Privacy Policy

Data Controller

We are the data controller for the processing of the personal data that we process about our customers and business partners. You will find our contact information below.

  • Company name: IT CPH
  • Address: [Címed]
  • CVR no.: [CVR számod]

It is not a requirement for our company to have an external Data Protection Officer (DPO), but if you have any questions regarding the processing of your personal data, you can contact us via [email address].

Processing Activities

As a data controller in accordance with the GDPR, we carry out the following processing activities:

Website Visits

When you visit our website, we use cookies to ensure the website functions properly, which you can read more about in our cookie policy.

Communication with Potential Customers

When you have questions about our site or wish to hear more about our services, you can contact us via our contact form, email, or telephone. Through this, we will process your personal data to engage in a dialogue with you, e.g., to answer questions about our services. We only process the information you provide to us in connection with our communication. We will typically process the following common personal data: name, email, phone number.

Our legal basis for processing this personal data is Article 6(1)(f) of the General Data Protection Regulation (legitimate interest). We delete our communication with you once it becomes clear whether you require our services or not. Should a specific need arise to retain your personal data for a longer period, this may be the case.

Customers

We need to communicate with our customers to ensure that our services are delivered correctly. Through this, we may process information such as name, address, services, special agreements, payment information, and the like. The legal basis for processing this personal data is Article 6(1)(b) of the GDPR (performance of a contract).

Once the service has been delivered and any outstanding payments have been settled, we will immediately delete the personal data.

Bookkeeping

We are required to retain all accounting records in accordance with the Danish Bookkeeping Act (Bogføringsloven). This means we store invoices and similar documents for accounting purposes. These documents may contain common personal data such as name, address, and service descriptions. Our legal basis for processing personal data for bookkeeping purposes is Article 6(1)(c) of the GDPR (legal obligation). We store this information for a minimum of 5 years after the end of the current financial year.

Data Processors

We work with business partners and utilize suppliers, some of which may be data processors. External suppliers may, for example, provide systems to organize our work, services, consulting, IT hosting, or marketing.

  • Vercel: Web hosting and deployment.
  • [Másik szolgáltató]: [Célja, pl. Web analytics]

It is our responsibility to ensure that your personal data is processed securely. Therefore, we enter into data processing agreements with the companies (data processors) that handle personal data on our behalf to ensure a high level of security for your information.

Disclosure of Personal Data

We do not disclose your personal data to third parties.

Profiling and Automated Decision-Making

We do not use profiling or automated decision-making.

Third-Country Transfers

As a general rule, we use data processors located in the EU/EEA, or those who store data within the EU/EEA. In some cases, this is not possible, and we may use data processors outside the EU/EEA, provided they can offer an adequate level of protection for your personal data.

Security of Processing

We ensure the security of personal data processing by implementing appropriate technical and organizational measures. We have conducted risk assessments regarding our processing of personal data and have subsequently implemented appropriate technical and organizational measures to enhance processing security.

Rights of the Data Subject

Under the General Data Protection Regulation, you have a number of rights regarding our processing of your personal data. If you wish to exercise your rights, please contact us so we can assist you.

  • Right of access: You have the right to access the data we process about you, along with certain additional information.
  • Right to rectification: You have the right to have inaccurate information about yourself corrected.
  • Right to erasure: In special cases, you have the right to have information about you deleted before the time of our general scheduled deletion.
  • Right to restriction of processing: In certain cases, you have the right to request that the processing of your personal data be restricted.
  • Right to object: In certain cases, you have the right to object to our otherwise lawful processing of your personal data.
  • Right to data portability: In certain cases, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.

You can read more about your rights in the Danish Data Protection Agency's guidelines on the rights of data subjects, available at www.datatilsynet.dk.

Complaint to the Danish Data Protection Agency (Datatilsynet)

You have the right to file a complaint with the Danish Data Protection Agency if you are dissatisfied with the way we process your personal data. You can find their contact information at www.datatilsynet.dk.