Privacy
Make a reservation, you provide personal data
Privacy Policy
What you need to know about our processing of your personal data.
Data Controller
Lexoforms A/S is the data controller for the personal data processed when you use our services such as the website, newsletters, contact forms, social media, and events, etc.
Lexoforms A/S
Vejlsøvej 51, Building O
DK-8600 Silkeborg
VAT: 38510746
Questions?
If you have any questions about our processing of personal data, please contact Kim Jensen at +45 78 700 800 or info@lexoforms.com.
For matters regarding access, erasure, correction, restriction, objection, or data portability, please read the section on Your Rights at the bottom of this page first.
Your Personal Data
We process your personal data in various ways depending on the type of contact, relationship, and purpose. Read more below about the different types of processing.
Purpose
When visiting our website, we collect information about visitor behavior to optimize the website and user experience. This information is primarily statistical.
Legal Basis for Processing
We process the collected personal data according to legitimate interest under Article 6(1)(f) of the GDPR. This is weighed against the interests of the individual, who only provides anonymized behavior data. The processing does not violate any fundamental rights.
Categories of Personal Data
The collected information includes aggregated website traffic, referral sources, visit time, most visited page, device, operating system, country, and browser. Additionally, anonymized IP addresses are collected to determine the number of unique visitors to the website.
Recipients of Personal Data
When visiting our website, we do not share personal data with third parties but only pass the information to our data processor, Plausible.
We use Plausible for website analytics. Plausible Insights OÜ is based in Estonia and has data centers in Germany. Plausible does not use cookies and only uses anonymized IP addresses.
Storage of Personal Data
The collected information is stored solely for statistical purposes – and always in an anonymized form. The IP address is anonymized and stored until the end of the day, after which it is erased. Therefore, the original IP address is never accessible to us or our data processor. Read more about handling IP addresses here: https://plausible.io/data-policy
Automated Decisions and Profiling
The collected information is not used for profiling or to make automated decisions.
Cookies
As a visitor to our website, you can provide additional information via cookies, but only if you have freely given consent according to Article 6(1)(a) of the GDPR. Read more about the use of cookies in our Cookie Policy.
Purpose
When contacting us through our website forms, we collect and process personal data to respond to your inquiry.
This personal data is also used to meet other conditions necessary to process the inquiry, including newsletter sign-ups, which you can unsubscribe from at any time (see Newsletter Subscription). Other conditions will always be specified on the contact form.
Legal Basis for Processing
We process the collected personal data according to legitimate interest under Article 6(1)(f) of the GDPRThis is weighed against the interests of the individual, who has voluntarily provided personal data to be contacted. The processing does not violate any fundamental rights.
Categories of Personal Data
The collected information includes general personal data such as company, name, e-mail, phone number, and a detailed message about the nature of the inquiry. Only personal data that the individual voluntarily provides is collected.
Recipients of Personal Data
When contacting us through our website forms, we do not share personal data with third parties, but we process them through our data processor, Hubspot.
.
We use Hubspot to receive and follow up on inquiries and to continue the dialogue. Hubspot, Inc. ligger i USA og har datacentre i både USA og EU. Hos Lexoforms har vi valgt, at vores data skal opbevares i EU. Ved tredjelandsoverførsel foreligger gyldigt overførselsgrundlag i form af EU-US Data Privacy Framework (DPF).
Storage of Personal Data
Information is erased or anonymized no later than 12 months after the last contact, unless the contact leads to a collaboration, customer relationship, or another similar relationship.
Automated Decisions and Profiling
The collected personal data is not used for profiling or to make automated decisions.
Purpose
When booking an online meeting, we collect and process personal data to register the appointment, ensure participation in the meeting, and send reminders about the meeting.
This personal data is also used to meet other conditions necessary to hold the meeting, including newsletter sign-ups, which you can unsubscribe from at any time (see Newsletter Subscription). Other conditions will always be specified on the booking form.
Legal Basis for Processing
We process the collected personal data according to legitimate interest under Article 6(1)(f) of the GDPR. This is weighed against the interests of the individual, who has voluntarily provided personal data to book an online meeting. The processing does not violate any fundamental rights.
Categories of Personal Data
The collected information includes general personal data such as name, e-mail, phone number, and company. Only personal data that the individual voluntarily provides is collected.
Recipients of Personal Data
When booking an online meeting, we do not share personal data with third parties, but we process them through our data processors Hubspot and Microsoft.
.
We use Hubspot for Customer Relations Management (CRM), including managing dialogue with partners, potential partners, customers, and potential customers. Hubspot, Inc. ligger i USA og har datacentre i både USA og EU. Hos Lexoforms har vi valgt, at vores data skal opbevares i EU. Ved tredjelandsoverførsel foreligger gyldigt overførselsgrundlag i form af EU-US Data Privacy Framework (DPF).
.
We use Microsoft Teams to receive notifications about meeting registration and to manage and conduct the meeting via video communication and interaction during and after the meeting. Microsoft Corporation is based in the USA but stores the collected data in the EU. For third-country transfers, a valid transfer basis exists in the form of the EU-US Data Privacy Framework (DPF).
Storage of Personal Data
Information is erased or anonymized no later than 12 months after the meeting or the last contact, unless the contact leads to a collaboration, customer relationship, or another similar relationship.
Automated Decisions and Profiling
We do not make automated decisions or profiling based on the collected data.
Purpose
When signing up for one of our webinars, we collect and process personal data to register your participation, ensure your attendance at the webinar, and send reminders and service messages related to the webinar.
This personal data is also used to meet other conditions necessary to hold the webinar, including newsletter sign-ups, which you can unsubscribe from at any time (see Newsletter Subscription). Other conditions will always be specified at registration.
Legal Basis for Processing
We process the collected personal data according to legitimate interest under Article 6(1)(f) of the GDPRThis is weighed against the interests of the individual, who has voluntarily provided personal data to participate in a webinar. The processing does not violate any fundamental rights.
Categories of Personal Data
The collected information includes general personal data such as name, e-mail, phone number, company, industry affiliation, and questions and comments. Only personal data that the individual voluntarily provides is collected.
Recipients of Personal Data
When participating in one of our webinars, we do not share personal data with third parties unless we hold the webinar in collaboration with a co-organizer or partner such as an advisor, an interest, or an industry organization. In these cases, we sometimes share personal data with these third parties. When participating in one of our webinars, we process the information through our data processors Zoom, Hubspot, and Microsoft Teams.
.
We use Zoom for webinar registration and communication via video as well as interaction during and after the webinar. Zoom Video Communications, Inc. ligger i USA og har datacentre i både USA og EU. Hos Lexoforms har vi valgt, at vores data skal opbevares i EU. Ved tredjelandsoverførsel foreligger gyldigt overførselsgrundlag i form af EU-US Data Privacy Framework (DPF).
.
We use Hubspot for follow-up and feedback collection as well as responding to any questions and comments during the webinar. Hubspot, Inc. ligger i USA og har datacentre i både USA og EU. Hos Lexoforms har vi valgt, at vores data skal opbevares i EU. Ved tredjelandsoverførsel foreligger gyldigt overførselsgrundlag i form af EU-US Data Privacy Framework (DPF).
.
We use Microsoft Teams to receive notifications about webinar registration and, in some cases, to register and manage the webinar via video communication as well as interaction during and after the webinar. Microsoft Corporation is based in the USA but stores the collected data in the EU. For third-country transfers, a valid transfer basis exists in the form of the EU-US Data Privacy Framework (DPF).
Storage of Personal Data
Information is erased or anonymized no later than 12 months after the webinar, the last use thereof, or the last contact unless the participant initiates a collaboration, customer relationship, or another similar relationship.
Automated Decisions and Profiling
The collected personal data is not used for profiling or to make automated decisions.
Purpose
When signing up for one of our workshops, we collect and process personal data to register your participation, ensure your attendance at the workshop, send reminders and service messages, and an evaluation form related to the workshop.
This personal data is also used to fulfill other conditions for hosting the workshop, including signing up for our newsletter, which you can unsubscribe from at any time (see Newsletter Subscription). Other conditions will always be specified at registration.
Legal Basis for Processing
We process the collected personal data according to legitimate interest under Article 6(1)(f) of the GDPR. This is weighed against the interests of the individual, who has voluntarily provided personal data to participate in a workshop. The processing does not violate any fundamental rights.
Categories of Personal Data
The collected information includes general personal data such as name, e-mail, phone number, company, and industry affiliation. Only the personal data voluntarily provided by the individual is collected.
Recipients of Personal Data
When participating in one of our workshops, we do not share personal data with third parties unless the workshop is held in collaboration with a co-organizer or partner, such as an advisor, interest, or industry organization. In these cases, we may sometimes share personal data with these third parties. When participating in one of our workshops, we process the information through our data processors Hubspot and Microsoft.
.
We use Hubspot for follow-up and feedback collection, as well as responding to any questions and comments during the workshop. Hubspot, Inc. ligger i USA og har datacentre i både USA og EU. Hos Lexoforms har vi valgt, at vores data skal opbevares i EU. Ved tredjelandsoverførsel foreligger gyldigt overførselsgrundlag i form af EU-US Data Privacy Framework (DPF).
.
We use Microsoft Forms to collect workshop evaluations. Microsoft Corporation is based in the USA but stores the collected data in the EU. For third-country transfers, a valid transfer basis exists in the form of the EU-US Data Privacy Framework (DPF).
Storage of Personal Data
The information is erased or anonymized no later than 12 months after the workshop or the most recent contact unless the participant initiates a collaboration, customer relationship, or another similar relationship.
Automated Decisions and Profiling
The collected personal data is not used for profiling or to make automated decisions.
Purpose
When subscribing to our newsletter, we collect and process personal data to send e-mails with information about GDPR, updates, services, and similar topics.
Legal Basis for Processing
We process the collected personal data based on consent under Article 6(1)(a) of the GDPR. This consent can be withdrawn at any time by contacting us or unsubscribing at the bottom of the newsletter.
Categories of Personal Data
The collected information includes general personal data such as name, e-mail, and company. Only the personal data voluntarily provided by the individual is collected.
Recipients of Personal Data
When subscribing to our newsletter, we do not share personal data with third parties, but we process it through our data processor Hubspot.
.
We use Hubspot for the distribution, optimization, and evaluation of newsletters, as well as follow-up on responses and any inquiries based on the newsletter. Hubspot, Inc. ligger i USA og har datacentre i både USA og EU. Hos Lexoforms har vi valgt, at vores data skal opbevares i EU. Ved tredjelandsoverførsel foreligger gyldigt overførselsgrundlag i form af EU-US Data Privacy Framework (DPF).
Storage of Personal Data
Information is erased or anonymized no later than 12 months after the withdrawal of consent or the last received newsletter unless the consent or newsletter leads to a collaboration, customer relationship, or another similar relationship.
Automated Decisions and Profiling
The collected personal data is not used for profiling or to make automated decisions.
Purpose
When creating access to Lexoforms, we collect and process personal data to deliver our products and services and to send you news and information, which you can unsubscribe from at any time (see Newsletter Subscription).
As a paying customer of Lexoforms, we also process personal data to receive payment for our product, invoice according to bookkeeping laws, and send invoices via e-mail or other billing services.
Legal Basis for Processing
We process the collected personal data to fulfill a contract/agreement based on your acceptance of our Terms and Subscription Conditions, whether it involves a trial period or the purchase of our product under Article 6(1)(b) of the GDPR (contract).
Categories of Personal Data
The collected information includes general personal data such as VAT number, company name, company address, business e-mail, industry association affiliation, and partnerships, as well as user information, including name, title, mobile number, e-mail, and any comments.
Recipients of Personal Data
When creating access to Lexoforms without en tilknyttet samarbejdspartner (rådgiver) videregiver vi ikke personoplysninger til tredjepart. Ved oprettelse af adgang til Lexoforms with an associated partner (advisor), we share information with third parties in the form of the chosen advisor so they can deliver the agreed service.
.
I begge tilfælde overlader vi personoplysninger til udvalgte databehandlere, som både kan befinde sig indenfor og udenfor EU/EØS, herunder fx USA. Ved brug af databehandlere, der befinder sig udenfor EU/EØS, anvendes disse altid under et gyldigt overførselsgrundlag såsom EU-US Data Privacy Framework (DPF) og/eller Standard Contractual Clause (SCC) og med etablering af eventuelle relevante supplerende foranstaltninger som fx SSL kryptering eller multi-faktor-login.
Storage of Personal Data
Entered personal data is erased or anonymized according to our Terms and Subscription ConditionsDuring the trial period, the first 14 days are free and without commitment, but if no payment is made thereafter, the system is shut down, and the registered personal data is erased 30 days after the trial period ends.
Other information provided during the creation of access to Lexoforms is erased or anonymized no later than 12 months after the withdrawal of consent or the last contact unless the consent or contact leads to a collaboration, customer relationship, or another similar relationship.
In that case, you can read more about our retention of personal data in our Data Processor Agreement, section C.4, and appendix D.
Automated Decisions and Profiling
The collected personal data is not used for profiling or to make automated decisions.
Purpose
When a customer contacts Lexoforms support, we process personal data to handle the inquiry and help find a solution to the issue.
Legal Basis for Processing
We process the collected personal data to fulfill a contract/agreement based on your acceptance of our Terms and Subscription Conditions, whether it involves a trial period or the purchase of our product under Article 6(1)(b) of the GDPR (contract).
Categories of Personal Data
The collected information includes the data provided when creating access to Lexoforms. This includes VAT number, company, company address, business e-mail, industry association affiliation, partnerships, name, title, mobile number, e-mail, and any comments.
Recipients of Personal Data
When a customer contacts Lexoforms support, we do not share personal data with third parties, but we process it through our data processor Zendesk.
.
We use Zendesk to manage and conduct the dialogue about our products and services. Zendesk, Inc. is based in the USA with data centers worldwide, including in the EEA. For third-country transfers, a valid transfer basis exists in the form of the EU-US Data Privacy Framework (DPF).
Storage of Personal Data
Information is retained as long as the customer relationship exists and is erased or anonymized upon request, unless other legislation, property law requirements, or if the agreement and purpose give us the right to retain the personal data.
Automated Decisions and Profiling
The collected personal data is not used for profiling or to make automated decisions.
Purpose
When collecting contact information for sales purposes, we receive information from third parties to sell our product. This can occur through partners and social media such as LinkedIn.
Legal Basis for Processing
We process the collected personal data according to legitimate interest under Article 6(1)(f) of the GDPR. This is balanced against the interests of the data subject, where our interest in processing outweighs the data subject’s desire not to process. The processing does not infringe on any fundamental rights.
Categories of Personal Data
The collected information includes general personal data such as name, title, e-mail, phone number, and company.
Recipients of Personal Data
When collecting contact information for sales purposes, we do not share personal data with third parties, but we process it through our data processor Hubspot.
.
We use Hubspot for Customer Relations Management (CRM), including managing dialogue, inquiries, and follow-up with potential customers. Hubspot, Inc. ligger i USA og har datacentre i både USA og EU. Hos Lexoforms har vi valgt, at vores data skal opbevares i EU. Ved tredjelandsoverførsel foreligger gyldigt overførselsgrundlag i form af EU-US Data Privacy Framework (DPF).
Storage of Personal Data
Information is erased or anonymized no later than 12 months after the last contact, unless the contact initiates a collaboration, customer relationship, or another similar relationship.
Automated Decisions and Profiling
The collected personal data is not used for profiling or to make automated decisions.
Purpose
When visiting our social media pages, such as LinkedIn and Facebook, we collect and process personal data to market our services to potential and current customers and respond to inquiries.
Legal Basis for Processing
We process the collected personal data according to legitimate interest under Article 6(1)(f) of the GDPR. This is balanced against the interests of the data subject, who has voluntarily provided personal data to contact or interact with us through our social media. The processing does not infringe on any fundamental rights.
Categories of Personal Data
The collected information includes the name and similar personal data related to the data subject’s user profile on the relevant platform.
Recipients of Personal Data
When visiting our social media pages, we do not share your personal data with third parties. However, as a user, you are sharing your personal data with the platform in question.
The social media platforms may share your personal data in accordance with their privacy policies, including transferring your personal data to recipients outside the EU/EEA. You can read more in the respective providers' privacy policies.
Storage of Personal Data
Your data is only stored as long as your activity on the platform exists.
Automated Decisions and Profiling
The collected personal data is not used for profiling or to make automated decisions.
Purpose
When using social media such as LinkedIn and Facebook, we collect and process personal data and statistical information through advertising to market ourselves to potential and current customers.
Legal Basis for Processing
We process the collected personal data based on legitimate interest under Article 6(1)(f) of the GDPR. This is balanced against the interests of the data subject, who has voluntarily provided personal data to the respective social media platform. The processing does not infringe on any fundamental rights.
Categories of Personal Data
The collected information may include name, e-mail, contact information, educational and employment history, as well as similar personal data related to the data subject's user profile on the respective platform.
Recipients of Personal Data
When advertising on social media, we do not disclose personal data to third parties, but as a user, you entrust the specific personal data to the respective platform.
The social media platforms may share your personal data in accordance with their privacy policies, including transferring your personal data to recipients outside the EU/EEA. You can read more in the respective providers' privacy policies.
Storage of Personal Data
Personal data is only retained as long as the specific advertising is conducted and is erased no later than 6 months thereafter. Additionally, statistical information about individual advertising campaigns is retained in anonymized form.
Automated Decisions and Profiling
The collected personal data is not used for profiling or to make automated decisions.
Purpose
When applying for a job, we process personal data to assess qualifications in relation to a potential job opportunity.
Legal Basis for Processing
We process the collected personal data according to legitimate interest under Article 6(1)(f) of the GDPR. This is balanced against the interests of the data subject, who has voluntarily provided personal data to be assessed for a potential job opportunity. The processing does not infringe on any fundamental rights.
Categories of Personal Data
The collected information includes only personal data that the applicant has provided in their application, resumé, and during any subsequent interview.
Recipients of Personal Data
When applying for a job, we do not disclose the information to third parties, but we process it through our data processor, Microsoft.
.
We use Microsoft Outlook (dedicated e-mail account) to store and respond to the relevant inquiry. Microsoft Corporation is based in the USA but stores the collected data in the EU. For third-country transfers, a valid transfer basis exists in the form of the EU-US Data Privacy Framework (DPF).
Storage of Personal Data
The data is erased no later than 6 months after sending a rejection. Upon employment, personal data is retained in accordance with accounting laws, consent regulations, limitation rules, and/or other legislation.
Automated Decisions and Profiling
The collected personal data is not used for profiling or to make automated decisions.
Your Rights
Under the General Data Protection Regulation (GDPR), you have several rights regarding our processing of your personal data. If you wish to exercise your rights, please contact us. Your rights include…
Access and rectification
You can request access to the personal data we process about you at any time, as well as request that your personal data be corrected or updated.
Erasure
In certain cases, you can request that your personal data be erased. This right is not absolute, as some data cannot be deleted due to other legislation or if the agreement and purpose allow us to retain the personal data. The data will be erased no later than when any potential financial claims have become statute-barred.
Restricted Processing
In certain cases, you can request that the processing of your data be restricted. This means that if the conditions for restricting processing are met, we can only process your personal data in certain situations.
Objection
In certain cases, you can object to our otherwise lawful processing of your personal data.
Data Portability .
You can at any time request to download or receive your personal data in a machine-readable format.
Automated Decisions and Profiling
You have the right not to be subject to a decision based solely on automated decision-making, including profiling.
Withdrawal of Consent
You can withdraw your consent at any time where our processing of your personal data is based on your consent.
.
You can read more about your rights in the Danish Data Protection Agency's guide on data subjects' rights, which you can find at www.datatilsynet.dk
The Right to Complain
If you wish to complain about our processing of your personal data, we would be happy to be informed and will do our best to satisfy your concerns. If you are not satisfied with our response, you have the right to lodge a complaint directly with…
Danish Data Protection Agency
Carl Jacobsens Vej 35
2500 Valby
Phone 3319 3200
E-mail dt@datatilsynet.dk
See more at www.datatilsynet.dk
