Book demo

Privacy Policy

We take the processing of your data seriously.

Using our service means you have read and accepted what is written here, so please take a moment to review it.

Processing your personal data securely matters to us, and we put considerable effort into protecting it.

We only collect information we need in order to help with insurance, improve our services and support our marketing, and we do so in accordance with applicable law. We may not use your data for any purpose other than making sure you have the best insurance.

And now, the legal version.

Who processes your personal data?

Leaf ApS ("Leaf", "we", "us", "our") Store Kirkestræde 1, 3rd floor 1073 Copenhagen K Denmark CVR (Danish company registration no.): 43981315

is the data controller for the processing of your personal data in connection with:

use of our website
communication with us
marketing to you, and
our customer administration

What are our purposes and legal bases?

We process personal data for a range of purposes in the situations listed above. Below you can read more about each purpose and the legal basis for the processing.

When you use our website

When you visit our website, we use cookies to register information about your visit, including how you navigate the site, which browser you use and which IP address you use. In some cases this information may constitute personal data.

We register the information in order to give you a secure, stable and customer-friendly experience on our website. You can read more about our use of cookies in our Cookie policy.

We process this information on the following legal bases:

Necessary functionality cookies: Section 4 of the Danish Cookie Order, in conjunction with GDPR Article 6(1)(f), as we pursue our legitimate interest in maintaining the functionality and security of our website.
Other cookies: Section 3 of the Danish Cookie Order, in conjunction with GDPR Article 6(1)(a), as we have obtained your consent.

When you communicate with us

If you contact us as a customer, or as a representative of a customer, supplier or other party (for example by email), your enquiry will often contain personal data such as contact details, your association with a specific company, or other personal data you choose to give us. In certain cases we may also receive similar personal data about you from a third party, for example your employer.

We process the information in order to handle and answer your enquiry and to communicate with you and/or the company you represent.

The legal basis for our processing is GDPR Article 6(1)(f), as we pursue our legitimate interest in answering general enquiries and in fulfilling any agreement we may have entered into with you or the company you represent.

When we market to you

We process your personal data for marketing purposes, including your name, email address and phone number. Depending on how we received your information, we process it on the following legal bases:

If you signed up via a form and actively gave your consent: GDPR Article 6(1)(a). You can withdraw your consent at any time by contacting us at hej@leaf.dk.
If you are an existing customer or have contacted us on your own initiative: GDPR Article 6(1)(f), legitimate interest, our legitimate interest being to send you relevant offers and news.

You can tell us at any time if you no longer wish to receive marketing material by emailing hej@leaf.dk.

When we administer customers

If you are a customer, or represent one of our customers, we may register information about you in our customer system, including your name, your contact details and information about your association with a specific company. We process this information as part of our day-to-day customer administration, including to maintain contact and our relationship with our customers so that we can deliver our services.

The legal basis for our processing is GDPR Article 6(1)(f), as we pursue our legitimate interest in handling day-to-day customer administration.

Who receives my personal data?

Disclosure to external third parties

We disclose personal data contained in our accounting records to the relevant authorities, including the Danish Tax Agency (SKAT), in connection with statutory bookkeeping and similar obligations. We also disclose information about your use of the website to any third-party providers you have permitted to place cookies during your use of the website. Finally, in connection with specific enquiries, agreements or cases, we may disclose your personal data to relevant business partners, including external advisors.

Use of data processors

We entrust your personal data to our data processors, who host, develop and support our IT systems and/or send service messages on our behalf. We use the following data processors:

Pipedrive: CRM system for customer administration.
Sentry.io: technical error monitoring of the website. Sentry processes technical data such as error messages, browser type and IP address solely for the purpose of ensuring the website's functionality and stability. The legal basis is legitimate interest under GDPR Article 6(1)(f).

Is my personal data transferred to third countries?

We use data processors and sub-processors outside the EU/EEA for IT development, hosting, support and operations. There may also be individual cases where we transfer information to countries outside the EU/EEA. When we use data processors outside the EU/EEA, we rely on the European Commission's Standard Contractual Clauses (SCCs).

If you would like further information about our transfers of personal data outside the EU and EEA, you can request it by contacting us using the details in the "Contact" section.

How long is my personal data stored?

We only store your personal data for as long as is necessary to fulfil the purposes for which we collected it, unless the law requires otherwise. Your personal data is deleted or anonymised once it is no longer relevant to the purposes for which it was collected.

What are my rights?

You have the following rights:

You have the right to request access to, rectification of or erasure of your personal data.
You also have the right to object to the processing of your personal data and to have that processing restricted.
In particular, you have an unconditional right to object to the processing of your personal data for direct marketing purposes.
If our processing of your personal data is based on your consent, you have the right to withdraw that consent at any time. Withdrawing your consent does not affect the lawfulness of any processing carried out before the withdrawal.
You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format (data portability).

You can exercise your rights by contacting us at hej@leaf.dk or +45 40 50 30 35.

These rights may be subject to conditions or limitations. You may therefore not have the right to data portability in a given case, for example. It depends on the specific circumstances of the processing.

How do I complain?

If you wish to complain about our processing of your personal data, you can contact Datatilsynet, the Danish Data Protection Agency. You will find its contact details at www.datatilsynet.dk.

You can read more about your rights in Datatilsynet's guidance on the rights of data subjects, available at www.datatilsynet.dk.

Contact

You are welcome to contact us if you have questions about how we protect your personal data, or if you would like more information about your rights:

Leaf ApS

Store Kirkestræde 1, 3rd floor

1073 Copenhagen K

Denmark

CVR: 43981315

Email: hej@leaf.dk

Phone: +45 40 50 30 35