Privacy Policy

1. Data Controller

Kerno is the data controller for processing of personal data on this website. If you have questions about our processing of your data, you can contact us at hello@kerno.dk.

2. What Data We Collect

We collect the following types of personal data:

• Contact information (name, email, phone number) when you submit forms
• Company information when provided
• Technical data (IP address, browser type) via server logs
• Anonymous usage statistics via Plausible Analytics (no cookies, no personal data)

3. Purpose and Legal Basis

We process your personal data for the following purposes:

• To respond to your enquiries (legal basis: legitimate interest, GDPR Art. 6(1)(f))
• To deliver services you have requested (legal basis: contract, GDPR Art. 6(1)(b))
• To improve our website (legal basis: legitimate interest, GDPR Art. 6(1)(f))

4. Cookies

We use the following categories of cookies:

• Necessary cookies: Required for the website to function (e.g., Cloudflare security, session management). These cannot be disabled.
• Statistics: Plausible Analytics (cookieless, no consent required) and our own anonymised visit counting (with consent). No personal data is stored.
• Marketing: Google Analytics for traffic measurement and campaign effectiveness (with consent). Google may use data for its own purposes — see Google's privacy policy.

You can manage your cookie preferences at any time using the cookie settings on this website.

5. Third-Party Services

We use the following third-party services to operate our website:

• Supabase — database and authentication (data stored in EU)
• Cloudflare — CDN, security, and bot protection (Turnstile CAPTCHA)
• Plausible Analytics — privacy-friendly, cookieless website analytics (EU-hosted)
• Resend — transactional email delivery

6. Data Retention

We retain personal data only as long as necessary for the purposes described above. Contact form submissions are retained for up to 12 months. Anonymised visitor data is automatically deleted after 90 days. You can request deletion at any time.

7. Your Rights

Under GDPR, you have the following rights:

• Right of access — you can request a copy of your personal data
• Right to rectification — you can request correction of inaccurate data
• Right to erasure — you can request deletion of your data
• Right to data portability — you can request your data in a machine-readable format
• Right to object — you can object to processing based on legitimate interest

To exercise your rights, contact us at hello@kerno.dk.

8. Complaints

If you are dissatisfied with our processing of your personal data, you can file a complaint with the Danish Data Protection Agency (Datatilsynet): datatilsynet.dk.