This Policy (“Privacy Policy”) describes how we at Nume process your personal data, including the data collected through our website and the provision of our services, when we are acting as the controller of such personal data, in accordance with the rules of the General Data Protection Regulation (the ‘GDPR’).
Nume ApS is a trading name of Scaleup Finance Group ApS, a company registered in Denmark with registration number 41920084. Our registered office is at Nyropsgade 41, 1602, Copenhagen V, Denmark.
This Privacy Policy does not apply to the extent we process your personal data in the role of a processor (within the meaning of Article 28 of the GDPR), when providing our services to businesses, companies and/or other entities who are our customers and who use our platform and services for professional use. The terms on which we process personal data on behalf of our customers are set out in agreements between us and our customers, principally our Terms of Service and separate Data Processing Agreement cf. article 28 (3) GDPR.
If you have any questions about our processing of your personal data or you wish to exercise your rights, you are always welcome to contact us per email:
In the course of carrying on our business, including in our direct interactions with you, when providing our services, and through our website, we collect and receive personal data in different ways and from different sources. Below is specified the personal data processed in this connection.
In order to administer, manage and cultivate the relationship with our customers, we process personal data about you as a customer or a potential customer. As part of our customer management, the following types of information are processed.
We process personal data in connection with marketing activities, including provision of courses, events, etc., as well as sending out newsletters. Processing is necessary in order to provide services to interested companies.
In connection with our internal business operations, we process personal data of owners or employees of our suppliers, customers and business partners.
When you visit our website and cloud-based software, we collect and process information about you in connection with our use of cookies for marketing and statistical purposes, e.g. to optimize our website and target ads.
You can find an outline of the types of cookies used by us and how to delete them, etc. in our Cookie Policy.
We are active on several social media, including LinkedIn, Facebook, and Instagram. When you interact with us on these media, you are making information available to us and the social media, e.g. when you respond to our postings, comment on or share them, or follow us on the social media. In addition, ordinary information is processed about you in the form of, for example, identification information, contact information, your profile photo, etc. Furthermore, we will in some cases share, for example, a piece of news in which your identification information (name) is included.
We may share your personal data with the following categories of recipients:
In connection with IT operations, including hosting, development and support, we may in certain cases transfer personal data to companies established in a country outside the EU/EEA. When we transfer your personal data to third parties outside the EU and EEA, we ensure that your personal data and data protection rights are adequately protected by ensuring either:
You can obtain further information about our transfer of your personal data to third countries by writing to us.
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. All of our employees, agents, contractors and other third parties are subject to strict confidentiality, including the processing of personal data. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
In general, we process your information only as long as it is necessary to fulfil the purpose of the processing. In detail, the following erasure periods apply:
In connection with customer management, we generally store your information for three years from the end of the year in which the case was closed, unless otherwise required according to legislation or in case of original documents, such as, contracts, etc.
For example, any personal data processed for the purpose of bookkeeping material is stored with the bookkeeping material for the current year +5 years.
Information about you as a supplier or cooperating partner is stored for up to three years after the end of the year during which the delivery took place or the cooperation was terminated.
For example, any personal data processed for the purpose of bookkeeping material is stored with the bookkeeping material for the current year +5 years.
We store your information for up to six months after you have participated in an event or unsubscribed to our newsletter.
For deletion of cookies, see our Cookie Policy.
As a data subject, you have certain rights according to the GDPR when your personal data is being processed. Below is a specification of your rights when we process personal data about you. If you want to exercise one or more of your rights as a data subject, you must contact us in writing via the e-mail address indicated above. Please state your full name and your e-mail address. You may be requested to provide further identification. In general, you can exercise your rights at any time. However, exercising your rights must not affect the rights and freedoms of others and in such an event, we may therefore refuse to comply with your rights wholly or in part in compliance with the GDPR and other applicable legislation.
As a data subject, you have the right to obtain access to your personal data being processed by us. By contacting us, you can obtain information about the categories of personal data that we as data controller are processing about you, the purpose of the processing, the recipients to whom the personal data have been disclosed, etc. We will provide you with a copy of your personal data undergoing processing. If you request further copies of your personal data undergoing processing, we may charge a reasonable fee based on administrative costs. If the inquiry is manifestly unfounded or excessive, we may either charge a fee for providing the information or reject your request.
You have the right to obtain rectification of your personal data if these are inaccurate or misleading. If we do not agree that the data are inaccurate, however, we are not obliged to correct them, but to add that you as a data subject do not think that the data are correct.
In certain cases, you have the right to obtain erasure of your personal data if we no longer have a purpose in processing your personal data or you object to the processing of your personal data for the purposes of direct marketing or pursuant to Article 6(1)(f) of the GDPR. If we can demonstrate overriding legitimate grounds for the processing that override your interests, rights and freedoms, or the processing is necessary for a legal claim to be established, exercised or defended, however, we are not obliged to erase your personal data.
In certain cases, you have the right to obtain restriction of processing of your personal data, e.g. if you contest the accuracy of the personal data collected about you or if you have objected to the processing of your personal data based on legitimate interests pursuant to Article 6(1)(f) of the GDPR. In such an event, we will only store your personal data until your objection has been considered. If we lift the restriction of our processing of your personal data, you will be notified in advance.
On grounds relating to your particular situation, you have the right to object to our processing of your personal data, if the processing is based on legitimate interests, see Article 6(1)(f) of the GDPR. If you object to our processing of your personal data, we are no longer entitled to process your personal data, unless we can demonstrate overriding legitimate grounds for the continued processing that override your interests, rights or freedoms, or the processing is necessary for a legal claim to be established, exercised or defended. You always have the right to object to the processing of your personal data if the processing takes place for the purposes of direct marketing.
In certain cases, you have the right to receive your personal data in a structured, commonly used and machine-readable format and to have those data transmitted from one data controller to another data controller. This right applies only when the processing of your personal data is based on a contract pursuant to Article 6(1)(b) of the GDPR or your consent, see Article 6(1)(a) of the GDPR or if the processing is carried out by automated means.
Your personal data are not subject to decisions based solely on automated processing, including profiling.
To the extent that we process your personal data based on your consent, you can always withdraw your consent to any future processing. You can withdraw your consent by sending an e-mail to gdpr@nume.ai.
As a data subject, you can lodge a complaint with us as data controller if you are not satisfied with the way that we process your personal data. You can find our contact information above.
You can always lodge a complaint with the Danish Data Protection Agency on their website http://www.datatilsynet.dk/, by telephone: +45 33 19 32 00, or by e-mail dt@datatilsynet.dk. You may also lodge a complaint directly with your local data protection authority.
Our Privacy Policy will be updated on an ongoing basis so that it is always up-to-date. Below you can always find the date of the last updated version of this Privacy Policy.
Version date: 08 May 2025