Privacy Policy — in plain English
- You are in charge. Write to [email protected] and we will tell you exactly what we hold about you.
- We only keep what you send us through the contact form, email, or phone — name, email, phone, company, and project details.
- We use it to reply and deliver — to answer your brief, run the project, and issue invoices. Never to sell your data.
- Enquiries are deleted after 24 months; financial records are kept for 5 years because Danish bookkeeping law requires it.
- You can ask for correction, export, or deletion at any time, and you may complain to the Danish Data Protection Agency (Datatilsynet) if you disagree with us.
Privacy Policy
GDPR · REG. (EU) 2016/6791.1 Controller. This Privacy Policy describes how crisppageco, Silkeborgvej 14 Mackenzie, 1. tv, 8000 Aarhus C, Denmark (“crisppageco”, “we”, “us”), processes personal data when you visit our website, contact us at [email protected], or engage our web design services.
1.2 Data we collect. We process identification and contact data you voluntarily provide through our contact form, email, or telephone: full name, email address, telephone number, company name, budget range, timeline, and the content of your project brief. We also process technical data collected automatically, such as IP address, browser type, and referring page, through server logs and, where you consent, analytics cookies.
1.3 Purpose and legal basis. We process your data to respond to enquiries and take pre-contractual steps at your request (Article 6(1)(b) GDPR), to perform a signed agreement and deliver purchased services (Article 6(1)(b)), to comply with bookkeeping and tax obligations (Article 6(1)(c)), to protect the security of our website (Article 6(1)(f)), and to send newsletters or analytics cookies only where you have given consent (Article 6(1)(a)).
1.4 Recipients. Personal data is shared only with processors that help us operate: our hosting provider, email provider, and accounting software, each bound by data processing agreements under Article 28 GDPR. We do not sell, rent, or disclose your personal data to advertisers or brokers.
1.5 International transfers. We store data within the European Economic Area. If a processor operates outside the EEA, transfers are covered by an adequacy decision or Standard Contractual Clauses approved by the European Commission.
1.6 Retention. Enquiry records are retained for 24 months after our last contact. Contracts, invoices, and accounting records are retained for 5 years from the end of the financial year, as required by the Danish Bookkeeping Act. Newsletter data is kept until you unsubscribe.
1.7 Your rights. You may request access, rectification, erasure, restriction, and portability of your data, and you may object to processing based on legitimate interests. Where processing rests on consent, you may withdraw it at any time without affecting prior processing. Contact [email protected] to exercise these rights; we respond within one month. You also have the right to lodge a complaint with the Danish Data Protection Agency, Datatilsynet, Borgergade 28, 1300 Copenhagen.
1.8 Security. We apply appropriate technical and organisational measures — encrypted transport (HTTPS), access control, and pseudonymised backups — to protect your data against unauthorised access, alteration, or loss.