[email protected]

+45 41 27 59 38

006 — COMPLIANCE

Legal
Protocols

SECTION 01

Privacy Policy

Last updated: July 8, 2026

1.1 Data Controller Identification

The data controller responsible for processing personal data collected through this website is GraniteCircuitWorks, registered at Tordenskjoldsgade 17, 8200 Aarhus N, Denmark. For privacy-related inquiries, contact our designated Data Protection Officer at [email protected].

1.2 Categories of Personal Data Processed

We collect and process the following categories of personal data:

  • Contact Information: Name, email address, telephone number provided through contact forms
  • Technical Data: IP address, browser type and version, operating system, device identifiers
  • Usage Data: Pages visited, time spent on pages, navigation patterns, referral sources
  • Communication Data: Content of inquiries, correspondence history, project specifications

1.3 Legal Basis for Processing

Processing of personal data is conducted under the following legal bases as defined in Article 6 of the EU General Data Protection Regulation (GDPR):

  • Consent (Article 6(1)(a)): Where you have given explicit consent for specific processing purposes, such as marketing communications
  • Contractual Necessity (Article 6(1)(b)): Processing necessary for the performance of a contract or pre-contractual measures taken at your request
  • Legitimate Interest (Article 6(1)(f)): Processing necessary for our legitimate interests in providing and improving our services, provided these interests do not override your fundamental rights

1.4 Data Retention Periods

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected:

  • Contact Form Submissions: Retained for 24 months from last communication
  • Contract-Related Data: Retained for duration of contract plus 6 years (statutory retention period)
  • Analytics Data: Anonymized after 26 months
  • Marketing Consent Records: Retained until consent is withdrawn plus 3 years for compliance verification

1.5 Data Subject Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of Access (Article 15): Request confirmation of processing and obtain copies of your personal data
  • Right to Rectification (Article 16): Request correction of inaccurate personal data
  • Right to Erasure (Article 17): Request deletion of personal data where processing is no longer necessary
  • Right to Restriction (Article 18): Request limitation of processing in specific circumstances
  • Right to Data Portability (Article 20): Receive your personal data in a structured, machine-readable format
  • Right to Object (Article 21): Object to processing based on legitimate interests or direct marketing

To exercise any of these rights, submit a written request to [email protected]. We will respond within 30 days of receipt.

1.6 International Data Transfers

Where personal data is transferred outside the European Economic Area (EEA), we ensure adequate protection through:

  • European Commission adequacy decisions for recipient countries
  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Binding Corporate Rules where applicable

1.7 Data Security Measures

We implement appropriate technical and organizational measures to ensure data security, including:

  • Encryption of data in transit (TLS 1.3) and at rest (AES-256)
  • Regular security assessments and penetration testing
  • Access controls with principle of least privilege
  • Employee training on data protection obligations
  • Incident response procedures for data breaches

1.8 Supervisory Authority

You have the right to lodge a complaint with the relevant supervisory authority. For data protection matters in Denmark, contact the Danish Data Protection Agency (Datatilsynet):

Datatilsynet
Borgergade 28, 5.
1300 Copenhagen K
Denmark
Email: [email protected]

SECTION 02

Cookies Policy

Last updated: July 8, 2026

2.1 Cookie Technology Overview

Cookies are small text files placed on your device when visiting our website. They enable us to recognize your device and store information about your preferences or past actions. This policy explains how GraniteCircuitWorks uses cookies and similar technologies.

2.2 Categories of Cookies Employed

Strictly Necessary Cookies: Essential for website functionality. These cannot be disabled as they enable core features such as security, session management, and accessibility compliance.

  • Session identifier cookies (expire on browser close)
  • Security tokens (CSRF protection)
  • Load balancing identifiers

Performance Cookies: Collect anonymized data about how visitors interact with our website. Used solely to improve site performance and user experience.

  • Page load timing metrics
  • Error logging identifiers
  • Feature usage statistics

Functionality Cookies: Enable enhanced features and personalization. May be set by us or third-party providers whose services we have added to our pages.

  • Language preference storage
  • Display preference memory

2.3 Third-Party Cookie Providers

We utilize the following third-party services that may set cookies:

  • Google Analytics: Website traffic analysis. Opt-out: Google Analytics Opt-out
  • Google Maps: Embedded map functionality on contact pages
  • YouTube: Embedded video content (if applicable)

2.4 Cookie Management

You can manage cookie preferences through:

  • Our cookie consent banner displayed on first visit
  • Browser settings to block or delete cookies
  • Opt-out links provided by third-party services

Disabling certain cookies may impact website functionality. Strictly necessary cookies cannot be disabled as they are essential for basic site operations.

2.5 Cookie Duration

  • Session Cookies: Deleted when you close your browser
  • Persistent Cookies: Remain for a set period (typically 12-24 months) or until manually deleted
  • Third-Party Cookies: Duration varies by provider; typically 6-24 months

SECTION 03

Refund Policy

Last updated: July 8, 2026

3.1 Service Delivery Model

GraniteCircuitWorks operates on a milestone-based delivery model. Payment schedules are structured around verified project phases, ensuring alignment between deliverables and compensation.

3.2 Pre-Project Cancellation

Cancellations made before project commencement are eligible for full refund minus administrative processing fees (5% of total contract value). Cancellations within 48 hours of signed agreement incur no additional charges.

3.3 In-Progress Project Cancellation

For projects cancelled during active development:

  • Completed and approved milestones are non-refundable
  • Work-in-progress milestones are assessed based on completion percentage
  • All source code and deliverables for paid milestones are transferred to the client
  • Outstanding payments for completed work remain due within 14 days of cancellation notice

3.4 Quality Assurance Guarantees

All delivered work includes a 30-day quality assurance period. Issues identified during this period that relate to specifications defined in the project agreement will be resolved at no additional cost. Issues arising from new requirements or scope changes fall outside this guarantee.

3.5 Force Majeure Provisions

Neither party shall be liable for delays or failures in performance resulting from circumstances beyond reasonable control, including but not limited to natural disasters, pandemics, government actions, or internet infrastructure failures. In such cases, affected obligations are suspended until the force majeure event ceases.

3.6 Dispute Resolution

Refund disputes shall first be addressed through direct negotiation between parties. If resolution cannot be reached within 30 days, disputes shall be submitted to mediation. Unresolved disputes shall be subject to arbitration under Danish arbitration law, with proceedings held in Aarhus, Denmark.

SECTION 04

Terms of Service

Last updated: July 8, 2026

4.1 Agreement to Terms

By accessing or using the services provided by GraniteCircuitWorks, you agree to be bound by these Terms of Service. If you do not agree to these terms, you may not access or use our services. These terms constitute a legally binding agreement between you and GraniteCircuitWorks, registered at Tordenskjoldsgade 17, 8200 Aarhus N, Denmark.

4.2 Service Scope and Modifications

GraniteCircuitWorks provides web development, digital infrastructure engineering, and related technical services. Service specifications, pricing, and availability are subject to change without prior notice. Custom project scopes are defined in individual Statements of Work (SOW) that supplement these terms.

4.3 Client Obligations

Clients are responsible for:

  • Providing accurate and complete project requirements and specifications
  • Timely delivery of materials, assets, and access credentials required for project execution
  • Designated decision-makers with authority to approve deliverables
  • Compliance with all applicable laws and regulations in their jurisdiction
  • Maintaining confidentiality of shared technical documentation and credentials

4.4 Intellectual Property Rights

Upon full payment, all intellectual property rights for custom-developed deliverables transfer to the client. GraniteCircuitWorks retains rights to:

  • Pre-existing frameworks, libraries, and development tools used in project execution
  • General knowledge, methodologies, and techniques developed during engagement
  • Right to display project in portfolio and marketing materials unless explicitly restricted in writing

4.5 Confidentiality

Both parties agree to maintain strict confidentiality of proprietary information exchanged during the engagement. This obligation survives termination of the agreement for a period of 3 years. Confidential information includes but is not limited to business strategies, technical specifications, source code, and financial data.

4.6 Limitation of Liability

To the maximum extent permitted by law, GraniteCircuitWorks's total liability shall not exceed the total fees paid by the client for the specific service giving rise to the claim. GraniteCircuitWorks shall not be liable for indirect, incidental, special, consequential, or punitive damages, including loss of profits, data, or business opportunities.

4.7 Governing Law

These Terms of Service are governed by and construed in accordance with Danish law. Any disputes arising from or relating to these terms or the services provided shall be subject to the exclusive jurisdiction of the courts of Aarhus, Denmark.

4.8 Severability

If any provision of these terms is found to be unenforceable or invalid, that provision shall be limited or eliminated to the minimum extent necessary so that these terms shall otherwise remain in full force and effect.

4.9 Modifications to Terms

GraniteCircuitWorks reserves the right to modify these terms at any time. Material changes will be communicated via email to registered clients or posted prominently on our website with a 30-day notice period. Continued use of services after the effective date constitutes acceptance of modified terms.

For questions regarding these terms, contact: [email protected]

GraniteCircuitWorks — Tordenskjoldsgade 17, 8200 Aarhus N, Denmark