Privacy policy

We collect as little as we can. If you write to us, we use what you send to reply. We count visits without cookies. Everything else, such as analytics and marketing cookies, only runs if you say yes, and you can change your mind at any time.

Who is responsible

Distinkt Consulting A/S is the data controller for the personal data described here.

• CVR 46780701
• Flæsketorvet 68, 1711 København V, Denmark
• Email: hello@distinkt.dk

Write to that address with any question about this policy or your data. We have not appointed a data protection officer, as the GDPR does not require one for a company of our size and activities.

When you contact us

The contact form asks for your name, work email, company (optional), the service you are interested in and your message. With it we receive the address of the page you sent it from and your IP address. If you have accepted marketing cookies, HubSpot also links the message to its cookie in your browser, so we can see which of our pages you visited before writing.

We use this to reply to you and to follow up on your enquiry. The legal basis is our legitimate interest in answering the people who contact us, and, where you are asking about our services, taking steps at your request before entering into an agreement (GDPR Article 6(1)(f) and (b)).

You do not have to contact us or give us any information. Name, email and message are required only because we cannot reply without them; if you would rather not give them, you cannot use the form, and nothing else changes.

Your message is stored in our CRM, HubSpot, which also sends it to our shared mailbox in Microsoft 365. We keep it for [retention period, e.g. 24 months after our last contact], unless it leads to an agreement, in which case it is kept as part of that customer relationship.

Spam protection

Before a message is sent, Cloudflare Turnstile checks that it comes from a person and not a bot. To do that it processes your IP address and technical information about your browser. It sets no cookies. The legal basis is our legitimate interest in keeping the form free of spam (Article 6(1)(f)).

Visitor statistics without cookies

We count visits with Plausible Analytics, which is hosted in the EU and sets no cookies. It records which pages are viewed, where visitors came from, and the country, browser and device type, but only as totals. Your IP address is used to tell visits apart for a single day and is not stored. No one, including us, can identify you from these statistics. The legal basis is our legitimate interest in understanding how the site is used (Article 6(1)(f)).

Cookies and tags that need your consent

Some tools only run if you accept them in the cookie banner. All of them are loaded through Google Tag Manager, which itself only starts them after you agree.

• Statistics: Google Analytics 4, for longer-term reports on how the site is used.
• Marketing: the LinkedIn Insight Tag, which tells us about the companies visiting the site and measures our LinkedIn ads; and HubSpot’s tracking code, which links your visits to your enquiry if you contact us.

The legal basis is your consent (Article 6(1)(a), and the Danish cookie rules). Declining has no effect on what you can do on the site. You can withdraw or change your consent at any time under Cookie settings in the footer of every page, or from the cookie list below.

Hosting and logs

The site is hosted by Vercel. Like any web server, it processes your IP address and technical information about each request in order to deliver the page, protect the site against abuse and find errors. These logs are kept for [log retention per our Vercel plan] and are not used for anything else. The legal basis is our legitimate interest in running a secure website (Article 6(1)(f)).

Who we share data with

We do not sell personal data. We use these providers, who process data on our behalf under data processing agreements:

• Vercel Inc. (hosting; the contact form runs in the EU, in Stockholm)
• HubSpot, Inc. (CRM and form handling; [EU data centre — confirm in the HubSpot account])
• Microsoft Ireland Operations Ltd. (email)
• Cloudflare, Inc. (spam protection)
• Plausible Insights OÜ (visitor statistics, EU)
• Usercentrics A/S, Cookiebot (cookie consent, EU)
• Google Ireland Ltd. (Tag Manager and Analytics, with consent)
• LinkedIn Ireland Unlimited Company (Insight Tag, with consent)

Vercel, HubSpot, Cloudflare, Google and LinkedIn are part of groups based in the United States and may process data there. The United States is a safe third country for companies certified under the EU–U.S. Data Privacy Framework, under the European Commission’s adequacy decision of 10 July 2023. Where a provider is not certified, the transfer relies on the EU’s standard contractual clauses (GDPR Article 46). [Confirm each provider’s certification.] Write to us for a copy of the safeguards that apply.

Your right to object

Where we process your data on the basis of our legitimate interest, you have the right to object at any time, on grounds relating to your particular situation (GDPR Article 21). Write to hello@distinkt.dk. We will then stop, unless we can show compelling legitimate grounds that override your interests, or need the data to establish, exercise or defend a legal claim.

Your other rights

Under the GDPR you also have the right to:

• see the personal data we hold about you
• have it corrected if it is wrong
• have it deleted
• have its processing restricted
• receive the data you gave us in a portable format
• withdraw your consent at any time, without affecting what happened before

Write to hello@distinkt.dk to use any of these rights. We reply within one month. We do not use your data for automated decisions or profiling with legal or similar effects.

If you are unhappy with how we handle your data, you can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, datatilsynet.dk.

Changes to this policy

When we change how we handle personal data, we update this page and the date at the top.

Cookie list

The list below is kept up to date by Cookiebot, our consent provider. It shows every cookie the site can set, what it is for and how long it lasts, and lets you change or withdraw your consent.