Privacy notice

Last updated: 7 November 2026

1. Who we are

HEM Industries is operated by Albarosa ApS, a company registered in Denmark (CVR 46542193). Albarosa ApS is the data controller for the personal data described in this notice.

Registered address: [registered address to be confirmed]
Privacy contact: [privacy contact email to be confirmed]

2. Data we collect

When you use our contact or diagnostic form

Your name, company, work email, phone number (if given), company website, country, business type and anything you write in the message field.

When you visit the website

We use privacy-friendly, cookieless analytics provided by our hosting platform to count page visits. It does not use cookies or build a profile of you. We do not use advertising or tracking cookies on this website.

When we contact your business

If we have contacted you as a potential business customer, we may hold your name, job title, business contact details and company information that we collected from public sources such as your company website, public company registers or professional networks, together with a record of our contact with you.

3. Why we use it and our legal basis

• Answering your request and arranging a call or diagnostic: steps taken at your request before entering into a contract (GDPR Art. 6(1)(b)), and our legitimate interest in responding to business inquiries (Art. 6(1)(f)).
• Business-to-business prospecting: our legitimate interest in offering relevant services to businesses (Art. 6(1)(f)). We carry out a balancing assessment before contacting businesses and contact you only in ways permitted by the electronic-marketing rules of your country.
• Running and improving the website: our legitimate interest in understanding aggregate, anonymous visit numbers (Art. 6(1)(f)).

4. Your right to object

You can object at any time to our use of your data for business prospecting or direct marketing, and we will stop. Use the contact details in section 1 or reply to any message from us.

5. Who we share it with

We use carefully selected service providers to run our business, such as website hosting and form handling, our customer-relationship management system, email and video-messaging tools. They process data on our behalf under data-processing agreements. Where a provider processes data outside the EU/EEA, we rely on appropriate safeguards such as the EU Standard Contractual Clauses or an adequacy decision. We do not sell personal data.

6. How long we keep it

• Inquiries that do not become a customer relationship: up to 24 months after our last contact.
• Prospecting records where there has been no response: up to 12 months.
• If you object or ask us not to contact you, we keep a minimal record (name, company, email) on a suppression list so we can honour that request.
• Customer records: for as long as the contract runs and afterwards as required by accounting and tax law.

7. Your rights

You have the right to access, correct or delete your personal data, to restrict or object to its processing, and to data portability. You also have the right to complain to a data-protection authority: in Denmark, Datatilsynet (datatilsynet.dk); in Hungary, NAIH (naih.hu); in the United Kingdom, the Information Commissioner's Office (ico.org.uk).

8. Changes

We may update this notice. The date at the top shows when it was last changed.