1. Introduction

This Privacy Policy describes how JED ApS, VAT Number (CVR) DK35653821 (“JED”, “we”, “us”, or “our”), collects, uses, discloses, stores, and protects personal data. JED provides the JEDWare Platform and telephony, IT and hardware services, as further described in our Terms of Service.

JED is committed to protecting the privacy and personal data of its customers, users, website visitors, and business contacts. This Privacy Policy explains how we collect, use, disclose, store, and protect personal data when you use our website, services, and related products.

This Privacy Policy applies to personal data processed by JED as a data controller in connection with our website, customer relationships, sales and marketing activities, support services, and operation of the Services.

Where JED processes personal data on behalf of customers through the Services, such processing is governed by the applicable Data Processing Agreement (DPA) and the instructions of the relevant
customer acting as data controller.

2. Who We Are

JED ApS is the provider of the Services and the data controller for the personal data processed in connection with this Privacy Policy.

JED ApS
Bogensevej 90, DK-5270 Odense N
Denmark
VAT Number (CVR): DK35653821

For questions regarding this Privacy Policy, the processing of personal data, or your privacy rights, please send an email to [email protected].

Additional information about JED and the Services is available on our websites: jed-ware.com, which covers the JEDWare Platform, and jed.dk, which covers our telephony, IT and hardware services.

3. Personal Data We Collect

3.1 Information You Provide

We may collect personal data that you voluntarily provide when interacting with JED, including when you contact us, request information, register for the Services, subscribe to communications, or otherwise engage with us.

Depending on the nature of the interaction, this information may include:

• name and business contact information, such as email address, phone number, company name, and job title
• account registration and authentication information
• billing and payment information, such as billing address, VAT number, subscription details, and transaction records; payment card details are collected and processed directly by our payment provider and are not stored by JED
• information submitted through contact forms, support requests, or customer communications
• information provided during sales discussions, demonstrations, or onboarding activities
• preferences relating to communications, subscriptions, or marketing activities
• We ask that you do not provide sensitive personal data unless specifically requested and necessary for the relevant purpose.

3.2 Information Collected Automatically

When you visit our website or use the Services, certain information may be collected automatically through cookies, log files, analytics tools, and similar technologies.

This information may include:

• IP address and approximate geographic location
• browser type, device type, operating system, and language settings
• pages visited, features used, and interactions with the website or Services
• dates, times, and duration of visits or sessions
• technical and diagnostic information used to maintain security, performance, and reliability of the Services.

Additional information regarding our use of cookies and similar technologies is available in the cookie policy for the website you are visiting: jed-ware.com/cookie-policy.

3.3 Information from Third Parties

We may receive personal data from third parties in connection with the operation of our business, the provision of the Services, or our marketing and sales activities.

Such information may be obtained from:

• customers and authorised users of the Services
• business partners, resellers, and integration providers
• publicly available sources, including company websites and professional networking platforms
• marketing, analytics, and customer relationship management (CRM) providers
• other third parties where permitted by applicable law

We use information received from third parties in accordance with this Privacy Policy and applicable data protection laws.

4. How We Use Personal Data

JED processes personal data for legitimate business purposes and in connection with the provision, operation, maintenance, improvement, and security of the Services.

We may use personal data for the following purposes:

• providing, maintaining, and supporting the Services
• managing customer relationships and responding to inquiries, requests, and support cases
• creating and administering user accounts, processing payments, managing subscriptions and renewals, and handling billing and invoicing
• communicating with customers and users regarding the Services
• sending service-related notices, updates, and security communications
• improving the functionality, performance, and user experience of the Services
• monitoring, preventing, and investigating fraud, abuse, security incidents, and other unauthorised activities
• complying with legal obligations and regulatory requirements
• conducting marketing activities where permitted by applicable law

We do not sell personal data and do not use personal data for automated decision-making or profiling that produces legal or similarly significant effects on individuals.

5. Legal Basis for Processing 

Where required by applicable data protection laws, including the General Data Protection Regulation (GDPR), JED processes personal data on one or more of the following legal bases:

• Performance of a contract, where processing is necessary to provide the Services, manage customer
  relationships, or fulfil our contractual obligations
• Legitimate interests, where processing is necessary for the operation, improvement, security, marketing, or administration of our business and such interests are not overridden by the rights and freedoms of the individual
• Compliance with legal obligations, where processing is required by applicable laws, regulations, court orders, or other legal requirements
• Consent, where required by law, including certain marketing activities and the use of non-essential cookies and similar technologies

Where processing is based on consent, consent may be withdrawn at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before such withdrawal.

6. Sharing of Personal Data

6.1 Service Providers and Sub Processors

JED may share personal data with trusted third-party service providers and sub processors that assist us in operating, delivering, maintaining, securing, and improving the Services.

Such providers may perform services relating to hosting, cloud infrastructure, communications, email delivery, payment processing, analytics, customer support, security, and other business operations necessary for the provision of the Services.

JED requires its service providers and sub processors to process personal data only on documented instructions, implement appropriate technical and organisational security measures, and comply with applicable data protection laws.

Where JED processes personal data on behalf of a customer as a data processor, a current list of sub-processors is available in the applicable Data Processing Agreement (DPA), section 8.

6.2 Legal Requirements

JED may disclose personal data where required to do so by applicable law, regulation, legal process, court order, or request from a competent public authority.

We may also disclose personal data where necessary to establish, exercise, or defend legal claims, protect the rights, property, or safety of JED, our customers, users, or others, or investigate suspected fraud, security incidents, or unlawful activities.

Where legally permitted and appropriate, we will seek to limit such disclosures and protect the confidentiality of the personal data involved.

6.3 Business Transfers

JED may disclose or transfer personal data in connection with a merger, acquisition, financing, corporate reorganisation, sale of assets, or other business transaction involving all or part of our business.

Any successor entity or acquiring partywill be required to handle personal data in accordance with applicable data protection laws and the commitments set out in this Privacy Policy.

Where required by applicable law, we will provide notice of such changes and any resulting impact on the processing of personal data.

7. International Data Transfers

JED primarily processes and stores personal data within the European Economic Area (EEA). However, certain service providers, sub processors, or business partners may process personal data in countries outside the EEA.

Where personal data is transferred outside the EEA, JED will ensure that appropriate safeguards are in place as required by applicable data protection laws. Such safeguards may include:

• adequacy decisions issued by the European Commission
• the European Commission’s Standard Contractual Clauses (SCCs)
• the EU-U.S. Data Privacy Framework or equivalent approved transfer mechanisms
• other lawful transfer mechanisms recognised under applicable data protection laws

Where JED processes personal data on behalf of a customer, transfers carried out by sub-processors are set out in the applicable Data Processing Agreement (DPA).

8. Data Retention

JED retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including the provision of the Services, compliance with legal obligations, resolution of disputes, and enforcement of agreements.

The retention period for personal data may vary depending on the nature of the information, the purposes of processing, contractual requirements, and applicable legal or regulatory obligations.

When personal data is no longer required for the purposes for which it was collected, JED will securely delete, anonymise, or otherwise dispose of the information in accordance with applicable laws and internal retention policies.

Certain personal data contained in accounting records, including invoices and transaction records, is retained for five (5) years from the end of the financial year to which the records relate, as required under applicable accounting legislation.

Where JED processes personal data on behalf of customers as a data processor, retention and deletion of such data are governed by the applicable Data Processing Agreement (DPA) and the customer’s instructions.

9. Data Security 

JED implements appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or unauthorised access.

These measures may include access controls, authentication mechanisms, encryption, monitoring, logging, backup procedures,
infrastructure security, and other safeguards appropriate to the nature of the Services and the risks involved.

Access to personal data is restricted to authorised personnel, service providers, and sub processors who require such access to perform their duties and who are subject to appropriate confidentiality and security obligations.

While JED takes reasonable measures to protect personal data, no method of transmission over the internet or method of electronic storage can be guaranteed to be completely secure.

Additional information regarding JED’s security practices may be made available upon request or through separate security and compliance documentation where applicable.

10. Your GDPR Rights

Subject to applicable data protection laws, including the GDPR, individuals may have the following rights regarding their personal data:

• the right to access personal data held about them
• the right to request correction of inaccurate or incomplete personal data
• the right to request deletion of personal data in certain circumstances
• the right to request restriction of processing
• the right to object to certain processing activities
• the right to data portability where applicable
• the right to withdraw consent at any time where processing is based on consent
• the right to lodge a complaint with a competent data protection
  authority

Requests relating to personal data and privacy rights may be directed by email to [email protected].

If you are located in the European Economic Area (EEA), you also have the right to lodge a complaint with your local supervisory authority. In Denmark, the competent authority is the Danish Data Protection Agency (Datatilsynet).

11. Cookies and Similar Technologies 

JED uses cookies and similar technologies to operate and improve the website and Services, enhance user experience, analyse usage, and support security and functionality.

Except for cookies that are strictly necessary, we request your consent before placing cookies on your device, where required by applicable law.

You can manage your cookie preferences through our cookie consent tool and browser settings. Please note that disabling certain cookies may affect the functionality of the website or
Services.

For further information regarding the categories of cookies and similar technologies we use, and how you can manage your preferences, please refer to our Cookie Policy for the website you are visiting: jed-ware.com/cookie-policy.

Details of the specific cookies currently in use, including their providers and storage duration, are available at any time through our cookie consent tool.

12. Changes to this Privacy Policy 

JED may update this Privacy Policy from time to time to reflect changes in the Services, applicable laws, regulatory requirements, business practices, or data processing activities.

The most current version of this Privacy Policy will always be available on the Website and will indicate the date of the latest revision.

Where required by applicable law, JED will provide notice of material changes through the Website, the Services, email, or other reasonable means before such changes become effective.

13. Contact Information

If you have questions regarding this Privacy Policy, the processing of personal data, or your rights under applicable data protection laws, please send an email to [email protected].

JED’s primary business information is
provided below:

Business Address
JED ApS
Bogensevej 90, DK-5270 Odense N
Denmark

VAT Number (CVR): DK35653821
Website: jed-ware.com

We will respond to privacy-related requests
in accordance with applicable data protection laws.