Privacy policy

This policy describes what personal data TBCORE processes when you visit tbcore.eu or write to us, and what you can do about it.

Controller

TBCORE, who can be reached at [email protected]. Any question about your data can be sent to that address.

What we collect

Personal data arises in three places. There are no others.

• The contact form. If you write to us through the contact page, we pass your name, email address, subject and message on as an ordinary email to our mailbox. We ask for nothing else, and you do not need to give more than that. To stop the form being abused, the IP address that sent it is kept together with the time it was sent, for ten minutes, so we can limit how many messages one sender can post.
• Delivering the site. The site is delivered by Cloudflare, which, like any web server, processes each request: IP address, time, the address fetched, the response and which browser asked. IP addresses are personal data, which is why this is here. Cloudflare processes this on our behalf as a data processor.
• Visitor statistics. We use Cloudflare Web Analytics to count visits and see which pages are read. It sets no cookie and builds no fingerprint of you; page views and visits are counted in aggregate. It records which page was viewed, when, from which country, in which browser and where you came from — not who you are.

Why

Data from the contact form is used only to answer your message. Request data is used for operation and security — to see whether something has broken, and to detect abuse. Both rest on our legitimate interest under Article 6(1)(f) of the General Data Protection Regulation.

We do not use your data for marketing, profiling or automated decisions, and we do not sell it on.

How long

• Messages stay in our mailbox for as long as they matter to the matter at hand — typically while the conversation is going on, and for a while after. If you ask us to delete a message, we will.
• The IP address from the contact form is deleted automatically after ten minutes.
• Request data is not kept by us in logs of our own. Cloudflare keeps it under its own retention rules as our processor.
• Visitor statistics are kept as counts with no identifying information.

Who else sees it

Two processors, and no one else:

• Cloudflare delivers the site, runs the contact form and counts visits. Cloudflare is an American company with a global network, so data may be processed outside the EU/EEA. Such transfers rest on the EU–US Data Privacy Framework and the EU's standard contractual clauses.
• SweHosting in Sweden hosts our mailbox, so that is where messages from the contact form end up.

There are no ad networks, embedded videos or other third-party services on the site. The fonts are served from our own domain and are not fetched from Google.

Cookies

None are used — not for statistics either. See the cookie policy.

Security

The site is served over HTTPS only. The contact form is sent encrypted, and the message is passed on to our mailbox over an encrypted SMTP connection.

Your rights

You have the right to access the data we hold about you, to have it corrected or deleted, to object to the processing, and to receive it in a common format. Write to [email protected] and we will get back to you.

If you are unhappy with how we handle it, you can complain to the Danish Data Protection Agency, Datatilsynet.

Changes

If we change anything significant, we update the date at the top.