Privacy Policy

1. Overview & Data Controller

This Privacy Policy outlines how Clipscoutbrowsebarn Nordic Design ApS ("Clipscoutbrowsebarn," "we," "our," or "the Studio") collects, uses, protects, and discloses information gathered through your interactions with our domain clipscoutbrowsebarn.online.

The designated Data Controller responsible for your personal data under the European Union General Data Protection Regulation (Regulation (EU) 2016/679 - GDPR) and the Danish Data Protection Act (Databeskyttelsesloven) is:

2. Categories of Information Collected

We process personal data only when strictly necessary to provide architectural services, respond to project communications, or maintain site integrity:

• Direct Communication Data: When you complete our contact inquiry form, we collect your legal name, email address, chosen project typology, and written architectural briefing information.
• Technical & Telemetry Data: When visiting the website, automated web server log files record IP addresses (anonymized at network entry), browser user agents, operating system classifications, referring URLs, and time-stamped request records.
• Preference & State Storage: We use local storage mechanisms to persist your chosen cookie choices (whether accept, reject, or preferences) to avoid recurring modal banners.

3. Lawful Grounds for Processing

Under Article 6 of the GDPR, our legal bases for handling personal data include:

• Contractual Performance (Art. 6(1)(b)): Processing information submitted to initiate architectural fee quotes, schedule studio meetings, and deliver contracted interior design services.
• Legitimate Interests (Art. 6(1)(f)): Maintaining the stability, cybersecurity, and performance optimization of our static digital infrastructure.
• Explicit Consent (Art. 6(1)(a)): For non-essential analytics tracking or specialized preference persistence as configured through our cookie banner.

4. Third-Party Data Processors

Clipscoutbrowsebarn does not sell, rent, or trade your personal data. We engage a restricted group of vetted European and international processors operating under binding Data Processing Agreements (DPAs):

• Infrastructure Providers: Fast-edge content delivery networks and hosting providers maintaining ISO/IEC 27001 certifications.
• Email Routing Infrastructure: Secure SMTP routing services providing end-to-end encrypted messaging across Scandinavian network points.

5. International Data Transfers

If personal information is processed outside the European Economic Area (EEA), transfers are governed by standard contractual clauses (SCCs) approved by the European Commission, combined with strict supplementary technical and cryptographic safeguards.

6. Data Retention Policies

Client inquiry records, architectural project briefs, and correspondence are retained for up to five (5) years following the conclusion of commercial dialogues to satisfy Danish accounting regulations (Bogføringsloven) and contractual liability periods. Web server access logs are purged after thirty (30) days.

7. Your Statutory Rights (GDPR & CCPA/CPRA)

Depending on your geographic residency, you maintain distinct legal rights regarding your personal information:

• Right of Access & Portability: You may request copies of all personal data held by our studio in a readable, structured format.
• Right to Rectification: You may correct inaccurate or incomplete contact records.
• Right to Erasure ("Right to be Forgotten"): You may demand immediate deletion of personal records where legal retention grounds no longer apply.
• Right to Restriction & Objection: You may object to data processing based upon our legitimate interests.
• California Privacy Notice: California residents hold additional rights under the California Consumer Privacy Act (CCPA) to know what personal data is collected and to demand that no personal data be sold or shared. Clipscoutbrowsebarn does not engage in data selling.

8. Exercising Rights & Supervisory Complaints

To exercise any data rights, transmit your request in writing to [email protected]. You also retain the right to submit a formal complaint directly to the Danish Data Protection Agency (Datatilsynet): Carl Jacobsens Vej 35, 2500 Valby, Denmark (www.datatilsynet.dk).