Prospect Privacy Notice

How Sprii handles the personal data of business contacts we approach.Version 1.1. Last updated 20 October 2026.

1. Table of Contents

Document version

Version	Name	Changes made	Date
1.0	Rasmus Aas Pedersen	Creation of notice.	11 June 2026
1.1	Rasmus Aas Pedersen	Published on sprii.io. Added email open and click tracking, when this notice is given, how we balance our interest against yours, no automated decisions, what the suppression record holds, what counts as engagement, our answer time and your right to complain where you live or work.	20 October 2026

Who we are

Sprii ApS, Sommervej 31 E, 8210 Aarhus V, Denmark, is the data controller for the personal data described in this notice. For any privacy question, or to use your rights, contact our Data Protection Manager at dpm@sprii.io.

Who this notice is for

This notice is for business contacts we approach about Sprii's live-commerce platform. We contact you in your professional capacity, at your work address. We did not collect this data from you directly, so this notice gives you the information required by Article 14 of the GDPR. We link to it in every email we send you, and the first email also carries a short summary of it.

What personal data we hold

Your name, job title and employer.
Your business email address, business phone number and LinkedIn profile URL.
A record of our outreach to you and how you engaged with it: emails sent, replies, meetings, and whether an email was opened or a link clicked.

We do not hold special-category data about you, and we do not use this data to profile you as a consumer or shopper.

Where we got your data

From public sources such as company websites, from LinkedIn, and from business data and lead-generation providers. Service providers help us find, enrich and organise this data before we contact you.

Why we use it and our lawful basis

We use your data to tell businesses that may benefit from Sprii about our platform, and to follow up if you are interested.

Our lawful basis is our legitimate interest in business-to-business marketing (GDPR Article 6(1)(f)). We have weighed that interest against your interests and rights: we only contact people for whom our message is relevant, we use work contact details only, we keep the data set small, and you can object at any time. You can ask us for a summary of this assessment.

We do not make decisions about you based solely on automated processing.

Email open and click tracking

Our emails may record whether a message was opened or a link was clicked. We use this to keep our list accurate, stop contacting people who do not engage, and decide how often to write. If you are based in France or Italy, we do not use open or click tracking in marketing emails to you.

Who we share it with

Only with service providers who process the data on our instructions:

HubSpot (our CRM and email platform).
Make (automation).
Lead-sourcing and enrichment tools, including PhantomBuster and Apify.

Each is bound by a data processing agreement and may use the data only to provide its service to us. We do not sell your data.

International transfers

Some of these providers are based outside the EU/EEA, mainly in the United States. Where data leaves the EU/EEA, we rely on safeguards under GDPR Articles 44 to 46: the EU-U.S. Data Privacy Framework where the provider is certified, or the European Commission's Standard Contractual Clauses together with a transfer impact assessment. You can ask us for a copy of the relevant safeguard.

How long we keep your data

We delete or anonymise your record when you have not engaged with us for 24 months, counted from your last reply, meeting, open or click. While there is an active opportunity with your company, we keep the record until it closes.

If you object, we stop contacting you at once and keep only a minimal suppression record (your email address and the date you opted out) so that we never contact you again.

Your rights

You have the right to:

access the data we hold about you (Article 15);
have it corrected (Article 16);
have it erased (Article 17);
restrict our use of it (Article 18);
receive it in a portable form, where this applies (Article 20);
object to our use of it (Article 21).

Your right to object to direct marketing is absolute. If you object, we stop (Article 21(3)). We answer requests within one month.

How to opt out

Reply to any email from us, use the unsubscribe link in the email, or write to dpm@sprii.io. We act on it without undue delay and add you to our suppression list.

How to complain

Please contact us first at dpm@sprii.io so we can put it right. You also have the right to complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, www.datatilsynet.dk, or to the data protection authority where you live or work.