Privacy Policy & GDPR
Data controller
Particulair, Højtoften 12, 2690 Karlslunde, Denmark. VAT: 34129894. Contact: sales@particulair.com.
Particulair is not required to appoint a Data Protection Officer (DPO) under GDPR Article 37 and has not done so. Enquiries about data processing are directed to us at the email above or gdpr@particulair.com.
What data do we collect?
We collect the personal data you provide yourself — typically name, company, email address and phone number — in connection with enquiries or quote requests.
In addition we collect technical data about your visit via the following tools, which are only activated if you give consent via our cookie banner:
- Google Analytics 4 (statistics consent) — anonymised visit data, including page views, session length, device type and approximate geographic location. IP anonymisation is enabled.
- Google Ads (marketing consent) — conversion measurement and remarketing tied to Google ad campaigns. Loaded via Google Tag Manager.
All tracking tools are managed via Google Tag Manager (GTM container GTM-K5GG8ZDF) with Google Consent Mode v2. This ensures that data is only collected when you have given active consent. See our cookie policy for a complete list of cookies.
Purpose and legal basis
Your information is used for:
- Responding to enquiries, preparing quotes and fulfilling contracts — legal basis: GDPR Article 6(1)(b) (contract performance). When an enquiry is purely a non-binding inquiry without an existing customer relationship, processing rests on GDPR Article 6(1)(f) (legitimate interest) — our legitimate interest in being able to respond professionally to B2B enquiries about centralized vacuum systems for production and industry outweighs the limited privacy impact of receiving and answering an email.
- Marketing to existing customers — legal basis: GDPR Article 6(1)(f) (legitimate interest), cf. Danish Marketing Practices Act § 10(2) (soft opt-in for similar products to existing customers).
- Data collection via cookies and tracking tools — legal basis: GDPR Article 6(1)(a) (consent), cf. the Danish Cookie Order § 3.
Legitimate Interest Assessment (LIA)
For processing based on legitimate interest, Particulair has carried out a written Legitimate Interest Assessment (LIA) in accordance with Danish Data Protection Agency guidance. The LIA evaluates (1) purpose specification (responding to B2B enquiries and maintaining the customer relationship), (2) necessity (no less intrusive alternatives are practically feasible for a B2B advisory business), and (3) balancing your right to privacy against our business interest. The conclusion is that the limited privacy impact (receiving an email and contact details from a person who has themselves reached out) is proportional. You can object to this processing at any time under GDPR Article 21.
Joint controllership (GDPR Article 26)
For processing of conversion data via Google Ads, Particulair and Google Ireland Limited act as joint controllers under GDPR Article 26. Particulair is responsible for obtaining consent via the cookie banner and giving you this information; Google is responsible for the audience modelling and statistical processing in the Google Ads platform. The essential content of the agreement between Particulair and Google for joint controllership is publicly available in Google's Controller-Controller Data Protection Terms (business.safety.google/controllerterms/). You can exercise your GDPR rights against either controller.
Third-party data processors
We use the following processors who process data on our behalf:
- Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) — Google Tag Manager, Google Analytics 4, Google Ads and Google Consent Mode v2. Data may be transferred to servers in the US under the EU–US Data Privacy Framework and EU Standard Contractual Clauses (SCC).
- Complitia.eu (VAT 43505130, Denmark) — external partner running Google Ads strategy, GA4 configuration and GTM administration as the controller's processor under a written Data Processing Agreement of 14 May 2026.
At pre-launch, CVS has no third-party chat widget or similar. If one is added later, this policy and the list above will be updated.
Hosting and data security
All our microsites, email systems and other business data are operated by Infomaniak Network SA, a Swiss hosting provider with servers physically located in Switzerland. We have deliberately chosen a European hosting partner outside the US hyperscalers because it gives clear control over where data is stored, which law applies, and who can potentially demand access.
Data does not leave Swiss territory under normal operation. Switzerland is recognised by the EU Commission with an adequacy decision, meaning the Swiss data protection level is equivalent to GDPR in EU law terms. In addition, Switzerland's own revised data protection law nFADP entered into force on 1 September 2023.
Infomaniak is ISO 27001-certified. The hosting environment includes TLS-encrypted data transfer, encrypted storage and logical separation between customers. Access to our systems is limited to employees with a work-related need, and all administrative access uses individual logins with multi-factor authentication.
International transfers
When data is transferred outside the EU/EEA, an adequate level of protection is ensured via the EU Commission's Standard Contractual Clauses (SCC) and, where relevant, the EU–US Data Privacy Framework (DPF). Specifically, the use of Google Analytics 4 and Google Ads may involve data transfers to the US under DPF. DPF status is verified quarterly at dataprivacyframework.gov; if the status changes the transfer basis is re-evaluated. Transfers to Switzerland are covered by the EU Commission's adequacy decision and do not require separate safeguards. You can request a copy of the relevant safeguards by contacting us.
Retention
Personal data is not kept longer than necessary. Customer data is kept for up to 5 years after the latest activity in accordance with the Danish Bookkeeping Act § 12. Statistical data in Google Analytics is anonymised and kept for up to 14 months. Google Ads conversion data is deleted according to Google's data retention policy.
Your rights
You have the right at any time to access, rectification, deletion, restriction and data portability (GDPR Articles 15–20). You also have the right to object to processing based on legitimate interest (Article 21). You can exercise these rights by contacting us at gdpr@particulair.com.
You also have the right to complain to the Danish Data Protection Agency, Carl Jacobsens Vej 35, 2500 Valby, phone +45 33 19 32 00, datatilsynet.dk.
Where processing is based on your consent, you have the right at any time to withdraw your consent without affecting the lawfulness of processing prior to withdrawal (GDPR Article 7(3)). Cookie consent can be withdrawn via “Cookie settings” in the footer — this reopens the cookie banner with your current choices.
Third parties
We do not pass your personal data to third parties without your consent, unless it is necessary to fulfil a contract or is required by law. The processors listed above process data solely on our behalf and according to our instructions.
The Particulair team