Who is responsible
The data controller is TruePositive ApS, Copenhagen, Denmark. Contact: contact@truepositive.dk.
What is collected
If you use the contact form: your name, email address, organisation, the topic you select and the message you write, together with the time of submission and the IP address the message was sent from. This is used to deliver and answer your enquiry and to prevent spam and abuse.
If you email or call directly: whatever you choose to include, plus the contact details you send from.
Server logs: the web host records standard technical information about requests, including IP address, time, page requested and browser type. These logs are kept by the hosting provider for a limited period and are used for security and troubleshooting.
Cookies and analytics
This site sets no cookies of its own and uses no advertising or tracking cookies. Web fonts are loaded from Google Fonts, which means your browser makes a request to Google's servers and your IP address is visible to them as part of that request. No analytics or tracking service is used.
Legal basis
Enquiries are handled on the basis of legitimate interest in responding to a business approach, and where relevant on the basis of steps taken at your request prior to entering a contract (GDPR Article 6(1)(f) and 6(1)(b)).
Please do not send sensitive data
The contact form is not a secure channel for confidential or personal health data. Please do not send patient-level data, personal health information, or confidential documents through it. For confidential discussions we will put a mutual NDA and an appropriate transfer method in place first.
How long it is kept
Our copies of enquiries that do not lead to an engagement are deleted within 24 months. Correspondence connected to an engagement is retained for as long as the engagement requires and thereafter in line with Danish bookkeeping requirements (currently five years from the end of the financial year).
Separately, Web3Forms states that form submissions may be retained for up to three years, unless a shorter plan-specific period or earlier deletion applies. See its privacy policy for its retention arrangements.
Who else sees it
The website and email are hosted by Simply.com, which processes data on our behalf as a data processor. Enquiries are not sold or shared for marketing.
The contact form sends your name, email, optional organisation, selected topic and message directly to Web3Forms (Web3Creative), which processes submissions on our behalf for delivery. Technical information, including IP address, may also be processed for security and spam prevention.
According to its privacy policy, Web3Forms operates from India and uses infrastructure in multiple regions. It describes Standard Contractual Clauses as safeguards for relevant international transfers. Its policy also describes subprocessors and possible sharing of IP and email addresses with spam-prevention services.
Your rights
You can ask for a copy of the personal data held about you, ask for it to be corrected or deleted, or object to its processing. Write to contact@truepositive.dk. You may also complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, datatilsynet.dk.
Last updated .