006 — COMPLIANCE
Legal
Protocols
SECTION 01
Privacy Policy
Last updated: July 8, 2026
1.1 Data Controller Identification
The data controller responsible for processing personal data collected through this website is GraniteCircuitWorks, registered at Tordenskjoldsgade 17, 8200 Aarhus N, Denmark. For privacy-related inquiries, contact our designated Data Protection Officer at [email protected].
1.2 Categories of Personal Data Processed
We collect and process the following categories of personal data:
- Contact Information: Name, email address, telephone number provided through contact forms
- Technical Data: IP address, browser type and version, operating system, device identifiers
- Usage Data: Pages visited, time spent on pages, navigation patterns, referral sources
- Communication Data: Content of inquiries, correspondence history, project specifications
1.3 Legal Basis for Processing
Processing of personal data is conducted under the following legal bases as defined in Article 6 of the EU General Data Protection Regulation (GDPR):
- Consent (Article 6(1)(a)): Where you have given explicit consent for specific processing purposes, such as marketing communications
- Contractual Necessity (Article 6(1)(b)): Processing necessary for the performance of a contract or pre-contractual measures taken at your request
- Legitimate Interest (Article 6(1)(f)): Processing necessary for our legitimate interests in providing and improving our services, provided these interests do not override your fundamental rights
1.4 Data Retention Periods
Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected:
- Contact Form Submissions: Retained for 24 months from last communication
- Contract-Related Data: Retained for duration of contract plus 6 years (statutory retention period)
- Analytics Data: Anonymized after 26 months
- Marketing Consent Records: Retained until consent is withdrawn plus 3 years for compliance verification
1.5 Data Subject Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of Access (Article 15): Request confirmation of processing and obtain copies of your personal data
- Right to Rectification (Article 16): Request correction of inaccurate personal data
- Right to Erasure (Article 17): Request deletion of personal data where processing is no longer necessary
- Right to Restriction (Article 18): Request limitation of processing in specific circumstances
- Right to Data Portability (Article 20): Receive your personal data in a structured, machine-readable format
- Right to Object (Article 21): Object to processing based on legitimate interests or direct marketing
To exercise any of these rights, submit a written request to [email protected]. We will respond within 30 days of receipt.
1.6 International Data Transfers
Where personal data is transferred outside the European Economic Area (EEA), we ensure adequate protection through:
- European Commission adequacy decisions for recipient countries
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Binding Corporate Rules where applicable
1.7 Data Security Measures
We implement appropriate technical and organizational measures to ensure data security, including:
- Encryption of data in transit (TLS 1.3) and at rest (AES-256)
- Regular security assessments and penetration testing
- Access controls with principle of least privilege
- Employee training on data protection obligations
- Incident response procedures for data breaches
1.8 Supervisory Authority
You have the right to lodge a complaint with the relevant supervisory authority. For data protection matters in Denmark, contact the Danish Data Protection Agency (Datatilsynet):
Datatilsynet
Borgergade 28, 5.
1300 Copenhagen K
Denmark
Email: [email protected]
SECTION 03
Refund Policy
Last updated: July 8, 2026
3.1 Service Delivery Model
GraniteCircuitWorks operates on a milestone-based delivery model. Payment schedules are structured around verified project phases, ensuring alignment between deliverables and compensation.
3.2 Pre-Project Cancellation
Cancellations made before project commencement are eligible for full refund minus administrative processing fees (5% of total contract value). Cancellations within 48 hours of signed agreement incur no additional charges.
3.3 In-Progress Project Cancellation
For projects cancelled during active development:
- Completed and approved milestones are non-refundable
- Work-in-progress milestones are assessed based on completion percentage
- All source code and deliverables for paid milestones are transferred to the client
- Outstanding payments for completed work remain due within 14 days of cancellation notice
3.4 Quality Assurance Guarantees
All delivered work includes a 30-day quality assurance period. Issues identified during this period that relate to specifications defined in the project agreement will be resolved at no additional cost. Issues arising from new requirements or scope changes fall outside this guarantee.
3.5 Force Majeure Provisions
Neither party shall be liable for delays or failures in performance resulting from circumstances beyond reasonable control, including but not limited to natural disasters, pandemics, government actions, or internet infrastructure failures. In such cases, affected obligations are suspended until the force majeure event ceases.
3.6 Dispute Resolution
Refund disputes shall first be addressed through direct negotiation between parties. If resolution cannot be reached within 30 days, disputes shall be submitted to mediation. Unresolved disputes shall be subject to arbitration under Danish arbitration law, with proceedings held in Aarhus, Denmark.
SECTION 04
Terms of Service
Last updated: July 8, 2026
4.1 Agreement to Terms
By accessing or using the services provided by GraniteCircuitWorks, you agree to be bound by these Terms of Service. If you do not agree to these terms, you may not access or use our services. These terms constitute a legally binding agreement between you and GraniteCircuitWorks, registered at Tordenskjoldsgade 17, 8200 Aarhus N, Denmark.
4.2 Service Scope and Modifications
GraniteCircuitWorks provides web development, digital infrastructure engineering, and related technical services. Service specifications, pricing, and availability are subject to change without prior notice. Custom project scopes are defined in individual Statements of Work (SOW) that supplement these terms.
4.3 Client Obligations
Clients are responsible for:
- Providing accurate and complete project requirements and specifications
- Timely delivery of materials, assets, and access credentials required for project execution
- Designated decision-makers with authority to approve deliverables
- Compliance with all applicable laws and regulations in their jurisdiction
- Maintaining confidentiality of shared technical documentation and credentials
4.4 Intellectual Property Rights
Upon full payment, all intellectual property rights for custom-developed deliverables transfer to the client. GraniteCircuitWorks retains rights to:
- Pre-existing frameworks, libraries, and development tools used in project execution
- General knowledge, methodologies, and techniques developed during engagement
- Right to display project in portfolio and marketing materials unless explicitly restricted in writing
4.5 Confidentiality
Both parties agree to maintain strict confidentiality of proprietary information exchanged during the engagement. This obligation survives termination of the agreement for a period of 3 years. Confidential information includes but is not limited to business strategies, technical specifications, source code, and financial data.
4.6 Limitation of Liability
To the maximum extent permitted by law, GraniteCircuitWorks's total liability shall not exceed the total fees paid by the client for the specific service giving rise to the claim. GraniteCircuitWorks shall not be liable for indirect, incidental, special, consequential, or punitive damages, including loss of profits, data, or business opportunities.
4.7 Governing Law
These Terms of Service are governed by and construed in accordance with Danish law. Any disputes arising from or relating to these terms or the services provided shall be subject to the exclusive jurisdiction of the courts of Aarhus, Denmark.
4.8 Severability
If any provision of these terms is found to be unenforceable or invalid, that provision shall be limited or eliminated to the minimum extent necessary so that these terms shall otherwise remain in full force and effect.
4.9 Modifications to Terms
GraniteCircuitWorks reserves the right to modify these terms at any time. Material changes will be communicated via email to registered clients or posted prominently on our website with a 30-day notice period. Continued use of services after the effective date constitutes acceptance of modified terms.
For questions regarding these terms, contact: [email protected]
GraniteCircuitWorks — Tordenskjoldsgade 17, 8200 Aarhus N, Denmark