Privacy Policy

Data controller

Ellypsis is the data controller for the personal data we process through this website.

What personal data we collect, and why

We collect personal data when you use the forms on this website.

The contact form (/en/contact)

We process your company name, your email address, the systems you tick, and any other information you give us in the message, so that we can answer your enquiry.

The processing is based on our legitimate interest in being able to communicate with people who contact us, cf. Article 6(1)(f) GDPR.

The assessment form (/en/assessment)

We process information about your company, your email address, your role and your answers to the questions in the form.

The information is used to assess the task and to prepare a possible collaboration. The processing is part of the steps taken at your request before a possible agreement, cf. Article 6(1)(b) GDPR.

Where the processing is not carried out with a view to entering into an agreement, it may instead be based on our legitimate interest in answering and handling the enquiry, cf. Article 6(1)(f) GDPR.

The information the forms ask for is necessary for us to handle the enquiry. If it is not given, we may not be able to answer or assess it.

When you submit a form, your IP address is processed briefly in order to prevent spam and abuse.

The processing is based on our legitimate interest in protecting the website and the forms against abuse, cf. Article 6(1)(f) GDPR.

The IP address is not stored and is not used for any other purpose.

Who processes the data

We use providers who process personal data on our behalf:

• Resend is used to send emails from the website. The servers are in the EU.
• Google Workspace is used for email and for handling enquiries internally.
• Vercel hosts the website and provides cookie-free, aggregated traffic statistics.

The providers may only process the data on our instructions and in accordance with the data processing agreements we have entered into with them.

Transfers to countries outside the EU/EEA

We use providers from countries outside the EU/EEA.

Providers outside the EU/EEA are covered by data processing agreements with us, and when personal data is transferred to third countries, we rely on the European Commission's standard contractual clauses or another lawful basis for transfer under Articles 45-49 GDPR.

How long we keep the data

As a rule, we keep information from enquiries for up to 2 years after the last contact. After that it is deleted, unless we have another lawful basis for keeping it longer.

If an enquiry leads to a client relationship, relevant information may be kept longer where that is necessary to administer the relationship or to meet legal obligations.

Cookies

The website does not use cookies.

Your browser may store functional settings, such as your choice of theme, locally on your own device. That information is not sent to us.

Your rights

When we process personal data about you, you have the following rights under the GDPR:

• access to the personal data we process about you, cf. Article 15(1) GDPR
• to have inaccurate data corrected, cf. Article 16(1) GDPR
• if the personal data we have collected about you is no longer necessary to keep for the purposes it was collected for, you may have the right to have it erased, cf. Article 17(1) GDPR
• in some cases you have the right to have the processing of your personal data restricted, cf. Article 18(1)(a)-(d) GDPR
• to object to the processing, where our processing of your personal data is based on Article 6(1)(f) GDPR (legitimate interest)
• to have your personal data transmitted, cf. Article 20(1) GDPR (data portability)

If you want to exercise your rights, you can contact us at hello@ellypsis.dk.

Complaints

If you are unhappy with the way we process your personal data, you are welcome to contact us.

You also have the right to complain to Datatilsynet, the Danish Data Protection Agency:

datatilsynet.dk

Contact

Questions about our processing of personal data can be sent to hello@ellypsis.dk.