Legal Documentation & Policies

Version 1.4

This Data Privacy Policy outlines how Princh A/S and its subsidiaries (hereinafter referred to as "Princh," "we," "us," or "our") collect, process, disclose, and safeguard personal data in connection with the services provided. Whether you are utilizing our products, browsing our website, or conducting transactions with us, we are committed to protecting your privacy and ensuring your data is handled with the utmost care and in full compliance with applicable legal requirements.

• Contact Information: Name, email address, company, job title, country, and language (collected through voluntary forms or interactions).
• Payment Information: Payment card details (limited to the last 4 digits and transaction date) stored for compliance with accounting regulations.
• Document: Files uploaded for printing, scanning, or copying are encrypted, and stored for 24 hours before automatic deletion.
• Browsing Data: IP addresses, browser types, device details, and usage patterns collected through cookies and other web tracking technologies.

We process your personal data on the following legal grounds:

• Legitimate Interest: Processing is necessary to improve our services, provide customer support, and ensure data security.
• Performance of a Contract: Personal data is processed to fulfill the terms of service you engage in, including print and payment services.

• Provision of printing, scanning, and copying services.
• Secure processing of payments.
• Service improvements and product development.
• Compliance with legal obligations, such as financial record-keeping.
• Personalizing the website and product recommendations based on your behaviour and preferences.

We do not sell or trade your personal data. However, based on how you use our services, to facilitate our operations, we may disclose data to third-party service providers, including:

• Infrastructure Providers: AWS and MongoDB Atlas, who manage our cloud infrastructure and databases.
• Supporting Services: Lunaweb GMBH (file conversion services), 84Codes CloudAMQP (message brokering services), Princh Inc. (Princh A/S subsidiary providing support to end-users and customers’ employees), and GetAccept (electronic signature service used in Princh direct customer onboarding and contract management).
• Payment Processor: Adyen who processes payment transactions securely.
• Website Services: Unoeuro (web hosting), HubSpot (CRM and marketing), Plausible (privacy-focused analytics), and Cookietbot (cookie consent management).

All third-party providers are contractually obligated to protect your data and comply with applicable privacy regulations, including GDPR, UK GDPR, and nFADP.

We implement industry-standard security measures to protect your personal information. All data transmissions are encrypted at rest, and we ensure that documents uploaded for printing are encrypted.

• Document Content: Files uploaded are stored for 24 hours, after which they are automatically deleted.
• Payment Information: Stored for five years + current year to comply with Danish law.
• Contact Information: Retained as long as necessary to provide services and fulfill legal obligations.
• Logs: Retained for 120 days for DDoS protection and incident analysis, including IP addresses and authenticated user/system IDs. Automatically deleted afterward, with access limited to authorized personnel.

You are entitled to:

1. Access: Request a copy of the personal data we hold about you.
2. Rectification: Correct any inaccurate information.
3. Erasure: Under certain conditions, request the deletion of your data.
4. Restriction of Processing: Request limitations on data processing in specific circumstances.
5. Data Portability: Receive your personal data in a structured format for transfer to another controller.

To exercise any of these rights, please contact us at privacy@princh.com. We may require verification of your identity for security purposes.

We do not knowingly collect personal data from children under 13. If you believe a minor has used our services and provided personal information, please contact us immediately, and we will take appropriate steps to remove the data.

12.1 The following categories of product data and related service data are generated through your use of our connected printing services for each document processed:

1. Printed page range
2. Paper format selection
3. Duplex configuration settings
4. Colour printing parameters
5. Time of job submission
6. Time of job completion
7. Additional transactional information, including printing location designation and pricing data, is documented on the service receipt provided to you.

12.2 Pursuant to Article 5(1) of the Data Act, you are entitled to request access to your product data and related service data. Upon written request, Princh shall provide such data in a structured, commonly used, and machine-readable format (CSV or JSON) within thirty (30) calendar days, without charge to you as the data subject.

12.3 In accordance with Article 5(2) of the Data Act, you have the right to:

1. Receive your data in a structured, commonly used, and machine-readable format
2. Transmit such data to third-party service providers of your choosing
3. Request direct transmission of data to another data controller where technically feasible

12.4 To exercise your rights under the Data Act, please refer to Clause 1.1 of this Data Privacy Policy.

13.1. This Data Privacy Policy shall be governed by and construed in all respects in accordance with the Laws of Denmark, and submitted to the jurisdiction of the Court in Aarhus, Denmark.