Privacy Policy

Last updated: September 12, 2026

1. Data controller

CMTStudios
Centrumsgaden 145A, 6330 Padborg, Danmark
CVR: 39303590
contact@cmtstudios.dk
71 90 95 31

We are the data controller for personal data processed on cmtstudios.dk and for processing related to our own services. For payments connected to separate websites, the originating website may also be a data controller for its own purposes.

2. Information we process

Name, email and message when you contact us.
Technical information such as IP address, browser type and server log data.
Agreement, package, price, payment status and reference information.
User or customer references from a website where a payment was started.
Payment information is processed by payment providers; we typically receive status, amount, references and limited payment details, not full card numbers.

3. Purposes

Respond to inquiries and prepare quotes.
Deliver support, software, web design and related services.
Create, process and document payments.
Prevent abuse, errors and fraud.
Meet bookkeeping, tax and other legal obligations.

4. Legal bases

Contract: processing needed to enter into or perform an agreement.
Legal obligation: bookkeeping, tax and documentation requirements.
Legitimate interest: secure operation, troubleshooting and responding to inquiries.
Consent: only where consent is required, for example for any non-essential technologies.

5. Payment providers and partners

Depending on the specific payment, Stripe, Mollie, PayPal or bank transfer may be used. Providers process payment information under their own terms and privacy policies.

If a payment was started on another website, we may exchange necessary information with that website, such as payment status, amount and user reference.

6. Transfers outside the EU/EEA

Some providers may process information outside the EU/EEA. Where this occurs, relevant transfer mechanisms are used, such as standard contractual clauses or another valid safeguard under the GDPR.

7. Retention

We retain personal data only as long as necessary for the purpose. Accounting information is normally retained for the period required by Danish bookkeeping law. Contact messages and technical logs are not retained longer than necessary.

8. Cookies and similar technologies

The public marketing pages use URL-based language selection and do not start a session solely to display language. Operational and payment pages may use necessary session or storage functions. Read more in our Cookie Policy.

9. Your rights

Right of access, rectification and deletion.
Right to restriction, data portability and objection.
Right to withdraw consent where processing is based on consent.

10. Security

We use HTTPS, access controls and ongoing maintenance to protect information. No method is completely secure, but we apply reasonable technical and organizational safeguards.

11. Complaints to Datatilsynet

You may complain about our processing of personal data to the Danish Data Protection Agency at datatilsynet.dk.