Privacy Policy

Data we collect and why

We collect and process personal data only for specific, legitimate business purposes, including:

• Customer & order management: Names, addresses, phone numbers, and email addresses to process orders, invoicing, and after-sales service.
• Technical support: Equipment serial numbers and maintenance data to diagnose and resolve issues promptly.
• Supplier relations: Contact information to maintain productive business relationships.
• Marketing: with your consent, we may send product updates and newsletters. You may withdraw consent at any time.
• Job applications: If you apply for a position through our website, we collect the personal information you submit (such as your name, contact details, and CV) solely for the purpose of evaluating your application.
• Legal & regulatory compliance: Financial and operational records as required by law.

We do not collect more data than is necessary for the stated purpose, and we do not use your data for purposes incompatible with those for which it was collected.

Legal basis for processing

We process personal data on one or more of the following grounds:

• Performance of a contract with you
• Compliance with a legal obligation
• Our legitimate business interests, where these do not override your rights
• Your explicit consent (where required)

Cookies

Our website currently uses technical (strictly necessary) cookies only. These are essential for the website to function correctly and do not track your browsing activity or build user profiles. We do not currently use analytics, advertising, or behavioural tracking cookies. No consent is required for strictly necessary cookies under GDPR.
‍
Please note: We are in the process of reviewing and updating our cookie practices. In the future, we may introduce additional cookies (such as analytics). Should this change, we will update this policy accordingly and, where required, ask for your consent before any non-essential cookies are set.

Data sharing & transfers

We do not sell personal data. We may share data with trusted third-party service providers (e.g. IT hosting, payroll) who act as data processors under our instruction and are bound by written data processing agreements. Where data is transferred outside the EU/EEA, we ensure adequate safeguards are in place — such as the EU Standard Contractual Clauses — before any transfer takes place.

Data retention

Personal data is kept only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. When no longer needed, data is securely deleted.

Security

Gram Equipment applies appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure. Access to personal data is restricted to employees who require it to carry out their responsibilities. All relevant staff undergo GDPR training. In the event of a data breach, we have procedures in place to assess, contain, and report incidents to the relevant supervisory authority within the legally required timeframe.

Your Rights

Under GDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request erasure of your data (subject to legal obligations)
• Object to or restrict certain processing activities
• Receive your data in a portable format
• Withdraw consent at any time (where processing is consent-based)

To exercise any of these rights, please contact us using the details below. We will respond within one month. You also have the right to lodge a complaint with the Danish Data Protection Authority (Datatilsynet, www.datatilsynet.dk).

Contact

Gram Equipment A/S
Nordager 2–6, DK-6000 Kolding, Denmark
Phone: +45 73 20 17 00

Changes to this policy

We may update this policy from time to time to reflect changes in legislation or our business practices. The latest version will always be available on our website.