Privacy Policy

Last updated: 15 January 2026

1. Introduction

This Privacy Policy explains how infinitrixa AS ("we", "us", or "our") collects, uses, processes, and protects your personal information when you visit our website or use our spa appointment utilisation analytics services. We are committed to protecting your privacy and ensuring transparency about our data practices in compliance with the General Data Protection Regulation (GDPR) and applicable European privacy laws.

2. Data Controller Information

The data controller for the processing of your personal data is:

infinitrixa AS
Gammel Kongevej 58
1046 Copenhagen
Capital Region, Denmark
Registration Number: CVR25967485
Email: privacy@infinitrixa.pro
Phone: +45 36 32 06 85

3. Data We Collect

The data we collect includes personal information that you provide to us directly, information collected automatically when you use our website, and data related to your use of our analytics services. We collect the following types of personal data:

3.1 Information You Provide

  • Contact information (name, email address, phone number)
  • Company information (business name, industry, location)
  • Communication preferences
  • Messages and inquiries sent through our contact forms
  • Account information when you register for our services

3.2 Automatically Collected Information

  • Website usage data (pages visited, time spent, interactions)
  • Technical information (IP address, browser type, device information)
  • Analytics data through cookies and similar technologies
  • Performance metrics and service usage statistics

3.3 Business Analytics Data

  • Appointment scheduling data (when using our services)
  • Utilisation metrics and performance indicators
  • Aggregated business intelligence data

4. How We Use Your Information

We use your data for specific purposes based on legitimate legal grounds. How we use your information depends on the services you use and your relationship with infinitrixa:

4.1 Service Provision

  • Providing spa appointment utilisation analytics services
  • Processing and responding to your inquiries
  • Creating and managing your account
  • Delivering customer support and technical assistance

4.2 Communication

  • Sending service-related notifications and updates
  • Providing information about new features or services
  • Responding to your questions and support requests
  • Sending marketing communications (with your consent)

4.3 Improvement and Development

  • Analysing website usage to improve user experience
  • Developing new features and services
  • Conducting research and analytics
  • Ensuring security and preventing fraud

5. Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, please refer to our Cookie Policy.

6. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

  • Consent: When you have given explicit consent for specific processing activities
  • Contract: When processing is necessary for the performance of a contract with you
  • Legitimate Interest: When we have a legitimate business interest that doesn't override your privacy rights
  • Legal Obligation: When we must process data to comply with legal requirements

7. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your data in the following limited circumstances:

  • With service providers who assist in delivering our services (under strict confidentiality agreements)
  • When required by law or to comply with legal processes
  • To protect our rights, property, or safety, or that of our users
  • In connection with a business transfer or merger (with appropriate safeguards)

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy or as required by law. Data retention periods vary depending on the type of data and the purpose for which it was collected. Generally, we retain data for the following periods:

  • Contact form submissions: 3 years from the date of submission
  • Account information: Duration of account plus 1 year after closure
  • Analytics data: 26 months (in line with Google Analytics standards)
  • Marketing data: Until consent is withdrawn or 3 years of inactivity

9. International Data Transfers

As a European company, we primarily process data within the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:

  • Adequacy decisions by the European Commission
  • Standard Contractual Clauses (SCCs)
  • Binding Corporate Rules
  • Certification schemes approved by supervisory authorities

10. Your Rights

Under GDPR, you have several rights regarding your personal data. These rights include the ability to control how your personal information is processed and used:

  • Right of Access: Request a copy of the personal data we hold about you
  • Right to Rectification: Correct inaccurate or incomplete personal data
  • Right to Erasure: Request deletion of your personal data in certain circumstances
  • Right to Restrict Processing: Limit how we use your personal data
  • Right to Data Portability: Receive your data in a structured, machine-readable format
  • Right to Object: Object to processing based on legitimate interests or direct marketing
  • Right to Withdraw Consent: Withdraw consent for processing at any time

To exercise any of these rights, please contact us at privacy@infinitrixa.pro or +45 36 32 06 85. We will respond to your request within 30 days.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit and at rest
  • Regular security assessments and updates
  • Access controls and authentication procedures
  • Staff training on data protection and security
  • Incident response and breach notification procedures

12. Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16 without parental consent, we will take steps to delete such information promptly.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

14. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the following information:

Privacy Officer
infinitrixa AS
Email: privacy@infinitrixa.pro
Phone: +45 36 32 06 85
Address: Gammel Kongevej 58, 1046 Copenhagen, Capital Region, Denmark

15. Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates applicable data protection laws. In Denmark, you can contact:

Danish Data Protection Agency (Datatilsynet)
Website: www.datatilsynet.dk
Email: dt@datatilsynet.dk
Phone: +45 33 19 32 00