When you visit and click around on www.complete7.dk, we process a number of personal details.

Types of Information and Purposes We collect and process the following types of personal information:

IP address, operating system, language setting, browser type, device type, MAC number (depending on the equipment), etc. Movement around the website and immediately before and after visiting www.complete7.dk. Times and durations of visits to pages and subpages, etc. Interests and preferences

C7 ApS collects this information via cookies on www.complete7.dk. You can read about it in our cookie policy here.

The purposes for which we collect and process the information are:

To retrieve the website from the server so the website can be displayed in your browser. To optimize the page and provide you with the best possible experience. To compile statistics on your and others' use of the website. To prepare statistics and analysis for improving products, services, and technologies. Marketing purposes, including profiling and behavior-based marketing initiatives, so our product information and offers to you become as tailored as possible. To set you up as a customer To comply with applicable legislation (e.g., the EU's General Data Protection Regulation and e-privacy rules), for example: Obligation to document Compliance with basic principles for processing personal data and legal basis for processing (e.g., obtaining consent) Implementation and maintenance of technical and organizational security measures Investigation of suspicion or knowledge of security breaches and reporting to and authorities Handling inquiries and complaints from registrants and third parties Handling inspections and inquiries from supervisory authorities Handling disputes with registrants and third parties Statistical statements concerning the use of the website.

Sources The information about your behavior is collected using cookies on the website. Read more in our Cookie Policy. Information may also be collected from you directly, from our IT systems, or from third parties.

The legal basis for the collection and processing of personal data The legal basis for our collection of your personal data through cookies, including for profiling, is your consent, according to § 3 in the "cookie-announcement."

Personal data may be processed for other purposes and based on other legal grounds, including documenting compliance with legislation, as per General Data Protection Regulation's Article 6, paragraph 1, letter c, and the pursuit of legal claims, according to C7 ApS' legitimate interests in being able to pursue its legal interests, according to the General Data Protection Regulation's Article 6, paragraph 1, letter f.

You have the right to revoke consent, but without affecting the processing or disclosure that has taken place before the revocation. That is, the revocation only has a forward-looking effect.

If you wish to revoke your consent to data collection and processing using cookies, you can do so by changing your cookie settings. If you wish to revoke your consent to the processing of personal data collected from sources other than cookies, you can write to us at kontakt@Complete7.dk.

Transfer of personal data to processors We transfer your personal data to certain subcontractors including digital media partners, creative and digital agency partners, etc., who process and store personal data on behalf of C7 ApS.

Whether the collection is voluntary or mandatory Providing personal data is voluntary. The consequences of not providing the information are that you cannot access the website or use certain features on the site, etc.

Transfer of personal data to recipients in countries outside the EU/EEA We transfer your personal data to countries outside the EU/EEA, as we use external suppliers to process and store some of the aforementioned personal data.

The legal basis for the transfers is either the EU's "Standard Contractual Clauses" for transfers from data controllers to data processors in non-secure countries outside the EU/EEA or the US Privacy Shield.

The standard agreement is available in various languages here.

Read more about the US Privacy Shield here

When you purchase something from us, you will receive "My Complete7" (our self-service universe). C7 ApS processes the following personal information (in addition to point 1 above):

Types of Information and Purpose We collect and process the following types of personal information about you:

Identification information: Name, billing address, delivery address, email address, phone number Company name CVR number Payment details Login information: username and password C7 ApS customer number and purchase information. Use of digital services e.g., digital welcome gift Your use of C7 ApS's website: times of visits, visited subpages, and made purchases. Additional phone numbers Contact history between you and C7 ApS Recordings of service and sales calls Customer satisfaction information and other data from satisfaction measurements Data retrieved and merged from third parties, e.g., the company's energy consumption retrieved from electric companies and/or the power grid.

The purposes for which we collect and process the information are:

To enter and fulfill subscription agreements, service contracts, purchase contracts, or other agreements with you. Provide customer service and support in connection with the purchase of subscriptions and other inquiries, including conducting satisfaction measurements. To identify you in case of a dispute about a purchase and to handle such a dispute. To provide a self-service solution for you, where you can manage, modify, or terminate your agreements with C7 ApS according to the relevant terms of agreement. Marketing: the information collected about you can be used for marketing purposes, including profiling and marketing by direct contact to you and your company. Compliance with applicable laws (e.g., the EU's General Data Protection Regulation), e.g., Documentation of actual and legal conditions. Adherence to basic principles for the processing of personal data and legal basis for the processing. Implementation and maintenance of technical and organizational security measures. Investigation of suspicion or knowledge of security breaches and reporting to individuals and authorities. Handling of inquiries and complaints from registered users and others. Handling of inspections and inquiries from supervisory authorities. Handling disputes with registered users and third parties. Statistical compilations regarding the use of the website and our products.

Sources Personal data is collected from you when you make a purchase, are in contact with our staff, or make updates in the C7 ApS self-service solution. In some cases, data on your use of subscriptions and services is recorded by C7 ApS employees, e.g., when providing general customer service and advice. Additionally, information may also be collected from other sources that are publicly available, e.g., social media, address and phone directories, and energy suppliers.

The legal basis for collecting and processing personal data The legal basis for our collection and processing of your identification information, your C7 ApS customer number, payment information, details of your purchases, and pull on subscriptions and contact history is as follows:

Processing is necessary for the conclusion and fulfillment of a subscription agreement, service agreement, purchase agreement, or other agreement with you, according to the General Data Protection Regulation Article 6(1)(b).

The legal basis for our collection of your website usage, data enrichment, and the collection and processing of customer satisfaction information and the recording of sales calls is as follows:

The processing is necessary for us to pursue a legitimate interest, as per the General Data Protection Regulation Article 6(1)(f). The legitimate interests we pursue by enriching your personal data are to identify you in relation to a purchase, e.g., in case of a dispute about a purchase. The legitimate interests we pursue by enriching your data are to target our marketing based on profiling, as per the General Data Protection Regulation Article 6(1)(f). The legitimate interests we pursue by conducting customer satisfaction surveys are to improve our products and services, follow up and thus ensure overall satisfaction for you as a customer. The legitimate interests we pursue by recording service and sales calls are to improve our customer handling and training of our staff and thus the overall customer experience. The legitimate interests in pursuing legal claims, as per C7 ApS's legitimate interests in being able to safeguard its legal interests, according to the General Data Protection Regulation Article 6(1)(f). Personal data may be processed for documentation of compliance with the law, as per the General Data Protection Regulation Article 6(1)(c).

You have the right to withdraw consent, but this will not affect the processing or sharing that took place before the withdrawal. This means the withdrawal only has a forward-looking effect. If you wish to withdraw your consent, you can write to us at kontakt@Complete7.dk.

Voluntariness When we collect personal data directly from you to conclude a subscription agreement, service agreement, purchase agreement, or another agreement, it is because it is necessary for C7 ApS to enter into these agreements with you and your company. You are not obligated to provide this personal information to us. The consequence of not providing us with personal information will be that we cannot enter into and fulfill the agreements with you.

Disclosure of your personal information Personal data, e.g., name, address, phone number, customer number, and relevant details will - based on the legal bases mentioned above and for us to provide the agreed service to you - be disclosed and shared with the following recipients:

Transfer of personal data to recipients in countries outside the EU/EEA We transfer your personal data to countries outside the EU/EEA, as we use external suppliers to process and store certain personal data mentioned above.

The legal basis for the transfers is either the EU's "Standard Contractual Clauses" for transfers from data controllers to data processors in non-secure countries outside the EU/EEA or the US Privacy Shield.

The standard agreement is available in various languages at this link.

Automatic, Individual Decision Making C7 ApS does not use your personal data for automatic, individual decision-making or profiling.

Retention Period C7 ApS stores your information as long as it is relevant for the purposes mentioned above. C7 ApS will delete your data within 3 months after you are no longer a relevant contact person.

In special cases, we store personal data longer than described above. In these cases, we store personal data as long as it is necessary due to our documentation of compliance with criminal law-sanctioned legislation based on the statutes of limitations, or as long as we need to be able to defend ourselves against civil claims or make such valid, including based on the rules on the limitation. If a claim is made, however, we store the data for a more extended period for the sake of the claim.

When you sign up for electronic mail from C7 ApS or fill out a form, such as a contact form, C7 ApS processes these personal details (in addition to sections 1 and possibly 2 above):

Types of Information and Purpose We collect and process the following types of personal information about you:

Identification Information: Name, possibly company name and position, CVR (business registration number), email address, phone number, IP address. Additional phone number, type of housing, ownership status, number of rooms, property valuation, KVHX key. Email logging: Number of clicks, number of openings, reading time used, return of newsletters (bounces). Withdrawal of consent.

The purposes for which we collect and process the information are:

Marketing purposes, including targeting our communication with you based on your interests and behavior (digital behavior on our websites and newsletters and possibly purchase history) to contact you and send you relevant marketing. Compliance with applicable laws (e.g., General Data Protection Regulation, marketing laws, e-privacy legislation), such as: Documentation of actual and legal matters. Compliance with basic principles for the processing of personal data and legal basis for processing. Implementation and maintenance of technical and organizational security measures. Investigation of suspicion or knowledge of security breaches and reporting to individuals and authorities. Handling inquiries and complaints from registered individuals and others. Handling inspections and inquiries from supervisory authorities. Handling disputes with registered individuals and third parties. Statistical compilations regarding the use of direct marketing.

Sources Personal information is collected from you when you make updates in C7 ApS's self-service solution or via tracking in emails and on C7 ApS's website. Additionally, personal information may be collected from other sources that are publicly accessible, e.g., phone directory, social media, and OIS/BBR, VIRK.DK.

The Legal Basis for the Collection and Processing of Personal Information The legal basis for our collection and processing of personal information is:

When you have consented to receive direct marketing under the marketing law, C7 ApS's legal basis is legitimate interests in being able to send you the direct marketing you have consented to under Article 6(1)(f) of the General Data Protection Regulation. The legitimate interests we pursue in enriching your data are to target our marketing based on profiling, according to the General Data Protection Regulation Article 6(1)(f). The legitimate interests in pursuing legal claims, according to C7 ApS's legitimate interests in being able to safeguard its legal interests, under the General Data Protection Regulation Article 6(1)(f).

The legal basis for our collection of your personal information using cookies and other tracking in, for example, emails is your consent, according to § 3 of the "cookie order."

Personal information may be processed for documentation of compliance with legislation, according to the General Data Protection Regulation Article 6(1)(c).

You have the right to revoke consent, although without affecting the processing or disclosure that has taken place before the revocation. That is, the revocation only has a forward-looking effect. If you wish to revoke your consent, you can write to us at kontakt@Complete7.dk.

Voluntariness When we collect personal information directly from you for sending newsletters, it is voluntary whether you want to provide the information. If you choose not to provide the information, we cannot send newsletters to you. If you do not fill out a contact form, we cannot contact you.

Transfer of personal data to recipients in countries outside the EU/EEA

We transfer your personal data to countries outside the EU/EEA, as we use external suppliers to process and store the personal data mentioned above. The legal basis for the transfer is the EU's "Standard Contractual Clauses" for transfers from data controllers to data processors in non-secure countries outside the EU/EEA. The standard agreement is available in various languages at this link.

Further information about data processors and transfers to recipients outside the EU/EEA can be obtained by contacting kontakt@Complete7.dk.

Storage Period We store your personal data as long as necessary to fulfill the purposes mentioned above and any subsequent legal purposes. Personal data collected in connection with subscription services with C7 ApS are kept as a starting point until you terminate your customer relationship and for a period of 5 full calendar years thereafter, according to the provisions of the accounting law. Personal data collected in connection with the purchase of other services via www.Complete7.dk are stored as a starting point for 5 full calendar years calculated from the purchase date, according to the provisions of the accounting law. Personal data collected for sending newsletters or other information are kept until you unsubscribe from receiving them.

In special cases, we store personal data longer than described above. In these cases, we store personal data as long as necessary for our documentation of compliance with criminally sanctioned legislation based on the statute of limitations, or as long as we need to defend against civil claims or assert such claims, including based on the rules about the statute of limitations. If a claim is made, however, we store the information for a longer time for the sake of asserting the claim.

For other purposes, including legal documentation and the implementation of security measures, personal data are stored as long as they are necessary under the law-based statute of limitations to incur punishment.

Your Rights

You have – within the law's limitations – among other things the right to access personal data, the right to have incorrect information changed, the right to have information deleted, the right to have information restricted, the right to data portability, and the right to object to the processing of personal data, including in relation to automated, individual decision-making.

You also have the right to complain to the Data Inspectorate.

Right to Object You have the right to - for reasons relating to your particular situation - object to the processing of personal data where the legal basis is legitimate interests, as stated above. C7 ApS may then no longer process the personal data unless C7 ApS demonstrates compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

Contact If you have questions regarding the processing of your personal data or the utilization of your rights, you are welcome to contact us at kontakt@Complete7.dk.

C7 ApS, Gammel Kongevej 102, 1850 Frb. C, Denmark
Date: 07.08.2023