Privacy policy

1. Who is responsible for your data

Sekvia is the data controller for the processing of personal data on the website PolyOmi.

• Company: Sekvia
• Address: -
• CVR: -
• E-mail: info@polyomi.com

This policy covers the website PolyOmi, including the contact form and the waiting list form. It does not cover PolyOmi installations that customers run on their own servers. In a self-hosted installation, the company running it is the data controller for the data in it, and we have no access to that data.

2. The short version

• We do not use analytics, tracking or advertising cookies.
• We do not use advertising trackers, social media plugins or content embedded from other websites. Our fonts are served from our own server.
• We count visits with sekvia.com, a statistics service that sets no cookies and stores nothing on your device (see section 3).
• We only use strictly necessary cookies (see section 5 and our cookie policy).
• We only process what you send us in a form, and what our servers need to log to keep the site secure.
• We never sell your data, and we do not use it for profiling or automated decisions.

3. What we process, why, and for how long

When you visit the website (server logs)

When you visit PolyOmi, our web server records technical information about each request: your IP address, the date and time, the requested URL, the referring page and your browser's user agent. We use this only to run the website securely, find errors and prevent abuse such as attacks, spam and attempts to break in.

• Legal basis: our legitimate interest in operating a secure and stable website (GDPR art. 6(1)(f)).
• Retention: server logs are deleted automatically after at most 30 days. If a log entry is needed to investigate or handle a specific attack, we keep it for as long as that takes.

Visitor statistics

We use sekvia.com to count visits and see which pages are read, so we can improve the website. sekvia.com sets no cookies, stores nothing on your device and respects the Global Privacy Control setting in your browser. When a page loads, your browser sends sekvia.com the page address and title, the page you came from, the width of your browser window and any campaign tags in the link (utm). Like any request on the internet, this includes your IP address and your browser's user agent, which sekvia.com uses to tell visits apart without cookies. We only look at the numbers in aggregated form, and we do not use them to identify you or to show you ads.

• Legal basis: our legitimate interest in knowing how the website is used, so we can improve it (GDPR art. 6(1)(f)).
• You can object at any time by turning on Global Privacy Control in your browser or by writing to info@polyomi.com.

Choice of language

When you arrive, we use the country your request comes from, as reported by Cloudflare based on your IP address, to show the language version that most likely fits you. The country is only used for that request and is not stored. If you choose a language yourself in the language switcher, your choice is saved in a cookie (see section 5).

• Legal basis: our legitimate interest in showing the website in a relevant language (GDPR art. 6(1)(f)).

When you contact us

When you write to us through the contact form or by e-mail, we process the information you give us, typically your name, e-mail address, company and your message. We use it to answer you and follow up on your enquiry.

• Legal basis: when your enquiry concerns our products or a possible agreement, the processing is necessary to take steps at your request before entering into a contract (GDPR art. 6(1)(b)). Otherwise, our legitimate interest in answering the enquiries we receive (GDPR art. 6(1)(f)).
• Retention: we delete the information when it is no longer needed, and at the latest 24 months after our last contact with you.

When you join the waiting list or the beta

When you sign up, we process your name, e-mail address, company and any other information you add in the form. We use it to give you access to the beta, send you information about installation and updates, ask for your feedback and, if you chose the cloud waitlist, tell you when PolyOmi Cloud opens.

• Legal basis: to provide the beta programme or waitlist you have signed up for (GDPR art. 6(1)(b)), and our legitimate interest in improving the product based on feedback (GDPR art. 6(1)(f)).
• Retention: until you leave the beta or the waitlist, and at the latest 24 months after our last contact with you.
• You can leave at any time by replying to one of our e-mails or writing to info@polyomi.com.

Staff login

The admin area of the website is only for our own staff. To protect it against password guessing and other attacks, we log the IP address and time of login attempts. This does not concern ordinary visitors.

• Legal basis: our legitimate interest in protecting our systems (GDPR art. 6(1)(f)).
• Retention: only as long as needed for security purposes, normally no more than 30 days.

4. You are not required to give us data

You can browse the website without giving us any information. If you want us to answer you or give you beta access, we need at least your e-mail address.

5. Cookies

We only use cookies that are strictly necessary:

• Session cookie: only set for logged-in staff in the admin area, to keep them signed in. It is not set for ordinary visitors.
• lang: only set if you actively choose a language in the language switcher. It stores only the language code (for example da or en) and expires after 1 year.
• Cloudflare security cookies (for example __cf_bm or challenge cookies): may be set by Cloudflare, but only when it needs to protect the website against bots and attacks.

Strictly necessary cookies are exempt from the consent requirement in the ePrivacy rules, which in Denmark are implemented in the cookie order (cookiebekendtgørelsen). That is why this website does not show a cookie banner. Read more in our cookie policy.

6. Who processes data on our behalf

We use the following data processors. They only process personal data on our instructions and under a data processing agreement:

• our hosting provider: hosts the website, its database and its server logs.
• Cloudflare: delivers the website through its network (CDN) and protects it against attacks. For this, Cloudflare processes IP addresses and technical information about requests.
• sekvia.com: counts visits to the website for us (see section 3).

We do not pass on your data to anyone else unless we are required to by law.

7. Transfers outside the EU/EEA

We aim to keep personal data within the EU/EEA. Cloudflare operates a global network, so some processing may take place outside the EU/EEA. Such transfers are covered by Cloudflare's data processing agreement, which uses the European Commission's standard contractual clauses and other safeguards recognised under the GDPR.

8. Security

The website is only served over an encrypted connection (HTTPS). Access to the website's systems and to the information you send us is limited to the people who need it for the purposes described here.

9. Your rights

Under the General Data Protection Regulation (GDPR) you have the right to:

• get access to the personal data we hold about you
• have incorrect data corrected
• have your data erased
• have the processing of your data restricted
• object to processing that is based on our legitimate interest
• receive the data you have given us in a structured, commonly used and machine-readable format (data portability)

To use your rights, write to info@polyomi.com. We will answer without undue delay and at the latest within one month. There may be conditions or limits to these rights, for example if we are required by law to keep certain information.

10. Complaints

If you are unhappy with how we process your personal data, please contact us first, so we can try to put it right. You can always complain to the Danish Data Protection Agency (Datatilsynet), www.datatilsynet.dk.

11. Changes to this policy

We update this policy when our processing changes. The date at the top shows when it was last updated.

Last updated 1 October 2026.