Privacy policy

Who is responsible

Lynggaard Jardim runs this website and decides what happens to the information described on this page, so we are its data controller.

Lynggaard Jardim ApS, CVR 46771435, Bremensgade 55, st. th., 2300 København S

You can reach us at kontakt@lynggaardjardim.dk or through the contact form on this site.

Our privacy contact can be reached at victor@lynggaardjardim.dk.

When we handle information for customers

When we build or run a solution that handles a customer’s own information, for example the emails in their mailbox, we handle that information on the customer’s behalf and on their instructions. Then we are the data processor and the customer is the data controller, and this policy does not cover it.

What we collect through this website

If you write to us through the contact form, we keep six things: your name, your email address, your company, what you chose under "What takes up most of your time?", how you heard about us, and your message. When you send it, a copy arrives by email in our own inboxes, and we send one automatic reply to the email address you gave, confirming that your message reached us.

If you accept the banner at the bottom of the page, we store a random number on your device and use it to count page views in our own statistics: which page you looked at, whether you scrolled past the top section, whether you opened the contact form and whether you sent it, which of the fixed answers you picked to how you heard about us when you sent it, and which link or button you clicked and in which part of the page. If you choose Other and type something, what you type is not counted. Nothing is attached to your name unless you write to us through the contact form.

We record one of three words for the size of your screen – phone, tablet or desktop – and nothing more precise than that. How long a visit lasted is worked out afterwards from the times of those page views; no clock runs in your browser and no duration is stored.

If you accept, we also use Google Analytics, a statistics service from Google. For each page you open, it receives the address and title of the page, your language and the time. It also receives the address you came from (for example linkedin.com), any tags on the link (for example which post it was in), and the kind of device and browser you use. It receives your country and region, worked out from your IP address, and a random number that Google Analytics keeps in its own cookie. From these it works out how long the page was open in front of you, whether it is your first visit and how many visits you have made.

When you send the contact form, Google Analytics is told only that a form was sent. It never receives anything you type or choose in the form, and we do not link its random number to your name or email address.

We do not store an IP address for our own page views at all. Your browser sends its IP address to Google, as it does to any server it contacts. Google states that it uses the address only to work out country and region, and that it does not log or store the IP addresses of visitors in the EU. The IP address the contact form receives is used only to stop abuse and is removed automatically within two hours. Our hosting providers, Supabase and Simply, may also keep IP addresses in their technical logs for a short time, at Supabase for at most 7 days.

Why we use it

What you send through the contact form is used to answer your enquiry; that is why a copy goes to our own inboxes and why you get an automatic reply saying it arrived. How you heard about us is also used to see which channels bring us enquiries; the basis for that is our legitimate interest in knowing how people find us (GDPR Article 6(1)(f)).

If you write on behalf of a business, the legal basis is our legitimate interest in answering enquiries about our services (GDPR Article 6(1)(f)). If you ask about a service for yourself, the basis is taking the steps you asked for before a possible agreement (GDPR Article 6(1)(b)).

The IP address the contact form receives is used only to protect the form against spam and abuse. The basis is our legitimate interest in keeping the form safe and working (GDPR Article 6(1)(f)).

The page views – in our own statistics and in Google Analytics – are used to see how the site is used, what to improve, where visitors come from (for example a search on Google, LinkedIn or an AI tool), which pages they arrive on and which visits lead to an enquiry. The basis for that is your consent (GDPR Article 6(1)(a)): nothing is counted, and nothing is sent to Google, until you accept. One answer covers both, and the site works the same whether you accept or decline. You can withdraw at any time – the site’s privacy-choices link re-opens the same banner, and choosing Decline there stops both counts and deletes our random number and Google’s two cookies from your device. What was counted before is not affected.

Businesses we contact

We contact businesses that may benefit from our services. We find them in the CVR register, and we read the company’s own website.

About the people we talk to, usually the director or another manager, we may keep their name, job title, direct phone number, mobile number and email address, notes from our calls and meetings, and when we last spoke. The name and job title come from the CVR register, the email address from the CVR register or from you, phone numbers from the CVR register or the company’s own website, and the rest from our conversations.

The basis is our legitimate interest in offering our services to other businesses (GDPR Article 6(1)(f)). We never contact a business that has advertising protection in the CVR register.

If we have not been in touch for 2 years, the name, phone numbers, email address and notes are deleted automatically. Information about the company itself, such as its CVR number and name, stays.

If you ask us not to contact your company again, we delete the information about you and keep only the company’s CVR number and a short reason on a list, so that we never contact it again. That list is never deleted (GDPR Article 6(1)(c) and Article 21(3)).

Customers

When we work for a customer, we keep the contact details of the people we work with, what we have agreed, and our invoices.

The basis is the agreement, where you are the customer yourself (GDPR Article 6(1)(b)), or our legitimate interest in working with the business you represent (Article 6(1)(f)). Invoices and other accounting records are kept because the Danish Bookkeeping Act requires it (Article 6(1)(c)).

We keep this while we work together. Accounting records are kept for 5 years from the end of the financial year they belong to.

When we connect an AI assistant to our records

Our team can connect Claude, an AI assistant from Anthropic, to our own records of the businesses we contact and the people we talk to. The connection is made from our admin app on a team member’s own computer and is used only by the Claude apps on that computer. Claude then reads only what the team member who connected it may read: companies, contact people with name, job title, phone number and email address, notes (including notes from calls and meetings), meetings, and tasks. Each team member can switch off certain kinds of information for their own connection, and what is switched off is neither read nor added. Through the connection Claude can add notes and tasks. It cannot change or delete anything, and it sends nothing.

We do this to find our own information faster when we prepare and follow up on conversations. The basis is our legitimate interest in running our sales work efficiently (GDPR Article 6(1)(f)). You can object, as described under Your right to object.

What the assistant reads is sent to Anthropic, which processes it for us under a data processing agreement. Because we are in the EEA, our contract is with Anthropic Ireland, Limited. Transfers outside the EU rely on the EU’s standard contractual clauses. Under Anthropic’s business terms, it may not train its models on this information.

Anthropic keeps what is sent in a conversation under its own rules for business plans, and we cannot delete it from there. If you ask us to delete information about you, we delete it from our records as described above, but we cannot remove a copy that sits in a conversation with Claude. A team member can end the connection at any time in our admin app, and Claude can then no longer read anything new.

Your right to object

Where we rely on our legitimate interest, you can object at any time to our use of your information, for reasons that concern your own situation.

Write to us at kontakt@lynggaardjardim.dk.

We then stop, unless we have compelling legitimate reasons that outweigh your interests, or need the information to make, pursue or defend a legal claim.

How long we keep website information

Everything you send through the contact form is deleted automatically from our database after 12 months. The copy that arrives in our own inboxes is not covered by that: we delete it ourselves within the same 12 months. If your enquiry leads to working together, what we keep from then on is described under Customers above.

Our own page views are deleted automatically after 12 months as well. The deletions in the database happen by themselves on a fixed schedule, not because anyone remembers to do them.

In Google Analytics, Google deletes the detailed visit data automatically after 14 months. We have set it so that a new visit does not extend this. Google’s ready-made reports show totals only, with no individual visitors, and are not covered by that deletion.

What is stored on your device

Nothing is stored on your device until you answer the banner. After that, up to four small cookies are used. Two are ours. Two come from Google Analytics, a service from Google Ireland Limited, and are stored only if you accept.

lj_consent (ours) remembers your answer to the banner – accept or decline – so we do not ask again. It also notes which version of the question you answered, so that we can ask again if the question changes. It lasts 14 months, and some browsers delete it sooner. When it expires, we ask again.

lj_vid (ours) is the random number we use to count page views in our own statistics. It exists only if you accepted. It lasts 14 months, and some browsers delete it sooner. Declining removes it from your device.

_ga (Google Analytics) is a random number that lets Google Analytics tell visitors apart. It exists only if you accepted. It lasts 14 months from your latest visit, and some browsers delete it sooner.

_ga_ followed by a code that identifies our Google Analytics setup keeps track of your current visit. It exists only if you accepted. It lasts 14 months from your latest visit, and some browsers delete it sooner.

Both Google cookies are set on our own website’s address. To change your mind, use "Privacy choices" at the bottom of any page and choose Decline. We then stop counting and delete our random number and Google’s two cookies from your device.

Who handles it, and where

The contact form, our own page views and our sales records are kept in a Supabase project hosted in the EU, in the eu-north-1 region in Stockholm. The website and our email are hosted by Simply. When a team member uses Claude with our records, Anthropic handles that information, as described under When we connect an AI assistant to our records.

If you accept, the page views described above also go to Google Analytics. Google Ireland Limited provides it and handles the information for us, under Google’s data processing terms. Google can pass the information to other Google companies and to service providers, and may handle it in the USA and in other countries where they work. We have switched off the settings that let Google use the information for its own purposes, including advertising. Google states that it then uses the information only to provide and maintain Google Analytics.

Transfers to the USA rest on the EU-US Data Privacy Framework. On 10 July 2023 the European Commission decided that companies certified under it give personal data an adequate level of protection (GDPR Article 45), and Google LLC is certified. Google’s data processing terms also contain the European Commission’s standard contractual clauses (Article 46), which apply when no other transfer solution does. You can ask us for a copy of these safeguards.

We do not sell information, and we do not share it with anyone for advertising. We pass it on to public authorities only when the law requires it.

Portraits edited with AI

The portraits of the two of us founders on our website have been edited with AI (ChatGPT) to adjust the light.

Your rights

You can ask to see, correct or delete what we hold about you, to limit how we use it, and in certain cases to receive it in a machine-readable format. You can also object, as described above, and complain to Datatilsynet, the Danish data protection authority.

The button below opens a message to us with your own random number already filled in, if you have one. If you also have Google’s _ga cookie, its number is filled in as well. From your email address we can find anything you sent through the contact form, from our number we can find your page views, and from Google’s number we can delete your visits in Google Analytics.

If you have already withdrawn your consent, the numbers are gone from your device and those page views can no longer be found from them – so ask for deletion first if you want them gone sooner. Either way, it is all deleted automatically: within 12 months with us and within 14 months in Google Analytics.