Privacy

Who is responsible

Timbed ApS, CVR 38280465, Vestergade 58L, 8000 Aarhus C, Denmark, is the controller. Questions about your data go to Ken Graversen at kg@timbed.com.

This page covers the website, the contact form and the newsletter. Data handled in client work is agreed with each client and is not described here.

When you write through the contact form

I receive your name, your email address and what you write. It is used only to answer you. The basis is my legitimate interest in being able to reply to enquiries and, if you are considering becoming a client, the steps before an agreement.

Brevo forwards the message to my mailbox, where it is held by Google, which provides my email. The site itself stores nothing. The enquiry is deleted 12 months after our last contact, unless it leads to working together.

When you sign up for the newsletter

I receive your email address, your first name if you give it, and the topics you choose. The basis is your consent, and you are only added to the list once you have confirmed through the link in the email you receive.

The newsletter is sent through Brevo. You can unsubscribe with one click at the bottom of every email. After unsubscribing, your address stays on a block list so that you do not receive further emails by mistake. Sign-ups that are never confirmed are deleted after 30 days.

When you visit the site

The site is run on Cloudflare, which processes your IP address and information about your browser to deliver the pages and protect them from abuse. On the form pages I use Cloudflare Turnstile, which checks from signals in your browser that you are a person. The basis is my legitimate interest in a secure site.

The site sets no cookies for statistics or marketing, and there is no analytics. The fonts are served from the site itself, not from Google.

Who else sees the data

Brevo (Sendinblue SAS, France), Cloudflare and Google process the data for Timbed as processors. Some of them, or their subcontractors, are in the United States. Transfers rely on the EU-US Data Privacy Framework and the European Commission's standard contractual clauses. The data is not sold or shared with anyone else.

Your rights

You can ask what data I hold about you, have it corrected or deleted, object, and withdraw consent. Write to kg@timbed.com.

You can also complain to the Danish Data Protection Agency, datatilsynet.dk.