Data processing agreement
Version 1.0. Effective from 25 July 2026.
This agreement is entered into pursuant to article 28(3) of the General Data Protection Regulation (Regulation (EU) 2016/679) and sets out the rights and obligations that apply when Balermo processes personal data on behalf of the tradesperson using the service.
In short. Your customers' data is yours. We store and display it for you, and we use it for nothing else. We do not resell it, do not market on it, do not profile, and do not train AI models on it.
The full text follows. A plainer explanation of how responsibility is divided is on the GDPR page.
1. The parties
The processor: JURIDISK_NAVN_OG_CVR ("Balermo", "we"), kontakt@balermo.com.
The controller: the natural or legal person who has created an account on balermo.com and uses the service ("you").
2. Conclusion and scope
The agreement takes effect when you create an account and start using Balermo, and applies for as long as we process personal data on your behalf. No separate signature is required. If you want a signed copy for your own records, we will send one on request.
The agreement covers only the personal data you, as controller, enter into or receive through Balermo, that is, data about your customers. Data about you and your own account we process as an independent controller, as described in the privacy policy. This agreement does not cover that.
3. Subject matter, nature, purpose and duration
Subject matter and nature: hosting, storage, display, structuring and retrieval of the information you record about your customers, and sending confirmation emails on your behalf.
Purpose: solely to provide the features of Balermo that you choose to use: website, booking, enquiry quiz, inbox, customer register and time tracking.
Duration: for as long as your account exists, and until erasure under clause 12.
4. Categories of data subjects and types of personal data
The processing covers ordinary personal data under art. 6. No special categories of data under art. 9, and no data relating to criminal convictions under art. 10, are processed.
| Category of data subject | Types of personal data |
|---|---|
| Your customers | Name, email, phone number, notes, and information the customer provides about the job |
| People who book a time | Name, email, date, time, chosen service and any remarks |
| People who send an enquiry | Name, phone, email, job type, scope, urgency and free-text description |
| People in your communication log | Channel, direction, subject, content and time of the communication you record |
You must not enter special categories of personal data, national ID numbers or data relating to criminal offences into Balermo. The system is not designed for it, and if you do so anyway, it is at your own risk as controller.
5. Instructions
We process personal data only on your documented instructions. This agreement, together with the features you actively use in the service, constitutes the full set of instructions. We do not process the data for our own purposes, including not for marketing, resale, cross-customer statistics, profiling or the training of artificial intelligence models.
If EU or Danish law obliges us to process beyond your instructions, we will inform you of that requirement before processing, unless the law prohibits it. If we believe an instruction from you infringes data protection law, we will say so.
6. Confidentiality
Only persons with a work-related need have access to the data, and they are bound by a duty of confidentiality. Access is limited to what the individual needs and is withdrawn when the need ends.
7. Security of processing
We implement the technical and organisational measures that are appropriate to the risk under art. 32. Specifically:
- All traffic between browser and server is encrypted with HTTPS.
- Access requires signing in with a Google account or a one-time link sent by email.
- Sign-in links are stored only as one-way hashes, expire after 15 minutes and can be used only once.
- The session cookie is inaccessible to JavaScript and is sent only over an encrypted connection.
- All database lookups are bound to the individual account, so data belonging to one tradesperson cannot be reached from another.
- The application's internal directories, including session data, are blocked from web access and cannot be fetched over the network.
- No tracking scripts, ad networks or third-party embeds are used on the pages.
- Data is hosted with a Danish provider in a physically secured operating environment with ongoing backups.
8. Sub-processors
By this agreement you give general authorisation for our use of sub-processors. We currently use:
| Sub-processor | Purpose | Location |
|---|---|---|
| Simply.com A/S | Hosting, database and operations. All data in the service is stored here. | Denmark |
| Resend | Sending email on your behalf, for example booking confirmations. Receives the recipient's name and email address and the content of the message. | EU (Ireland) |
Google and cvrapi.dk are not sub-processors under this agreement. Google receives information about you only if you choose to sign in with your Google account, and cvrapi.dk receives only the company registration number you type yourself. Neither receives any information about your customers.
We enter into a written agreement with every sub-processor imposing on it obligations at least equivalent to those in this agreement. We remain liable for the sub-processor's processing as for our own.
If we wish to add or replace a sub-processor, we will notify you by email or in the app at least 30 days before the change takes effect. If you object in writing within those 30 days, you may terminate the agreement and have your data handed over and erased under clause 12, at no additional cost.
9. Transfers to third countries
Personal data is stored and processed within the EU/EEA. Should it at some point become necessary to transfer data to a country outside the EU/EEA, this will only take place on a valid transfer basis under chapter V of the Regulation, an adequacy decision or the European Commission's standard contractual clauses, and you will be notified first.
10. Assistance to you as controller
We assist you, insofar as this is possible, in fulfilling your obligations:
- Data subject rights (art. 12–23). If one of your customers requests access, rectification, erasure, restriction or portability, or objects, we help you find and hand over or delete the data in question. You can delete a person entirely from the customer card and download the whole account's data under Settings; anything that cannot be handled there, we handle when you write.
- Security, impact assessments and prior consultation (art. 32–36). We make available the information about our processing that you need.
Assistance is free of charge in the normal course. If a request requires wholly exceptional work, we agree reasonable remuneration in advance, we will not send you a bill you have not agreed to.
11. Notification of personal data breaches
If we become aware of a personal data breach, we notify you without undue delay and no later than 24 hours after becoming aware of it, so that you can meet your own 72-hour deadline towards the data protection authority. The notification states the nature of the breach, what we know about the categories and scale of data affected, the likely consequences and the measures we have taken. Note that the service keeps no per-access log, so we cannot always state an exact number of data subjects affected. We assist you with your notification to the authority and with any communication to the affected data subjects.
12. Erasure and return on termination
When the agreement ends, because you delete your account or stop using the service, we erase all personal data we process on your behalf no later than 30 days after termination. At any time before that you can download all your data in a commonly used, machine-readable format under Settings. If you delete the account yourself with the button there, erasure is immediate, so download your data first.
Backups at our hosting provider are erased on the provider's own rotation. We cannot speed it up, and we estimate it at under 90 days; we use the copies for nothing but recovery after failure. If EU or Danish law obliges us to retain particular data for longer, we will inform you of the legal basis and retain it solely for that purpose.
13. Documentation and audit
On your request we make available the information necessary to demonstrate compliance with art. 28 and this agreement, including a description of our technical and organisational security measures.
You have the right to have an audit, including an inspection, carried out at our premises. Such an audit is agreed with reasonable notice, conducted during normal working hours and must not unduly disrupt operations. If you want an audit beyond the written documentation, you bear the cost of it. The data protection authority has access at all times without this reservation.
14. Liability
The parties' liability follows art. 82 of the Regulation and the general rules of Danish law. Each party bears its own liability for fines and damages arising from its own circumstances.
15. Changes, duration and termination
The agreement applies for as long as we process personal data on your behalf. We may amend it if legislation or the service changes, but material changes are notified by email or in the app at least 30 days before they take effect. If you do not accept a material change, you may terminate the agreement before it takes effect and have your data handed over and erased under clause 12.
You may terminate the agreement at any time by deleting your account under Settings.
16. Governing law and venue
The agreement is governed by Danish law. Disputes that cannot be settled amicably are decided by the Danish courts, with the Danish party's home venue as the place of jurisdiction.
17. Contact
Questions about the agreement, requests for assistance and reports of security incidents should be sent to kontakt@balermo.com.
This agreement exists in Danish and English. In case of discrepancy between the language versions, the Danish version prevails.