Privacy policy

When you contact me

What: Your name, email and message, plus any details you choose to provide, such as company, project type, budget and timeline. Also the time of your enquiry and the language you wrote in.

Why: To reply to your enquiry, assess your project, send a quote and follow up.

Legal basis: If your enquiry is about a possible project, I process your data to take steps at your request before entering into a contract (Article 6(1)(b) GDPR). Other enquiries, and enquiries sent on behalf of a company, are processed based on my legitimate interest in replying to and following up on enquiries (Article 6(1)(f) GDPR).

How: The contact form is sent as an email via the email service Resend to my inbox. Your data is not stored in a database on the website. You are not obliged to give me your details, but without an email address I can't reply.

Retention: If your enquiry doesn't lead to a project, I delete it once I no longer need it to reply to or follow up on your enquiry. Resend automatically deletes its copy of the email and related logs after 30 days.

Please don't send sensitive information, such as health data or national ID numbers, through the form.

If we work together

What: Contact details for you and your colleagues, correspondence, agreements, quotes and invoices.

Why and legal basis: To deliver the agreed work and manage our collaboration (Article 6(1)(b)), to comply with the Danish Bookkeeping Act (Article 6(1)(c)) and, for contact persons at a client company, my legitimate interest in communicating about the work (Article 6(1)(f)).

Retention: Accounting records are kept for 5 years from the end of the financial year they relate to, as required by the Danish Bookkeeping Act. Other correspondence is kept for as long as necessary to document agreements and handle any claims.

When you visit the website

The website is hosted by Vercel. When you visit, your browser automatically sends technical information such as your IP address, browser type, time and the page you visit. This is used to deliver the website, protect it against abuse and fix errors.

The legal basis is my legitimate interest in a secure and stable website (Article 6(1)(f)). Vercel keeps these logs for a short period.

Website statistics

I use Vercel Web Analytics by Vercel Inc. (USA) to see how many people visit and which posts are read. No cookies are used to recognize you. Visits are grouped using a hash of your request, which is discarded after 24 hours, and your IP address is not stored. The statistics include time, page visited, referring page, country, operating system, browser and device type, and are only viewed in aggregate.

I also use Vercel Speed Insights to measure how quickly pages load and respond. The measurements are only viewed in aggregate and used to make the website faster. No cookies are used.

Legal basis: My legitimate interest in understanding how the website is used so I can improve content and usability, without tracking individual visitors (Article 6(1)(f)). You can object at any time by emailing me. Most ad blockers also block the statistics.

Cookies

The website doesn't use cookies for statistics, marketing or language settings, and it doesn't store your settings on your device. That's why there is no cookie banner.

Who I share data with

I use the following data processors. They may only process data on my instructions and under a data processing agreement.

I only disclose data to public authorities when required by law.

Transfers outside the EU/EEA

Vercel and Resend are US companies. They are certified under the EU-U.S. Data Privacy Framework, and transfers are based on the European Commission's adequacy decision (Article 45) supplemented by the European Commission's Standard Contractual Clauses (Article 46). Email me if you would like a copy of the relevant safeguards.

Your rights

You have the right to:

• access the data I hold about you
• have inaccurate data rectified
• have your data erased
• restrict processing
• object to processing based on legitimate interest
• data portability, meaning you can receive your data in a common, machine-readable format

Email mail@simonij.com and I will reply within one month. Some rights have conditions or limits, for example when the Bookkeeping Act requires me to keep an invoice.

You can lodge a complaint with the Danish Data Protection Agency, Datatilsynet, or the supervisory authority where you live. I'd appreciate the chance to sort things out with you first.

Automated decisions

I don't make automated decisions or use profiling.

Changes

I update this policy when my services or the rules change. The date at the top shows the latest change.