Privacy

Privacy and your data.

What we collect on this website, why, who helps us handle it, how long we keep it, and what you can ask of us. In plain words.

Last updated 9 October 2026

Who is responsible

BAVN Systems is responsible for the personal data collected on this website (the data controller). We will add our company registration number (CVR) and postal address here once our registration is complete.

Questions about your data, or a request about it: write to us through the contact form, choose the topic "Something else" and start your message with "Privacy". If you have an account, you can also see and delete your data yourself on your dashboard.

What we collect and why

We only collect what you type into our forms, plus a little technical data needed to run the site safely. You never have to give us anything, but we can't answer you or consider an application without a way to reach you.

Pilot applications
Your name, email, company, phone number if you give it, and the kind of site. We use it to review your application and talk to you about the pilot. Legal basis: steps you ask for before a possible agreement (GDPR art. 6(1)(b)).
Messages and pitch deck requests
Your name, email, company and phone number if you give them, the topic and your message. We use it to answer you and, for investors, to send the pitch deck and follow up. Legal basis: our legitimate interest in answering people who contact us (art. 6(1)(f)).
Job applications
Your name, email, the area you're interested in, a link if you add one, and your message. We use it to consider you for a role at BAVN. Legal basis: steps you ask for before a possible employment (art. 6(1)(b)).
Progress updates
Your email address, and which page you signed up on. We use it to send a short email when we reach a milestone. We first send a link to confirm it was really you. Legal basis: your consent (art. 6(1)(a)). You can withdraw it at any time with the unsubscribe link in every email.
Accounts
Your name, company, email, phone number if you give it, what you'd like to talk about and an optional message, plus your password. Your password is stored scrambled by our login provider, so we can never see it. Your dashboard shows what you've sent us and where it stands. Legal basis: providing the account you asked for (art. 6(1)(b)).
Spam protection
When you send a form, we keep a scrambled code made from your IP address to limit how many forms one visitor can send. We never store the IP address itself. Legal basis: our legitimate interest in keeping the site safe (art. 6(1)(f)).
Server logs
Like every website, our hosting provider records basic technical data when you visit: your IP address, browser, the page and the time. It's used to deliver the site and protect it against attacks. Legal basis: our legitimate interest in running a working, secure site (art. 6(1)(f)).

When you send a form, we also get an email with your details so we can reply quickly. We don't use your data for advertising, we don't sell it, and we don't make automated decisions about you.

Who helps us handle it

We use a few trusted providers that process data for us, only on our instructions and under a data processing agreement:

  • Vercel hosts the website and runs the forms. Vercel is based in the USA and certified under the EU-US Data Privacy Framework.
  • Supabase runs our database and the login. Your data is stored on servers in Frankfurt, Germany. Supabase is a US company, and any access from outside the EU is covered by the EU's standard contractual clauses.
  • Resend sends our emails (confirmation links, password resets, updates and the emails to our team). Resend is based in the USA and certified under the EU-US Data Privacy Framework.
  • Our email provider holds the emails we receive about your submissions.

We only share data with others if the law requires it.

How long we keep it

  • Pilot applications, messages and pitch deck requests: until we've finished talking with you, and at the latest 2 years after our last contact. If you join the pilot, we keep what the agreement needs while it runs.
  • Job applications: while we consider you, and at the latest 6 months after we've given you an answer, unless you agree that we keep it longer.
  • Progress updates: until you unsubscribe. If you never confirm your address, we delete it after 30 days.
  • Accounts: until you delete your account. One press on your dashboard removes it and everything you sent. If you never confirm your email, the account is deleted after 30 days.
  • Spam protection codes: 1 day.
  • Server logs: a short time. On our current hosting plan, 1 hour.

When we delete a submission, we also delete the emails we received about it.

Your rights

You can ask us to:

  • show you the data we have about you, and give you a copy;
  • correct data that's wrong;
  • delete your data;
  • limit how we use it, or stop using it where we rely on our legitimate interest;
  • send your data to you or to another company in a common format.

Where we rely on your consent, you can withdraw it at any time. To use any of these rights, write to us through the contact form. We answer within one month.

If you think we handle your data wrongly, you can complain to the Danish Data Protection Agency: Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, Denmark, datatilsynet.dk. We'd appreciate the chance to fix it first.