Privacy policy

The controller of the processing of your personal data on ejerblik.com is:

Ejerblik is a digital platform for mapping and documenting a company’s digital assets, developed and operated by Ejerblik ApS.

We process the following categories of personal data:

• Contact details: Name and email address (at sign-up, at login and in correspondence)
• Company details: Company registration number, company name and industry (when the company profile is created)
• Platform data: The digital assets, notes and documents you register in Ejerblik
• Technical data: IP address, browser type, device details and timestamps for logins and actions (pseudonymised)
• Correspondence: Email correspondence and support enquiries
• Analytics data: Aggregated and pseudonymised usage data (page views, clicks, session length) collected through Umami Analytics and Microsoft Clarity, if you have given consent

We process your personal data on the following legal bases, under Article 6 of the General Data Protection Regulation (GDPR):

Performance of a contract, Article 6(1)(b)

The processing is necessary in order to perform our agreement with you on access to the Ejerblik platform. That covers creating and administering your account, delivering the features of the platform (asset register, audit checklists, reports), and communicating about operational matters.

Legitimate interests, Article 6(1)(f)

We process technical logs and security-related data in our legitimate interest in keeping the platform running, preventing misuse and maintaining information security.

Consent, Article 6(1)(a)

Analytics data through Umami Analytics and Microsoft Clarity is collected solely on the basis of your voluntary consent, given in our cookie banner. You can withdraw that consent at any time, with no consequences for your use of the platform. Newsletter subscription is likewise based on consent.

Legal obligation, Article 6(1)(c)

To the extent the law requires it, we process data in order to meet legal obligations, for example the Danish Bookkeeping Act in relation to invoicing.

We do not share your personal data with third parties for marketing purposes. We use the processors below. All of them are covered by written data processing agreements and process data in accordance with the GDPR:

All third-party suppliers are subject to their own data protection policies. Data processing agreements are in place with all of the above.

Our main processors are located within the EU and the EEA. Supabase uses AWS in Ireland (eu-west-1), and Resend processes email within the EU. Where data is exceptionally transferred to a third country, this is done with appropriate safeguards under Article 46 of the GDPR, normally the European Commission’s standard contractual clauses.

We keep your personal data for as long as your account is active, or for as long as it is necessary to fulfil the purposes described in this policy:

• Account data: Deleted within 30 days of your account being deleted
• Security logs: Kept for up to 12 months
• Accounting records for invoicing: 5 years, under the Danish Bookkeeping Act
• Newsletter: Until you unsubscribe, after which your email address is deleted within 30 days

You have the following rights under Articles 12 to 21 of the GDPR. You can exercise them by contacting us at [email protected]. We reply within 1 month, as required by Article 12(3).

• Access (Art. 15): The right to see what data we process about you
• Rectification (Art. 16): The right to have inaccurate data corrected
• Erasure (Art. 17): The right to have your data deleted (the "right to be forgotten")
• Restriction (Art. 18): The right to have the processing restricted in certain circumstances
• Data portability (Art. 20): The right to receive your data in a structured, machine-readable format
• Objection (Art. 21): The right to object to processing based on legitimate interests
• Withdrawal of consent (Art. 7(3)): The right to withdraw consent at any time (analytics, newsletter)

You have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) if you believe that we are processing your personal data in breach of data protection law:

Ejerblik uses cookies and similar technologies. You will find a detailed overview of the cookies we use, their purpose and their lifetime in our cookie policy.

We use technically necessary cookies (session and preference) without consent. Analytics tools (Umami and Microsoft Clarity) are activated only with your consent, given in our cookie banner.

We update this privacy policy whenever we change the way we process personal data. Material changes are notified to registered users by email at least 14 days before they take effect. The current version is always available at ejerblik.com/en/privacy-policy.

Questions about the processing of your personal data can be sent to: