Privacy and cookie policy

1. Data controller

I am the data controller for the processing of personal data on this website.

Andreas Ottesen
Email: ao@andreasottesen.com
Website: andreasottesen.com

You can contact me at the email address above if you have questions about the processing of your personal data or wish to exercise your rights.

2. When you visit the website

The website’s hosting and security services may process technical information such as your IP address, the time of your visit, the pages you access and information about your browser and device.

The purpose is to deliver the website, ensure stable operation, find errors and prevent misuse and attacks.

The processing is based on my legitimate interest in operating and protecting the website, cf. Article 6(1)(f) GDPR.

Technical log data is kept for up to 1 hour. In the event of specific security incidents, relevant information may be kept longer if necessary to investigate the incident or handle a legal claim.

3. When you contact me

If you contact me by email or phone, I process the information you give me. This may include your name, email address, phone number, company name and the content of your enquiry.

I use the information to respond to your enquiry, advise you and, where relevant, prepare a proposal.

The processing is based on:

• Article 6(1)(b) GDPR, when the enquiry concerns entering into or performing an agreement with you.
• Article 6(1)(f) GDPR for other enquiries, including contact with people representing a company. My legitimate interest is handling enquiries and business relationships.

Enquiries that do not lead to a collaboration are as a rule deleted 12 months after the conversation has ended. If the enquiry leads to a collaboration, relevant information is kept for as long as the collaboration lasts and then for up to 5 years after the end of the financial year it relates to, in accordance with the Danish Bookkeeping Act. Information may be kept longer if necessary to comply with the law or handle legal claims.

Contacting me and providing information is voluntary. Without sufficient contact details, however, I may be unable to respond to your enquiry.

4. Cookies and statistics

The website does not currently use cookies, statistics or any other tracking. If that changes, I will update this policy, and cookies for statistics will only be activated once you have given your consent.

5. Suppliers and recipients

I use suppliers for hosting and email. The suppliers process information to the extent necessary to deliver their services.

The relevant suppliers are:

• Hosting and security: Vercel Inc.
• Email: Simply.com

Where suppliers process personal data on my behalf, they do so under a data processing agreement.

Information may also be disclosed to authorities or advisers if necessary to comply with the law or to establish, exercise or defend a legal claim.

6. Transfers to countries outside the EU/EEA

Using Vercel may mean that personal data is processed in countries outside the EU/EEA, including the United States.

Vercel Inc. is certified under the EU-U.S. Data Privacy Framework. The transfers are also covered by the European Commission’s standard contractual clauses in Vercel’s data processing agreement.

You can contact me for further information about the transfers and a copy of any relevant safeguards.

7. Your rights

Under the GDPR, depending on the circumstances, you have the right:

• To access your personal data.
• To have inaccurate data corrected.
• To have data erased.
• To have the processing restricted.
• To object to processing based on legitimate interests.
• To receive your data in a structured, commonly used and machine-readable format and have it transferred to another data controller, where the conditions are met.

Where the processing is based on consent, you can withdraw your consent at any time.

Contact me at ao@andreasottesen.com if you wish to exercise your rights. As a rule, I respond to your request within one month of receiving it.

You can lodge a complaint about the processing of your personal data with the Danish Data Protection Agency, Datatilsynet.

8. Changes

I update this policy when the website’s features or the processing of personal data change. The date of the latest update is shown at the top.