GDPR Compliance

Last updated: July 2026

Our Commitment to GDPR

trygantisapp is fully committed to complying with the General Data Protection Regulation (GDPR) and protecting the personal data of individuals who interact with our services. This page outlines how we ensure compliance and uphold your data protection rights.

Data Controller Information

For the purposes of the GDPR, the data controller is:

trygantisapp
Vesterbrogade 45, 3rd Floor
1620 Copenhagen V, Denmark
Email: [email protected]

Principles of Data Processing

We adhere to the core principles of the GDPR in all our data processing activities:

• Lawfulness, Fairness, and Transparency: We process data lawfully, fairly, and in a transparent manner.
• Purpose Limitation: We collect data for specified, explicit, and legitimate purposes and do not process it in ways incompatible with those purposes.
• Data Minimisation: We collect only the data that is necessary for the purposes we have identified.
• Accuracy: We take reasonable steps to ensure personal data is accurate and kept up to date.
• Storage Limitation: We retain personal data only for as long as necessary to fulfil the purposes for which it was collected.
• Integrity and Confidentiality: We implement appropriate security measures to protect personal data.
• Accountability: We take responsibility for compliance with these principles and can demonstrate this compliance.

Your Rights Under GDPR

The GDPR grants you specific rights regarding your personal data:

Right of Access

You have the right to request a copy of the personal data we hold about you and information about how we process it.

Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal data we hold about you.

Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected.

Right to Restrict Processing

You have the right to request that we limit how we use your personal data in certain circumstances.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.

Right to Object

You have the right to object to processing of your personal data in certain circumstances, including processing for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects.

Exercising Your Rights

To exercise any of the rights described above, please contact us at [email protected]. We will respond to your request within 30 days. In certain circumstances, we may need to verify your identity before processing your request.

Legal Basis for Processing

We only process personal data when we have a valid legal basis to do so. The legal bases we rely on include:

• Your consent for specific processing activities
• Processing necessary for the performance of a contract
• Processing necessary for compliance with legal obligations
• Processing necessary for our legitimate business interests, where these do not override your rights

Data Security Measures

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

• Encryption of data in transit and at rest where appropriate
• Access controls limiting who can access personal data
• Regular security assessments and updates
• Staff training on data protection requirements

Data Breach Procedures

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of individuals, we will notify the Danish Data Protection Agency within 72 hours. Where required, we will also notify affected individuals without undue delay.

International Data Transfers

Where we transfer personal data outside the European Economic Area, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.

Supervisory Authority

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the Danish Data Protection Agency:

Datatilsynet
Carl Jacobsens Vej 35
2500 Valby, Denmark
Website: www.datatilsynet.dk

Contact for Data Protection Queries

For any questions regarding our GDPR compliance or data protection practices, please contact us at [email protected].