We do not collect more than necessary.

Controller

StraSec is the controller for personal data processed through strasec.eu. Contact: contact@strasec.dk.

Contact form

When you submit the form, we process your name, email, optional company and message to respond and assess whether StraSec can help.

The legal basis is our legitimate interest in responding to inquiries and, where relevant, steps prior to entering into an agreement. Do not send confidential customer data, credentials or special categories of personal data.

Suppliers

The website is hosted on Vercel, the contact form sends email through Resend, and measurement data is stored in Supabase. These suppliers process technical data, form content and measurement data on StraSec's behalf. Relevant safeguards are used where processing occurs outside the EU/EEA.

Measurement data is held on servers in the EU. Supabase is, however, a US company and may therefore be subject to US legislation on government access even though the service runs in the EU. That is one of the reasons the measurement is designed the way it is: we store no IP address, no browser and no identifier that can follow a person over time.

Retention

Inquiries are kept only as long as necessary for the dialogue. If an inquiry does not become a customer relationship, it is normally deleted or archived no later than after 12 months.

Cookies and measurement

StraSec does not use cookies, marketing pixels or third-party analytics. Nothing is stored on your device — no cookie, no local storage, no identifier that follows you. No consent banner is therefore shown.

We do measure how much the site is used, using our own solution on our own domain. When you leave a page, we receive the path of that page, how long it was in view, and which host you arrived from. We do not store your IP address, your browser or the full address line.

To count visitors rather than clicks, we derive a code from your IP address and browser together with a secret that is rotated every day. The code can count you as one visitor today and cannot recognise you tomorrow. Measurement data is kept for no more than 400 days. If your browser sets Do Not Track or Global Privacy Control, we do not measure.

Hosting and security logs may in addition involve ordinary technical processing.

AI tools

Contact form inquiries are not used as input to AI tools without a specific agreement or a clear purpose compatible with the dialogue.

Your rights

You may request access, rectification, erasure, restriction or object to processing. Write to contact@strasec.dk. You may also lodge a complaint with the Danish Data Protection Agency.