Privacy Policy

Table of contents

1. Introduction

Weld Technologies ApS, Danneskiold-Samsøes Allé 41, 1434 Copenhagen K, Denmark, business reg. no. 41978104 (“Weld”) is the data controller for the processing of your personal data. Below, Weld has provided an overview of the processing activities in which personal data are processed, including among others the purpose thereof and the legal basis.

If you have any questions about this privacy policy (“Privacy Policy”), wish to exercise your data subject rights pursuant to Chapter III of the General Data Protection Regulation (“GDPR”), or need to report a privacy-related incident, please contact Weld by any of the following methods:

• Email: hello@weld.app
• Chat Function: You can reach us via the chat function available in our app or on our website at https://weld.app/
• Mailing Address: Danneskiold-Samsøes Allé 41, 1434 Copenhagen K, Denmark.

You are not obliged to provide personal data to Weld. However, an account cannot be created without your name and email address, and Weld cannot answer an inquiry without your contact details. Weld does not use automated decision-making, including profiling, that produces legal or similarly significant effects for you.

2. Categories of personal data, purpose and legal basis

2.1. Website visitors

When you visit Weld's website, https://weld.app/, Weld processes personal data about you, such as cookie identifiers, your IP address and how you use the website. We use Cookiebot to ask for and record your consent, and you can change or withdraw it at any time in the cookie settings.

The purposes and legal bases are:

• Necessary cookies, which make the website work, keep it secure and remember your cookie choices: Weld's legitimate interests in providing a functioning and secure website, cf. Art. 6(1)(f) of the GDPR. Under the Danish cookie rules these cookies do not require consent.
• Preference cookies, which remember your settings: your consent, cf. Art. 6(1)(a) of the GDPR.
• Statistics cookies, which show us how the website is used: your consent, cf. Art. 6(1)(a) of the GDPR.
• Marketing cookies, including the Meta Pixel, which measure and improve our advertising: your consent, cf. Art. 6(1)(a) of the GDPR.

Weld does not rely on legitimate interests for preference, statistics or marketing cookies.

2.2. Contact person at a customer, vendor or another business partner

As a contact person at a customer, vendor or another business partner, Weld processes your personal data when you communicate with Weld, e.g., via emails in connection with Weld's existing contractual relation with the company you are employed with or in connection with the conclusion or termination of a contract. Weld processes ordinary personal data about you, including your name, email address, telephone number, position, etc. Weld may receive these details from you or from your employer. 

The legal basis for such processing of your personal data is that the processing is necessary for the purposes of legitimate interests pursued by Weld and that it is Weld's assessment that our legitimate interests override your interests or fundamental rights and freedoms, cf. Art. 6(1)(f) of the GDPR. Weld's legitimate interests are fulfilment of our contractual obligations, maintaining and enhancing customer relationships, invoicing for the services your company provides to Weld and/or vice versa, communicating with you if you have any questions related to our services or vice versa, and for documentation purposes in the event you agree on matters relating to our services in writing via email. 

In some cases, processing of personal data is necessary in order to comply with a legal obligation to which Weld is subject, for instance in relation to the obligation on the preservation of accounting records pursuant to the Danish Bookkeeping Act. In such case, the legal basis for the processing is Art. 6(1)(c) of the GDPR. 

2.3. Inquiries via chat function and Help Center

If you submit an inquiry relating to Weld's services via Weld's chat function or Help Center, Weld will process personal data about you e.g., your IP-address, geographic location, possible reactions to our ads and the personal data you include in your inquiry, e.g., name, email address and telephone number. 

The legal basis for the processing of personal data is Weld's legitimate interests and that it is Weld's assessment that our legitimate interests override your interests or fundamental rights and freedoms, cf. Art. 6(1)(f) of the GDPR. The legitimate interests pursued are to provide customer support by answering the inquiries and business development. 

2.4. Users of the Weld platform

When you are invited to or sign up for a workspace in the Weld platform, Weld processes personal data about you as a user, including your name, email address, login and authentication details, the workspace you belong to, and information about how you use the platform, such as log data and support history. If a colleague invites you to a workspace, Weld receives your name and email address from them.

The legal basis for the processing is that it is necessary for the performance of the agreement with you, cf. Art. 6(1)(b) of the GDPR, where you have signed up yourself. Where your employer has the agreement with Weld, the legal basis is Weld's legitimate interests, cf. Art. 6(1)(f) of the GDPR. In both cases, Weld also relies on its legitimate interests in providing, securing, supporting and improving the platform, cf. Art. 6(1)(f) of the GDPR.

Weld is the data controller for this account, authentication and billing data. Personal data that Weld processes on behalf of a customer, for instance data synced from the customer's own systems, is not covered by this Privacy Policy. That processing is governed by our Data Processing Agreement with the customer.

2.5. Newsletter and marketing emails

If you sign up for our newsletter or other marketing emails, Weld processes your name, email address and information about which emails you open and click.

The legal basis for the processing is your consent, cf. Art. 6(1)(a) of the GDPR. You can unsubscribe at any time using the link in every email.

3. Recipients of your personal data

Certain recipients process personal data on behalf of Weld and may only process your personal data in accordance with documented instructions given by Weld and further terms and conditions stated in a data processor agreement entered with Weld. These data processors are not permitted to process your personal data for their own purposes. They include providers of hosting (Amazon Web Services and Google Cloud), monitoring and error tracking (Datadog and Sentry), user authentication (Auth0), payments (Stripe), CRM and email (HubSpot), communication and email (Slack and Google Workspace), customer chat (Intercom), consent management (Cookiebot) and website analytics (Google).

If you consent to marketing cookies, the Meta Pixel on our website collects information about your visit, such as the pages you view and your browser and device, and sends it to Meta Platforms Ireland Limited. Weld and Meta are joint controllers for this collection and transmission, cf. Art. 26 of the GDPR. Weld is responsible for asking for your consent and for informing you, as in this policy. Meta is responsible for its own further processing of the data and for handling your rights in relation to it. The arrangement is set out in Meta's Controller Addendum. When you visit Weld's pages on Meta's platforms, Weld and Meta are also joint controllers for the page statistics Meta provides to Weld, as set out in Meta's Page Insights Controller Addendum. You can exercise your rights towards Weld or Meta.

You can read more about how Meta processes your personal data here.

4. Transfer of your personal data to a third country (outside of EU/EEA)

Weld will in certain cases transfer your personal data to third countries outside of EU/EEA, for instance to providers based in the US such as HubSpot (our CRM system), Intercom, Slack, Stripe, Google and Meta. Weld will ensure that transfer to third countries will be carried out in accordance with applicable data protection legislation so that an adequate level of protection is ensured. 

If the personal data are transferred to recipients in third countries that do not have an adequacy decision from the European Commission, Weld ensures an adequate level of protection, for instance by relying on the EU-U.S. Data Privacy Framework where the recipient is certified under it, or by entering into the EU Commission's standard contractual clauses and, where necessary, implementing additional safeguards. You can obtain a copy of the relevant safeguards by contacting Weld at hello@weld.app.

5. Storage of your personal data

Weld will only store your personal data as long as it is deemed necessary to fulfil the purposes for the processing of your personal data.

5.1. Website visitors

Personal data collected via cookies through use of our website are stored for different periods depending on the purpose. 

Personal data such as your IP address will be stored as long as deemed necessary and will be deleted at the latest 1 year from your last visit on our website.

5.2. Contact person

If you are a contact person at a customer, vendor or another business partner, Weld will store personal data about you as long as Weld communicates with you because you are Weld's point of contact, 3 years after termination of the contractual relationship, or until it is no longer necessary for the establishment, exercise or defence of a legal claim.

5.3. Inquiries via chat function and Help Center

The inquiries from potential customers will be deleted 1 year after the inquiry is resolved, unless it is deemed necessary to store such inquiries for documentation purposes e.g., due to a dispute, including for the establishment, exercise or defence of legal claims. 

The inquiries from existing customers will be deleted 3 years from the termination of the contractual relationship, unless it is deemed necessary to store such inquiries for documentation purposes e.g., due to a dispute, including for the establishment, exercise or defence of legal claims.

5.4. Users of the Weld platform

Personal data about users is stored for as long as the user has access to the platform. It is deleted no later than 90 days after the agreement with the customer expires, unless it must be stored longer to comply with a legal obligation, such as bookkeeping.

5.5. Newsletter and marketing emails

Your name and email address are stored until you unsubscribe or withdraw your consent, and the information about which emails you open and click is deleted at the same time.

5.6. Bookkeeping material

Weld will store your personal data to the extent it is necessary for bookkeeping purposes such as personal data related to invoicing. Such personal data will be stored for a period of 5 years from the end of the financial year to which the accounting records relate. The purpose is to comply with the legal obligation pursuant to the Danish Bookkeeping Act.

6. Your rights

Weld has implemented a number of measures to protect your personal data and ensure your rights. As a data subject, you can exercise the rights listed below. However, some of the rights only apply under certain circumstances.

The Danish Data Protection Agency has prepared guidelines regarding the data subjects’ rights. The guidelines can be accessed here. However, please note that the guidelines are only available in Danish. 

6.1. Right of access

You have the right to request access to, including the disclosure of a copy of the personal data that Weld processes about you as well as the right to receive information on:

• the purposes of the processing;
  
• the categories of personal data concerned; 
  
• the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries and in that connection the necessary measures carried out prior to the transfer;
  
• the envisaged storage period or the criteria used to determine that period;
  
• the existence of the right to request rectification, erasure, restriction or objection against processing of your personal data, including especially processing of personal data in connection with direct marketing purposes;
  
• the right to lodge a complaint with the Danish Data Protection Agency;
  
• where your personal data are obtained from if the data are not collected from you; and
  
• the existence of automated decision-making, including profiling, and as a minimum meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.
  

6.2. Right to rectification

You have the right to have inaccurate personal data about yourself rectified as well as the right to request completion of incomplete personal data concerning you.

6.3. Right to erasure ("right to be forgotten")

Under certain circumstances you have the right to obtain from Weld the erasure of personal data, for instance if the processing is based on your consent and you withdraw this consent.

6.4. Right to restriction of processing

You have the right to restrict Weld's processing of your personal data, for instance, in the event you dispute the accuracy of the personal data.

6.5. Right to data portability

When our processing of your personal data is carried out automatically and is based on your consent or a contract with you, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format and the right to transmit those personal data to another data controller, if this is technically feasible.

6.6. Right to object

You have the right to object, on grounds relating to your particular situation, at any time to our processing of your personal data which is based on point (e) or (f) of Art. 6(1) of the GDPR. You may also object at any time to the processing of your personal data for direct marketing purposes, and Weld will then no longer process your personal data for those purposes.

6.7. Right to not be subject to automated individual decision-making

You have the right not to be subject to a decision based solely on automatic processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

6.8. Right to withdraw a consent

If you have given us your consent to the processing of your personal data, you have the right to withdraw such consent at any time. However, the withdrawal of your consent will not affect the lawfulness of processing of your personal data based on consent before its withdrawal.

7. Questions and complaints

If you have any questions relating to this Privacy Policy, you wish to exercise your rights as mentioned above, or you disagree with the way Weld processes your personal data, you can contact Weld by using the contact information provided in section 1 of this Privacy Policy.

You can also file a complaint to the Danish Data Protection Agency, which is an independent public authority that is, inter alia, responsible for monitoring and enforcing the application of the GDPR. The Danish Data Protection Agency's contact information is available on its website: www.datatilsynet.dk.

If you are looking for our Data Processing Agreement (DPA) please click on this link: Data Processing Agreement

8. Amendments to this privacy policy

This Privacy Policy will be updated and modified periodically, as well as when necessary due to changes in applicable data protection legislation and practice and, thus, Weld recommends that you keep yourself updated of such changes.