Privacy policy

Data controller

Kestro, Aarhus, Denmark. Email: info@kestro.dk.

In short

This website sets no cookies, uses no analytics or tracking tools, and loads nothing from third parties. Fonts and images are served from our own domain. That is also why there is no cookie banner — there is nothing to consent to.

The contact forms

The forms do not send data to us. When you press send, your own mail client opens with the text filled in, and you send the message yourself. We receive information only once you actively send it.

When you write to us we process: name, company, email address, phone number if given, and the content of the message.

Purpose and legal basis

We process the data to answer your enquiry and to enter into or perform an agreement with you — GDPR article 6(1)(b).

Ordinary customer contact, follow-up, and the operation and security of the website rest on our legitimate interest — article 6(1)(f).

Server logs

Our hosting provider records technical information about visits — IP address, time and browser type among others — in order to run and secure the website. The logs are not used to profile visitors.

Providers and transfers

The website is hosted with Vercel Inc., and email is handled by our mail provider. Both may process personal data on our behalf as processors.

Vercel is a US provider. Transfers of personal data to the US take place under the European Commission's standard contractual clauses and/or the EU-US Data Privacy Framework.

How long we keep it

We keep correspondence for as long as the dialogue or the customer relationship requires. Records covered by the Danish Bookkeeping Act are kept for five years from the end of the financial year they relate to.

Your rights

You have the right to access the data we process about you and to have inaccurate data corrected. You may request erasure, request restriction of processing, object to the processing, and request data portability.

Write to info@kestro.dk to exercise any of these rights. You may lodge a complaint with the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, dt@datatilsynet.dk.