Privacy policy
This is a translation for your convenience. The Danish version is legally binding.
1. Data controller
00x Studio
CVR 46850149
Grønhøjvej 77, 8462 Harlev J
christendian@proton.me
If you have questions about how we handle your information, write to christendian@proton.me.
2. What we process and why
When you contact us
When you use the contact form or email us, we process the information you give us: name, email, company, the service you are asking about, budget, your message and the language you wrote in. We only use it to answer your inquiry and, if relevant, send you a proposal.
The legal basis is Article 6(1)(b) of the GDPR (steps taken at your request before entering into a contract), and for other inquiries Article 6(1)(f) (our legitimate interest in being able to reply to you). Giving us the information is voluntary, but we cannot reply without an email address.
Security and operations
To protect the form against abuse, the server keeps a one-way hash of your IP address with the time of your submission for up to one hour. Our hosting provider also records IP addresses in its web server logs and runs a firewall that may set a necessary security cookie (sc_clearance, valid for 24 hours) to tell people from bots. The legal basis is Article 6(1)(f) (our legitimate interest in a secure website).
3. Cookies
We use no analytics or marketing cookies, no tracking, and the site stores nothing in your browser. The only cookie is the firewall's security cookie (see above). It is needed to deliver the website securely, so it does not require consent.
4. Recipients
We never sell your information. These processors help us and only handle the information on our behalf:
- Simply.com (Denmark): website hosting, server logs and firewall.
- Mailgun Technologies, Inc. (USA, with servers in the EU): forwards your message to us by email.
- Proton AG (Switzerland): our email provider, where inquiries are kept.
Mailgun is a US company, so information may be transferred to the USA. Such transfers rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework and the Commission's standard contractual clauses. Switzerland is recognised by the European Commission as providing an adequate level of protection.
5. How long we keep it
- Inquiries that do not lead to a collaboration are deleted no later than 12 months after the last contact.
- If you become a client, we keep the correspondence for as long as we work together and for 12 months after. Material that forms part of our accounts, such as proposals and invoices, is kept for 5 years after the end of the financial year, as the Danish Bookkeeping Act requires.
- The hash of your IP address is deleted after one hour at most.
6. Your rights
You have the right to access the information we hold about you and to have it corrected or deleted. You can also ask us to restrict processing, object to processing based on our legitimate interest, and receive the information you gave us in a common format (data portability). Write to christendian@proton.me and we will reply within one month.
If you are unhappy with how we handle your information, you can complain to the Danish Data Protection Agency (Datatilsynet), www.datatilsynet.dk.
We do not use your information for automated decisions or profiling.
7. Changes
If we change how we process information, we update this page and the date at the top. The Danish version is the binding one.