Privacy policy

The final privacy policy follows. Carsten supplies or approves the text.

1. Who is responsible for your data

To come: Klimetra's legal name, address, CVR and contact email, as data controller.

2. What we collect

To come: name, email, establishment, billing address and VAT ID, and how the service is used. Nothing more.

3. Why we use it, and the legal basis

To come: providing the service (contract), invoicing (legal obligation), security.

4. Who processes data for us

To come: Supabase (database, EU), Cloudflare (hosting, statistics, bot check), Stripe (payments, Ireland), Brevo (email, France), GitHub (code and backups), and the accounting tool. Each with a data processing agreement.

5. How long we keep it

To come: deleted 90 days after the subscription ends; invoices kept 5 years; backups expire after 35 days.

6. Your rights

To come: access and export (Settings → Your data), correction, erasure, objection, and complaints to Datatilsynet.

7. Cookies

We only store what the site needs to work. See Cookies and storage.

8. Contact

To come: how to contact us about personal data.