Last updated: 28 September 2026
This policy explains how HARDI INTERNATIONAL A/S uses personal data when you visit hardi.com, send an enquiry, subscribe to marketing or use our customer and dealer services, including MyHARDI and the HARDI Extranet. HARDI ONE is our internal platform for managing enquiries, customer relationships and marketing. Specific services may provide additional privacy information when you use them.
HARDI INTERNATIONAL A/S
Herthadalvej 10
4840 Nørre Alslev, Denmark
Email: [email protected]
Telephone: +45 54 46 48 00
The information we collect depends on the form or service you use and the choices you make. The main purposes and legal bases under the General Data Protection Regulation (GDPR) are set out below.
| Source or service | Personal data | Purpose | Legal basis |
|---|---|---|---|
| Website enquiries and forms — HARDI ONE/MyHARDI | Name, email, phone, company, address or country, product interests and the information you provide in your enquiry, depending on the form. | Answer enquiries, arrange sales contact, demonstrations, quotations, events or training, and manage the related customer relationship. | Legitimate interests in responding to requests and managing business relationships (Article 6(1)(f)). Contract or steps requested before a contract where you are a party (Article 6(1)(b)). Separate consent is required for optional marketing. |
| Newsletters and marketing — HARDI ONE/MyHARDI, with SendGrid for email delivery | Name, email, relevant contact and interest information, subscription choices, and campaign interactions where the relevant tracking consent applies. | Send the marketing you subscribe to, manage preferences and unsubscribes, and measure or tailor campaigns where consent applies. | Consent (Article 6(1)(a)). Limited records of preferences and objections are retained to respect your choices and document compliance. |
| MyHARDI accounts and business access | Account and contact details, organisation, role, authentication and access information. | Provide and administer customer or dealer accounts, product resources and secure access. | Contract for a service you personally request as a contracting party (Article 6(1)(b)). For employees and other business contacts: legitimate interests in providing and administering business services (Article 6(1)(f)). |
| Registered machines, warranty and customer support | Contact details, machine and serial numbers, ownership or registration details, service requests and related correspondence. | Handle registration, warranty and support requests, maintain relevant service history and meet product-safety or traceability duties. | Contract or requested pre-contractual steps where you are a party (Article 6(1)(b)). Legitimate interests in handling business requests and service history (Article 6(1)(f)). Article 6(1)(c) applies where a specific legal duty requires product-safety or traceability records. |
| HARDI Extranet | Name, email, company, position, account and access information. | Provide authorised dealers and business partners with access to relevant resources and administer accounts. | Legitimate interests in operating secure business services (Article 6(1)(f)); contract where you are a party (Article 6(1)(b)). |
| Facebook and Instagram enquiry forms | The contact details, product interests and other information you submit in the form. | Respond to your enquiry and arrange relevant HARDI or dealer contact. Send marketing if you separately subscribe. | Legitimate interests in responding to enquiries (Article 6(1)(f)); contract or requested pre-contractual steps where applicable (Article 6(1)(b)); consent for marketing (Article 6(1)(a)). |
| Website analytics — HARDI and Google Analytics | Cookie and local-storage identifiers, pages viewed, interactions, referral information, device/browser information, IP-related information and approximate location. Where you identify yourself and the relevant analytics consent applies, a visitor identifier can be linked to a contact or account. | Measure website use and repeat visits, understand visitor journeys and improve content and services. | Consent for optional analytics (Article 6(1)(a)). Website choices are controlled through CookieFirst; services may provide separate analytics choices. |
| Advertising and website-based profiling — HARDI, Google, Meta and Stape | Advertising and browser identifiers, click and conversion events, pages or products viewed, IP address and browser information. For Meta conversion matching, available email, phone, name, city, postcode and country fields are converted into hash values; a contact identifier can also be included. | Measure campaigns, attribute enquiries to adverts, infer product interests and personalise advertising, content and related follow-up. HARDI uses server-side Meta Conversions API events; Stape also supports the advertising gateway. | Consent for optional advertising and website-based profiling (Article 6(1)(a)), controlled through CookieFirst. Email marketing subscriptions are managed separately. |
| Enquiry prioritisation in HARDI ONE | Information supplied in an enquiry, contact and organisation details, the source of the enquiry, and the timing and number of recorded customer interactions. | Help HARDI staff prioritise enquiries and relevant business follow-up using interest scores or groups. | Legitimate interests in organising and responding to business enquiries (Article 6(1)(f)). You can object to this processing. Optional website tracking and marketing subscriptions require their own relevant consent. |
| Website operation, security and consent records | Technical access and error information, consent choices, a visitor identifier, time and date, page URL and browser/device information. | Operate and protect our services, prevent misuse, and remember and document cookie choices. | Legitimate interests in secure and reliable services (Article 6(1)(f)); legal obligations to obtain and document consent (Article 6(1)(c)). |
We obtain most information directly from you. We may also receive relevant information from an authorised dealer, your organisation or a HARDI company involved in your enquiry or service. Website and campaign interactions are collected as described above, subject to the relevant consent.
Fields required to handle a request or provide a service are identified in the relevant form. If that information is missing, we may be unable to fulfil the request. Optional marketing and cookie consent can be declined independently of an enquiry or account.
Optional website analytics use browser or visitor identifiers to connect pages and interactions into visits. These identifiers are pseudonymous, not necessarily anonymous. When you identify yourself, for example through a form or account sign-in, and the relevant analytics consent applies, HARDI can associate a visitor journey with your contact or account.
With your advertising consent, website activity can also be used to infer product interests, create interest groups and tailor advertising, content and related sales follow-up. Google and Meta receive relevant advertising identifiers and event information. HARDI's server-side Meta Conversions API integration can include email, phone, first and last name, city, postcode and country when these fields are available. These fields are converted into hash values before being sent to Meta for matching. Events can also include a HARDI contact identifier, advertising click or browser identifiers, IP address, browser information and the relevant conversion, product or enquiry details. Hashing does not make data anonymous. Stape also supports the advertising gateway and can retain encrypted matching information in its advertising cookie; its matching information depends on the data supplied to that service.
Separately, HARDI ONE can assign an enquiry score using the contact and organisation information provided, recorded interactions, how recently those interactions occurred and the enquiry source. Scores and interest groups help staff prioritise business follow-up. These marketing scores do not by themselves make decisions with legal or similarly significant effects on you. Our legitimate interest is in organising and responding to business enquiries; you can object to this processing and to direct marketing, including associated profiling.
You can decline or withdraw optional website analytics and advertising through CookieFirst. Where a service provides a separate analytics choice, use that service's settings as well. Marketing email subscriptions are separate: use the unsubscribe link in an email or contact us. Withdrawing consent or objecting to marketing does not prevent us from handling a request you have made.
Service providers processing data on our behalf must follow our instructions and applicable data protection requirements. We do not sell your personal data.
The Azure infrastructure used for our HARDI ONE/MyHARDI platform is hosted in the West Europe region. European hosting does not in itself exclude access by a provider's support teams in other countries. SendGrid (Twilio), Google, YouTube, Meta and the Stape gateway can involve processing or access outside the European Economic Area, including in the United States; the location depends on the recipient, service and hosting configuration.
Transfers outside the EEA require an applicable adequacy decision or appropriate safeguards. The EU–U.S. Data Privacy Framework applies only where the recipient is currently certified and the relevant processing is covered. Where an adequacy decision does not apply, a transfer must be covered by appropriate safeguards, such as the European Commission's Standard Contractual Clauses and any necessary additional protections. A provider's certification is not a guarantee that every processing activity or transfer is covered. Contact us for the recipient, destination and safeguards applicable to your data, or to request a copy of the relevant safeguards.
We retain personal data only for as long as needed for its purpose, taking account of the customer relationship, service history, legal obligations and any period needed to resolve disputes or legal claims. The main criteria are:
A longer period applies only to the specific information needed for the relevant obligation or legal claim. Records are reviewed against their individual purpose rather than retained indefinitely merely because a customer relationship once existed. Contact us for the period or deletion criterion applicable to a particular record. Cookie and local-storage details are available in our cookie policy.
Depending on the circumstances, you have the right to access your personal data, correct it, request erasure or restriction of processing, and receive or transfer data in a portable format. You can object to processing based on legitimate interests and to direct marketing, including related profiling. Where processing is based on consent, you can withdraw it at any time; this does not affect the lawfulness of earlier processing.
To exercise your rights, contact [email protected]. We may need sufficient information to verify your identity and locate the relevant records. You can also complain to the Danish Data Protection Agency (Datatilsynet) or your local supervisory authority.
Our cookie policy provides the current cookie and local-storage inventory, purposes, providers and storage periods. The declaration and cookie choices are managed through CookieFirst. You can change or withdraw optional consent using the Privacy settings button or the controls on the cookie policy page.
CookieFirst is provided by Digital Data Solutions BV, Plantage Middenlaan 42a, 1018 DH Amsterdam, the Netherlands. It processes consent information on HARDI’s behalf. Consent records can include your choices, a pseudonymous visitor identifier, time and date, page URL, browser/device information and IP-related or approximate location information. We use these records to remember and document your choices under Article 6(1)(c) GDPR. Necessary consent controls remain active when optional cookies are declined.
We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access. Access is limited according to the purpose and responsibilities of the people and providers involved.
We update this policy when our services or processing change. The current version is published on this page with its revision date. Where a change requires new consent or additional information, it will be provided through the relevant service.