Privacy Policy

OSM Technologies ApS, Havnegade 39, 2nd floor, 1058 Copenhagen K, Denmark, is the data controller for personal data collected through this website and through our support channels. Questions about this policy, or any request about your data, go to privacy@osmx1.com.

We are a small company and we do not sell data. We collect what is needed to sell you a product, deliver it, support it, and run the site — and we would rather hold less of it than more.

Order data

Name, delivery and billing address, email address, telephone number, order contents and order history.

Payment data

Handled by our payment provider. We receive a confirmation, the last four digits of the card and the transaction reference — never the full card number.

Support data

The messages you send us, your order reference, and any photographs or diagnostics you choose to attach.

Newsletter data

Email address and the fact that you subscribed, with a timestamp, so we can evidence consent.

Site usage data

Aggregate analytics about pages visited and how the site performs. See the cookie policy for detail.

Job applications

Whatever you send us when applying for a role, held under the terms described in the careers section below.

Where we rely on legitimate interests, we have weighed them against your rights and use the least intrusive option that achieves the purpose. You can object to that processing at any time.

We share personal data only with processors who need it to do a job for us, under a contract that binds them to use it for nothing else.

• Payment provider — to take and refund payments.
• Carriers — name, address and telephone number, so a parcel can be delivered.
• Customs brokers — for shipments to destinations outside the EU customs union.
• Email and newsletter provider — to send order and subscription email.
• Hosting and infrastructure providers — who store the data the site runs on.
• Our accountants and auditors, where required for statutory records.

We do not sell personal data, and we do not share it with advertising networks. If we are ever legally compelled to disclose data, we will tell you unless the law forbids it.

Our data is held within the European Economic Area wherever possible. Where a processor operates outside it — for example when shipping to New Zealand — the transfer is covered by an adequacy decision or by standard contractual clauses, and we can provide a copy of the safeguards on request.

When a retention period ends, data is deleted or irreversibly anonymised.

Under the GDPR and equivalent laws you may exercise all of the following. We answer within one month and we do not charge for it.

• Access — a copy of the personal data we hold about you.
• Rectification — correction of anything inaccurate.
• Erasure — deletion, where we have no overriding legal reason to keep it.
• Restriction — a pause on processing while a dispute is resolved.
• Portability — your data in a machine-readable format.
• Objection — to processing based on legitimate interests, including profiling.
• Withdrawal of consent — at any time, without affecting what was lawful before.

To exercise any of these, email privacy@osmx1.com from the address on your order. If you are unhappy with how we handle it, you may complain to your national data protection authority — in Denmark, Datatilsynet.

• All traffic to this site is encrypted in transit.
• Access to order and support data is limited to staff who need it, with individual accounts and multi-factor authentication.
• Payment card data never reaches our systems.
• We review access rights quarterly and remove them the day someone leaves.

This site is not directed at children and we do not knowingly collect data from anyone under 16. If you believe a child has given us personal data, contact us and we will delete it.

When this policy changes we update the date at the top. If a change materially affects how we use data you have already given us, we will tell subscribers and customers by email rather than relying on you to re-read the page.