Sub-processorsSecurity measuresData centres & infrastructureLegal documents

This English translation is provided for convenience only. The Danish version is the legally binding one and prevails in case of any discrepancy.

Sub-processors

The third parties listed below process personal data on behalf of our customers as part of the delivery of IT services. We have entered into data processing agreements with all sub-processors in accordance with GDPR Article 28.

Sub-processorPurposeData centreCertifications
Curanet / team.blue DenmarkHosting of web hosting packages, domain registration, e-mail and Exchange solutions, DNSDenmark (Zealand + Jutland)ISO 27001, ISO 9001, ISAE 3402
Zitcom / team.blue DenmarkData centre infrastructure, server hosting, colocationDenmark (Odense + Copenhagen)ISO 27001, ISAE 3402 Type II
Microsoft Ireland Operations Ltd.Microsoft 365 (Exchange Online, SharePoint, Teams, OneDrive)EU (Ireland + Denmark)ISO 27001, ISO 27018, SOC 1/2/3, EU Data Boundary
Flexfone A/SBusiness telephony (VoIP), switchboard, mobile integrationDenmarkGDPR-compliant, Danish data centre
Fortinet Inc.Firewall hardware and FortiGuard security servicesEU (via local appliance at the customer's premises)ISO 27001, SOC 2, Common Criteria
SentinelOne Inc.Endpoint protection (EDR/XDR), threat responseEU (Frankfurt)SOC 2 Type II, GDPR DPA
Veeam Software Group GmbHCloud backup, Microsoft 365 backup, disaster recoveryEUSOC 2 Type II, ISO 27001
Resend Inc.Transactional e-mail (order confirmations, notifications from teknisksupport.dk)EU (via AWS eu-west-1)SOC 2 Type II, GDPR DPA
Vercel Inc.Hosting of teknisksupport.dk (website, CDN, edge functions)EU (Frankfurt fra1)SOC 2 Type II, GDPR DPA
Neon Inc.PostgreSQL database for orders and enquiries from teknisksupport.dkEU (Frankfurt, aws-eu-central-1)SOC 2 Type II, GDPR DPA

The list is updated on an ongoing basis. Last change: April 2026. Customers are notified of changes by e-mail.

Security measures

We implement technical and organisational security measures in accordance with GDPR Article 32 to protect personal data against unauthorised access, loss and misuse.

Encryption

All communication takes place via TLS 1.2/1.3. Data is encrypted at rest with AES-256 at our hosting partners. All websites are delivered with a free SSL certificate.

Access control

Access to customer data is restricted to authorised employees on a need-to-know basis. We use multi-factor authentication (MFA) on all administrative systems.

Backup & disaster recovery

Daily backup with a minimum of 30 days' retention. Our hosting partners' data centres have redundant power, cooling and networking with geographically separated replication.

Logging & monitoring

Access logging on all systems. Firewall and endpoint logs are monitored continuously. Security incidents are escalated automatically.

Physical security

All data is stored in ISO 27001-certified data centres in Denmark and the EU with access control, video surveillance and 24/7 staffing.

Employees

All employees are bound by confidentiality and have received training in the GDPR and secure data processing. Only authorised employees have access to personal data.

Data centres & infrastructure

All customer data is hosted in Danish and European data centres. We never use data centres outside the EEA without an explicit written agreement.

Curanet / team.blue

Primary hosting partner for web hosting, domains, e-mail and Exchange. Data centres in Zealand and Jutland. ISO 27001 and ISAE 3402 Type II certified.

Zitcom / team.blue

Data centre infrastructure in Odense and Copenhagen. ISO 27001 and ISAE 3402 Type II certified. Redundant power, cooling and networking.

Microsoft Azure / M365

Microsoft 365 data is stored within the EU Data Boundary. Data centres in Ireland and Denmark. ISO 27001, SOC 1/2/3 certified.

Vercel (Website)

teknisksupport.dk is hosted on Vercel Pro in the EU region (Frankfurt). Edge functions run in Frankfurt (fra1). SOC 2 Type II certified.

Legal documents

Below you will find links to our legal documentation.

Terms and conditions of sale and delivery

General terms + special terms for web and hosting solutions (29 sections, incl. passthrough).

Service Level Agreement (SLA)

Uptime targets, response times and compensation. Three levels (Standard / Plus / Premium) and passthrough from sub-suppliers.

Data processing agreement (DPA)

Agreement on the processing of personal data in accordance with GDPR Article 28. 11 clauses + appendix.

Privacy policy

How we process personal data — data categories, purposes, legal basis, rights and cookies.

Hosting partners' compliance documentation:

Zitcom Compliance →Curanet Compliance →Microsoft Trust Center →

GDPR enquiries

If you have questions about our processing of personal data, wish to access, rectify or erase your data, or want to report a security breach, please contact us:

E-mail

it@teknisksupport.dk

Telephone

+45 7070 1612

Address

Teknisk Support ApS, Holbergsvej 13, 6000 Kolding

CVR: 44092603 · We aim to respond to GDPR enquiries within 72 hours.

Last updated: April 2026