Privacy notice

1. Who is responsible

Aetrium ApS is the controller of personal information processed to operate Raavare. The company details and contact address appear below. The service is for professional use, but names, individual work email addresses and other information identifying people can still be personal data.

2. Information we process

Account information includes your name, email address, authentication information and account role. Company information includes business identity, registration details, location, website, logo and the contact details you supply. Listings include equipment details, prices, location, photographs and availability.

We also process enquiries you send us, moderation records and the technical and security information needed to operate the service. Our hosting and authentication providers may process connection details such as IP addresses, request times and error or access logs.

When you submit the contact form, we store your name, email address, subject and message in a protected support inbox accessible to authorised administrators. If you are signed in, the submission is also linked to your account. We use these details to respond to your enquiry by email. You can also email us directly.

3. Purposes and legal bases

We use information to provide accounts, publish company and equipment information, enable professional enquiries, respond to support requests and maintain the service. Where you contract with us personally, necessary account processing may be based on performance of that contract. For company representatives, operation of the business relationship may rely on our legitimate interests.

Our legitimate interests include running a useful professional directory, protecting accounts, preventing misuse, resolving enquiries and maintaining records of moderation decisions. We assess those interests against the rights and interests of the people concerned. We may also process information to meet applicable legal obligations or establish, exercise or defend legal claims.

Future uses of equipment history for valuation or pricing tools will need their own defined scope and retention arrangements. General agreement to the terms is not a waiver of your data-protection rights or blanket consent to unrelated uses.

4. What other people can see

Company identity, website, location, logo, descriptions and published equipment listings are publicly visible and may be indexed by search engines. Company phone and email fields are available to signed-in directory users. Information placed inside a public description or image is public regardless of those contact-field restrictions.

Account profile details, support messages and admin history are not part of the public directory. Authorised administrators can access information needed to operate the service. Other businesses you contact may process your messages under their own privacy arrangements.

5. Service providers and international processing

We use Supabase for the database, authentication and uploaded files, Netlify for website hosting and delivery, and email service providers for business correspondence. Providers process information needed for their services; we do not publish private account or support records in public page caches.

The primary Supabase database is currently in Ireland. Website delivery, support operations or subprocessors may involve other countries. Where personal data is transferred outside the EEA, an applicable transfer mechanism and appropriate safeguards are required. Contact us for information about the arrangements applicable to your data.

6. Browser storage

The application uses browser storage to maintain a signed-in session. Signing out clears the application session. The current application does not include advertising or audience-analytics scripts.

Necessary hosting, security and authentication functions may still process technical information. If we introduce optional tracking that requires consent, we will provide the relevant information and controls before activating it.

7. Retention, removal and planned equipment history

We keep account and company records as needed to provide the account and manage the business relationship. Support and moderation records are kept only for as long as needed to resolve the matter, protect the service or meet applicable legal obligations and claims. Retention depends on the record’s purpose and any remaining legal need, rather than simply on whether it is visible on the website.

We intend to build a historical equipment dataset for statistics and future pricing tools. A request to remove a listing from the directory is distinct from a request to erase personal information. The scope, identification level and retention arrangements for that future dataset must be defined before those tools or self-service deletion are activated.

Equipment and asking-price information that is genuinely anonymous can be treated differently from records that still identify or can be linked to a person. Merely hiding a listing or replacing a name with an identifier does not make the record anonymous. Contact us to discuss removal or erasure; we will assess the information and the applicable requirements.

8. Your rights and requests

Depending on the circumstances, you can request access to your personal data, correction, erasure, restriction or portability, and object to processing based on legitimate interests. If we rely on consent for a particular activity, you can withdraw that consent without affecting earlier lawful processing.

Send requests to administration@aetrium.dk. We may ask for proportionate information to confirm your identity and locate the relevant records. We will explain any lawful reason why a request cannot be met in full.

You may complain to the Danish Data Protection Agency, Datatilsynet, or the supervisory authority relevant to you. See datatilsynet.dk for the Danish authority’s current contact information.

9. Updates to this notice

We will update this notice when the service or its use of information changes. The date on this page identifies the current version. Material changes, including activation of new tracking or historical-data services, will be communicated as appropriate before the relevant processing starts.