Privacy Policy

Version 1 – Last updated on 4 August 2026.

Introduction

At Lund Maskinfabrik A/S (“Lund Maskinfabrik” or “we/us”), we place a high priority on data security and confidentiality. This privacy policy sets out how we process the personal data that is collected and processed when you visit our website www.lund-maskinfabrik.com or send contact forms to us.

Data controller

The website is owned and published by:

Lund Maskinfabrik A/S
Lundvej 20, 8700 Horsens, Denmark
CVR no.: 19957306

Phone: +45 75 65 40 04
Email: info@lund-maskinfabrik.com

Legal basis for processing your personal data

Our legal basis for processing your personal data is as follows:

• Performance of a contract, e.g. if we enter into an agreement with you or respond to your enquiry (Article 6(1)(b) of the General Data Protection Regulation, GDPR).
• Our legitimate interest in being able to send service messages, conduct surveys, compile statistics, etc. (Article 6(1)(f) GDPR).
• Our legitimate interest in ensuring compliance with terms and conditions, including the ability to establish, exercise or defend legal claims (Article 6(1)(f) GDPR).
• Our legal obligation to comply with legislation, including the Danish Bookkeeping Act (Article 6(1)(c) GDPR).
• Our legitimate interest in improving and developing our websites, services and products (Article 6(1)(f) GDPR).
• Consent in relation to direct marketing, e.g. when signing up for a newsletter (Article 6(1)(a) GDPR).

Categories of personal data

Personal data that may be collected and processed includes:

• Your digital behaviour from your use of lund-maskinfabrik.com.
• A unique ID and technical information about your computer, tablet or mobile phone, your IP address, geographical location and which pages you click on (interests).
• Personal data provided when filling in forms on lund-maskinfabrik.com, including name, email address, phone number, company and message.
• Customer data such as billing address, delivery address, order history and payment information.
• Certain personal data may also be collected via cookies as you navigate our website, if you have given your consent. Please see our cookie policy.

Categories of recipients

We use a number of third parties to store and process data. They process data solely on our behalf and may not use it for their own purposes. Depending on the circumstances, we may transfer your personal data to the following recipients in order to fulfil the purposes described above:

• IT suppliers for operations and support, including Microsoft for email and cloud storage.
• Payment providers for order processing and settlement.
• Suppliers and logistics providers for shipping orders.
• Accountants and auditors for legal and accounting purposes.
• Personal data may be disclosed to third parties to a wider extent, e.g. if required by mandatory law or by public authorities, or when disclosed to the police, courts, lawyers and auditors.

Transfers to recipients outside the EU/EEA

We use the following suppliers, which may involve the transfer of personal data to countries outside the EU/EEA. You can read more about the transfer mechanisms in the European Commission’s Standard Contractual Clauses here.

Microsoft Corporation

• Including Office 365: Headquartered in the USA. The transfer mechanism is as follows: Microsoft Corporation – Standard Contractual Clauses (Article 46 GDPR).

Retention of personal data

We store your personal data for as long as necessary for the purposes of the processing:

• Contact forms and email enquiries: Deleted after 2 years, unless they relate to a customer relationship.
• Customer data: Stored for as long as there is an active customer relationship, and for at least 5 years after the last transaction (accounting requirements).
• Technical log files: Stored for a maximum of 30 days.

Deletion of personal data

We delete your personal data when we no longer need to process it to fulfil one or more of the purposes set out in the section “Legal basis for processing your personal data” above. However, the data may be processed and stored for longer in anonymised form.

Security

We have implemented appropriate technical and organisational security measures to ensure an adequate level of security. In doing so, we do our best to ensure the quality and integrity of your personal data. This includes:

• Encryption of data in transit and at rest
• Secure servers and cloud solutions (Microsoft 365)
• Access control and authorisation mechanisms
• Regular security checks
• Staff training in data protection

Withdrawal of consent

You can withdraw any consent you have given at any time. We will then delete your data, unless we can continue processing it on another legal basis.

You can also write to us at info@lund-maskinfabrik.com or call us on +45 75 65 40 04.

Your rights

Under the General Data Protection Regulation, you have a number of rights in relation to our processing of your personal data.
If you wish to exercise your rights, please contact us using the contact details in the section “Data controller” above. When contacting us about your rights, please provide sufficient information – your name and email address – so that we can handle your request and identify you. We will respond to your request as soon as possible and no later than within one month.

Right of access

• You have the right to access the personal data we process about you, as well as a range of additional information.

Right to rectification

• You have the right to have inaccurate personal data about you corrected.

Right to erasure

• In special cases, you have the right to have personal data about you erased before our regular general deletion takes place.

Right to restriction of processing

• In certain cases, you have the right to have the processing of your personal data restricted. If you have the right to have processing restricted, we may in future only process the data – apart from storing it – with your consent, or for the establishment, exercise or defence of legal claims, or to protect a person or important public interests.

Right to object

• In certain cases, you have the right to object to our otherwise lawful processing of your personal data.

Right to data portability

• In certain cases, you have the right to receive your personal data and to request that it be transferred from one data controller to another.

Complaint to the Danish Data Protection Agency

• You have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) if you are dissatisfied with the way we process your personal data. You are also welcome to contact us at info@lund-maskinfabrik.com or +45 75 65 40 04, and you may bring a case before an ordinary court.

You can lodge a complaint with:
Datatilsynet (Danish Data Protection Agency)
Borgergade 28, 5th floor,
1300 Copenhagen K,
Denmark

Phone: 33 19 32 00
Email: dt@datatilsynet.dk
Web: www.datatilsynet.dk

Changes to this privacy policy