1. Data Controller Identity

The data controller responsible for the processing of personal data collected through this website is HighlandRelayLabs, registered at Skibhusvej 82, 5000 Odense C, Denmark. For all inquiries related to data protection and privacy, you may contact our designated Data Protection Officer at [email protected].

2. Categories of Personal Data Processed

We collect and process the following categories of personal data: (a) identification data provided voluntarily through contact forms, including full name and email address; (b) communication content transmitted through our inquiry channels; (c) technical data automatically collected during website访问, including IP address, browser type and version, operating system, referring URLs, page访问 timestamps, and navigation patterns; (d) cookie identifiers and similar tracking technologies as detailed in our Cookie Framework below.

3. Legal Basis for Processing

All processing activities are conducted under one or more of the following legal bases as defined in Article 6 of the EU General Data Protection Regulation (GDPR): (a) consent — where you have given explicit, informed, and freely given consent for specific processing purposes; (b) contractual necessity — where processing is necessary for the performance of a contract to which you are party, or for taking pre-contractual steps at your request; (c) legitimate interests — where processing is necessary for our legitimate business interests, including service improvement, security, and analytics, provided such interests are not overridden by your fundamental rights and freedoms.

4. Purpose and Retention Period

Personal data is collected and processed for the following purposes: (a) responding to inquiries and establishing business relationships; (b) delivering requested services and maintaining communication throughout the engagement lifecycle; (c) ensuring website security, preventing fraud, and maintaining system integrity; (d) complying with applicable legal obligations. Data is retained only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Contact form submissions are retained for a maximum of 24 months from the date of submission. Technical logs are retained for a maximum of 12 months.

5. Data Recipients and Transfers

Your personal data may be shared with the following categories of recipients: (a) authorized personnel within HighlandRelayLabs who require access to fulfill their professional responsibilities; (b) third-party service providers acting as data processors, including hosting infrastructure providers, email delivery services, and analytics platforms, all bound by data processing agreements in compliance with Article 28 GDPR; (c) public authorities where disclosure is required by applicable law. Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) as adopted by the European Commission, or adequacy decisions pursuant to Article 45 GDPR.

6. Your Data Protection Rights

Under the GDPR, you have the following rights: (a) Right of Access (Article 15) — to obtain confirmation whether your personal data is being processed and to receive a copy of such data; (b) Right to Rectification (Article 16) — to have inaccurate personal data corrected without undue delay; (c) Right to Erasure (Article 17) — to request deletion of your personal data where processing is no longer necessary, consent is withdrawn, or processing is unlawful; (d) Right to Restriction (Article 18) — to request limitation of processing in specific circumstances; (e) Right to Data Portability (Article 20) — to receive your personal data in a structured, commonly used, machine-readable format; (f) Right to Object (Article 21) — to object to processing based on legitimate interests, including direct marketing; (g) Right to Withdraw Consent (Article 7) — to withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal. To exercise any of these rights, please contact us at [email protected]. We will respond to all requests within 30 calendar days.

7. Right to Lodge a Complaint

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the EU/EEA member state of your habitual residence, place of work, or place of the alleged infringement.

8. Data Security

HighlandRelayLabs implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including encryption of data in transit (TLS 1.3) and at rest, access controls with role-based permissions, regular security audits, and incident response procedures in accordance with Article 32 GDPR.

1. What Are Cookies

Cookies are small text files placed on your device when you visit a website. They serve to recognize your device, store preferences, and collect analytical information about your usage patterns. Cookies are either set by the website you are visiting (first-party cookies) or by third-party services integrated into the website (third-party cookies).

2. Categories of Cookies We Use

Strictly Necessary Cookies: These cookies are essential for the basic functionality of our website. They enable core features such as session management, security tokens, and cookie consent state persistence. Without these cookies, the website cannot function as intended. These cookies do not require consent under the ePrivacy Directive (Directive 2002/58/EC).

Performance and Analytics Cookies: These cookies collect anonymized information about how visitors interact with our website, including pages visited, time spent, and error encountered. This data helps us optimize website performance and user experience. All analytics data is aggregated and does not identify individual users. These cookies are only activated with your explicit consent.

Functionality Cookies: These cookies remember your preferences and settings to provide a personalized experience. They may be set by us or by third-party providers whose services we have added to our pages.

3. Managing Cookie Preferences

Upon your first visit, you will be presented with a cookie consent banner allowing you to accept or decline non-essential cookies. Your preference is stored in your browser's local storage and will persist across sessions. You may update your preferences at any time by accessing the cookie settings through the link in our website footer. Additionally, you can control and delete cookies through your browser settings. Please note that disabling strictly necessary cookies may impair website functionality.

4. Cookie Retention

Session cookies are automatically deleted when you close your browser. Persistent cookies remain on your device for the period specified in the cookie table below, or until you manually delete them through your browser settings. Consent-related cookies are retained for a maximum of 12 months.

5. Third-Party Cookies

Some cookies are placed by third-party services that appear on our pages. We do not control the use of these cookies. Please refer to the respective third-party privacy policies for further information. We only enable third-party cookies with your prior consent, except where they are strictly necessary for the service you have requested.

1. General Refund Principles

HighlandRelayLabs is committed to fair and transparent refund practices. All refund requests are evaluated on a case-by-case basis, taking into account the specific circumstances of the engagement, the project milestones completed, and the applicable provisions of EU consumer protection law. Nothing in this policy affects your statutory rights under the Consumer Rights Directive (Directive 2011/83/EU) or equivalent national legislation.

2. Pre-Contractual Cancellation

Where a service agreement has been concluded at a distance (e.g., via our website or email correspondence), you have the right to withdraw from the contract within 14 calendar days from the date of contract formation, without providing any reason, in accordance with Article 9 of the Consumer Rights Directive. To exercise your right of withdrawal, you must inform us of your decision by means of a clear, unambiguous statement sent to [email protected]. You may use the model withdrawal form provided below, but it is not obligatory.

3. Services Commenced with Consent

If you have expressly requested that we commence the delivery of services during the withdrawal period and have acknowledged that you lose your right of withdrawal once the contract has been fully performed, refunds for services already rendered will be calculated proportionally based on the extent of performance relative to the total contract scope. Any advance payments for services not yet rendered will be refunded in full.

4. Milestone-Based Refunds

For engagements structured around project milestones, refunds are calculated as follows: (a) if cancellation occurs before the commencement of a milestone, 100% of the payment allocated to that milestone will be refunded; (b) if cancellation occurs during a milestone, a proportional refund will be issued based on the percentage of deliverables completed and accepted; (c) if cancellation occurs after milestone acceptance, no refund will be issued for that milestone. All milestone acceptance criteria are defined in the project statement of work (SOW) agreed upon at contract formation.

5. Refund Processing

Approved refunds will be processed within 14 calendar days of refund approval using the original payment method. If the original payment method is no longer available, an alternative refund method will be arranged in consultation with the client. Refund amounts will be credited in the original transaction currency (EUR) and any currency conversion differences are borne by the receiving financial institution.

6. Non-Refundable Items

The following are non-refundable: (a) third-party costs incurred on behalf of the client (e.g., domain registrations, cloud infrastructure fees, licensed software) that have already been paid to the respective provider; (b) services that have been fully delivered and accepted in writing by the client; (c) consultancy hours that have been consumed and documented in the engagement log.

1. Acceptance of Terms

By accessing and using the website and services provided by HighlandRelayLabs, located at Skibhusvej 82, 5000 Odense C, Denmark, you acknowledge that you have read, understood, and agree to be bound by these Terms of Operation. If you do not agree to these terms, you must not access or use our website or services. These terms constitute a legally binding agreement between you (the "Client") and HighlandRelayLabs (the "Service Provider").

2. Scope of Services

The Service Provider delivers web development, digital infrastructure engineering, and related technical consulting services as described in individual Statements of Work (SOWs) agreed upon between the parties. Each SOW constitutes an integral part of these Terms and specifies the deliverables, timelines, acceptance criteria, and pricing for the particular engagement. In the event of a conflict between a SOW and these Terms, the SOW shall prevail.

3. Intellectual Property

Upon full payment of all fees due under the applicable SOW, the Client shall receive a perpetual, non-exclusive, irrevocable license to use all custom deliverables produced specifically for the Client under that SOW. The Service Provider retains all rights to pre-existing intellectual property, proprietary tools, frameworks, methodologies, and general-purpose code components used in the delivery of services. The Service Provider reserves the right to use anonymized and aggregated project data for portfolio and case study purposes, subject to the Client's prior written objection.

4. Payment Terms

All fees are quoted in Euros (EUR) exclusive of applicable value-added tax (VAT). Payment terms are as specified in the applicable SOW. Unless otherwise agreed: (a) invoices are payable within 14 calendar days of invoice date; (b) late payments accrue interest at the statutory rate defined in Directive 2011/7/EU on late payment in commercial transactions; (c) the Service Provider may suspend work if payment is overdue by more than 10 calendar days, after providing written notice; (d) all disputed amounts must be raised in writing within 7 calendar days of invoice receipt.

5. Confidentiality

Both parties agree to maintain the confidentiality of all proprietary or sensitive information disclosed during the engagement. This obligation survives the termination of the contractual relationship for a period of 24 months. Confidential information shall not be disclosed to third parties without prior written consent, except where required by law or where the information has become publicly available through no fault of the receiving party.

6. Limitation of Liability

To the maximum extent permitted by applicable law, the Service Provider's total aggregate liability under any engagement shall not exceed the total fees paid by the Client under the applicable SOW during the 12-month period preceding the event giving rise to the claim. The Service Provider shall not be liable for indirect, incidental, special, consequential, or punitive damages, including but not limited to loss of profits, data, or business opportunities. Nothing in this section limits liability for wilful misconduct, gross negligence, or any liability that cannot be excluded under applicable law.

7. Data Protection

Both parties shall comply with the GDPR and all applicable data protection legislation. Where the Service Provider processes personal data on behalf of the Client, a separate Data Processing Agreement (DPA) shall be executed in compliance with Article 28 GDPR. The DPA shall define the subject matter, duration, nature, and purpose of processing, the types of personal data, and the categories of data subjects.

8. Force Majeure

Neither party shall be liable for any delay or failure to perform its obligations under these Terms due to circumstances beyond its reasonable control, including but not limited to natural disasters, pandemics, government actions, war, terrorism, cyber-attacks of exceptional scale, or failure of third-party telecommunications infrastructure. The affected party must notify the other party promptly and use reasonable efforts to mitigate the impact.

9. Governing Law and Dispute Resolution

These Terms shall be governed by and construed in accordance with the laws of Denmark, without regard to conflict of law principles. Any dispute arising out of or in connection with these Terms shall first be submitted to mediation administered by the Danish Mediation Institute. If mediation does not resolve the dispute within 60 days, either party may submit the dispute to the exclusive jurisdiction of the courts of Odense, Denmark.

10. Amendments

The Service Provider reserves the right to amend these Terms at any time. Material changes will be communicated via email to registered clients at least 30 calendar days before taking effect. Continued use of the website or services after the effective date of any amendment constitutes acceptance of the updated Terms.