Privacy policy

The personal data FieldTechie processes for its own purposes, why, and for how long. This is a translation: the Danish version prevails.

Last updated: 10 October 2026

1. Who we are, and what this policy covers

FieldTechie ApS develops and operates FieldTechie, a system for businesses with service technicians.

This policy covers the personal data we are controller for ourselves:

  • customer accounts and signup;
  • sign-in and security;
  • invoicing and payment;
  • support and enquiries;
  • our newsletter;
  • sales to businesses;
  • our website, fieldtechie.com.

It does not cover the data our customers record in FieldTechie — for example about their employees, their customers, jobs and time registration. For that data our customer is controller and we are processor under a data processing agreement. If you work for one of our customers or are a customer of theirs, contact them about your data. We help them answer.

2. Contact

FieldTechie ApS CVR 46686721 Mispelvej 1, 9500 Hobro, Denmark Email: privacy@fieldtechie.com

We have no data protection officer because we are not required to appoint one. Write to the address above.

3. What we process, why, and for how long

3.1 Customer account and signup

  • Data:
    • name, work email and phone number of the person creating the account and of the Users;
    • the business's name, CVR or VAT number and address;
    • the language the User has chosen for the app and emails;
    • one-time codes for confirming email addresses.
  • Purpose: to set up and run the customer relationship and provide FieldTechie.
  • Legal basis:
    • the contract with the business (Art. 6(1)(b));
    • for contact persons at the business: our legitimate interest in administering the contract with their employer (Art. 6(1)(f)).
  • Retention:
    • for as long as the subscription runs, then at most 60 days (subscription terms section 14). A trial that does not continue is deleted under section 4.3 of the terms;
    • the details about Users that the evidence in section 3.2 and the accounts in section 3.4 must be able to refer to are anonymised instead of deleted;
    • one-time codes: 30 days.

3.2 Evidence of the agreement

  • Data:
    • who accepted the subscription terms and data processing agreement, with name and email;
    • time, versions and language;
    • IP address and browser information (user agent).
  • Purpose: to be able to document what was agreed, and with whom.
  • Legal basis: our legitimate interest in documenting the agreement (Art. 6(1)(f)), and in establishing, exercising or defending legal claims.
  • Retention: 5 years after the subscription ends.

3.3 Sign-in and security

  • Data:
    • sign-in events with time and IP address;
    • technical log files;
    • email addresses, domains and IP addresses blocked for abusing signup.
  • Protection against automated account creation: the page where you create an account (auth.fieldtechie.com) uses Google reCAPTCHA, in the same way as the newsletter signup (section 3.7): your IP address, details about your browser and device, and how you interact with the page, processed by Google as our data processor and only to tell people from bots. We do not store this data ourselves.
  • Purpose: to protect accounts and the service against abuse, and to find and fix faults.
  • Legal basis: our legitimate interest in running a secure service (Art. 6(1)(f)).
  • Retention:
    • sign-in events 30 days;
    • log files 31 days;
    • blocks until they expire, at most 12 months.

3.4 Invoicing and payment

  • Data:
    • the billing contact's name and email;
    • invoices, payments, credit notes and refunds;
    • for card payment: card brand, the last four digits and expiry date;
    • the result of VAT number checks in the EU's VIES system;
    • a log of changes to account and billing details (who changed what, and when).
  • We never see the full card number. It is handled by our payment provider (section 4).
  • Purpose: to invoice, receive payment and comply with bookkeeping and VAT rules.
  • Legal basis:
    • the contract (Art. 6(1)(b));
    • our legal obligation under the Danish Bookkeeping Act and VAT Act (Art. 6(1)(c)).
  • Retention: 5 years from the end of the financial year the data relates to. This includes the change log, which is then deleted automatically.

3.5 Cancellation

  • Data: the reason and comments given when cancelling.
  • Purpose: to improve FieldTechie.
  • Legal basis: our legitimate interest (Art. 6(1)(f)).
  • Retention: 24 months.

3.6 Support and enquiries

  • Data: name, contact details and the content of your enquiry.
  • Purpose: to answer and resolve the enquiry.
  • Legal basis: the contract (Art. 6(1)(b)) or our legitimate interest in answering enquiries (Art. 6(1)(f)).
  • Retention: 24 months after the case is closed.

3.7 Newsletter

  • Data: name and email address, when you signed up, and when you confirmed the signup.
  • Purpose: to send you monthly news about FieldTechie.
  • How you sign up: we email you a confirmation link, and we only add you once you click it (double opt-in).
  • Legal basis: your consent (Art. 6(1)(a)). You can withdraw it at any time through the link in every email.
  • Retention: until you unsubscribe. The data is deleted immediately. If you do not confirm within 7 days, we delete the signup.
  • Protection against automated signups: the signup form uses Google reCAPTCHA to tell people from bots, so the list is not filled with fake or abusive signups.
    • Data: your IP address, details about your browser and device, and how you interact with the signup page.
    • Google processes this data on our behalf, as our data processor, and only to run and secure the reCAPTCHA service. Google does not use it for advertising.
    • Legal basis: our legitimate interest in protecting the signup form against abuse (Art. 6(1)(f)).
    • Retention: we do not store this data ourselves; Google keeps it only as long as its data processing terms with us allow.
    • Google may process the data outside the EU — see section 5.

3.8 Sales to businesses

  • Data:
    • name, job title, company, work address and phone number of people at businesses we believe could benefit from FieldTechie, from public sources: the company's website, the Danish business register (CVR) and the Danish Safety Technology Authority's register of authorised installers;
    • our notes from the call and the date of any objection;
    • we do not collect email addresses and do not call unlisted numbers.
  • Purpose: to contact the business about FieldTechie.
  • Legal basis: our legitimate interest in marketing FieldTechie to businesses (Art. 6(1)(f)).
  • You can always object, and we will not contact you again.
  • Retention:
    • 12 months after the last contact — or, if we never reached you, 12 months after the data was collected;
    • if you object, we keep only what is needed to respect the objection.

3.9 The website

  • Data: IP address and technical information about your browser in the server's log files.
  • Purpose: to deliver and secure the website.
  • Legal basis: our legitimate interest (Art. 6(1)(f)).
  • Retention: 31 days.

About cookies: see section 6.

4. Who we share data with

  • Scaleway SAS (France): servers, databases, file storage and sending email. The data is stored in Paris.
  • Stripe Payments Europe, Limited and Stripe Technology Europe, Limited (Ireland): issuing our invoices and card payments. Stripe receives the billing contact's name and email and the business's name, address and CVR or VAT number — also when paying by bank transfer. Stripe processes the data on our behalf when it issues invoices and takes payments. For fraud prevention, anti-money-laundering rules and developing its services, Stripe is a controller in its own right under Stripe's privacy policy.
  • The European Commission and member-state authorities through VIES: VAT number checks.
  • Our auditor and bookkeeper: accounts.
  • Public authorities, such as the Danish Tax Agency, where the law requires.
  • Nordea: receiving bank transfers.
  • mailbox.org (Germany): our own email, such as messages to support and to privacy@fieldtechie.com.
  • Cloudflare: DNS for our domains.

On our website and sign-in pages: the newsletter signup form and the page where you create an account are protected by Google reCAPTCHA (sections 3.3 and 3.7).

Inside the FieldTechie app:

  • maps and address search come from Google (Google Ireland Limited). For maps and address search, Google is an independent controller under Google's own terms, not our data processor;
  • crash reports from the mobile app go to Sentry's EU region;
  • push notifications are sent through Google;
  • text messages to our customers' customers are sent through GatewayAPI.

Our sub-processors are listed at fieldtechie.com/legal/subprocessors.

We do not sell personal data.

5. Transfers outside the EU/EEA

FieldTechie is hosted by Scaleway in Paris. Maps, address search and push notifications come from Google, crash reports from Sentry's EU region, and DNS from Cloudflare.

Some of these providers — Stripe, Google, Sentry and Cloudflare — are American or have American parent companies, so data may be processed in the USA. Such transfers are based on:

  • the European Commission's decision on the EU-US Data Privacy Framework, for certified companies;
  • the European Commission's standard contractual clauses.

6. Cookies

6.1 fieldtechie.com

The website sets one cookie of its own, and only if you switch language: ft_lang remembers the language you chose, so the website opens in that language next time. Without that choice, the website follows your browser's language setting.

  • Name: ft_lang
  • Set by: FieldTechie
  • Purpose: remembers your choice of language. It holds only the language code (for example da) and is necessary for the function you asked for.
  • Duration: 1 year.

One page also gives you a cookie from a third party: the newsletter signup page loads Google reCAPTCHA (section 3.7), which sets one necessary cookie:

  • Name: _GRECAPTCHA
  • Set by: Google, as our data processor
  • Purpose: risk analysis, telling people from bots on the signup form.
  • Duration: 6 months.

The video on the front page plays from YouTube's cookie-free version (youtube-nocookie.com) and is loaded only when you click it. Google then receives your IP address and details about your browser. Everything else on the website — fonts, icons and scripts — comes from our own server.

We use no statistics, analytics or marketing cookies, so there is no cookie banner.

6.2 The FieldTechie app

Cookies and local storage needed for the app to work:

Name Purpose Duration
.AspNetCore.Cookies (may be split into parts: .AspNetCore.CookiesC1 etc.) Keeps you signed in Until you close the browser or sign out; sign-in expires after 14 days without use
.AspNetCore.Correlation.*, .AspNetCore.OpenIdConnect.Nonce.* Secures the sign-in flow Minutes
.AspNetCore.Antiforgery.* Protects against forged requests The session
Cookies on the sign-in page (KEYCLOAK_*, KC_*, AUTH_SESSION_ID) Sign-in and "remember me" Until you sign out: at most 30 days with "remember me", otherwise 24 hours
ft.culture Remembers your language 1 year
_GRECAPTCHA (set by Google, as our data processor, on the page where you create an account - section 3.3) Tells people from bots 6 months
Local storage in the browser Remembers language, column choices and similar settings Until you delete them

When you view a map in the app, it is loaded from Google, which may set its own cookies. They are covered by Google's privacy policy.

7. Your rights

You have the right to:

  • access the data we hold about you;
  • have incorrect data rectified;
  • have data erased when we may or need no longer keep it;
  • have processing restricted;
  • object to processing based on our legitimate interest — and always to marketing;
  • receive data you gave us in a machine-readable format (data portability);
  • withdraw consent at any time. This does not affect processing that took place before.

Write to privacy@fieldtechie.com. We answer within one month.

Complaints: you can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, www.datatilsynet.dk.

8. Automated decisions

We make no decisions about you based solely on automated processing (Art. 22). Signups are checked automatically for known forms of abuse, such as disposable email addresses. If your signup is refused, write to us and a person will look at it.

9. Changes

We update this policy when our processing changes. The date at the top shows the latest change. We inform our customers by email of material changes.