Privacy policy

How SiteHub ApS and all its subsidiaries process the personal data that come into our possession when, for example, you visit our website or use the SiteHub Platform.

Latest update: 21 November 2025

In this privacy policy, you can read how SiteHub ApS and all its subsidiaries (“we”) process the personal data that come into our possession when, for example, you visit our website or use the SiteHub Platform.

The privacy policy applies where we are the data controller for the personal data we process about you.

For the purposes of this privacy policy, “personal data” means any information relating to an identified or identifiable natural person. In other words, any information that can be traced directly or indirectly to you.

In certain cases, we are the data processor for the personal data we process about you.

Where we are the data processor, the processing will take place according to instructions from the data controller and pursuant to a data processing agreement. In such cases, this privacy policy will not apply.

Contents

• Purpose and legal basis of our processing
• Transfers to third countries
• Mandatory disclosure of certain personal data
• Your rights
• Changes to our privacy policy

1. Purpose and legal basis of our processing of personal data

1.1 User creation and administration of user profiles

We process personal data about the following categories of data subjects:

• Customers
• Users of our website or SiteHub Platform
• Business partners

The personal data is collected from you in the following ways:

• When you sign up for a user profile
• If your employer or business partner shares your personal data in connection with the creation of user profiles

We process the following types of personal data — general personal data, including:

• Name
• Email
• Telephone number
• Company address
• Job title
• IP address
• Photo (profile picture on SiteHub platform)

We also process the further types of data you have provided in emails, free text fields, or similar.

The personal data is processed for the purpose of:

• Delivering the agreed products and services
• Managing user profiles
• Communicating with our customers and users, e.g., answering questions, requests, complaints, or other inquiries
• Preventing fraud

Our processing is limited to the personal data that is necessary for achieving the above purposes.

The legal basis of our processing of your personal data is the following:

Profile photos: the processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms, see Article 6(1), point (f) of the General Data Protection Regulation. The legitimate interest justifying the processing is to create a profile so that the user can use SiteHub’s online platform and does not have to re-register as a user for each visit to the platform.

We disclose or make your personal data available to:

• Data processors (e.g., IT suppliers)

We may store your personal data for up to one year after SiteHub leaves a construction project, after which time the data will be securely anonymized unless we are legally required to store the data for a longer period.

1.2 Sales and distribution of marketing material

We process personal data about the following categories of data subjects:

• Persons who have consented to receive direct marketing, including our newsletter
• Business partners
• Potential customers

The personal data is collected from you.

We process the following types of personal data — general personal data, including:

• Name
• Email
• Job title
• Telephone number
• Company name

The personal data are processed for the purpose of:

• Building and maintaining customer relationships. With this knowledge, we can cater to your needs and preferences so that you only receive relevant advertising such as events or news
• Issuing marketing material
• Carrying out other marketing activities
• Holding events

Our processing is limited to the personal data that is necessary for achieving the above purposes.

The legal basis of our processing of your personal data is the following:

• In connection with the establishment and maintenance of customer relationships, the processing is necessary for the purposes of the legitimate interests pursued by us, see Article 6(1), point (f) of the General Data Protection Regulation. The legitimate interest pursued is our legitimate interest in the establishment and maintenance of customer relationships.
• In connection with the issuance of marketing material, you have given your consent to the processing of your personal data for one or more specific purposes, see Article 6(1), point (a) of the General Data Protection Regulation.
• The processing of personal data is necessary for the performance of a contract to which you are a party, see Article 6(1), point (b) of the General Data Protection Regulation.

We transfer or make your personal data available to:

• Data processors (e.g., IT suppliers)

We may store your personal data for up to one year after which time the data will be erased unless we are legally required to store the data for a longer period. Personal data collected for the purpose of establishment and maintenance of customer relationships may be stored as long as it is relevant for the existing or potential customer relationship.

1.3 Use of cookies on our websites and SiteHub platform

We process personal data about the following categories of data subjects:

• Visitors to our website and SiteHub Platform

The personal data is collected from you via cookies.

We process the following types of personal data — general personal data, including:

• IP address
• Login data
• Online user ID

The personal data are processed for the purpose of:

• Your chosen preferences for the purpose of adapting the SiteHub website(s) and SiteHub Platform to your preferences to enhance your user experience.
• Your activity to the SiteHub website(s) and SiteHub Platform to learn how users interact with the SiteHub website(s) and the SiteHub Platform so that we can make it more intuitive.
• Your activity on the website and your IP address, which we also disclose to our social media, advertising and analytics partners for targeted marketing purposes.

Our processing is limited to the personal data that is necessary for achieving the above purposes.

The legal basis of our processing of your personal data is the following:

You have given your consent to the processing of your personal data for one or more specific purposes, see Article 6(1), point (a) of the General Data Protection Regulation.

We transfer or make your personal data available to:

• Data processors (e.g., IT suppliers)
• Advertising partners and social media

We may store your personal data for up to one year from the collection via cookies, after which time the data will be erased unless we are legally required to store the data for a longer period.

You can read more about the use of cookies in our cookie policy here:

• Website: sitehub.dk/en/cookie-policy
• SiteHub Platform: cookie_EN_v1.pdf

1.4 Interaction with our company pages on social media

We process personal data about the following categories of data subjects:

• Visitors to our company pages on social media

The personal data is collected from you.

We process the following types of personal data — general personal data, including:

• Name
• Picture
• Job title
• Social media profile URL
• Data contained in free text fields, chat function, messages, comments, images or similar.

The personal data is processed for the purpose of:

• Answering your inquiries and input
• Measuring and analyzing your activities for the purpose of adapting our marketing towards you
• Analyzing our campaigns and other communication activities on social media
• Holding competitions and events

Our processing is limited to the personal data that are necessary for achieving the above purposes.

The legal basis of our processing of your personal data is the following:

The processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms, see Article 6(1), point (f) of the General Data Protection Regulation. The legitimate interest pursued is our legitimate interest in making content available on social media for marketing purposes.

We disclose or make your personal data available to:

• Data processors (e.g., IT suppliers)
• The business facilitating the media in question:
• LinkedIn: Microsoft Corporation
• Facebook and Instagram: Meta Platforms Inc.
• YouTube: Google LLC

We may store your personal data for up to one year from the collection, after which time the data will be erased unless we are legally required to store the data for a longer period.

We are joint data controllers with Meta for the collection of personal data about you for the Facebook-Insights tool. You can read more about the processing of personal data in Meta’s data policy via the Insights tool.

For more information about how LinkedIn and YouTube process personal data, please refer to the privacy policies of Microsoft (LinkedIn) and Google (YouTube).

1.5 Job applications

We process personal data about the following categories of data subjects:

• Job applicants

Personal data is collected from you.

We process the following types of personal data — general personal data, including:

• Name
• Contact details
• Other data included with the job application, CV, and diplomas
• Photo

We also process the additional types of data you have provided in your job application, including, for example, any sensitive data, information about criminal offences and CPR number (personal identification number).

The personal data is processed for the purpose of:

• Considering and selecting candidates for positions
• Application, CV and supporting documents are stored so that the applicant may be considered for potential future positions relevant to the applicant’s profile.
• If the applicant is selected for the position, the application, CV and related attachments will be stored in order to document the employment history.

Our processing is limited to the personal data that is necessary for achieving the above purposes.

The legal basis of our processing of your personal data is the following:

• Personal data (non-sensitive) is processed for the purpose of assessing whether you are a qualified candidate for the position on the basis of point (f) of Article 6(1) of the General Data Protection Regulation.
• If you have given your consent to SiteHub’s storage of your application, CV and related attachments so that your application may be considered for potential future positions relevant to your profile, such data will be processed on the basis of point (a) of Article 6(1) of the General Data Protection Regulation.
• If SiteHub chooses to employ the applicant in question, we will process personal data about the applicant to the extent necessary prior to conclusion of a contract, see point (b) of Article 6(1) of the GDPR.
• To the extent that the application contains CPR numbers (personal identification numbers), such numbers are processed on the basis of paragraph (3) of section 11(2) of the Danish Data Protection Act.

As a general rule, SiteHub will not collect special categories of personal data (sensitive) about you. However, it cannot be excluded that an application or a CV will contain special categories of personal data (sensitive). In this case, the data is processed on the basis of point (f) of Article 9(2) of the GDPR.

We transfer or make your personal data available to:

• Data processors (e.g., IT suppliers)

We may store your personal data for up to 6 months from receipt of the job application, after which time the data will be erased unless we are legally required to store the data for a longer period. If the applicant is selected for the position, the application, CV and related attachments will be deleted not later than one year after the end of employment, unless we are legally required to store the data for a longer period.

2. Transfers to third countries

We may transfer personal data to countries outside the EU/EEA when processing data via cookies, analytics, advertising, or social media platforms, and in cases where we act as joint data controllers with third parties. This includes transfers to providers such as Google, Meta (Facebook, Instagram), Microsoft (LinkedIn), and YouTube.

These transfers are necessary for providing our services, analyzing user activity, delivering relevant marketing, interacting with users on social media, and fulfilling our joint responsibilities with other data controllers.

It is our understanding that such transfers are based on the European Commission’s Standard Contractual Clauses.

3. Mandatory disclosure of certain personal data

In certain cases where we process personal data about you due to a contractual requirement or a requirement that must be complied with before entering into a contract with you, you are obliged to provide the personal data that we need to comply with our obligations under the agreement. If you do not provide the data that we need to comply with our obligations under the agreement, the consequences may be that the desired agreement cannot be entered into or that you cannot use the desired function.

4. Your rights

4.1 General

You have certain rights under the General Data Protection Regulation in relation to our processing of your personal data.

You have the right to access the data that we process about you and certain other information.

You also have the right to have incorrect data about you corrected. In special cases, you have the right to have data about you erased. In addition, in certain circumstances, you have the right to require that the processing of your personal data be restricted. In addition, in certain circumstances, you have the right to object to our otherwise lawful processing of your personal data.

Finally, in certain circumstances, you have the right to data portability, which means that you have a right to receive your personal data in a structured, commonly used and machine-readable format and the right to have those personal data transferred from us to another data controller.

For more information about your rights, please see the Danish Data Protection Agency’s guide to the rights of data subjects. You can withdraw your consent at any time by contacting us at dpo@sitehub.dk .

If you withdraw your consent, you should note that we will not be able to further process your data unless we are legally or contractually obliged to do so.

You should note, however, that this will not affect the lawfulness of our processing of your personal data based on consent before your withdrawal. The withdrawal of your consent will therefore only take effect at the time of the withdrawal.

4.2 Contact

You can contact us if you wish to exercise any of your rights as described above, if you wish to complain, or if you have any questions in relation to this privacy policy by contacting:

SiteHub ApS

Business registration no.: 41823194

Naverland 3

2600 Glostrup

E-mail: dpo@sitehub.dk

You can also complain to the Danish Data Protection Agency (Datatilsynet) about our processing of your personal data. For further information, see www.datatilsynet.dk .

5. Changes to our privacy policy and latest update

This privacy policy will be updated on an ongoing basis. The latest update was on 21-11-2025.