--- title: "Privacy policy | Movea" description: "How Movea handles personal data and cookies on movea.dk and in the product. Contact us at info@b2x.dk if you have questions." url: "https://movea.dk/en/privacy" lang: "en" --- Legal # Privacy policy Last updated 4 October 2026 How Movea handles personal data when you visit the site, book a demo, send a suggestion or use the product. 01 ## Who is the data controller Movea is operated by B2X ApS, CVR 46399250, Sofienhøjvej 10, 3. th., 2300 København S. B2X ApS is the data controller for the personal data we collect ourselves via movea.dk and in connection with demos, suggestions, support and your customer account with us. You can always write to info@b2x.dk. When you use Movea to process information about your own customers, employees or partners, you are the data controller for that information. Movea is the data processor and processes it only on your instructions and under the data processing agreement between us, which is available at movea.dk/en/data-processing-agreement. 02 ## What data we process We only collect what is necessary to run the site, arrange a demo, read your suggestions and deliver the service. - When you book a demo or write to us: name, company name, email, phone number and message. - When you suggest a feature: name, email, optionally company name and which system you use today, and the suggestion itself. - Account details for Movea: name, email, role, login and two-factor setup. - When you pay for Movea: the company's name, VAT number, address and invoice email, what you have been charged and have paid, and from your payment card only the card type, the last four digits and the expiry date. You enter the card number itself with our payment provider. We never receive or store it. - Technical data that arises automatically when you use the site or the product: IP address, browser type, timestamp and similar operational data necessary for security and troubleshooting. - If you have said yes to statistics or marketing: information about your visit to movea.dk, as described under Cookies. - In the product: the data you enter yourself about jobs, customers, crews, vehicles, invoices and related operations. 03 ## Purposes and legal basis We process personal data for the following purposes. The legal basis is given in brackets and refers to the General Data Protection Regulation (GDPR). - To answer enquiries, arrange and run demos and note you down for the early bird scheme (Article 6(1)(f): our legitimate interest in responding to what you have asked us for, and Article 6(1)(b) where it is done in order to enter into a contract). - To read, assess and follow up on feature suggestions (Article 6(1)(f): our legitimate interest in developing Movea based on what the industry tells us). - To create and run your Movea account and deliver the service (Article 6(1)(b)). - To charge for the subscription, issue invoices and follow up on payments that do not go through (Article 6(1)(b)). - To send operational messages about the service, for example about security, material changes, or that your trial is about to end (Article 6(1)(b) and (f)). - To comply with legal requirements, for example the Danish Bookkeeping Act (Article 6(1)(c)). - To protect the site and the service against misuse, spam and errors, including the spam check on forms (Article 6(1)(f)). - Statistics and marketing on movea.dk only take place with your consent (Article 6(1)(a) and section 3 of the Danish Cookie Order). You can withdraw your consent at any time. 04 ## Demo and early bird When you send a demo request from movea.dk, we use the details to arrange and run the demo, and for the follow-up conversation about whether Movea is a fit for you. If you book a demo before launch, we also put you on the list for the early bird scheme, so we can see who it applies to and write to you about the scheme when Movea opens to customers. We do not sell your details, and we do not use demo requests for newsletters unless you have explicitly asked for it. 05 ## Feature suggestions When you send a suggestion from movea.dk, it is sent to us as an email. It is not stored in a database or shared with anyone other than the people who work on Movea. We use your name and email so that we can ask clarifying questions and tell you what happens with the suggestion. We do not use them for newsletters or marketing. Do not include personal data about your customers or employees in a suggestion. We do not need it to understand the problem. 06 ## Data in the product Movea is built for moving companies. The product holds the data you create yourself: customers, jobs, crews, vehicles, time, damage, invoices and similar. You own that data. We process it as a data processor in order to deliver the service, on your instructions and under a data processing agreement that we enter into with you before the processing begins. 07 ## Retention We keep data for as long as it is necessary for the purpose, and then delete or anonymise it. - Demo requests: until the conversation has ended and for up to 12 months after that. If you are on the list for early bird, we keep the request until the scheme has ended for you, but no longer than 12 months after launch. - Feature suggestions: for up to 24 months, or shorter if the suggestion has been dealt with before then. The idea itself may live on in our planning without your name and email. - Customer account and operational data: during the subscription period and then for the time that follows from the agreement and the data processing agreement. Accounting records are kept for five years after the end of the financial year. - Invoices and payments for the subscription: for five years after the end of the financial year they relate to, as the Danish Bookkeeping Act requires. - Technical logs: for no more than 90 days. - Your answer to the cookie question: six months, after which we ask again. 08 ## Recipients and sub-processors We only share personal data when it is necessary to run movea.dk and deliver Movea, to comply with the law, or when you have asked us to, for example an integration with your accounting system. If you have said yes to statistics or marketing, Google Ireland Limited (Google Tag Manager, Google Analytics and Google Ads) and Microsoft Ireland Operations Limited (Microsoft Clarity) receive information about your visit. They may also use the information for their own purposes and are themselves data controllers for that part. If you say no, they receive nothing. Payment for the subscription is made through Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, the Netherlands, which is licensed to provide payment services and supervised by the Dutch central bank (De Nederlandsche Bank). Mollie receives the company's name, our internal id for the company, the amount and the card details you enter yourselves on Mollie's payment page. For a sole trader the company name can be a person's name. Beyond that, we do not send names, email addresses or phone numbers of individuals to Mollie. Mollie is itself the data controller for carrying out the payment, preventing fraud and complying with anti-money-laundering rules, and processes the data under its own privacy statement at mollie.com/privacy. These providers are our data processors. They only process data on our instructions and under a data processing agreement. - Cloudflare: network, protection against attacks and the spam check (Turnstile) on our forms. Processes IP address and technical information about the browser. - DigitalOcean: storage and delivery of images and video from a data centre in Frankfurt. - Our hosting and email providers, which run servers and send the emails triggered by the forms on the site. 09 ## Transfers to third countries We aim to process data within the EU/EEA. Some of the providers above are American or have a parent company in the USA. Transfers there take place on the basis of the European Commission’s decision on the EU-U.S. Data Privacy Framework where the provider is certified, and otherwise on the European Commission’s standard contractual clauses with supplementary measures where necessary. Transfers to other countries outside the EU/EEA only take place on a valid transfer basis under Chapter V of the GDPR. You can get a copy of the basis by writing to info@b2x.dk. 10 ## Your rights Where Movea is the data controller, you have, depending on the circumstances, the right of access, rectification, erasure, restriction, data portability and the right to object to our processing. Where the processing is based on consent, you can withdraw it at any time, without affecting the lawfulness of what has taken place up to then. To exercise your rights, write to info@b2x.dk. We reply without undue delay and no later than one month after we have received the request. You can complain to Datatilsynet (the Danish Data Protection Agency), Carl Jacobsens Vej 35, 2500 Valby, datatilsynet.dk, or to the supervisory authority in the EU country where you live or work. We would like to hear from you first, so we can put right what is wrong. Where you are the data controller for data in the product, requests from your own data subjects should as a rule go to you. We assist you within what the agreement and the law require of a data processor. 11 ## Cookies and similar technologies movea.dk asks before anything is measured. Until you have answered, and if you answer no, neither Google Tag Manager, Google Analytics nor Microsoft Clarity is loaded, and they store or read nothing on your device. Saying no is one click, just like saying yes. Statistics: Google Analytics shows us which pages get read. Microsoft Clarity shows where people drop off, by recording movement, clicks and scrolling. Text you type into fields is masked. Marketing: measures whether an ad led to a demo request. Google Tag Manager is the tool that loads the others, and does not set cookies itself. You can change or withdraw your consent at any time under Cookies at the bottom of the page. It is just as easy as giving it. If you withdraw it, we delete the statistics and marketing cookies we can reach ourselves, and do not load the tools again. The answer is stored for six months, after which we ask again. This is what may be stored on your device. - movea\_consent (necessary, movea.dk, 6 months): remembers your answer to the cookie question. - Cloudflare Turnstile (necessary, Cloudflare, short-lived): when you start filling in a form, Turnstile checks that it is not being filled in by a robot, and may store a piece of security information in the browser in that connection. - \_ga and \_ga\_\* (statistics, Google Analytics, up to 2 years): distinguish between visitors and visits. - \_clck (1 year) and \_clsk (1 day) (statistics, Microsoft Clarity): tie page views together into one visit. Microsoft may also set MUID and CLID (up to 1 year). - Marketing: cookies from the ad tags we manage through Google Tag Manager, for example \_gcl\_au from Google Ads (90 days). - The product at app.movea.dk only uses necessary cookies for login, security and language preference. Without them the service cannot work securely. 12 ## Security We protect personal data with appropriate technical and organisational measures, including access control, encryption of sensitive data in the database, and ongoing operational practices aimed at limiting unauthorised access. No digital service is risk-free. If we discover a personal data breach, we follow the rules on notification to Datatilsynet and communication to those affected. 13 ## Changes We may update this privacy policy when the service, the law or our practice changes. The updated version is published on this page with a new date. For material changes that affect you as a customer, we will inform you in an appropriate way. 14 ## Contact Questions about privacy and personal data go to info@b2x.dk. B2X ApS, CVR 46399250, Sofienhøjvej 10, 3. th., 2300 København S. See also [Terms](https://movea.dk/en/terms).