Privacy Policy

1. Who we are (the data controller)

This Privacy Policy explains how Numio ("Numio", "we", "us", "our") collects, uses and protects personal data when you visit numio.dk or contact us. Numio is the data controller for the personal data described below.

Numio ApS is registered in Denmark under CVR (business registration) number 46290593, with registered office at Ebberupvej 62B, 5631 Ebberup, Denmark.

2. What data we collect and why

When you use the contact form on numio.dk (/contactus), we collect the information you submit:

• Name – to address you correctly and identify you in our records.
• Email address – to respond to your inquiry.
• Phone number (optional) – to contact you by phone if that is more efficient.
• Company name (optional) – to understand the business context of your inquiry.
• Subject and message – the content of your question or request.

We use this data to: (a) respond to your inquiry, (b) evaluate and progress potential client onboarding and project scoping, and (c) maintain a record of business communications. We do not use contact-form data for unrelated marketing without your separate consent.

3. Legal basis for processing

• Legitimate interest (Art. 6(1)(f) GDPR) – responding to inquiries submitted to us and assessing prospective engagements.
• Consent (Art. 6(1)(a) GDPR) – where we contact you for marketing purposes beyond your original inquiry; you may withdraw this consent at any time.
• Contract (Art. 6(1)(b) GDPR) – where you become a Numio client, processing necessary to perform and administer that contract.

4. How long we keep your data

We retain contact-form and inquiry data for as long as necessary to respond to your inquiry, and for up to 24 months after your last contact with us if no client engagement follows. If you become a Numio client, data relevant to that engagement is retained for the duration of the contract plus any period required by applicable law (for example, Danish bookkeeping and accounting record-keeping rules). Data no longer needed for these purposes is securely deleted or anonymized.

5. Who we share data with

We do not sell personal data. We may share data with trusted service providers who support our operations (for example, email/hosting and business-systems providers) strictly to the extent necessary to deliver our services, and only under appropriate data protection terms. We do not transfer personal data outside the EU/EEA without an adequate safeguard being in place.

6. Your rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you.
• Rectification of inaccurate or incomplete data.
• Erasure of your data ("right to be forgotten"), where applicable.
• Restriction of processing in certain circumstances.
• Data portability – receive your data in a structured, machine-readable format.
• Object to processing based on legitimate interest or for direct marketing.

To exercise any of these rights, contact us at [email protected]. We will respond within one month of receiving your request, as required by Article 12(3) GDPR. You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet, www.datatilsynet.dk).

7. Data processing on behalf of clients

Numio is an accounting and bookkeeping systems consultancy. Where we are engaged by a business client and, in that capacity, process financial records or other personal data on the client's behalf (for example, within an ERP or accounting system we implement or operate), Numio acts as a data processor for that client, who remains the data controller for its own data. A separate Data Processing Agreement (DPA), meeting the requirements of GDPR Article 28, is made available to business clients once an engagement begins. Contact [email protected] to request a copy.

8. Cookies

numio.dk uses only strictly necessary cookies required for the website to function. We do not currently use analytics or advertising cookies. Should this change, this policy will be updated accordingly.

9. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page indicates when it was last revised.

10. Contact us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at [email protected].