Privacy policy

Who is responsible for your data

The data controller for the personal data described here is:

If you have questions about this policy or how your data is handled, write to me at the email above.

When you visit the website

When you open a page, your browser automatically sends some technical information to the server, such as your IP address, the date and time, the page you asked for, your browser and device type, and the page you came from.

The website is hosted by Wix (Wix.com Ltd.), which processes this information on my behalf to deliver the pages and to protect the site against attacks and misuse. For that protection Wix uses Cloudflare. Images and videos on the case pages are delivered from Wix's media servers in the same way.

• Purpose: to show you the website and keep it secure.
• Legal basis: my legitimate interest in running a working and secure website (GDPR article 6(1)(f)).
• Storage: the information is kept by Wix only as long as needed for these purposes, under Wix's data processing terms.

I don't use analytics or advertising tools, and I don't use this information to identify you. The fonts are hosted on this website itself, so no information is sent to Google Fonts or other font services. The site only uses cookies that are strictly necessary, see the cookie policy.

When you contact me

You can contact me by email, by phone or through the form on the contact page. The form doesn't send or store anything on this website: it opens your own email program with your message filled in, and you decide whether to send it.

• What I receive: your name, email address, company, phone number if you call, and whatever you write about your project.
• Purpose: to answer you and, if relevant, prepare a quote.
• Legal basis: taking steps at your request before a possible agreement (article 6(1)(b)), or otherwise my legitimate interest in replying to enquiries (article 6(1)(f)).
• Storage: if the enquiry doesn't lead to an assignment, I delete it no later than 12 months after our last contact.

My email is provided by Google (Google Workspace).

You choose what to share. I just need an email address or phone number to be able to reply.

When you book an intro call

The "Book an intro call" buttons open a booking page in Google Calendar. When you book, the details you enter (such as name, email, time and any notes) are processed by Google as my calendar provider, and the booking is added to my calendar. The booking page is run by Google, so Google's privacy policy (opens in a new tab) also applies there.

• Legal basis: taking steps at your request before a possible agreement (article 6(1)(b)), or my legitimate interest in arranging the call (article 6(1)(f)).
• Storage: the same as for enquiries above.

When we work together

If you or your company become a client or partner, I process the contact details of the people I work with (name, work email, phone and job title), the messages and files that belong to the project, and the information needed for invoicing and payment.

• Purpose: to carry out the assignment, invoice it and keep my accounts.
• Legal basis: the agreement (article 6(1)(b)), my legitimate interest in communicating with contact persons at client companies (article 6(1)(f)), and my legal obligation to keep accounts under the Danish Bookkeeping Act (article 6(1)(c)).
• Storage: accounting records are kept for 5 years from the end of the financial year they belong to, as the Bookkeeping Act requires. Other project correspondence is kept for up to 3 years after the assignment ends, which is the general Danish limitation period for claims, and then deleted.

Social media and links

The LinkedIn and Instagram icons are ordinary links. Nothing is loaded from those services until you click, and no social media buttons, feeds or trackers are built into the site. When you visit another website, that website's own privacy policy applies. If you send me a message on LinkedIn or Instagram, the platform processes it under its own terms.

Who receives your data

I never sell your data or use it for profiling or advertising. Depending on the situation, the following receive personal data:

• Wix (website hosting, including Cloudflare for security), as my data processor.
• Google (email and calendar), as my data processor.
• Dinero (accounting software), as my data processor.
• My bank, when invoices are paid.
• My accountant and public authorities such as the Danish Tax Agency, when the law requires it.

Transfers outside the EU/EEA

Some providers may process data outside the EU/EEA. Wix is based in Israel and stores data in Ireland and the United States, and Google may process data in the United States. Such transfers are based on an adequacy decision from the European Commission (for example for Israel, and for US companies certified under the EU–US Data Privacy Framework) or on the European Commission's Standard Contractual Clauses.

Your rights

Under the GDPR you have the right to:

• get access to the personal data I hold about you,
• have incorrect data corrected,
• have your data deleted,
• have the processing restricted,
• receive data you have given me in a commonly used format (data portability),
• object to processing based on my legitimate interest.

Write to contact@bluformcreative.dk and I'll reply within one month. Some rights have limits, for example when the law requires me to keep accounting records.

I don't use automated decision-making or profiling.

Complaints

If you're unhappy with how I handle your data, please contact me first. You can also complain to the Danish Data Protection Agency:

Changes to this policy

If I change how I handle personal data, I'll update this page and the date at the top.