Privacy Policy

01 Who Is Responsible for Your Data

The data controller for any personal data processed through this website is:

02 What Data I Collect

I keep data collection deliberately minimal. Specifically:

Contact form

When you submit the contact form, I collect your name, email address, company name, and the content of your message. Submissions are delivered to my inbox via Web3Forms.

Meeting bookings

When you click "Book a Meeting," you are redirected to Brevo. Brevo collects whatever is needed to confirm the meeting — typically name, email address, and time zone. Their handling of that data is governed by their own privacy policy.

Usage and analytics data

When you visit this website, certain information is collected automatically through cookies and similar technologies, including: your IP address, browser type and version, device type and operating system, pages visited, time and duration of visits, referring URL, and approximate geographic location. This data is used to understand how the site is used and to improve it.

Technical data via third-party resources

This site loads fonts from Google Fonts and a charting library from jsDelivr. When your browser loads these resources, your IP address is technically transmitted to Google and to jsDelivr.

03 Why I Process Your Data

Your data is processed for the following purposes:

• To respond to inquiries you submit via the contact form
• To arrange and conduct meetings you book
• To deliver consulting services if we enter into a working relationship
• To comply with legal and accounting obligations (e.g., Danish bookkeeping law)

04 Legal Basis for Processing

Under Article 6 of the GDPR, my legal bases are:

• Consent (Art. 6(1)(a)) — when you tick the consent box on the contact form, you give explicit consent for me to process your data to respond to your inquiry. You can withdraw consent at any time.
• Contract or pre-contractual steps (Art. 6(1)(b)) — when you contact me about engaging my services, processing your data is necessary to take steps before entering into a contract.
• Legitimate interest (Art. 6(1)(f)) — for responding to general business inquiries, where this does not override your rights and freedoms.
• Legal obligation (Art. 6(1)(c)) — for retaining records required by Danish accounting law and other applicable regulations.

05 Who I Share Data With

I do not sell your data, and I do not share it for marketing purposes. The following service providers act as data processors to operate this website:

• Web3Forms — delivers contact form submissions. Privacy policy
• Brevo (formerly Sendinblue) — meeting booking and scheduling. Privacy policy
• Google LLC — Google Analytics, Google Tag Manager, and Google Fonts. Used for site analytics, tag management, and font delivery. Privacy policy
• jsDelivr — JavaScript CDN for site libraries. Privacy policy

From time to time, additional analytics, marketing, or productivity tools may be added to this website. Where this occurs, this privacy policy will be updated to reflect the new processors, and any tools that require consent will be disabled until consent is given.

I may also share data with relevant public authorities where required by law.

06 International Data Transfers

Some of the processors above are located outside the European Economic Area (EEA). Where personal data is transferred internationally, the transfer is protected by one of the following safeguards:

• Standard Contractual Clauses approved by the European Commission
• The EU-US Data Privacy Framework (where applicable to US-based processors)
• Other adequacy mechanisms recognised under GDPR

07 How Long I Keep Your Data

• Contact form submissions — up to 24 months from your last interaction, unless we enter an active engagement.
• Active client data — for the duration of our engagement plus 5 years thereafter, as required by Danish bookkeeping law (Bogføringsloven).
• Meeting bookings — kept by Brevo per their retention policy; by me only as long as needed to fulfil the booking.
• Email correspondence — typically deleted within 36 months of inactivity.
• Analytics data — retained according to the default retention period of the analytics tool in use (e.g., Google Analytics 4 default is 2 months for event data, configurable up to 14 months).
• Cookie consent records — kept for up to 12 months to demonstrate compliance, after which you may be asked to confirm preferences again.

08 Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of access — request a copy of the data I hold about you
• Right to rectification — correct inaccurate or incomplete data
• Right to erasure — request deletion ("right to be forgotten")
• Right to restrict processing — limit how I use your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — to processing based on legitimate interest
• Right to withdraw consent — at any time, without affecting lawful processing done before withdrawal
• Right to lodge a complaint — with the Danish Data Protection Agency (Datatilsynet)

To exercise any of these rights, email me at mads@mrh-consulting.dk. I will respond within one month.

09 Cookies and Similar Technologies

This website uses cookies and similar technologies (such as pixels, local storage, and tracking scripts) to function, to understand how visitors use the site, and to improve the experience over time. Cookies are small text files placed on your device when you visit a website.

Categories of cookies used

• Strictly necessary cookies — required for the website to function properly (e.g., security, basic navigation, form submission). These cannot be switched off and do not require consent.
• Analytics cookies — help me understand how visitors interact with the site (e.g., which pages are visited, how long visitors stay). These rely on tools such as Google Analytics and Google Tag Manager. Set only with your consent.
• Marketing cookies — used to measure the effectiveness of advertising campaigns and, where applicable, to deliver more relevant content. Set only with your consent.
• Functional cookies — remember preferences and settings to enhance your experience. Set only with your consent.

Managing your consent

When you first visit this site, a cookie banner allows you to accept or decline non-essential cookies. You can change your preferences at any time by clicking the cookie settings link in the footer, or by clearing cookies and reloading the site.

Browser controls

You can also manage cookies directly through your browser settings — most browsers let you block, delete, or be notified before a cookie is set. Disabling cookies may affect the functionality of this and other websites.

Third-party cookies

Some cookies are set by third-party services (e.g., Google Analytics, Google Tag Manager). These third parties may process your data outside the EEA — see section 06 for safeguards. Their use of cookies is governed by their own privacy policies, linked in section 05.

Cookies currently in use

The list below is generated automatically by Cookiebot's scan of this website and refreshed monthly. It shows every cookie set on this site, its category, the party responsible, its purpose, and its expiry.

10 Security

This website is served over HTTPS. Contact form submissions are transmitted over encrypted connections. The processors I use maintain industry-standard security practices, and I review their security posture periodically. No system is fully impenetrable, but I take reasonable steps to protect data against unauthorised access, alteration, disclosure, or destruction.

11 Children's Privacy

This website is not directed at children under 16. I do not knowingly collect personal data from children. If you believe a child has submitted data through this site, please contact me and I will delete it promptly.

12 Changes to This Policy

If this policy is updated, the "Last updated" date at the top of this page will change accordingly. Material changes affecting active clients will be communicated directly.