This page explains what information we process about you, why, and what you can do about it. We wrote it so you don't need a lawyer to read it.
Last updated
Short version
This site uses no cookies, no statistics and no ads. See the cookie policy.
We load no fonts, scripts or content from other sites.
If you write to us, we use your details to answer you. Not for anything else.
If you use Lemmaspor on your material, it is your material. We don't store it afterwards.
You can always ask to see, correct or delete information about you.
Who is responsible
Lemmaspor is the data controller for the information this page describes. That means we decide why and how the information is used, and we are the ones you ask.
There are three situations in which we process information.
You visit the site
What
Technical information your browser sends when it fetches a page: your IP address, the time, which page you asked for, and which browser and device you use.
Why
To deliver the page to you and keep it stable and secure.
Legal basis
Legitimate interest (GDPR Article 6(1)(f)). We have an interest in the site working and being secure.
Who handles it
The hosting provider, Google (Firebase Hosting). We don't use the information to recognise you and don't combine it with other information.
How long
According to the hosting provider's own rules for operations and security. We keep no copy.
You write to us
What
Your name and email address, if they appear, and what you tell us, for example which system it concerns and when the next delivery is.
Why
To answer you and, if you want, to prepare a proposal for a first run.
Legal basis
Legitimate interest (Article 6(1)(f)): we have an interest in answering enquiries, and you contacted us. If you ask us for an offer, the basis is instead that you want to enter an agreement with us (point (b)).
Who handles it
Our email provider, which runs our mailbox. We don't pass the information on, unless the law requires it.
How long
We keep the enquiry for as long as we need it for the purpose it was given for, and no longer. If it becomes a customer relationship, we also keep what we are legally required to keep, for example accounting records.
You use Lemmaspor on your material
What
The supplier's code and your own documents, for example the requirements specification, the contract and the solution description. The material may contain personal data, for example names in code or documents.
Why
To produce your report. Nothing else.
Roles
You are the data controller for any personal data in the material. We are the data processor, which means we handle it on your behalf and on your instructions.
How we protect it
The code is filtered in your browser before anything leaves your computer: installed libraries and other people's code, build files and generated files, and passwords and keys we have no need to see. Once the report is made, we store neither the code nor the documents. You download the report yourself; the rest is gone.
Who handles it
The AI provider that analyses the material: ours, or your own if your organisation has an agreement with a particular provider and wants to use it.
Questions
Does your data protection officer want the details of how data flows? Write to kontakt@lemmaspor.example.
Who receives the information
We use a few providers to run the site and our mailbox:
the hosting provider (Google, Firebase Hosting)
our email provider
the AI provider that analyses your material, if you use Lemmaspor on it
Some providers may handle information outside the EU/EEA. That only happens with a valid transfer basis, for example the European Commission's standard contractual clauses.
Your rights
You have the right to:
see what information we hold about you (access)
have incorrect information corrected
have information deleted when we have no reason to keep it
limit how we use it
object to our using it on the basis of legitimate interest
receive the information you gave us in a common format (data portability)
Write to kontakt@lemmaspor.example. We answer within one month of receiving your request. The rights apply to the extent the law gives them. For example, we may be required to keep something even if you ask us to delete it.
If you are unhappy with how we handle information about you, write to us first so we can put it right. You can also complain to Datatilsynet, the Danish Data Protection Agency.
Changes
We update the policy when something changes. The date at the top shows when it was last changed.