Legal

Privacy Policy

Last updated: 20 May 2026

Iduna A/S respects your privacy and is committed to protecting personal data in accordance with the EU General Data Protection Regulation (GDPR) and Danish data-protection law. This policy explains what data we collect when you interact with this website, why we collect it, how we use it, and the rights you have as a data subject.

1. Data controller

The data controller for the processing described in this policy is Iduna A/S, Blokken 25, 3460 Birkerød, Denmark.

For any question regarding the processing of your personal data or to exercise your rights, please contact us by email at iduna@iduna.dk or by phone on +45 4581 8066.

2. Personal data we collect

This website is an informational and marketing resource; it does not handle online sales, ordering or payment. We collect personal data only to the extent necessary for the purposes described in this policy. The categories of data we may process include:

  • Website visitors: IP address, device and browser type, language, pages viewed, referrer and information collected via cookies.
  • Newsletter subscribers: email address, language, source page and time of subscription.
  • Contact and enquiry submissions: name, business contact details and the content of any message you choose to send us.
  • Job applicants (where applicable): name, contact data, CV, cover letter and other materials you choose to provide.
  • Administrative users: account credentials and activity logs required to operate and secure the website.

3. Purposes and legal bases

We process personal data on the following legal bases under Article 6 of the GDPR:

  • Consent (Art. 6(1)(a)) — for newsletter sign-up and any optional analytics or marketing cookies. You may withdraw consent at any time.
  • Pre-contractual steps or performance of a contract (Art. 6(1)(b)) — to respond to enquiries you send us through the website.
  • Legal obligation (Art. 6(1)(c)) — to comply with applicable Danish law, including bookkeeping and product-safety rules.
  • Legitimate interests (Art. 6(1)(f)) — for basic site analytics, IT and information security, prevention of misuse, and the processing of job applications.

4. Cookies

Our website uses cookies that are strictly necessary to provide core functionality (such as language preference and authentication for the administration area). If we add analytics or marketing cookies in the future, we will request your consent before they are placed.

You can change your browser settings to refuse cookies, but some parts of the site may not function correctly as a result.

5. Recipients and data processors

We share personal data only with parties who need it to support the operation of this website or to comply with the law, including:

  • Hosting and content-delivery providers that host the website and serve its content.
  • Email and communication providers used to deliver newsletters and respond to enquiries.
  • IT and security service providers that help us maintain and secure the website.
  • External accountants, auditors and legal advisors bound by professional confidentiality.
  • Public authorities where we are required to disclose data by law.

6. International transfers

Some of our service providers may process personal data outside the European Economic Area (EEA). Where that is the case, we ensure an appropriate level of protection through the European Commission’s Standard Contractual Clauses or another lawful transfer mechanism under Chapter V of the GDPR.

7. Retention

We retain personal data only for as long as necessary for the purposes for which it was collected and to comply with applicable law:

  • Newsletter subscribers: until you unsubscribe or ask us to delete your data.
  • Contact and enquiry submissions: typically up to 24 months after the last correspondence, unless a longer retention is required by law.
  • Server and security logs: typically 6–12 months.
  • Unsuccessful job applications: up to 6 months unless you consent to a longer retention.

8. Your rights

You have the following rights in respect of the personal data we hold about you:

  • Right of access to your data.
  • Right to rectification of inaccurate or incomplete data.
  • Right to erasure (“right to be forgotten”) where applicable.
  • Right to restriction of processing.
  • Right to data portability.
  • Right to object to processing based on legitimate interests, including direct marketing.
  • Right to withdraw any consent you have given, without affecting the lawfulness of processing carried out before withdrawal.

9. Complaints

If you believe that our processing of your personal data infringes data-protection law, you may lodge a complaint with the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark — dt@datatilsynet.dk — www.datatilsynet.dk.

10. Security

We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include access controls, encryption in transit, staff confidentiality obligations and regular reviews of our security practices.

11. Changes to this policy

We may update this policy from time to time to reflect changes in our processing activities or in applicable law. The latest version is always available on this page, and we will indicate the date of the most recent update at the top.

12. Contact

For questions regarding this policy or to exercise your rights, please contact us at:

  • Iduna A/S — Blokken 25, 3460 Birkerød, Denmark
  • Email: iduna@iduna.dk
  • Phone: +45 4581 8066