Legal

Privacy policy for primehost.dk

How we collect, use and protect your personal data.

Last updated: 10 November 2026 PrimeHost / XenosPD · CVR 43595709

This is an English translation provided for convenience. The Danish version is legally binding in case of any discrepancy.

1. Introduction

PrimeHost / XenosPD (CVR: 43595709) respects your privacy and processes personal data in accordance with the EU General Data Protection Regulation (GDPR) and Danish law. This policy explains how we collect, use and protect your data.

2. Data controller

PrimeHost / XenosPD
Kastanievej 46, 7700 Thisted, Denmark
Phone: +45 40 48 55 60
E-mail: [email protected]

3. What information is collected?

  • Contact details: name, e-mail, phone number
  • Payment details: billing address, transaction data
  • User data: login, IP address, browser type, activity
  • Support history and communication
  • Bot hosting: files, log files and settings you upload or create for your bot (may contain personal data for which you are responsible)
  • Cookies and tracking data (see the cookie policy)

4. Purposes of processing

  • Provision of hosting and domain services
  • Invoicing and accounting
  • Technical operation and security
  • Customer support and communication
  • Marketing and statistics (only with consent)
  • Performance of a contract (GDPR Art. 6(1)(b))
  • Legal obligation (GDPR Art. 6(1)(c))
  • Consent (GDPR Art. 6(1)(a))
  • Legitimate interest (GDPR Art. 6(1)(f)) – e.g. improving our services

6. Recipients and processors

We only share personal data with:

  • Hosting: Hetzner Online GmbH (servers in Germany)
  • Payment: Stripe, PayPal and Quickpay/MobilePay
  • Security and delivery: Cloudflare (proxy/DDoS protection)
  • Form abuse protection: Google reCAPTCHA (only on pages where it is switched on)
  • E-mail and support tools and other authorised sub-processors
  • Public authorities where required by law
  • Transfers to third countries (e.g. the USA) only take place on the basis of European Commission adequacy decisions (e.g. the EU-US Data Privacy Framework) or standard contractual clauses

7. Retention period

Personal data is kept as long as necessary for the purpose, typically:

  • Customer data: up to 5 years after termination (in accordance with the Danish Bookkeeping Act)
  • Support data: up to 2 years
  • Cookies: see the durations in the cookie policy

8. Your rights

You have the right to:

  • Access your personal data
  • Rectification of inaccurate data
  • Erasure (“the right to be forgotten”)
  • Restriction of processing
  • Data portability
  • Object to processing, including direct marketing

You can exercise your rights by contacting us at [email protected]. You also have the right to lodge a complaint with Datatilsynet, the Danish Data Protection Agency.

9. Security

We protect your data with technical and organisational measures, including encryption, access control and security monitoring. In the event of a data breach, the relevant authorities and affected individuals are notified in accordance with GDPR Art. 33-34.

10. Changes

We may update this policy from time to time. Changes are published here with a new “Last updated” date.