Privacy Policy

Privacy Policy for https://hvilken.dk

Effective Date: [Insert Date]

This is a draft privacy policy created for https://hvilken.dk and must be thoroughly reviewed before publication. The policy is designed to comply with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and ePrivacy requirements.

Identity of the Data Controller
The data controller of this website is:
[Company Name]
[Business Address]
[Official Email Address]

Types of Personal Data We Collect

We collect and process the following types of personal data when you visit, interact with, or use services on https://hvilken.dk:

1. Personal Identifiers: Includes name, email address if submitted voluntarily through contact forms or subscription services.

2. Technical Data: Includes IP address, device information, browser type, operating system, and referring URL.

3. Usage Data: Includes pages you visited, the time spent on pages, and general interaction data with website elements.

4. Beacons and Tracking Pixels:
   While visiting https://hvilken.dk, tracking identifiers may collect behavioral data via beacons and tracking pixels placed on the website. These may originate from:

   • d.plerdy.com
   • a.plerdy.com
   • stats.g.doubleclick.net
   • region1.analytics.google.com
   • www.googletagmanager.com

5. Cookie Data: Cookies and similar technologies store small files on your device to enhance your user experience. The use of cookies may involve collecting technical information such as session identifiers and user preferences.

For details on our cookie practices, consult our Cookie Declaration.

Legal Basis for Processing

We process your personal data based on the following legal justifications under GDPR:

• Consent: For activities requiring your opt-in, such as analytics and tracking technologies.
• Contractual Necessity: To deliver requested services when you submit queries or contact us.
• Legitimate Interests: To enhance functionality and user experience, ensure website security, and conduct marketing analytics.

For CCPA compliance, consent is similarly respected, and users have the right to opt out of the 'sale' or sharing of their personal data when applicable.

Third-Party Services Involved

We utilize third-party services to provide analytics and marketing support. These include:

• Google Analytics and DoubleClick (Tracking and behavioral analysis)
• Plerdy Analytics (Data tracking through beacons for user behavior)

Personal data collected by these third-party partners may be shared according to their respective privacy policies.

Placeholder for Third-Party Vendors: Full vendor lists will be reviewed before final publication.

Data Retention Periods

We retain data only for as long as necessary:

• Behavioral and technical data collected via beacons are stored for up to [insert duration, e.g., 14 months] for analytics purposes.
• Cookies and identifiers may persist for variable periods. Session cookies expire after the browser session ends, while persistent cookies may last up to [insert duration].

Personal data voluntarily submitted may be retained until you request its deletion or until the purpose of its collection is fulfilled.

Sharing of Data

We may share your data with:

• Analytics service providers to analyze website use and user behavior.
• Operational partners who ensure the functionality of our website, such as hosting and IT security services.

We ensure that such sharing is conducted within the confines of GDPR/CCPA and relies upon lawful grounds, including contractual necessity or your explicit consent.

User Rights

Under GDPR, you have the following rights:

• Access: Request details on the personal data we hold.
• Rectification: Request corrections to inaccurate or incomplete data.
• Erasure: Request deletion of your personal data where applicable.
• Restriction: Request limited or halted processing of your data.
• Data Portability: Receive your personal data in a structured, machine-readable format.
• Objection: Object to data processing, including profiling and direct marketing practices.

Under CCPA, California-based users can:

• Request disclosure of data collection practices.
• Request deletion of personal data.
• Opt out of the 'sale' of personal data (if applicable).

To exercise your rights, email us at: [Official Email Address].

International Transfers

If data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards, such as EU standard contractual clauses or reliance on adequacy decisions made by the European Commission.

For California users, similar safeguards, including verification of third-party service compliance, are established.

Disclaimer

This privacy policy is a draft and must be fully reviewed for accuracy, legal compliance, and completion. Changes such as specific vendor details, final retention periods, and jurisdiction-specific nuances should be confirmed before publication.

For more information, please contact us at [Official Email Address].