Privacy policy

01Who is responsible

Duelund Nordic Tech ApS (CVR 42814792), Woltersgade 5A, 4. tv, 2300 København S, Denmark, is the data controller for the information processed on this website.

If you have questions about your information, write to contact@duelundtech.com.

02When you visit the site

• We set no cookies for visitors and use no tracking, advertising or analytics tools from other companies. The site loads no fonts or scripts from others either.
• We count how many times each page is shown: one number per page, language and hour. Nothing about you is stored - no IP address, no cookie, nothing about your browser - so the numbers cannot be traced back to you.
• A few choices are remembered in your own browser, such as your choice of language. They are listed on the page Cookies.
• Like every web server, the one at our hosting provider, Simply.com, keeps a technical log of requests: among other things the IP address, the time, the address on the site you open and the name of your browser. If you search the site, the search words are part of the address and so of the log. The log is used to run the site and to detect and stop attacks. Simply keeps it under its own rules, described in Simply's privacy policy: https://www.simply.com/en/privacy-policy/

The basis for the log is our legitimate interest in keeping the site running and secure (Article 6(1)(f) of the General Data Protection Regulation).

03When you write to us

When you write to us through one of the forms (Contact, Start a Project, Support, Partners and Work With Us) or by e-mail, we process:

• your name and e-mail address
• your company and phone number, if you give them
• what you write, and your answers in the form, such as timeline and budget

We use the information to answer and handle your enquiry and - if it comes to that - to enter into and fulfil an agreement with you. The basis is that you asked us to, before a possible agreement (Article 6(1)(b)), and our legitimate interest in being able to answer enquiries (Article 6(1)(f)).

When you send a form, you get a receipt with a copy of what you wrote at the e-mail address you gave, and we get a message in our own inbox.

Please do not send sensitive personal data, such as health information, and never passwords or other secrets. Files are sent by e-mail with your reference number.

We keep an enquiry for 12 months after its last activity: when it arrived, or when we last changed its status or wrote a note on it. Applications through Work With Us are kept for 6 months. After that they are deleted automatically, together with our internal notes.

The message we get in our own inbox when you send a form is deleted after the same time: 12 months, 6 for applications. We do that ourselves in our mailboxes; the site cannot delete e-mails.

04Protection against misuse

To slow down spam, we count how many messages are sent from the same connection within an hour and a day. The IP address is not stored as it is, but as a code (a keyed hash) that cannot be turned back into the address without the site's secret key. The counter is removed by the daily clean-up once its time is up. The basis is our legitimate interest in keeping the forms free of misuse (Article 6(1)(f)).

05Running the site

A few people have access to the site's administration. For them we store name, user name, password (only as a one-way code, a hash), the key for one-time codes, when they signed in from which IP address and browser, and a log of what they have done.

Attempts to sign in - including failed ones - are recorded with their IP address in a security log, so misuse can be detected. The site itself cannot change or delete the log; that is deliberate, so no one can hide what has happened. The one exception is the IP addresses: they are removed after 12 months, while the line about what happened stays. The address and browser of a sign-in that has ended are removed after the same time. The basis is our legitimate interest in protecting the site (Article 6(1)(f)).

06Who else processes the information

Simply.com A/S is our hosting provider: the website, the database, the e-mail the site sends and our mailboxes (contact@duelundtech.com and support@duelundtech.com). According to Simply's own privacy policy, their servers are in their own data centres in Denmark. Simply processes the information only on our behalf, under a data processing agreement we have with them.

We do not sell your information and do not share it for marketing. We hand over information only when the law requires it.

We do not transfer your information to countries outside the EU/EEA.

07Backups

The database is copied to a backup on the same server every day, and the 14 newest copies are kept. When we delete information, it is therefore also gone from our own copies within about 14 days. If we ever restore a backup, a copy of the database it replaced is kept as well; the five newest of those are kept. Simply also backs up the server, under its own rules.

08Your rights

You have the right to:

• see the information we hold about you
• have wrong information corrected
• have information deleted
• have the processing restricted
• receive your information in a common, machine-readable format (data portability)
• object to processing that is based on our legitimate interest

The rights apply within the limits the law sets. Write to contact@duelundtech.com. We may ask you to confirm that you are you, for example by answering from the e-mail address you wrote from. We answer as soon as we can and within one month at the latest, and it is free.

09Complaints

If you are not satisfied with how we handle your information, you can complain to the Danish Data Protection Agency (Datatilsynet): https://www.datatilsynet.dk. We would like to hear from you first, so we can put it right.

10Changes

When we change this policy, it gets a new version number and a new date at the top. Earlier versions are listed at the bottom of the page.