Privacy policy

The controller of the processing of your personal data on ejerblik.com is:

Ejerblik is a digital platform for mapping and documenting a company’s digital assets, developed and operated by Ejerblik ApS.

We process the following categories of personal data:

• Contact details: Name and email address (at sign-up, at login and in correspondence)
• Company details: Company registration number, company name and industry (when the company profile is created)
• Platform data: The digital assets, notes and documents you register in Ejerblik
• Technical data: IP address, browser type, device details and timestamps for logins and actions (pseudonymised)
• Correspondence: Email correspondence and support enquiries
• Analytics data: Aggregated and pseudonymised usage data (page views, clicks, session length) collected through Umami Analytics, which we host ourselves, if you have given consent
• Surveys: Answers to our survey at ejerblik.com/da/feedback are stored without name, email, company, IP address or time, only with the week number. If you enter a CVR number on the thank-you page to receive the offer of a longer trial, it is stored separately and not linked to your answers. We do not contact the company behind the number

We process your personal data on the following legal bases, under Article 6 of the General Data Protection Regulation (GDPR):

Performance of a contract, Article 6(1)(b)

The processing is necessary in order to perform our agreement with you on access to the Ejerblik platform. That covers creating and administering your account, delivering the features of the platform (asset register, audit checklists, reports), and communicating about operational matters.

Legitimate interests, Article 6(1)(f)

We process technical logs and security-related data in our legitimate interest in keeping the platform running, preventing misuse and maintaining information security.

Consent, Article 6(1)(a)

Analytics data through Umami Analytics, which we host ourselves, is collected solely on the basis of your voluntary consent, given in our cookie banner. You can withdraw that consent at any time, with no consequences for your use of the platform. Newsletter subscription is likewise based on consent.

Legal obligation, Article 6(1)(c)

To the extent the law requires it, we process data in order to meet legal obligations, for example the Danish Bookkeeping Act in relation to invoicing.

We do not share your personal data with third parties for marketing purposes. The one exception is LinkedIn’s Insight Tag, which loads only if you have given consent, see section 9. We use the processors below. All of them are covered by written data processing agreements and process data in accordance with the GDPR:

All third-party suppliers are subject to their own data protection policies. We also use Logo.dev and Google gstatic to display vendor logos. They are called by your browser, not by our server, and they are therefore not our processors. They receive your IP address and which vendor domain is being looked up, and they process that information as independent controllers under their own policies. We send them no account details, names or email addresses.

Our main processors are located within the EU and the EEA. Supabase uses AWS in Ireland (eu-west-1), and Resend processes email within the EU. Microsoft 365 stores our email and documents in Denmark. GitHub stores an encrypted backup of the database in the USA under the EU-U.S. Data Privacy Framework and the European Commission’s standard contractual clauses. Where data is exceptionally transferred to a third country, this is done with appropriate safeguards under Article 46 of the GDPR, normally the European Commission’s standard contractual clauses.

We keep your personal data for as long as your account is active, or for as long as it is necessary to fulfil the purposes described in this policy:

• Account data: Deleted within 30 days of your account being deleted
• Security logs: Kept for up to 12 months
• Accounting records for invoicing: 5 years, under the Danish Bookkeeping Act
• Newsletter: Until you unsubscribe, after which your email address is deleted within 30 days
• CVR number from the survey: Deleted when the offer expires after 6 months, unless the company has created an account before then

You have the following rights under Articles 12 to 21 of the GDPR. You can exercise them by contacting us at [email protected]. We reply within 1 month, as required by Article 12(3).

• Access (Art. 15): The right to see what data we process about you
• Rectification (Art. 16): The right to have inaccurate data corrected
• Erasure (Art. 17): The right to have your data deleted (the "right to be forgotten")
• Restriction (Art. 18): The right to have the processing restricted in certain circumstances
• Data portability (Art. 20): The right to receive your data in a structured, machine-readable format
• Objection (Art. 21): The right to object to processing based on legitimate interests
• Withdrawal of consent (Art. 7(3)): The right to withdraw consent at any time (analytics, newsletter)

You have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) if you believe that we are processing your personal data in breach of data protection law:

Ejerblik uses cookies and similar technologies. You will find a detailed overview of the cookies we use, their purpose and their lifetime in our cookie policy.

We use technically necessary cookies (session and preference) without consent. If you press Accept all in our cookie banner, we also activate three things: the Umami analytics tool, which we host ourselves; source tracking, which notes which material brought you here so that a partner can be credited; and LinkedIn’s Insight Tag, which measures whether an advert led to a visit and sets cookies belonging to LinkedIn.

We update this privacy policy whenever we change the way we process personal data. Material changes are notified to registered users by email at least 14 days before they take effect. The current version is always available at ejerblik.com/en/privacy-policy.

Questions about the processing of your personal data can be sent to: