Privacy Policy

This policy explains how Fornuft IT ApS processes personal data when you use fornuft-it.dk, contact us, or request an AI-governance assessment.

Last updated 17 July 2026.

Controller and contact

Fornuft IT ApS, CVR 44411571, Ericavej 163, 1. 201, 2820 Gentofte, Denmark, is the controller for this processing. Contact us at kontakt@fornuft-it.dk.

Data we process

When you use the website, our server and technical operation may process technical information such as IP address, time, browser, device, requested pages and logs. We operate the ASP.NET Core application in a Docker container with Caddy as the reverse proxy.

When you use the contact form, we process your name, email address, company, company size, optional phone number and message. When you choose to send your details after the AI-governance assessment, we process the same contact details as well as score, role or classification and an internal report link that reflects your answers.

We store your theme choice locally in your browser as localStorage.theme. This is necessary local storage and is not used for statistics or marketing.

Purposes and legal bases

  • To respond to enquiries and follow up on a requested conversation or assessment. The legal basis is GDPR Article 6(1)(b), where processing is necessary to take steps at your request before entering into an agreement.
  • To protect forms, prevent abuse, secure operation and keep necessary technical logs. The legal basis is GDPR Article 6(1)(f), our legitimate interest in secure operation and handling enquiries.
  • To use Google Analytics 4 for website-use statistics. The legal basis is GDPR Article 6(1)(a), your consent. Analytics is loaded only after you actively accept statistics.
  • To comply with any legal obligation, including accounting or documentation requirements. The legal basis is GDPR Article 6(1)(c).

Cookies, statistics and reCAPTCHA

We use Google Analytics 4 with measurement ID G-L31TGFPQBT only after your consent. You can accept or reject statistics in the banner and later change or withdraw your choice through “Cookie settings” in the footer. On rejection or withdrawal, we do not load Analytics for future collection and attempt to remove first-party _ga cookies.

  • localStorage.theme: necessary theme preference in your browser. Kept until you change it or clear browser storage.
  • _GRECAPTCHA: necessary form security and abuse prevention through reCAPTCHA.
  • _ga: Google Analytics visitor distinction. Up to 2 years after consent.
  • _ga_G-L31TGFPQBT: Google Analytics session state. Up to 2 years after consent.

The contact and AI-governance pages use Google reCAPTCHA v3 to protect forms against abuse. reCAPTCHA is loaded only on those pages. Google may process technical information in connection with this protection. See Google’s Privacy Policy and Terms of Service.

Recipients, processors and transfers

We receive and process data in our own Docker and Caddy-based application operation. Contact forms are delivered to a Discord webhook, and AI-governance leads are delivered to a separate Discord webhook. Google provides Analytics when you consent and reCAPTCHA on relevant form pages.

Google and Discord may process data outside the EU/EEA. This can involve third-country transfers. Google describes its transfer mechanisms and Data Privacy Framework participation on Google’s privacy frameworks page. We assess transfer mechanisms and appropriate safeguards before using providers.

Retention and security

We limit access to personal data and apply technical and organisational measures appropriate to the processing. The repository does not establish concrete retention periods for server logs, Discord-held leads or Google Analytics data. Those periods and the associated deletion procedure require confirmation from Fornuft IT before they can be stated as fixed retention periods.

Your rights

Subject to the limits in applicable law, you can request access, rectification, erasure, restriction, data portability, or object to processing based on legitimate interests. You may withdraw consent at any time with effect for the future. Contact us at kontakt@fornuft-it.dk.

You can complain to the Danish Data Protection Agency, Datatilsynet if you believe that our processing of personal data does not comply with the rules.

Changes

We may update this policy when our processing or the rules change. The current version and its update date appear on this page.