Privacy policy
Revamp ApS • Updated June 2025
In this Privacy Policy you can learn how Revamp ApS ("Revamp", "we", or "us") processes your personal data. We are required to provide you with this information under the EU General Data Protection Regulation (the "GDPR"). We take the handling of your personal data seriously and only collect what we need to deliver our services, improve our platform, and communicate with you.
1. Data controller
Revamp ApS is the data controller for the personal data described in this Privacy Policy. We process personal data in a number of different situations, described in detail in Section 2. For information about your rights, see Section 5. To get in touch, see Section 7.
2. What we collect and why
This Privacy Policy covers how we handle personal data in the following situations:
- General communications
- Customer administration
- Calculator tool
- Marketing and newsletters
- Website visits
2.1 General communications
When you contact us by email or other means, your message will typically contain personal data such as your name, email address, and company affiliation. We process this data to manage and respond to your enquiry.
The legal basis is article 6(1)(f) of the GDPR, as we pursue our legitimate interest in handling general communications. Personal data from general communications will be deleted 2 years after the end of the financial year in which your last enquiry was concluded.
2.2 Customer administration
In customer relationships we process your contact details and your association with the company you represent. We may also receive such data from a third party, for example your employer, if your personal data appears in material we receive from them.
We process this data to identify who you are, manage your enquiries and orders, and communicate with you or your organisation. If you create an account on the Revamp platform, we also process your email address and login credentials linked to that account.
The legal basis is article 6(1)(f) of the GDPR, as we pursue our legitimate interest in managing customer relationships and fulfilling any agreement with the company you represent. Your personal data will generally be deleted 2 years after the end of the financial year in which the customer relationship ended. Platform account data will be deleted after 2 years of inactivity.
As part of processing invoices and other financial documents, personal data referenced in those materials is also processed. We are legally obligated to retain bookkeeping records, including payment information, in accordance with Danish bookkeeping legislation. The legal basis for this is article 6(1)(c) of the GDPR. Bookkeeping data will be deleted 5 years after the end of the financial year in which the customer relationship ended.
2.3 Calculator tool
To generate your personalised electricity consumption results via our calculator, we collect your company name and work email address. We also retrieve your historical electricity consumption data from Energinet's Eloverblik, based on the authorisation you grant us through MitID.
We use this data solely to calculate and present your results and do not share your consumption data with third parties. The MitID authorisation gives Revamp read-only access to your consumption data and is valid for 3 years. It can be revoked at any time through Eloverblik.
The legal basis is article 6(1)(a) of the GDPR, as we rely on your explicit consent provided via MitID.
2.4 Marketing and newsletters
When you subscribe to our newsletter, we register your name and email address for the purpose of sending you updates about Revamp. The legal basis is the consent you give in accordance with section 10 of the Danish Marketing Practices Act and article 6(1)(a) of the GDPR. You can unsubscribe at any time. Newsletter data will be deleted 1 year after our last newsletter has been sent, unless you have withdrawn your consent before that time.
2.5 LinkedIn
We process your personal data when you visit our company page on LinkedIn. As the operator of Revamp's LinkedIn page, Revamp ApS and LinkedIn act as joint controllers for that processing. You can read more about how LinkedIn handles personal data in the LinkedIn joint controller addendum and the LinkedIn Privacy Policy.
2.6 When you visit our website
When you visit our website, we use cookies to collect data about your visit, including your navigation behaviour, browser type, and IP address. We collect this data to ensure stable and secure operation of our website.
The legal basis is article 6(1)(f) of the GDPR for strictly necessary cookies, as we pursue our legitimate interest in maintaining the functionality and security of the website. For all other cookies, the legal basis is article 6(1)(a) of the GDPR, based on your consent. You can read more in our Cookie Policy.
3. Recipients
We do not sell your personal data. We share data with the following categories of recipients where relevant to delivering our services or meeting legal obligations:
IT service providers and data processors
Third-party providers who host, develop, and support our platform. All processors are bound by data processing agreements and may only act on our documented instructions.
Authorised electrical installers
Partners who assist with the physical installation and setup of smart circuit breakers. They may access location and device configuration data relevant to their work.
Public authorities and advisors
Tax authorities, external accountants, legal advisors, and other relevant authorities where required by law or in connection with a specific matter.
4. Third-party processors
We transfer personal data to countries outside the EU and EEA when making data available to our processors. All such transfers are governed by the EU Standard Contractual Clauses as adopted by the European Commission.
We currently use the following processors: Microsoft, HubSpot, Visma E-conomic, LinkedIn
5. Your rights
Under the GDPR you have a number of rights regarding the personal data we hold about you. To exercise any of them, please contact us at contact@revamp-group.com. We will respond within 30 days.
You have the right to receive information about:
Access
Request information about which personal data we process about you, including its source, purpose, and recipients.
Rectification
Ask us to correct any inaccurate or incomplete personal data we hold about you.
Erasure
Request deletion of your personal data before the end of our normal retention period, in certain circumstances.
Restriction
Ask us to restrict our processing of your data in certain situations, such as while you contest its accuracy.
Portability
Receive your personal data in a structured, machine-readable format and have it transferred to another controller, in certain circumstances.
Objection
Object to processing based on legitimate interests. You have an unconditional right to object to direct marketing at any time.
Further, you have the right to withdraw your consent at any time. If you wish to do so, please contact us (see Section 7 below). If you decide to withdraw your consent, it will not affect the lawfulness of our processing of your personal data on the basis of the consent previously given by you and up to the time of withdrawal. If you withdraw your consent, it will not become effective until such time.
6. Complaint to a supervisory authority
If you wish to complain about our processing of your personal data, you can contact the Danish Data Protection Authority (Datatilsynet) at datatilsynet.dk. Further guidance on your rights as a data subject is also available there.
7. Contact
If you have any questions about how we process personal data or wish to exercise your rights, please get in touch: