Legal Documentation & Policies

Princh User Privacy Policy

Last updated: 2024-09-25

Version 2.0

As a user of the Princh Applications, this privacy policy applies to you. We at Princh A/S, and its subsidiaries, act as the “data processor” of your personal data, and we are committed to safeguarding the privacy of our users.

Read this Privacy Policy to learn more about the way we process your personal data.

1. How to get in touch with us?

If you have any questions regarding this privacy policy and the way we enforce it, you may contact us in the following ways:

You may submit inquiries at privacy@princh.com or by submitting a form here.

For UK Users:

Pursuant to Article 27 of the UK GDPR, Princh has appointed a UK Data Representative:

  • Representative: GDPR Rep
  • Address: 3rd Floor, 86-90 Paul Street, London EC2A 4NE
  • Email: info@gdprep.org

For Swiss Users:

In accordance with Articles 14 and 15 of the Swiss nFADP, Princh has appointed a Swiss Data Representative:

  • Representative: GDPR Rep
  • Address: Andreaspark, Hagenholzstrasse 56, 7th Floor, Zurich 8050
  • Email: info@gdprep.org

2. How and when do we collect information?

Princh collects user information through various channels and platforms as part of its service offerings.

Methods of Data Collection:

  • Scanning, Copying, and Printing Services: When users utilize Princh’s scanning, copying, or printing services across any of its platforms, including web applications (accessible via browsers), iOS and Android mobile applications, Princh Cloud Printer (available on public computers), and Princh Cloud Console (accessible on public tablets), user data may be collected.

Timing of Data Collection:

Data collection occurs concurrently with the use of Princh’s scanning, copying, and printing services. The specific types of information collected will depend on the service being used and the platform through which it is accessed.

3. What information do we collect?

Contact information

Princh does not obtain your contact information unless you want to receive a receipt. In this scenario, you must provide us with your name and email information. We process that information for five years + current year, and then we delete it.

Payment info

When you do your purchase electronically, we process your payment information such as, credit card type, the last 4 digits of your card number and the date of the purchase. We process that for five years + current year, and then we delete it to comply with the Danish accounting law.

Documents you upload

The documents you upload for printing are processed for 24 hours, and then they are automatically deleted.

4. What is our legal basis for processing?

Basis 1: Legitimate interest

Processing your data is necessary for the purposes of our legitimate interests (only valid if they are not outweighed by your rights and interests) such as:

  • Delivering our Princh products and responding to your inquiries;
  • Developing and improving Princh products;
  • Enhancing data security.

Basis 2: Performance of a contract

The processing of personal data is necessary for the performance of contractual obligations between Princh and its customers (including but not limited to public libraries, hotels, and partners). Such processing may also be a prerequisite for entering into new contracts with Princh.

5. Why do we use your information?

  • To let you pay for our services.
  • To make sure that you can print, scan and copy documents.
  • To make sure you have a good product that is well-functioning.

6. Who has access to the data we are processing?

Princh does not sell, trade or transfer any personally identifiable information to outside parties. Still, we may release information when we believe it is appropriate to comply with the law, enforce our site policies, or protect our or others’ rights.

To properly function as a company, Princh uses trusted third parties who assist us in operating our cloud infrastructure and payment services. Such trusted parties may have access to personally identifiable information on a need-to-know basis and will be contractually obliged by a Data Processing Agreement to keep your information confidential. Examples of providers we use may include, but are not limited to:

I. Core Infrastructure:

  • AWS (Amazon Web Services): Provides Infrastructure as a Service (IaaS). AWS owns and operates the underlying physical infrastructure (servers, network, storage) that hosts Princh Software data and services.
  • MongoDB Atlas (on AWS): Serves as the Database as a Service (DBaaS) provider. MongoDB owns and operates the database platform where Princh manages its database instances.

II. Supporting Services:

  • 84Codes CloudAMQP: Delivers Platform as a Service (PaaS) for message brokering. Provides RabbitMQ as a service, enabling communication between different components of the Princh Software.
  • Lunaweb GMBH: Offers file conversion services, transforming files into printable formats.

III. Payment Processing:

  • Adyen: Payment provider offering secure payment processing solutions.
  • Bambora AB: Payment provider supporting various payment methods.
  • Quickpay: Payment provider facilitating online transactions.

Princh A/S is committed to protecting your personal data. We may engage third-party service providers located in various countries (such as the United States, Netherlands, Ireland, Denmark, etc.) to assist us in delivering our services. While these countries may have different privacy laws than those in your jurisdiction, we ensure that all data transfers are conducted in accordance with appropriate safeguards.

Specifically, we utilize standard data protection clauses adopted or approved by the European Commission to govern these transfers. These clauses provide a legally binding framework for ensuring adequate protection of your personal data when it is transferred outside the European Economic Area (EEA).

Furthermore, Princh A/S operates under the principles of the European General Data Protection Regulation (GDPR) which prioritizes user privacy and data security. To further enhance the protection of your documents, we employ encryption techniques. Your documents are encrypted with a unique key accessible only by the printer machine, meaning that no unauthorized parties can view or access your information.

7. How to access your personal data?

We understand the importance of your data privacy. Princh is committed to transparency and giving you control over your personal information.

You have the right to access, verify, correct, or delete the personal data Princh holds about you. To make a request:

  • Contact Us: Email us at privacy@princh.com. If you are located in the UK or Switzerland, you can also contact one of our designated Data Representatives.
  • Verification: For security purposes, we may require proof of identity before disclosing any information. This may include your email address and, in some cases, your physical address.

Upon receiving a valid request, Princh will provide you with a readable copy of the personal data we hold about you within a reasonable timeframe, subject to applicable legal exceptions.

8. How long do we keep your data for?

  • Princh will not retain your personal information longer than necessary. We will hold on to the information you provide for as long as is necessary to be able to provide the services that you requested.
  • Documents you upload as a user will be kept for 24 hours, and thereafter, automatically deleted.
  • Billing data which is the data kept regarding your transaction(s) will be kept for 5 years + current year to comply with Danish accounting law.

We regularly review and update our practices to ensure the best possible protection of your data. For any questions regarding this Privacy Policy or your interactions with our services, please do not hesitate to contact us.