Privacy Policy

This website is operated by Andreas Bang Leed, the data controller. For any question about how your data is handled, contact andreas@leed.dk.

When you submit a form on this site, the following information is collected: your name, email address, and message content. For speaking enquiries, your organisation name may also be collected. This data is sent via email and is not stored in a database.

To prevent abuse, the server temporarily records the IP address of form submissions and uses it to rate-limit how many messages can be sent from the same address. These records are kept only for a short period (about one hour) and are then deleted. This is done under legitimate interest in keeping the forms working and free of abuse (Art. 6(1)(f)).

This site uses Google Analytics (GA4) to understand how visitors use the website. Analytics cookies are only loaded if you click "Accept" on the cookie consent banner. If you decline, no analytics data is collected.

Google Analytics collects usage data such as pages visited, time on site, and general geographic region. Analytics is configured to turn off Google Signals and advertising personalisation, so the data is not used to build advertising profiles. GA4 does not log or store full IP addresses: an IP address is used only briefly to estimate approximate location and is then discarded, not retained. For more information, see Google's Privacy Policy.

Google Analytics (GA4 property G-NDSW5VZ443) processes data on servers in the United States. Google LLC is certified under the EU-US Data Privacy Framework, which the European Commission recognises as providing an adequate level of protection for such transfers. The European Commission's standard contractual clauses apply as an additional safeguard.

This site uses a cookie consent banner. Your preference (accepted or declined) is stored in your browser's local storage under the key cookieConsent. If you accept, Google Analytics cookies are loaded. If you decline, no analytics or tracking cookies are set.

When you use the contact or speaking form, a strictly necessary session cookie (PHPSESSID) is set to protect the form against cross-site request forgery. It contains no personal data, lasts only for your browser session, and is exempt from consent as a strictly necessary cookie, so it may be set even if you decline analytics.

You can change your analytics preference at any time by clearing your browser's local storage for this site.

The web server automatically records basic access logs (IP address, browser type, pages requested). These logs are used for security and troubleshooting and are not linked to individual identities.

This website is hosted by Nordicway ApS, on servers within the European Union. As part of hosting the site, the provider processes server access logs and delivers the emails sent from the contact and speaking forms. This processing is governed by a signed data processing agreement.

Fonts and scripts on this site are served through content delivery networks: Cloudflare (cdnjs) and jsDelivr. When your browser loads these files, the CDN receives your IP address so it can deliver the content. These networks set no cookies and are used only to serve static files.

Each type of processing relies on a legal basis under Article 6 of the GDPR:

• Analytics: your consent, given through the cookie banner (Art. 6(1)(a)).
• Form replies: your consent and, where you are arranging an engagement, steps taken at your request before entering an agreement (Art. 6(1)(a) and Art. 6(1)(b)).
• Server logs and form rate-limiting: legitimate interest in keeping the site secure and working (Art. 6(1)(f)).

Personal data submitted through forms is used solely to respond to your enquiry. Analytics data is used to understand site traffic and improve the website. Data is not sold, shared with third parties for marketing, or used for automated decision-making.

Under the General Data Protection Regulation (GDPR), you have the right to:

• Request access to your personal data
• Request correction or deletion of your data
• Withdraw consent for analytics at any time
• Lodge a complaint with the Danish Data Protection Agency (Datatilsynet)

To exercise these rights, contact andreas@leed.dk.

Form submissions are retained only as long as necessary to respond to the enquiry. Analytics data is retained according to Google Analytics' default retention settings (14 months).