Privacy policy
Last updated: 1 March 2026. Disub Workshop processes personal data under the GDPR.
Data controller
Disub Workshop
Vesterbrogade 86, 1620 Copenhagen, Denmark
CVR 41287654
[email protected] | +45 33 21 48 90
Data we collect
- Name, email, phone, address
- Project briefs and photos you send
- Invoice and payment records
- Technical data via cookies
Legal basis
- Contract — fulfilling orders and appointments
- Legitimate interest — enquiries, security, record keeping
- Consent — non-essential cookies and optional marketing
- Legal obligation — tax and accounting records
Retention
- Enquiries without contract: 24 months
- Project files: 5 years after completion
- Accounting: statutory period in our jurisdiction
Sharing
We use hosting, email and payment processors under data processing agreements. We do not sell personal data.
International transfers
Primary systems are in the EEA. Any transfer outside the EEA uses Standard Contractual Clauses or adequacy decisions.
Security
TLS encryption, access controls, staff training and periodic review of processor compliance.
Your rights
Access, rectification, erasure, restriction, portability and objection. Contact [email protected]. We respond within one month.
Complaints
You may lodge a complaint with your supervisory authority, including the Autoriteit Persoonsgegevens.
Cookies
See our Cookie policy.