Sky-Energy ApS · skyenergy.dk
Last updated: 08 June 2026 · Version: 1.0
Using skyenergy.dk you accept that Sky-Energy ApS processes your personal data and cookies in accordance with the data and cookie policy below. Cookies are used to make skyenergy.dk work.
Read more about our cookie-policy
1. Introduction
This privacy policy describes how Sky-Energy ApS (“Sky-Energy”, “we”, “us”) processes personal data about visitors and customers on skyenergy.dk and in connection with the work we carry out for our customers.
The policy has been prepared in accordance with the General Data Protection Regulation (EU 2016/679 – GDPR) and the Danish Data Protection Act and contains the information we are required to provide under GDPR articles 13 and 14.
2. Data controller
The data controller for the processing of your personal data is:
Sky-Energy ApS
Company reg. no. (CVR): 41278080
Address: Lysbjergvej 6, 6500 Vojens, Denmark
Phone: +45 91 88 88 90
Email: info@skyenergy.dk
Sky-Energy is not required by law to have a Data Protection Officer (DPO), but can be contacted at info@skyenergy.dk regarding all questions about the processing of personal data.
3. What personal data we process about you
We process the following categories of ordinary personal data. We do not process sensitive personal data (health, religion, trade union membership, etc.) or civil registration (CPR) numbers.
3.1 Information you provide to us
• Name, company name, address, postcode and city
• Email address and telephone number
• Description of the task or enquiry
• Invoice and payment details once an agreement is entered into
• Correspondence with us by email, phone, chat or contact form
3.2 Information we collect automatically
• IP address (anonymised where possible) and device/browser information
• Geographic location at city/region level
• Referring URL and UTM parameters, as well as Google Click ID (gclid) and equivalent click IDs from advertising platforms
• Behaviour on the site: pages visited, clicks, scrolling, time on page, session ID and consent status
• Conversion events, e.g. a completed contact form or a phone call
4. Purposes and legal basis
We process your personal data for the purposes and on the legal basis set out in the table below.
Purpose What is processed Legal basis (GDPR art. 6)
Responding to enquiries via the contact form, telephone and email Name, contact details, description of the task Art. 6(1)(b) (steps prior to entering into a contract) and (f) (legitimate interest in responding to enquiries)
Entering into and performing an agreement, including planning and carrying out wind turbine blade repair, rope access and industrial services, etc. Contact details, order history, task description, invoicing data Art. 6(1)(b) (performance of a contract)
Bookkeeping and compliance with statutory requirements Invoice and transaction data, contact details of the buyer Art. 6(1)(c) (legal obligation) cf. the Danish Bookkeeping Act (5-year retention)
Statistics and improvement of the website (analytics) IP, session ID, page views, referring URL, device Art. 6(1)(a) (consent via the cookie banner)
Marketing and remarketing via Google Ads, Meta and LinkedIn — including enhanced conversions Hashed contact details, click IDs, conversion events, online identifiers Art. 6(1)(a) (consent via the cookie banner)
Chat and customer service dialogue (Zoho SalesIQ) Name, email, phone number, chat log Art. 6(1)(a) (consent) or (b) (prior to a contract)
Security, troubleshooting and prevention of misuse IP address, log files, technical events Art. 6(1)(f) (legitimate interest in operating a secure site)
5. Cookies, tracking and third-party services
Skyenergy.dk uses cookies and similar technologies (pixels, local storage, server-side tracking) to make the site work, measure traffic and deliver relevant marketing. A detailed overview of the individual cookies, their purposes and retention periods can be found in our cookie policy at skyenergy.dk/cookie-politik/.
We only place statistics and marketing cookies if you have given your consent in our cookie banner (CookieManager). Consent is handled in accordance with Google Consent Mode v2, so no marketing or analytics tools receive personally identifiable data before you have said yes.
5.1 Google Analytics 4
We use Google Analytics 4 (Google Ireland Limited) for visitor statistics. IP addresses are anonymised by Google, and data is not shared with Google’s other products unless you have consented to marketing cookies.
5.2 Google Ads and Enhanced Conversions
We use Google Ads (Google Ireland Limited) to measure the effect of our ads and for remarketing. When you have given consent to marketing cookies, we send conversion events to Google Ads, e.g. when you complete a contact form or book a task.
To improve measurement, we use Google’s “Enhanced Conversions” function. This means that the contact details you have entered into a form yourself — typically email address, phone number and name — are hashed (converted into an irreversible code using SHA-256) in your browser before they are sent to Google.
Google uses the hashed value solely to match your conversion with an existing Google account, so we can see which ads are working. We send neither plain text nor any information other than what is necessary for matching, and the function is only activated if you have consented to marketing cookies.
The legal basis is your consent, cf. GDPR art. 6(1)(a). You may withdraw your consent at any time via the cookie settings at the bottom of the site.
For certain processing related to conversion tracking and Enhanced Conversions, Sky-Energy and Google are considered joint controllers. The detailed responsibilities are set out in Google’s “Ads Data Processing Terms” and “controller-controller addendum”, which we have accepted.
5.3 Google Tag Manager
Google Tag Manager is used to manage the other tags. GTM itself sets no cookies, but loads the underlying services based on your consent status.
5.4 Meta Pixel (Facebook/Instagram)
We use the Meta Pixel (Meta Platforms Ireland Ltd.) to measure the effect of ads on Facebook and Instagram and for remarketing. The pixel is only activated upon consent to marketing cookies. We do not use Advanced Matching (hashed emails) without a separate assessment. Sky-Energy and Meta are joint controllers for the collection of pixel data — see Meta’s Controller Addendum.
5.5 LinkedIn Insight Tag and Microsoft Ads
We use the LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company) and possibly Microsoft Ads / Bing UET tag for conversion tracking and audience targeting on the LinkedIn and Microsoft platforms. Tags are only activated upon consent to marketing cookies.
5.6 Pagesense (Zoho)
We use Pagesense (Zoho Corporation) for heatmaps and A/B testing of the site. The tool sets cookies to recognise returning visitors and only runs if you have consented to statistics cookies.
5.7 Zoho SalesIQ
For customer dialogue we use Zoho SalesIQ (Zoho Corporation B.V.). If you start a chat, we process the information you provide yourself, as well as a chat log. Chat logs are deleted on an ongoing basis as needed and no later than when the purpose has been fulfilled.
5.8 Profiling and targeted marketing
When you have given consent to marketing cookies, we use the collected information — including click IDs, session data, referring URL and hashed contact details — to create and target ads on Google, Meta, LinkedIn and Microsoft Ads. This entails a form of profiling within the meaning of the GDPR, where we (and the platforms) create audiences based on behaviour and similarity to existing customers (‘lookalikes’ / ‘matched audiences’).
The profiling is used solely to show you relevant ads and to measure the effect of our advertising. We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you (cf. GDPR art. 22).
You may object at any time to the use of your data for direct marketing — including profiling for that purpose — cf. GDPR art. 21(2). You do so by withdrawing your cookie consent or writing to info@skyenergy.dk. When we receive the objection, the processing ceases immediately.
6. Recipients of personal data
Personal data is only disclosed to:
• Our data processors, who process data on our behalf under data processing agreements. This includes, among others, our hosting provider, email/CRM provider, analytics and marketing providers, and the chat and pop-up solutions mentioned in section 5.
• External advisers such as auditors and lawyers, where necessary to comply with legislation or establish a legal claim.
• Public authorities, where we are legally obliged to do so.
• Debt collection agencies or courts in connection with the recovery of receivables.
We do not sell personal data to third parties.
7. Transfer to third countries
Some of our providers are established outside the EU/EEA — typically in the USA. This applies, among others, to Google, Meta, Microsoft, LinkedIn and the US companies of the Zoho group.
When we transfer personal data to third countries, this takes place on one of the following bases:
• The EU–US Data Privacy Framework (adequacy decision), if the recipient is certified.
• The European Commission’s Standard Contractual Clauses (SCC) supplemented by a Transfer Impact Assessment and technical measures such as encryption and pseudonymisation.
You can obtain a copy of the relevant transfer basis by contacting us at info@skyenergy.dk.
8. How long we retain your data
We retain your personal data for as long as it is necessary for the purposes for which it was collected, or for as long as required by law. Once the purpose has been fulfilled, the data is deleted or anonymised in accordance with the guidelines below.
Data category Retention period
Enquiries via the contact form that do not lead to an agreement Deleted no later than 12 months after the last contact
Customer and task data once an agreement is entered into Deleted 3 years after the last activity, unless longer retention follows from law
Bookkeeping material (invoices, payments) Retained for 5 years from the end of the financial year to which the material relates (Bookkeeping Act, section 12)
Cookie and analytics data Max. 14 months in Google Analytics, or the period stated in the cookie policy
Chat logs (Zoho SalesIQ) Deleted no later than 12 months after the last contact
Marketing consents and documentation thereof Retained for 2 years after the consent is withdrawn (for documentation purposes)
9. Data security
We have implemented appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. This includes, among other things, access control, encryption of data in transit (TLS), two-factor authentication in key systems, staff instruction and ongoing risk assessments.
If we discover or suspect a personal data breach, we report it to the Danish Data Protection Agency without undue delay and no later than 72 hours after becoming aware of it. If the breach entails a high risk to your rights, we notify you directly.
10. Your rights
As a data subject, you have the following rights under the GDPR:
• Access (art. 15): The right to be informed of which personal data we process about you, and to receive a copy thereof.
• Rectification (art. 16): The right to have inaccurate data corrected.
• Erasure (art. 17): The right to have data erased, e.g. if it is no longer necessary.
• Restriction (art. 18): The right to have processing restricted in certain cases.
• Data portability (art. 20): The right to receive your data in a structured, commonly used format and to have it transferred to another controller.
• Objection (art. 21): The right to object to processing based on legitimate interest, including direct marketing.
• Withdrawal of consent (art. 7(3)): You may withdraw a consent at any time. This does not affect the lawfulness of processing carried out before the withdrawal.
• Objection to direct marketing (art. 21(2)): You have an absolute right to object at any time to our processing of your personal data for direct marketing — including profiling for that purpose. We will then no longer process your data for this purpose.
• No automated decisions (art. 22): Sky-Energy does not make decisions based solely on automated processing that produce legal effects or similarly significantly affect you.
You exercise your rights by writing to info@skyenergy.dk. We respond to enquiries without undue delay and no later than within one month.
11. Complaint to the Danish Data Protection Agency
If you are dissatisfied with our processing of your personal data, you may lodge a complaint with the Danish Data Protection Agency (Datatilsynet):
Datatilsynet
Carl Jacobsens Vej 35, 2500 Valby, Denmark
Phone: +45 33 19 32 00
Email: dt@datatilsynet.dk
We encourage you, however, to contact us first, so that we have the opportunity to resolve the matter.
12. Changes to this privacy policy
We may adjust this privacy policy from time to time to reflect changes in legislation, technology or our business. The version in force at any given time is available at skyenergy.dk. In the event of significant changes, we will inform you on the site or by email if you are a customer of ours.
13. Contact
Questions about this policy or about our processing of personal data can be directed to:
Sky-Energy ApS
Lysbjergvej 6, 6500 Vojens, Denmark
Phone: +45 91 88 88 90
Email: info@skyenergy.dk