Privacy policy

I am the data controller for the personal data processed through this site. My details are below.

There are two things on this site that involve personal data.

Visiting the site

Cookies are used for functionality only, to remember whether you are reading in Danish or English. There is no analytics, advertising or tracking.

The contact form

If you write to me through the form, I process what you send so that I can reply.

That is the name, email address and message you type. Nothing else is collected, and nothing is passed on.

I keep the correspondence while it is still live, and delete it once it is clear the conversation has ended.

Legal basis: GDPR Article 6(1)(f), legitimate interest in answering someone who writes to me.

Two services are involved in running the site, and both count as data processors:

• Netlify, which hosts the site
• Formspree, which delivers the contact form

Keeping your data safe is my responsibility rather than theirs, so I use services that can account for how they handle it.

Netlify and Formspree are US services, so data reaching them may be processed outside the EU and EEA. Both rely on the EU-US Data Privacy Framework or standard contractual clauses for that transfer.

The site is served over HTTPS, collects as little as it can, and stores nothing itself. The less there is to protect, the less there is to lose.

Under the GDPR you have a set of rights over the data I hold about you. Write to me if you want to use any of them.

• Access: a copy of what I hold
• Rectification: correction of anything wrong
• Erasure: deletion of it
• Restriction: a pause on processing it
• Objection: an objection to processing it
• Portability: a transferable copy

The Danish Data Protection Agency explains these rights in more detail at datatilsynet.dk.

If you are unhappy with how your data has been handled, you can complain to the Danish Data Protection Agency. Their contact details are at datatilsynet.dk.