PRIVACY POLICY

Last updated: 29 September 2026

1. GENERAL

  • 1.1 This Privacy Policy explains how ClaimLane ApS processes Personal Data as an independent data controller. It applies to Personal Data relating to visitors to our website, representatives and users of our business customers, prospective customers, suppliers and business partners, users of the ClaimLane Scanner app and persons who otherwise communicate or interact with us. “Personal Data” means any information relating to an identified or identifiable natural person.
  • 1.2 This Privacy Policy applies to ClaimLane ApS’ (“ClaimLane”, “we”, “us” or “our”) processing of Personal Data where ClaimLane determines the purposes and means of the processing.
    • 1.2.1 Where ClaimLane processes Personal Data contained in claims, returns, complaints, warranty cases, documents or correspondence on behalf of a business customer, ClaimLane acts as a data processor and the relevant business customer acts as the data controller. Such processing is governed by the data processing agreement entered into between ClaimLane and the relevant customer and is not otherwise covered by this Privacy Policy. Questions or requests concerning such processing should generally be directed to the relevant customer.

2. IDENTITY OF THE DATA CONTROLLER

  • 2.1 If there are any questions regarding this Privacy Policy, you may contact us using the information below.
    ClaimLane ApS
    Reg. no.: 36895349
    Skyttegade 7, 2, 2200 Copenhagen N
    Denmark
    info@claimlane.com
    +45 70 60 57 33
  • 2.2 We are processing your Personal Data in accordance with the General Data Protection Regulation (GDPR) and any national regulations applicable to us.

3. PURPOSES, CATEGORIES OF PERSONAL DATA AND LEGAL BASES

  • 3.1 ClaimLane may process the following categories of Personal Data for the purposes and on the legal bases set out below:
  • 3.1.1 Customer and business relationship management

    Categories of Personal Data:     Name, workplace, title, position, professional contact details, account and user information, contractual information, billing and payment information and correspondence.

    Purposes:     To enter into and administer customer, supplier and business-partner relationships, provide onboarding and account administration, manage authorised users, issue invoices, receive payments and communicate concerning our services.

    Legal basis:     Processing is based on GDPR Article 6(1)(b) where you are personally a party to a contract, GDPR Article 6(1)(c) where processing is required to comply with a legal obligation and otherwise GDPR Article 6(1)(f), as ClaimLane has a legitimate interest in managing and documenting its business relationships.
  • 3.1.3 Operation, security and improvement of our website, platform and apps

    Categories of Personal Data:     IP address, device information, browser type, operating-system version, app configuration, user and account identifiers, log data, usage information and the date and time of access or use

    ‍Purposes: To provide and operate our website, platform and apps, maintain security, prevent misuse, identify and resolve technical errors, monitor performance and improve our services.

    Legal basis:     Processing is based on GDPR Article 6(1)(f), as ClaimLane has a legitimate interest in operating, securing, maintaining and improving its digital services.
  • 3.1.2 Support, inquiries and other communications

    Categories of Personal Data:     Name, contact details, workplace, account information, correspondence, support information and other information included in your inquiry.

    Purposes:     To respond to inquiries, provide customer and technical support, troubleshoot issues and document our communications.

    Legal basis:     Processing is based on GDPR Article 6(1)(b) where necessary to perform a contract with you and otherwise GDPR Article 6(1)(f), as ClaimLane has a legitimate interest in responding to inquiries and providing support to its customers and users.
  • 3.1.4 Marketing, analytics and lead identification

    Categories of Personal Data:     Name, professional contact details, workplace, title, website and marketing interactions, cookie and tracking identifiers, advertising identifiers, lead information and information concerning your interest in our services.

    Purposes:     To market ClaimLane’s services, administer newsletter subscriptions and other marketing communications, identify prospective business customers, analyse the performance of our website and marketing campaigns, perform re-marketing and behavioural targeting and measure online and offline conversions.

    Legal basis:     Processing is based on your consent pursuant to GDPR Article 6(1)(a) where consent is required under applicable data-protection, cookie or marketing legislation. Where permitted without consent, processing is based on GDPR Article 6(1)(f), as ClaimLane has a legitimate interest in marketing and developing its business-to-business services.

    You may withdraw your consent or object to direct marketing at any time, as described in Clause 9.

4. TRANSFER OF PERSONAL DATA

  • 3.1.5 Compliance, legal claims and business transactions

    Categories of Personal Data:     Contact, contractual, billing, payment, correspondence and other information relevant to the applicable legal or commercial matter.

    Purposes:     To comply with applicable law, respond to authorities, prevent and investigate misuse, establish, exercise or defend legal claims and facilitate an actual or contemplated financing, merger, acquisition, restructuring or sale of ClaimLane or its assets.

    Legal basis:     Processing is based on GDPR Article 6(1)(c) where necessary to comply with a legal obligation and otherwise GDPR Article 6(1)(f), as ClaimLane has a legitimate interest in protecting its legal and commercial interests and facilitating corporate transactions.
  • 4.1 Some of our service providers or other recipients may be established in, or may process Personal Data from, countries outside the EU/EEA. Where Personal Data is transferred outside the EU/EEA, ClaimLane will ensure that the transfer is made in accordance with applicable data-protection legislation.
  • 3.1.6 Recruitment

    Categories of Personal Data: Name, contact details, CV, application, education and employment history, professional qualifications, LinkedIn profile information and other information provided in connection with an application.

    Purposes: To receive and assess applications, communicate with candidates and administer recruitment processes.

    Legal basis: Processing is based on GDPR Article 6(1)(f), as ClaimLane has a legitimate interest in recruiting suitable employees and managing recruitment processes, and, where applicable, Article 6(1)(b) where processing is necessary to take steps at the candidate’s request prior to entering into an employment contract.

5. PROFILING AND AUTOMATED DECISION MAKING 

  • 3.2 ClaimLane does not intend to process special categories of Personal Data under GDPR Article 9 or civil registration numbers in connection with the processing activities described in this Privacy Policy, unless such processing is necessary, lawful and separately communicated to you.
  • 3.3 Where the provision of Personal Data is necessary to enter into or perform a contract, or to comply with a legal requirement, failure to provide such information may prevent ClaimLane from entering into the relevant relationship or providing the requested service.
  • 3.4 We may collect Personal Data directly from you, from the organisation that you represent or are affiliated with, automatically through your use of our website, platform or apps, through recruitment channels such as LinkedIn, from publicly available sources and from marketing, analytics and lead-identification providers.

6. BUSINESS TRANSFERS

  • 5.1 Our processing activities do not include decisions based solely on automated processing, including profiling, which produce legal effects concerning you or similarly significantly affects you. We may use cookies and similar technologies for marketing purposes, including re-marketing, behavioural targeting, lead identification and offline conversion tracking. You may at any time object to such processing and opt out, cf. Clause 9 .
  • 4.2 Such transfers will be based on an applicable adequacy decision adopted by the European Commission or on appropriate safeguards in accordance with applicable data-protection legislation, such as the European Commission’s standard contractual clauses. You may contact us to obtain further information about the applicable transfer mechanism and, where available, a copy of the relevant safeguards.
  • 6.1 In the event of an actual or contemplated transfer of our company or our assets, or if we discontinue our business or enter into bankruptcy proceedings, we will include data, including your personal information, among the assets transferred to any parties who acquire us or such assets may be the subject of review (due diligence) by such parties (or their representatives). You acknowledge that such transfers may occur, and that any parties who acquire, or contemplate to acquire us may, to the extent permitted by applicable law, continue to use your personal information according to this policy, which they will be required to assume as it is the basis for any ownership or use rights we have over such information. 

7. USE OF PERSONAL DATA

  • 7.1 We only process your Personal Data as stated in this Privacy Policy and we do not use your Personal Data for any other purpose than explicitly described above or communicated directly to you elsewhere. 
  • 7.2 We process your Personal Data in a lawful, fair and transparent manner. The data we collect is solely used for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes. 
  • 7.3 All use of your Personal Data is relevant and limited to what is necessary in relation to the purposes for which they are processed.

8. SECURITY

  • 8.1 When we store and process Personal Data, we implement appropriate technical and organisational measures designed to protect such Personal Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access and other unlawful processing.
  • 8.2 The following security measures are in place to keep your data safe: 
    • Encryption
    • Firewalls & anti-virus
    • Internal policies & password protection
    • Access controls and multi-factor authentication
    • Regular backups, logging and monitoring
  • 8.3 To further increase the level of security, we have deletion policies in place. Personal Data is deleted when it is no longer necessary for the purposes for which it was collected. As a general rule:
    • (i) Personal Data relating to customers, suppliers, business partners and their representatives is retained for the duration of the relevant business relationship and thereafter for as long as reasonably necessary to document the relationship or establish, exercise or defend legal claims;
    • (ii)Personal Data relating to customers, suppliers, business partners and their representatives is retained for the duration of the relevant business relationship and thereafter for as long as reasonably necessary to document the relationship or establish, exercise or defend legal claims;
    • (iii)Personal Data which we are required to retain in accordance with the Danish Bookkeeping Act (bogføringsloven) is retained for the applicable statutory retention period;
    • (iv) log and technical data is retained for as long as necessary for the operation, security and troubleshooting of our website, platform and apps; and
    • (v) Personal Data processed for marketing purposes is retained until you withdraw your consent or object to the processing, or until the Personal Data is no longer relevant for the applicable marketing purpose. We may retain limited information necessary to ensure that your marketing preferences are respected.
  • 8.4 Personal Data processed by ClaimLane as a data processor on behalf of a business customer is retained and deleted in accordance with the relevant customer’s instructions and the applicable data processing agreement.

9. ACCESS TO YOUR INFORMATION

  • 9.1 Right to access
    GDPR Article 15: You have the right to obtain confirmation as to whether we process Personal Data concerning you and, where applicable, access to such Personal Data and related information.
  • 9.2 Right to rectification
    GDPR Article 16: You have the right to request the rectification of inaccurate Personal
    Data concerning you and to have incomplete Personal Data completed.
  • 9.3 Right to erasure
    GDPR Article 17: You also have the right to get your Personal Data erased, if the Personal Data is no longer necessary in relation to the purposes for which they were collected or otherwise processed. Please see Article 17 for the full list of reasons for your right to erasure. 
  • 9.4 Right to restriction of processing
    GDPR Article 18: You have the right to request restriction of the processing of your Personal Data where: (i) you contest the accuracy of the Personal Data, while we verify its accuracy; (ii) the processing is unlawful and you oppose erasure; (iii) we no longer need the Personal Data, but you require it for the establishment, exercise or defence of legal claims; or (iv) you have objected to processing under Article 21, while it is verified whether our legitimate grounds override yours.
  • 9.5 Right to data portability
    GDPR Article 20: Where the processing is based on your consent or a contract and is carried out by automated means, you may have the right to receive the Personal Data concerning you which you have provided to us, in a structured, commonly used, and machine-readable format. You can also request that we transmit your data to another data controller, where technically feasible. 
  • 9.6 Right to object
    GDPR Article 21: Where we process your Personal Data on the basis of our legitimate interests, you have the right to object to the processing on grounds relating to your particular situation. We may continue the processing if we demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or if the processing is necessary for the establishment, exercise or defence of legal claims.

    You have the right to object at any time to the processing of your Personal Data for direct-marketing purposes, including profiling related to such marketing. If you object, we will no longer process your Personal Data for such purposes.
  • 9.7 Right to withdraw consent
    Where processing is based on your consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

10. SUB-PROCESSORS 

  • 10.1 We use sub-processors to provide our services and operate our business. We have listed the relevant categories of processing, purposes and service providers in the table below.

‍

  • 10.2 We may also disclose Personal Data to public authorities where required by law, to legal advisers, accountants, auditors and other professional advisers, and to prospective purchasers, investors and their advisers in connection with a transaction described in Clause 6. Certain advertising, analytics and social-media providers may process Personal Data as independent data controllers in accordance with their own privacy policies.
  • 11.1 If you want to exercise any of your above rights or have questions regarding our processing of Personal Data, please contact us using the information below:
    ‍
    ‍ClaimLane ApS
    Reg. no.: 36895349
    Skyttegade 7, 2, 2200 København N
    Denmark
    info@claimlane.com
    +45 70 60 57 33

11. CONTACT INFORMATION, REQUESTS & COMPLAINTS

  • 11.2 If you find that your Personal Data has been processed in a way that does not meet the requirements of the GDPR, and if you want to file a complaint, you have a specific right to lodge a complaint with the relevant supervisory authority. The supervisory authority will guide you through the process. See contact information below:
    ‍
    Datatilsynet
    Carl Jacobsens Vej 35
    2500 Valby
    Denmark

    dt@datatilsynet.dk
    +45 33 19 32 00

12. CHANGES TO THIS PRIVACY POLICY

  • 12.1 We may update this Privacy Policy from time to time to reflect changes to our processing activities, services or applicable law. The current version will be made available on our website and will state the date on which it was last updated. Where required, we will notify you separately of material changes or obtain renewed consent.