Privacy Policy

Data controller

Cortix Web (CVR 41 20 88 67) is the data controller for the personal data you provide on this website. You can always contact us at hello@cortixweb.dk or +45 71 99 44 20.

The contact form

When you fill in the contact form, we ask for your name and email address. Phone number, company and budget range are optional, and you write the message about your project yourself.

The legal basis for processing is our legitimate interest in responding to enquiries (Article 6(1)(f) of the GDPR) and, where a collaboration goes ahead, entering into an agreement (Article 6(1)(b)).

If the enquiry doesn't turn into a collaboration, we delete it no later than 12 months after the last contact.

Project brief

If we decide to move forward with an enquiry, we may send you a link to a more detailed project brief. Here we ask for more detailed information about your business, your goals and your project — and you can upload materials such as a logo, images and documents.

The files you upload are sent directly to our secure file storage and are only accessible to us. The information is used solely to prepare and carry out the project the brief relates to.

The legal basis is the same as for the contact form: legitimate interest in the dialogue leading up to an agreement, and entering into an agreement if the project goes ahead. If the project doesn't go ahead, we delete the brief and its associated files no later than 12 months after the last contact.

When you become a client

If we enter into an agreement for a project, we register you as a client with name, email, phone number and company, along with the agreements and subscriptions associated with the collaboration.

We keep this information for as long as the client relationship lasts, and thereafter for up to 5 years under the record-keeping requirements of the Danish Bookkeeping Act for accounting records. Information not covered by the Danish Bookkeeping Act is deleted no later than 12 months after the collaboration has ended.

What we don't do

We never ask for sensitive personal data, and we do not collect payment information via the website. We never resell your information, never use it for marketing without your consent, and make no automated decisions or profiling based on your information.

Who we share information with

We only share information with the data processors necessary to run the website, store your data securely and send emails on our behalf — specifically our hosting provider (Vercel), our database provider (Neon), our file storage for uploads (Vercel Blob) and our email provider (Resend). If you consent to statistics, Google Ireland Limited (Google Analytics) is added. All are bound by a data processing agreement and may not use your information for their own purposes.

Some of these providers may process data outside the EU/EEA. In that case, we ensure the transfer takes place on a lawful basis — typically the European Commission's Standard Contractual Clauses (SCCs) or the EU-U.S. Data Privacy Framework.

Security

All traffic to and from the website is encrypted (HTTPS). Access to the admin area requires login and is protected against automated login attempts. Only those of us who need it for day-to-day work have access to your information.

Your rights

You have the right to access, correct or have deleted the information we hold about you, the right to object to or restrict processing, and the right to data portability. Write to us and we'll get back to you as soon as possible and no later than within one month.

If you disagree with how we process your information, you can complain to Datatilsynet (the Danish Data Protection Agency), Carl Jacobsens Vej 35, 2500 Valby — datatilsynet.dk.

Cookies

The website uses no marketing or profiling cookies. If you give your consent, Google Analytics sets two statistics cookies so we can see how the site is used — you can withdraw your consent at any time. Read more in our cookie policy.