PRIVACY_PROTOCOL
1. DATA_CONTROLLER_IDENTIFICATION
binaryfoundrylab, registered at Store Kongensgade 40, 1264 København K, Danmark, is the data controller responsible for the processing of personal data as described in this Privacy Protocol.
2. DATA_COLLECTION_INVENTORY
We collect and process the following categories of personal data when you engage with our services:
- Contact Information: Name, email address, phone number, and physical address provided through our contact forms or direct communications.
- Project Data: Project specifications, creative assets, and business information shared for the purpose of service delivery.
- Technical Data: IP addresses, browser type, device information, and usage patterns collected through cookies and analytics tools.
- Transaction Data: Payment information and billing details processed through our secure payment partners.
3. PURPOSE_OF_PROCESSING
Your personal data is processed for the following legitimate purposes:
- Service delivery and project execution
- Communication regarding your inquiries and projects
- Contractual obligations and billing
- Legal compliance and regulatory requirements
- Website functionality and user experience optimization
- Marketing communications (with explicit consent only)
4. LEGAL_BASIS_FOR_PROCESSING
We process your data based on the following legal grounds under the EU General Data Protection Regulation (GDPR):
- Article 6(1)(a): Consent - When you subscribe to our newsletter or opt-in to marketing communications.
- Article 6(1)(b): Contractual necessity - When processing is required to fulfill our service agreements.
- Article 6(1)(c): Legal obligation - When we must retain data for tax, accounting, or regulatory compliance.
- Article 6(1)(f): Legitimate interest - For website analytics, security, and service improvement.
5. DATA_RETENTION_SCHEDULE
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:
- Contact form submissions: 24 months from last interaction
- Project-related data: Duration of project plus 36 months
- Financial records: 5 years as required by Danish tax law
- Cookie data: Maximum 13 months from collection
6. YOUR_DATA_RIGHTS
Under the GDPR, you have the following rights regarding your personal data:
- Right of Access (Article 15): Request a copy of all personal data we hold about you.
- Right to Rectification (Article 16): Request correction of inaccurate or incomplete data.
- Right to Erasure (Article 17): Request deletion of your personal data ("right to be forgotten").
- Right to Restrict Processing (Article 18): Request limitation of how we process your data.
- Right to Data Portability (Article 20): Receive your data in a structured, machine-readable format.
- Right to Object (Article 21): Object to processing based on legitimate interests or direct marketing.
7. DATA_SECURITY_MEASURES
binaryfoundrylab implements appropriate technical and organizational measures to protect your personal data, including:
- SSL/TLS encryption for all data transmissions
- Regular security assessments and vulnerability testing
- Access controls and authentication protocols
- Data backup and disaster recovery procedures
- Employee training on data protection practices
8. INTERNATIONAL_DATA_TRANSFERS
If we transfer your personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission or adequacy decisions for the receiving country.
9. CONTACT_DATA_PROTECTION_OFFICER
For any privacy-related inquiries or to exercise your data rights, contact us at:
binaryfoundrylab
Store Kongensgade 40, 1264 København K, Danmark
Email: [email protected]
Phone: +45 31 50 82 46
10. COMPLAINT_RIGHTS
You have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) if you believe your data protection rights have been infringed. Contact Datatilsynet at:
Borgergade 28, 1300 København K, Denmark. Phone: +45 33 19 32 00. Email: [email protected]