Dana Lim

Privacy policy

How we process your personal data

At Dana Lim A/S we take data protection seriously. This policy explains what information we collect, why we collect it, and what rights you have under the General Data Protection Regulation (GDPR) and the Danish Data Protection Act.

Last updated: 24 June 2026

1. Data controller

The legal entity responsible for processing your personal data in connection with this website is:

DANA LIM A/S

Company reg. no. 49294514

Københavnsvej 220, 4600 Køge, Denmark
+45 56 64 00 75

2. What information do we process?

We only process the personal data necessary for the purpose we have stated. Depending on how you use the website, this may include:

  • Contact details you provide yourself (name, email, phone, company)
  • The content of your enquiry
  • Technical information (IP address, browser, device, language)
  • Behavioural data about your use of the website (with your consent)
  • Cookies and similar technologies
  • Login credentials if you create an account

3. Purposes and legal basis

We process your information for the following purposes on the following legal bases under GDPR Article 6:

PurposeLegal basis
Responding to enquiriesConsent (Art. 6(1)(a)) or steps prior to entering into a contract (Art. 6(1)(b)).
Delivery and administration of products and servicesPerformance of a contract (Art. 6(1)(b)).
Operation, security and improvement of the websiteLegitimate interest (Art. 6(1)(f)).
Statistics and analytics via cookiesConsent (Art. 6(1)(a)).
Compliance with legal requirements (bookkeeping, REACH etc.)Legal obligation (Art. 6(1)(c)).

4. Services and data processors

The overview below is updated automatically based on the services and integrations actually enabled on our website. If we add a new integration (e.g. analytics, payment or AI), it will appear here immediately, so you always have an accurate picture of who we share data with.

Currently registered: 7 services.

Hosting & infrastruktur

Lovable (hosting & platform)

Policy

Hosting af hjemmesiden samt levering af platformens kerne­funktioner. Lovable hoster vores frontend via et globalt CDN.

Data
  • IP-adresse
  • User-Agent / browseroplysninger
  • Anmodningstidspunkt og besøgt URL
  • Tekniske logs til drift og sikkerhed
Location
EU/EØS samt globalt CDN (kortvarig caching).
Legal basis
Legitim interesse (GDPR art. 6, stk. 1, litra f) i at kunne drive en sikker og tilgængelig hjemmeside.

Database & backend

Lovable Cloud (database, auth & storage)

Policy

Lagring af produkt­data, oversættelser, kategorier samt eventuelle bruger­konti og uploadede filer. Driver desuden vores synkronisering med vores produkt­katalog.

Data
  • Produkt- og katalog­data (ikke person­data)
  • Ved login: e-mail, krypteret adgangskode/token, login-tidspunkter
  • Tekniske logs (IP, forespørgsler) til drift og sikkerhed
Location
EU-region. Behandles af Supabase Inc. som databehandler.
Legal basis
Nødvendig for opfyldelse af aftale (art. 6, stk. 1, litra b) og legitim interesse i drift og sikkerhed (litra f).

TanStack Query (caching i browseren)

Mellem­lagring af data i din browser, så sider loader hurtigere. Der sendes ingen data til tredje­part.

Data
  • Mellemlagrede svar fra vores eget backend (ingen person­data)
Location
Lokalt i din browsers hukommelse.
Legal basis
Nødvendig teknisk funktion (art. 6, stk. 1, litra f).

Produkt­synkronisering (WooCommerce)

Server-til-server synkronisering af vores produkt­katalog fra vores eksisterende WooCommerce-installation. Henter udelukkende produkt-, kategori- og medie­data – ingen kunde­data.

Data
  • Produkt- og kategori­data
  • Medie-/billed­links
Location
Mellem vores backend (EU) og vores eget WooCommerce-miljø (EU).
Legal basis
Legitim interesse i at vedligeholde et opdateret produkt­katalog (art. 6, stk. 1, litra f).

Kommunikation & formularer

Kontakt- og henvendelses­formularer

Når du udfylder en formular (fx kontakt eller forespørgsel), behandler vi de oplysninger, du sender, for at kunne besvare henvendelsen.

Data
  • Navn
  • E-mailadresse
  • Telefonnummer (hvis angivet)
  • Virksomhed (hvis angivet)
  • Indholdet af din besked
Location
Behandles af Dana Lim A/S i Danmark.
Legal basis
Samtykke (art. 6, stk. 1, litra a) eller foranstaltninger forud for indgåelse af aftale (litra b).

Brugergrænseflade

Sonner (in-app notifikationer)

Viser midlertidige beskeder i brugergrænsefladen. Ingen data forlader din browser.

Data
  • Ingen person­data
Location
Kun lokalt i din browser.
Legal basis
Nødvendig teknisk funktion (art. 6, stk. 1, litra f).

AI-funktioner

Lovable AI Gateway

Policy

Anvendes til AI-genererede funktioner (fx tekst- eller billed­assistance på interne værktøjer). Aktiveres kun, når en relevant funktion bruges.

Data
  • Den input-tekst eller -fil, der sendes til AI-funktionen
Location
Behandles af Lovable og dennes underleverandører af AI-modeller.
Legal basis
Legitim interesse (art. 6, stk. 1, litra f) eller samtykke (litra a).

5. Cookies

We use cookies and similar technologies to make the website work, to remember your choices and – with your consent – for statistics and marketing. You can view and change your consent at any time via the cookie banner at the bottom of the page. Strictly necessary cookies cannot be deselected, as the website does not work without them.

6. Recipients and transfers to third countries

We only disclose your information when necessary – for example to our data processors (see section 4), to partners such as carriers for delivery, or when required by law. If information is transferred to countries outside the EU/EEA, this only takes place on a valid transfer basis, such as the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses (SCCs) supplemented by appropriate technical and organisational measures.

7. Retention and deletion

We retain your information for as long as it is necessary to fulfil the purposes for which it was collected. Specifically:

  • Enquiries via forms and email

    Generally deleted no later than 24 months after the last communication, unless longer retention is necessary (e.g. for a complaint or an ongoing case).

  • Accounting and invoicing material

    Retained for 5 years from the end of the financial year to which the material relates, in accordance with the Danish Bookkeeping Act.

  • Operational and security logs

    Retained for up to 90 days, after which they are deleted or anonymised.

  • Cookies

    Deleted after the expiry period stated in our cookie declaration – or when you withdraw your consent.

8. Security

We have implemented appropriate technical and organisational measures to protect your information against loss, unauthorised access, alteration or disclosure. This includes encrypted connections (HTTPS/TLS), access controls, logging, regular updates and data processing agreements with our suppliers.

9. Your rights

Under the General Data Protection Regulation you have a number of rights in relation to our processing of information about you:

Right of access

You can find out what information we process about you and obtain a copy of it.

Right to rectification

You have the right to have inaccurate information about you corrected.

Right to erasure

In certain cases, you have the right to have information about you deleted before our standard deletion takes place.

Right to restriction of processing

In certain cases, you have the right to have the processing of your data restricted.

Right to object

In certain cases, you have the right to object to otherwise lawful processing of your information.

Right to data portability

In certain cases, you have the right to receive your information in a structured format and have it transferred to another data controller.

If you wish to exercise your rights, you can contact us at info@danalim.dk. You may also withdraw a consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

10. Complaint to the Data Protection Authority

You have the right to lodge a complaint with the Danish Data Protection Authority (Datatilsynet) if you are dissatisfied with the way we process your personal data.

Datatilsynet

Carl Jacobsens Vej 35, 2500 Valby, Denmark

Phone: +45 33 19 32 00 · www.datatilsynet.dk

11. Changes to the policy

We update this privacy policy on an ongoing basis to reflect our actual processing and the services used on the website. The overview of services in section 4 is generated automatically, and the date of the latest update is shown at the top of the page. In the event of material changes, we will inform you via the website.

Questions about how we handle personal data?

We're happy to help. You're always welcome to contact us if you have questions about this policy or your rights.

Questions?