Privacy policy
Last updated: 2026-09-16
This policy explains what personal data we collect, why, and the rights you have. The data controller is Flowplan ApS (CVR 38892827), Vasekær 12, 2730 Herlev, Danmark.
If you have questions, write to us at info@flowplan.dk.
What we collect
We only collect the information you give us yourself when you fill in the contact form or sign up for our newsletter:
- Name
- Email address
- Phone number (optional)
- Industry and the message you write
When you send an enquiry, we also record which page you sent it from, which page you first arrived on, and where you came from, for example a search engine, a link or an advertising campaign. We use this to see which content leads to enquiries. Beyond the page you are on, it is only remembered as you move around the site if you allow statistics.
Why we process it
Contact details are used solely to answer your enquiry. If you sign up for the newsletter, we use your email to send news until you unsubscribe.
The legal basis is your consent and our legitimate interest in responding to enquiries (GDPR Article 6(1)(a) and (f)).
Cookies and tracking
When you first arrive, we set nothing beyond what the site needs to work. The banner asks before anything else runs, refusing everything takes one click, and you can change your answer at any time from the Cookie settings link at the bottom of any page. The legal basis for everything in this section is your consent, GDPR Article 6(1)(a).
Statistics, only with your consent. We use Google Analytics to see which pages get read and which do not. It sets cookies and gives Google a record of your visit.
Statistics, only with your consent. We use Microsoft Clarity to see how a page is actually used: how far you scroll, what you click, and where you get stuck. Your visit is recorded, so we can play it back and see where the page fails you. What you type into a form is masked and is not sent on. It sets cookies, and the recording is stored by Microsoft.
Marketing, only with your consent. We load an advertising pixel from OpenAI so we can measure whether the ads we run in ChatGPT lead to enquiries. It can set cookies and recognise you on other sites that use it.
Embedded content, only with your consent. Video (Vimeo) and the map (Google Maps) load once you allow embedded content, or when you click an individual video or map. Only then is that service contacted, and it may set its own cookies. If you do neither, no contact is made.
Fonts are hosted on our own domain, so no data is sent to a third party when the page loads.
Sharing and processors
We never sell your data. Enquiries are handled through our email and hosting providers, who process data on our behalf under a data processing agreement and only within the EU/EEA.
The analytics and advertising services named above are run by Google and LinkedIn, which may process data outside the EU/EEA. Both are certified under the EU-US Data Privacy Framework, which is the transfer basis we rely on.
The advertising pixel is operated by OpenAI in the United States, so using it may involve processing data outside the EU/EEA. Where that happens, we rely on the appropriate safeguards for international transfers that data protection law requires.
Microsoft Clarity is run by Microsoft Corporation in the United States, and the recordings are stored there. Microsoft is certified under the EU-US Data Privacy Framework, which is the transfer basis we rely on.
Retention
We keep your information for as long as needed to answer your enquiry or to send the newsletter, then delete it.
Your rights
You have the right to access, rectify and erase your data, and to withdraw consent. Contact us to exercise these rights.
You may also complain to the Danish Data Protection Agency (datatilsynet.dk) if you are unhappy with how we handle your data.
Changes
We may update this policy. The current version is always on this page.