Privacy Policy
Last updated: 17 April 2026
1. Data controller
Taleco ApS
CVR number: 39446235
Address: Copenhagen, Denmark
Email: mm@taleco.dk
Taleco ApS is the data controller for the personal data we process about you in connection with your use of taleco.dk.
2. What data do we process?
We process the following categories of personal data:
- Contact information — name, company, CVR number, email and phone number (collected via contact form and quote requests).
- Calculator data — revenue tier, plan selection and number of employees from the pricing calculator. IP addresses are hashed (SHA-256 + salt) and not stored in plain text.
- Technical data — anonymised usage data via Google Analytics 4 (only with your consent), including pages visited, device type and geographic region at country level.
- Communication data — content of messages sent to us via the contact form.
We do not process sensitive personal data such as health information, ethnic origin or political views.
3. Purposes and legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Responding to your enquiry | Art. 6(1)(b) — necessary for the performance of a contract or pre-contractual measures |
| Sending you a quote | Art. 6(1)(b) — necessary for the performance of a contract |
| Statistics and site improvement | Art. 6(1)(a) — consent (via cookie banner) |
| Marketing (newsletter) | Art. 6(1)(a) — consent |
| Compliance with legal obligations | Art. 6(1)(c) — legal obligation |
4. Retention periods
- Leads and contact enquiries: 3 years from the last contact, unless you ask us to delete earlier.
- Calculator data (anonymised): 13 months, then deleted automatically.
- Accounting data (clients): 5 years in accordance with the Danish Bookkeeping Act.
- Consent log: Retained for as long as the consent is active + 3 years.
5. Disclosure of data
We do not share your personal data with third parties for marketing purposes. We use the following data processors:
- Cloudflare, Inc. — hosting and CDN (USA; Standard Contractual Clauses)
- Supabase, Inc. — database and authentication (EU region)
- Resend, Inc. — transactional email
- Google LLC — Analytics 4, only with consent (EU Data Processing Terms)
Data processing agreements are in place with all processors. Transfers to third countries are made on the basis of the European Commission's Standard Contractual Clauses (SCC).
6. Your rights
You have the following rights under the GDPR:
- Access (art. 15) — you may request a copy of the data we hold about you.
- Rectification (art. 16) — you may request correction of inaccurate data.
- Erasure (art. 17) — you may request deletion of your data, unless we are required to retain it.
- Restriction (art. 18) — you may request that processing be restricted in certain circumstances.
- Data portability (art. 20) — you may receive your data in a machine-readable format.
- Objection (art. 21) — you may object to processing based on legitimate interests.
- Withdrawal of consent — you may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
To exercise your rights, please contact us at mm@taleco.dk. We will respond within 30 days.
7. Complaints
If you believe we are processing your personal data in breach of the GDPR, you have the right to lodge a complaint with:
Danish Data Protection Agency (Datatilsynet)
Carl Jacobsens Vej 35
2500 Valby, Denmark
datatilsynet.dk
8. Changes
We update this privacy policy on an ongoing basis. Significant changes will be announced on the website at least 30 days before they take effect. The current version is always available at taleco.dk/en/privacy.