Privacy Policy

1. Introduction

Øresund ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

We process your personal data in accordance with the General Data Protection Regulation (GDPR/DSGVO) and other applicable data protection laws.

2. Data Controller

The data controller responsible for your personal data is:

3. Data We Collect

3.1 Information You Provide

• Email address (when joining our waitlist)
• Name and contact information (when creating an account)
• Payment and billing information (when subscribing to our services)
• Communications you send to us (support inquiries, feedback)

3.2 Automatically Collected Information

• Device information (browser type, operating system)
• IP address and approximate location
• Pages visited and time spent on our website
• Referring website or source
• Cookie data (see our Cookie Policy)

3.3 Transaction Data

When you use our credit card services, we collect transaction data including merchant information, purchase amounts, and timestamps. This data is used to calculate your carbon footprint and provide our sustainability tracking features.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you opt-in to our waitlist, newsletter, or marketing communications (Art. 6(1)(a) GDPR)
• Contract: To provide our services when you become a customer (Art. 6(1)(b) GDPR)
• Legal Obligation: To comply with financial regulations and legal requirements (Art. 6(1)(c) GDPR)
• Legitimate Interest: To improve our services, prevent fraud, and ensure security (Art. 6(1)(f) GDPR)

5. How We Use Your Data

• Provide and maintain our services
• Process transactions and send related information
• Calculate and display your carbon footprint
• Send you updates about our waitlist and product launches
• Respond to your inquiries and provide customer support
• Analyze usage patterns to improve our website and services
• Detect and prevent fraud or unauthorized access
• Comply with legal and regulatory requirements

6. Data Sharing and Third Parties

We do not sell your personal data. We may share your information with:

• Service Providers: Companies that help us operate our business (payment processors, hosting providers, analytics services)
• Financial Partners: Banks and payment networks necessary to provide our credit card services
• Legal Authorities: When required by law or to protect our rights
• Carbon Offset Partners: Anonymized or aggregated data to verify carbon offset projects

All third-party service providers are contractually obligated to protect your data and use it only for the purposes we specify.

7. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or transfers to countries with adequate data protection laws.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

• Waitlist data: Until you unsubscribe or 2 years of inactivity
• Account data: Duration of account plus 5 years (legal requirements)
• Transaction data: 10 years (financial regulatory requirements)
• Analytics data: 26 months
• Support communications: 3 years after resolution

9. Your Rights

Under GDPR, you have the following rights regarding your personal data:

To exercise any of these rights, please contact us at yaschroth@gmail.com. We will respond to your request within 30 days.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption, secure servers, access controls, and regular security assessments. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

11. Cookies

We use cookies and similar technologies to enhance your experience on our website. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

12. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

14. Complaints

If you believe that we have not complied with your data protection rights, you have the right to lodge a complaint with a supervisory authority. In Germany, this is the relevant State Data Protection Authority (Landesdatenschutzbeauftragte) or the Federal Commissioner for Data Protection (BfDI).

15. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: