Privacy policy
This page briefly explains how I handle personal data on wiegand-hansen.dk.
Last updated:
Data controller
The data controller for the personal data processed on this website is Hendrik W. Hansen, CVR (Danish company registration) no. 27683908.
You can contact me at hendrik@wiegand-hansen.dk.
What data the contact form collects
When you send an enquiry through the contact form, I process the information you enter yourself:
- name (required)
- email address (required)
- company (optional)
- phone number (optional)
- message (required)
Together with the enquiry I store the time, the language you used on the website, and whether the notification email to me was sent.
Your IP address is not stored in plain text. It is only used to compute a salted hash, which is stored with the enquiry and used for spam protection, for example to limit the number of enquiries per hour from the same connection. The hash is also kept in a short-lived counter for that limit, which is deleted automatically (at the latest one day after the hour has passed).
The form contains a hidden field that only bots fill in, and a hidden, signed timestamp of when the form was shown, so that automated submissions can be filtered out. The timestamp is not stored with the enquiry, and no cookies are set.
Purpose
I use the data to answer your enquiry. The IP hash is used to protect the contact form against spam and abuse.
Legal basis
I process the data on the following legal bases under the General Data Protection Regulation (GDPR):
- Article 6(1)(b): the processing is necessary to take steps at your request before entering into a contract.
- Article 6(1)(f): my legitimate interest in being able to answer enquiries and protect the form against spam and abuse.
Retention
Enquiries are kept for 12 months and are then deleted automatically from the website's database. The deletion runs daily, and an enquiry is deleted no later than one week after the 12-month period ends.
The automatic deletion applies to the website's database. The notification email that I receive in my mailbox is not covered by it.
Recipients and data processors
I use two kinds of suppliers that process the data on my behalf as data processors:
- a mail provider, which sends and receives the emails that contain your enquiry
- a hosting provider, which operates the server on which the website and the database run
I do not pass the data on to anyone else, unless I am required to by law.
Your rights
You have the right to:
- access the data I hold about you
- have incorrect data rectified
- have your data erased
- have the processing of your data restricted
- receive your data in a commonly used format (data portability)
- object to processing that is based on my legitimate interest
Contact me at hendrik@wiegand-hansen.dk if you want to exercise your rights.
You can also lodge a complaint with the Danish Data Protection Agency (Datatilsynet), datatilsynet.dk.