Privacy notice
Last updated 27 October 2026.
1. Who we are
The controller is WindX UCP ApS, CVR 42736090, Møllerupvej 26, 8410 Rønde, Denmark. For any request about your data write to sales@windxucp.com or call +45 87 58 69 00.
2. What we collect, why, and on what basis
| Where | What you give us | Why | Basis (GDPR article 6) |
|---|---|---|---|
| Catalogue form | First name, last name, company, work email, country, the catalogues you chose, optionally what you are working on, and a note of where the request came from (a source label such as flyer, roll-up, video, catalogue PDF, website or sticker, and the campaign tags described below). Two separate tick boxes record your consent: one to process these details (required) and one for news (optional, not ticked in advance). HubSpot records which consents you gave. We do not store the address of the page you were on or the website you came from. | To send you the catalogues and to contact you about our products and services | Consent (1a) |
| News and product updates (optional) | Your yes, if you tick the separate box on the catalogue form | To send you occasional news and product updates by email. You can unsubscribe at any time, with a link in every email | Consent (1a), separate from the consent above |
| Fleet assessment request | Name, company, email, country, turbine brand, number of turbines, the need, your message | To prepare and answer your request | Your consent, given with the tick box on the form (1a) |
| Spare part request | Name, company, email, country, turbine brand and model, part, quantity, notes | To check availability and answer | Your consent, given with the tick box on the form (1a) |
| Contact form, email, telephone | The details you type or say | To answer you | Contact form: your consent, given with the tick box on the form (1a). Email and telephone: our legitimate interest in answering you (1f) |
| Visits and downloads | Pages visited and downloads, linked to your form details (only if you accept the HubSpot option) | To understand which material is read and to follow up on requests | Consent (1a) |
| Source of your request | Which form you used (for example the catalogue form opened from a product page) and, if the address you came from carries campaign tags (utm_source, utm_medium, utm_campaign, for example from a printed QR code), those three tags. We do not record the address of the page you were on or the website you came from | To know which printed material or page led to the request | The same basis as the form you submit (see the rows above); sent only with the HubSpot form |
| Server logs | IP address, time, page requested, browser type, kept by our hosting provider | To run and protect the site | Legitimate interest (1f) |
We do not ask for special categories of data. Please do not send any in the free text fields.
3. Cookies and similar storage
The cookie policy lists every item. Without your consent the site stores only your cookie choice. The catalogue form sets no cookie and loads no HubSpot script: when you press the button, the form is sent once to HubSpot, our processor. No analytics or advertising tools other than HubSpot are used.
4. Who receives your data
- HubSpot acts as our processor for the catalogue form, our contact records, email and visit records. HubSpot stores this data in the United States.
- Our hosting provider stores the site files and the server logs. Its privacy policy applies to that processing.
- Our own team: when you send the catalogue form, a notification email with the details you submitted goes to our Chief Executive Officer, our Head of Business Development and our Managing Director. The notification contains the data you submitted.
- Group companies: where your request concerns spare parts, tooling or service in China or Brazil, we may pass it to the WindX UCP organisation in that country so it can be answered.
We do not sell personal data and do not use it for automated decisions.
5. Transfers outside the EU and Brazil
HubSpot stores this data in the United States. HubSpot participates in the EU-US Data Privacy Framework and provides a data processing agreement.
Where data is processed outside the EU in another way, for example by another processor or a group company, we rely on an adequacy decision or on standard contractual clauses.
6. How long we keep it
We keep a record only as long as it is needed for the purpose in section 2. When the retention periods in the table below have passed, or when you ask us to, we delete or anonymise the record.
| Record | Period |
|---|---|
| Catalogue leads and visit records | 24 months after the last contact, then deletion |
| Assessment and spare part requests | As long as needed to deal with your request and any follow-up, then deletion or anonymisation |
| Contact enquiries | As long as needed to deal with your enquiry and any follow-up, then deletion or anonymisation |
| Server logs | Kept by our hosting provider under its own retention practice (see its privacy policy) |
7. Your rights
You can ask for access, correction, deletion, restriction, a copy of your data (portability), and you can object to processing based on legitimate interest. You can withdraw consent at any time through Cookie settings or by writing to us; withdrawal does not affect what happened before.
To use any of these rights, write to sales@windxucp.com. We answer within one month (GDPR article 12). You can complain to the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk) and, if you are in Brazil, to the Autoridade Nacional de Proteção de Dados (ANPD, LGPD).
More on how we protect data: Security and data protection.
8. Visitors in Brazil
Under the Brazilian General Data Protection Law (LGPD, Lei 13.709/2018) you have the corresponding rights, including confirmation that we process your data, access, correction, anonymisation or deletion, portability, information about sharing, and revocation of consent. You can write to the same address. You can complain to the Autoridade Nacional de Proteção de Dados (ANPD).
9. Changes
We will publish changes here and change the date at the top.