Privacy Policy & Data Protection

At Kombiner, we take data protection and privacy seriously. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Danish data protection laws.

This Privacy Policy explains what data we collect, why we collect it, how it is used, and your rights as a data subject.

1. Data controller

Kombiner is the data controller for the personal data processed through the Kombiner platform and website.

For any questions regarding data protection, you may contact us at:
support@kombiner.com

2. What data we collect

2.1 User and organization data

When you use Kombiner, we may process:

  • Name
  • Email address
  • Company name
  • Role and permissions
  • User activity within the platform
  • Organization-related configuration data

This data is required to provide access to the platform and ensure correct functionality.

2.2 Product and business data

Kombiner processes product-related data such as:

  • Product titles
  • Images
  • Prices
  • Inventory information
  • Variants and configurations

If you connect a Shopify store, Kombiner only reads product-related data.
We do not collect or process Shopify customer or order data.

2.3 Orders, requests, and quotes

When B2B orders, requests, or quotes are created through Kombiner, we process data necessary to complete the transaction, including:

  • Company details
  • Contact information
  • Configured products
  • Prices and order status

This data is processed solely to support your B2B sales workflows.

2.4 Support inquiries

When you contact us via a support form or email, we may process:

  • Name
  • Email address
  • Company name
  • Message content
  • Optional attachments

Support data is used exclusively to respond to your inquiry.

2.5 Website analytics

We use Google Analytics (GA4) to understand how visitors use our website.

Analytics data may include:

  • Page views
  • Scroll behavior
  • Click interactions
  • Device and browser information

This data is processed in aggregated form and does not contain personally identifiable information.

Google Analytics is only activated after consent is given via our cookie consent mechanism.

2.6 Security and spam prevention

Our website is protected by Google reCAPTCHA to prevent abuse and automated submissions.

The use of reCAPTCHA is subject to Google’s Privacy Policy and Terms of Service.

3. Purpose of processing

We process personal data for the following purposes:

  • Providing access to the Kombiner platform
  • Managing user accounts and organizations
  • Enabling B2B ordering, quotes, and requests
  • Supporting integrations with third-party systems
  • Responding to support inquiries
  • Improving platform performance and usability
  • Ensuring security and preventing misuse

4. Legal basis for processing

We process personal data based on:

  • Performance of a contract (GDPR Art. 6(1)(b))
  • Legitimate interest in operating and improving our service (Art. 6(1)(f))
  • Consent, where required (Art. 6(1)(a)), such as for analytics and support forms

You may withdraw consent at any time.

5. Data processors and third parties

Kombiner uses trusted data processors, including:

  • Hosting and infrastructure providers
  • Analytics providers (Google Analytics)
  • Email and communication services
  • Accounting system integrations (e.g. Dinero, e-conomic, Uniconta, Billy)

We only share data necessary for the specific purpose and never sell personal data to third parties.

6. Data storage and security

Your data is stored securely using industry-standard infrastructure and encryption.

Access to personal data is restricted to authorized personnel only.

7. Data retention

We retain personal data only for as long as necessary:

  • User and organization data: for the duration of the customer relationship
  • Support inquiries: up to 12 months after the case is closed
  • Analytics data: according to Google Analytics retention settings

Data may be retained longer where required by law.

8. Your rights

You have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to or restrict processing
  • Withdraw consent at any time
  • Lodge a complaint with the Danish Data Protection Authority (Datatilsynet)

Requests can be sent to support@kombiner.com.

9. International data transfers

Where data is transferred outside the EU/EEA, Kombiner ensures appropriate safeguards are in place in accordance with GDPR requirements.

10. Changes to this policy

This Privacy Policy may be updated from time to time.
The latest version will always be available on our website.