Privacy Policy
Last updated: 15 January 2026
Introduction
This Privacy Policy explains how brinalveto.top AS ("we", "our", or "us") collects, uses, and protects your personal information when you visit our website brinalveto.top or use our spa demand forecasting services. We are committed to protecting your privacy and ensuring transparency about our data practices.
Data Controller Information
The data controller for your personal information is:
- Company: brinalveto.top AS
- Registration Number: CVR25367461
- VAT Number: DK25748369
- Address: Nyhavn 30, 8053 Aarhus, Central Denmark, DK
- Email: [email protected]
- Phone: +45 33685587
Data We Collect
We collect different types of personal data depending on how you interact with our website and services. The data collection includes information you provide directly to us and information we gather automatically through your use of our platform.
Information You Provide to Us
- Contact Information: Name, email address, phone number, company name, and postal address when you contact us or request information about our services
- Account Information: Username, password, and profile details when you create an account for our forecasting platform
- Business Information: Details about your spa business, including location, services offered, and operational data necessary for demand forecasting
- Communication Data: Messages, feedback, and correspondence you send to us through contact forms, email, or customer support channels
Information We Collect Automatically
- Website Usage Data: IP address, browser type, device information, pages visited, time spent on pages, and referral sources
- Analytics Data: Information about how you interact with our website and platform features
- Technical Data: Login times, system logs, error reports, and performance metrics
How We Use Your Information
We use your personal data for specific, legitimate purposes that enable us to provide and improve our spa demand forecasting services. Our use of your data includes processing for service delivery, customer support, business operations, and platform enhancement.
Service Provision
- Delivering our demand forecasting and analytics services
- Creating and managing your account
- Processing your requests and providing customer support
- Generating forecasting reports and insights for your spa business
Communication and Marketing
- Responding to your enquiries and providing information about our services
- Sending service updates, security alerts, and administrative messages
- Delivering marketing communications about our services (with your consent)
- Conducting customer satisfaction surveys and feedback collection
Business Operations
- Improving our forecasting algorithms and platform functionality
- Conducting research and development for new features
- Ensuring platform security and preventing fraud
- Complying with legal obligations and regulatory requirements
Legal Basis for Processing
Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:
- Contract Performance: To provide our forecasting services and fulfil our contractual obligations to you
- Legitimate Interests: To improve our services, conduct business operations, and ensure platform security
- Consent: For marketing communications and non-essential cookies (which you can withdraw at any time)
- Legal Obligation: To comply with applicable laws and regulations
Cookies and Tracking Technologies
We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.
For detailed information about the cookies we use, please refer to our Cookie Policy.
Data Sharing and Disclosure
We do not sell your personal data to third parties. We may share your information in the following circumstances:
Service Providers
We work with trusted third-party service providers who assist us in delivering our services, including:
- Cloud hosting and infrastructure providers
- Analytics and performance monitoring services
- Customer support and communication platforms
- Payment processing services
Legal Requirements
We may disclose your information when required by law or to:
- Comply with legal processes, court orders, or government requests
- Protect our rights, property, or safety, or that of our users
- Investigate and prevent fraud or security issues
International Data Transfers
Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer your data internationally, we ensure appropriate safeguards are in place, including:
- Adequacy decisions by the European Commission
- Standard contractual clauses approved by the European Commission
- Certification schemes and codes of conduct
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by law. Our data retention periods include:
- Account Data: Retained while your account is active and for up to 3 years after account closure
- Business Data: Retained for the duration of our service agreement and up to 7 years for accounting and legal purposes
- Marketing Data: Retained until you withdraw consent or for up to 2 years of inactivity
- Website Analytics: Typically retained for 26 months in accordance with analytics service policies
Your Rights
Under GDPR and applicable data protection laws, you have the following rights regarding your personal data:
Access and Portability
- Right of Access: Request confirmation of whether we process your data and obtain a copy of your personal information
- Data Portability: Receive your data in a structured, commonly used format and transmit it to another controller
Correction and Deletion
- Rectification: Request correction of inaccurate or incomplete personal data
- Erasure: Request deletion of your personal data in certain circumstances
Processing Restrictions
- Restriction: Request limitation of processing in specific situations
- Objection: Object to processing based on legitimate interests or for direct marketing purposes
- Withdraw Consent: Withdraw consent for processing activities that require your consent
To exercise any of these rights, please contact us at [email protected] or +45 33685587. We will respond to your request within one month of receipt.
Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication procedures
- Employee training on data protection and security
- Incident response and breach notification procedures
Contact Information
If you have any questions about this Privacy Policy or our data practices, please contact us:
- Privacy Email: [email protected]
- General Contact: [email protected]
- Phone: +45 33685587
- Address: brinalveto.top AS, Nyhavn 30, 8053 Aarhus, Central Denmark, DK
Supervisory Authority
You have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) if you believe we have not handled your personal data in accordance with applicable law:
- Website: www.datatilsynet.dk
- Address: Borgergade 28, 5., 1300 Copenhagen K, Denmark
- Phone: +45 33 19 32 00
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings. We will notify you of any material changes by posting the updated policy on our website brinalveto.top and updating the "Last updated" date. We encourage you to review this policy periodically to stay informed about how we protect your privacy.
Cookie Policy Reference
For detailed information about our use of cookies and similar technologies, please see our comprehensive Cookie Policy, which forms part of this Privacy Policy.