prezio API to process data about its own end users, such as addresses or consumption data, we process that data on the customer's behalf under our agreement with them, including a data processing agreement. The customer's privacy notice applies to that data, and requests about it should go to the customer. We will assist them in responding.

Where your organisation has signed an agreement with Prezio, its data protection terms take precedence over this policy for the processing they cover.

We may derive aggregated, anonymised statistics that do not identify any individual, to improve our data and services.

3. What we process and why

Data	Purpose	Legal basis (GDPR)
Technical data such as IP address, browser and device information	Operating and securing the website and services	Legitimate interests (Art. 6(1)(f)): running secure and reliable services
Analytics data collected through cookies	Understanding how the website is used	Consent (Art. 6(1)(a)), given through the cookie banner. See our Cookie Policy
Name, email, company, role and message content when you contact us or book a demo	Responding to you and preparing a possible agreement	Pre-contractual steps (Art. 6(1)(b)) or legitimate interests (Art. 6(1)(f)) in responding to business enquiries
Account details, login data, and API usage records	Providing your account and the API	Contract (Art. 6(1)(b))
Data you enter when using the sandbox, such as addresses	Providing the features you use	Contract (Art. 6(1)(b))
Business contact details and correspondence of customers, prospects and suppliers	Managing the business relationship	Legitimate interests (Art. 6(1)(f)): maintaining business relationships
Billing and invoicing details	Invoicing and bookkeeping	Contract (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c))
Email address	Service messages, such as disruptions and important changes to the service	Contract (Art. 6(1)(b)) or legitimate interests (Art. 6(1)(f)) in keeping users informed
Email address	Product news and updates	Consent where required by law, or legitimate interests for existing customers. You can unsubscribe at any time

The sandbox is intended for testing. Please use test data rather than data about real, identifiable people.

Where we receive business contact details from someone other than you, such as your employer or a public professional profile, we use them only for the business relationship purposes above.

Providing personal data is voluntary, but without it we cannot respond to you or provide an account. We do not sell personal data and do not make automated decisions that have legal or similarly significant effects on you.

4. Who we share data with

We share personal data with service providers that process it on our behalf under data processing agreements, in these categories: cloud hosting and infrastructure, email and communication tools, website analytics, error monitoring, customer relationship management, service status notifications, address lookup, and accounting and invoicing.

We may also disclose data to public authorities where the law requires it, and to professional advisers such as auditors and lawyers where necessary.

5. Transfers outside the EU/EEA

Our main systems are hosted in the EU. Some service providers are established outside the EU/EEA, for example in the United States or the United Kingdom. In those cases we rely on an adequacy decision, including the EU-US Data Privacy Framework where the provider is certified, or on the EU Commission's Standard Contractual Clauses. You can request a copy of the relevant safeguards at privacy@prezio.eu.

6. How long we keep data

We keep personal data only as long as needed for the purposes above:

Enquiries and demo requests: up to 2 years after our last contact, if no relationship follows.
Accounts: while the account is active, and deleted after 2 years of inactivity or within 3 months of account closure.
Business relationships: for the duration of the relationship and up to 3 years after it ends.
Accounting records: 5 years from the end of the financial year, as required by Danish bookkeeping law.
Logs and backups: for a limited period for security and recovery purposes, normally no longer than 90 days.
Consent-based data: until you withdraw consent or unsubscribe. Analytics data is kept as described in our Cookie Policy.

7. Your rights

You can request access to your personal data, and its correction, deletion or transfer to you in a portable format. You can also ask us to restrict processing.

You have the right to object at any time to processing based on our legitimate interests, and always to direct marketing. Where processing is based on consent, you can withdraw it at any time, without affecting processing that took place before.

To exercise your rights, email privacy@prezio.eu. We respond within one month. For complex requests this may be extended by up to two further months, in which case we will tell you.

You may also complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, www.datatilsynet.dk. We would appreciate the chance to address your concern first.

8. Security

We protect personal data with technical and organisational measures appropriate to the risk, including encryption, access control and hosting in the EU.

9. Changes

We may update this policy from time to time. The current version, with its effective date, is always available on this page.