Skip to content

Legal

Privacy policy

Last updated 16 October 2026.

This policy explains what personal data ATOP collects through portal.atoptechnology.com, which covers this website and the ATOP Partner Portal behind its sign-in, what we do with it, and the rights you have.

Who we are

The data controller is ATOP Corporation A/S (CVR DK35630317), Svendborgvej 30, 9220 Aalborg Øst, Denmark. In this policy "ATOP", "we" and "us" mean ATOP Corporation A/S.

For anything about your personal data, write to us at the address above, marked "Privacy", or contact your ATOP account manager.

What we collect, and why

When you visit the website. Our hosting provider records technical data about each request, such as your IP address, browser and the page asked for, to deliver the site and keep it secure. If you accept cookies, HubSpot records the pages you visit, how you arrived and roughly where you are, so we can see how the site is used and show ATOP adverts to visitors on other sites, such as LinkedIn and Google. If you choose "Essential only", none of this is collected. Our legal basis is our legitimate interest in running a secure website, and your consent for analytics and advertising.

When you apply to become a partner. We collect your name, work email address, phone number if you give it, your company, its website and country, what your business does and what interests you, and your message. We use this to assess the application, to contact you about it and, if it goes ahead, to set up your company's account. To keep out spam we check that the email domain can receive mail, and we keep a one-way hash of your IP address and your browser type to limit repeated submissions. Our legal basis is taking steps at your request before entering into a contract, and our legitimate interest in preventing abuse.

When you use the Partner Portal. We keep your account details (name, email address, role and company), a record of what you do in the portal, such as datasheets viewed and downloaded, requests, deals and the files you upload (for example bills of materials), and the questions you ask the AI assistant. ATOP staff sign in with their Microsoft work account. We use this to provide the portal, answer your requests, keep the portal secure and improve it. Our legal basis is the performance of our contract with your company and our legitimate interest in running and improving the service.

When we email you. We send account emails, such as invitations, sign-in links, request updates and quotes. If you accept marketing cookies, or tell us you would like to hear from us, we may also send you news about ATOP products and the partner programme. You can unsubscribe from marketing emails at any time with the link in each one.

Who we share it with

We do not sell personal data. We share it only with the companies that run parts of the service for us, under contracts that require them to protect it and use it only on our instructions:

  • Vercel: hosting of the website and portal, and bot protection on our forms.
  • Neon: the database the portal's data is stored in.
  • Resend: sending the portal's emails.
  • HubSpot: website analytics, marketing emails and advertising audiences, on HubSpot's EU data centre (only with your consent for cookies).
  • Anthropic: the AI assistant, and reading the bills of materials you upload. Anthropic does not use this data to train its models.
  • Mapbox: maps and place search in the estate tool.
  • Microsoft: staff sign-in, and our business systems.

Some of these companies process data in the United States. Where they do, the transfer is covered by the EU–US Data Privacy Framework or by the European Commission's standard contractual clauses.

How long we keep it

Partner applications that do not go ahead are deleted within 24 months. Portal accounts and their activity are kept for as long as your company is an ATOP partner, then deleted within 24 months unless we must keep records longer by law, for example accounting records. Server logs are kept for up to 30 days. HubSpot analytics data is kept for as long as it remains useful for understanding the site's use, and no more than 26 months.

Your rights

Under the GDPR you can ask us for a copy of your personal data, ask us to correct it or delete it, object to or restrict how we use it, and ask for it in a portable format. Where we rely on your consent, you can withdraw it at any time, for cookies with "Cookie settings" at the foot of every page. To use any of these rights, contact us as above. We will answer within one month.

If you are unhappy with how we handle your data, you can complain to the Danish Data Protection Agency (Datatilsynet, www.datatilsynet.dk) or to the data protection authority where you live.

Changes

We will post any changes to this policy on this page and update the date at the top.