Privacy Policy

Gram Equipment A/S is committed to protecting the privacy of all individuals whose personal data we process. This policy describes how we collect, use, store, and protect personal data in accordance with the EU General Data Protection Regulation (GDPR) and other applicable data protection legislation. This policy applies to customers, suppliers, website visitors, and job applicants who interact with Gram Equipment.

Data we collect and why

We collect and process personal data only for specific, legitimate business purposes, including:

Customer & order management: Names, addresses, phone numbers, and email addresses to process orders, invoicing, and after-sales service.
Technical support: Equipment serial numbers and maintenance data to diagnose and resolve issues promptly.
Supplier relations: Contact information to maintain productive business relationships.
Marketing: with your consent, we may send product updates and newsletters. You may withdraw consent at any time.
Job applications: If you apply for a position through our website, we collect the personal information you submit (such as your name, contact details, and CV) solely for the purpose of evaluating your application.
Legal & regulatory compliance: Financial and operational records as required by law.

We do not collect more data than is necessary for the stated purpose, and we do not use your data for purposes incompatible with those for which it was collected.

Legal basis for processing

We process personal data on one or more of the following grounds:

Performance of a contract with you
Compliance with a legal obligation
Our legitimate business interests, where these do not override your rights
Your explicit consent (where required)

Cookies

Our website uses cookies and similar tracking technologies. Below is an overview of the cookies we use and why.

‍Strictly Necessary Cookies
‍These cookies are essential for the website to function correctly. They do not track your browsing activity or build user profiles, and no consent is required for these under GDPR.

‍Functional Cookies
‍We use Google reCAPTCHA to protect our forms from spam and abuse. This sets local storage items (rc::a, rc::d-*) that help distinguish human users from automated bots. These are persistent but serve a security function.

‍Marketing & Third-Party Cookies
‍Where we embed YouTube videos on our website, YouTube may set a number of cookies and local storage items on your device. These include cookies used to store your video player preferences, track videos you have viewed, measure advertising effectiveness, and support personalised advertising.

Some of these persist for up to 5 months (e.g. VISITOR_PRIVACY_METADATA, VISITOR_INFO1_LIVE) or 180 days (__Secure-ROLLOUT_TOKEN). We do not directly control these third-party cookies. You can review YouTube's cookie practices in their Privacy Policy.

‍Managing Your Consent
‍You can manage your cookie preferences at any time using the cookie consent tool available on our website. You may also delete or block cookies through your browser settings, though this may affect the functionality of certain features.

Data sharing & transfers

We do not sell personal data. We may share data with trusted third-party service providers (e.g. IT hosting, payroll) who act as data processors under our instruction and are bound by written data processing agreements. Where data is transferred outside the EU/EEA, we ensure adequate safeguards are in place — such as the EU Standard Contractual Clauses — before any transfer takes place.

Data retention

Personal data is kept only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. When no longer needed, data is securely deleted.

Security

Gram Equipment applies appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure. Access to personal data is restricted to employees who require it to carry out their responsibilities. All relevant staff undergo GDPR training. In the event of a data breach, we have procedures in place to assess, contain, and report incidents to the relevant supervisory authority within the legally required timeframe.

Your Rights

Under GDPR you have the right to:

Access the personal data we hold about you
Correct inaccurate or incomplete data
Request erasure of your data (subject to legal obligations)
Object to or restrict certain processing activities
Receive your data in a portable format
Withdraw consent at any time (where processing is consent-based)

To exercise any of these rights, please contact us using the details below. We will respond within one month. You also have the right to lodge a complaint with the Danish Data Protection Authority (Datatilsynet, www.datatilsynet.dk).

Contact

Gram Equipment A/S
Nordager 2–6, DK-6000 Kolding, Denmark
Phone: +45 73 20 17 00

Changes to this policy

We may update this policy from time to time to reflect changes in legislation or our business practices. The latest version will always be available on our website.