Privacy Policy

Last updated: January 2025

Introduction

This Privacy Policy explains how fermt collects, uses, stores, and protects your personal data in accordance with the General Data Protection Regulation (GDPR) and Danish data protection laws.

Data Controller

fermt is the data controller responsible for processing your personal data when you use our ERP system.

Contact: info@fermt.com

Data We Collect

Account Information

  • Name and email address
  • Company name and organization details
  • Account credentials (passwords are encrypted)

Payment Information

Payment processing is handled by Stripe. We do not store your credit card details. Stripe's privacy policy applies to payment data.

Usage Data

  • Product data, recipes, and inventory you enter into the system
  • Production orders, sales orders, purchase orders
  • Log data including IP address, browser type, and access times

How We Use Your Data

  • To provide and operate the ERP service
  • To process your subscription payments
  • To send you important service updates and notifications
  • To improve our service and develop new features
  • To comply with legal obligations

Legal Basis for Processing

  • Contract Performance: Processing necessary to provide the service you subscribed to
  • Legal Obligation: Compliance with accounting, tax, and data retention laws
  • Legitimate Interest: Improving our service and preventing fraud

Data Storage and Retention

Your data is stored securely on servers within the EU.

We retain your data for as long as your account is active and for up to 5 years after cancellation to comply with accounting and legal requirements.

Data Sharing

  • Payment Processor: We share necessary payment information with Stripe to process subscriptions
  • Hosting Providers: We use secure EU-based hosting services to store and process data

We never sell your personal data to third parties.

Your Rights Under GDPR

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Correct inaccurate or incomplete data
  • Right to Erasure: Request deletion of your data (subject to legal retention requirements)
  • Right to Data Portability: Receive your data in a machine-readable format
  • Right to Object: Object to certain types of data processing

To exercise any of these rights, please contact us at info@fermt.com

Security

We implement appropriate technical and organizational measures to protect your data, including encryption, access controls, and regular security assessments.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by email.

Contact Us

For any privacy-related questions or to exercise your rights, please contact us at info@fermt.com