IQopta ApS ('we', 'us' or 'our') is the data controller for the personal data we collect about you when you:

• Visit our website at https://iqopta.com
• Contact us, for example through the contact form, by email or to request a demo
• Are otherwise in dialogue with us, for example in connection with sales, marketing or events

This privacy policy explains which personal data we process, why we process it, how long we keep it, and what rights you have. If you have questions, or disagree with how we process your data, you are always welcome to contact us at contact@iqopta.com.

1. Who is the data controller?

The data controller for the processing of your personal data is:

2. Which personal data do we collect and process?

Information you give us

We process the personal data you give us yourself, for example when you contact us through the contact form or by email, request a demo, or are otherwise in dialogue with us. This may include:

• Contact details: Name, email address and phone number.
• Company details: Your employer or company, and your title or role.
• The content of your enquiry: For example what you tell us about your use case when you request a demo.

Information we collect automatically

When you visit our website, we automatically collect certain technical information that does not in itself reveal your identity, including your IP address, browser and device type, operating system, language settings, referring URL and similar technical information.

We do not process sensitive personal data, and we do not collect information about you from third parties.

3. Why do we process your data, and on what legal basis?

We process your personal data for the following purposes and on the following legal bases under the General Data Protection Regulation (GDPR):

• To answer your enquiry or arrange a demo: The processing is necessary to enter into or perform an agreement with you, or is based on our legitimate interest in answering enquiries, cf. Art. 6(1)(b) and (f).
• To improve and maintain the website (analytics): The processing is based on your consent through our cookie banner, cf. Art. 6(1)(a).
• To show embedded content, such as Google Maps (functional cookies): The processing is based on your consent through our cookie banner, cf. Art. 6(1)(a).
• To prevent misuse and keep the website running: The processing is based on our legitimate interest in protecting our services, cf. Art. 6(1)(f).
• To comply with legal requirements: For example the requirement in the Danish Bookkeeping Act to keep accounting records, cf. Art. 6(1)(c).

4. Cookies

We use cookies and similar technologies on our website. When you first visit the site, a cookie banner lets you choose which categories of cookies you consent to:

• Necessary: Cookies the website needs in order to work, including to remember your cookie choices. These cannot be switched off.
• Analytics: Used to measure traffic and improve the website through Google Analytics, which is loaded via Google Tag Manager.
• Advertising: Used to make marketing more relevant to you.
• Functional: Used to show embedded third-party content, such as the Google Maps map on our contact page. If you decline these, the map is not shown.

You can change your cookie choices at any time through the cookie icon on the website.

5. Do we share your data with others?

We disclose or share your personal data with the following categories of data processors and partners, to the extent you have given consent or it is necessary to provide our services:

• Google (Analytics and Maps): For traffic measurement (only with consent to Analytics cookies) and to show the Google Maps map (only with consent to Functional cookies).
• Amazon Web Services (AWS): As the provider of the AI technology behind our image analysis products, see section 8.
• Cloudflare (Workers AI): As the provider of the AI language models we use in our internal processes, for example when we process and answer enquiries, see section 8.

We do not sell your personal data, and we do not share it with anyone beyond what is necessary to provide and improve our services.

6. Transfers to third countries

Some of our data processors, including Google, AWS and Cloudflare, may process data on servers outside the EU/EEA, for example in the USA. In those cases we make sure the transfer has a lawful basis, for example the European Commission's Standard Contractual Clauses, which oblige the recipient to protect your data to a level equivalent to EU rules.

7. How long do we keep your data?

We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to answer your enquiry, or for as long as the law requires. Data that forms part of accounting records is kept for at least 5 years after the end of the financial year concerned, as required by the Danish Bookkeeping Act.

8. Do we use AI-based products?

As part of our services, we offer products and features powered by artificial intelligence (AI) and machine learning, including image analysis. These are delivered through the third-party provider Amazon Web Services (AWS) AI. Your data processed in connection with the use of our AI products is shared with and processed by AWS in order to provide the functionality, and is processed in accordance with this privacy policy and our agreement with AWS.

We also use AI, including agentic AI, in our internal processes. For this we use language models provided by Cloudflare (Workers AI). If personal data is part of that work, for example when we process an enquiry from you, it is processed by Cloudflare as a data processor in accordance with this privacy policy and our agreement with Cloudflare. You can also read about our use of AI in our terms of use.

9. Your rights

Under the General Data Protection Regulation, you have a number of rights regarding our processing of your personal data:

• Right of access: You can find out which data we process about you.
• Right to rectification: You can have inaccurate data about you corrected.
• Right to erasure: In certain cases you can have your data erased before we would normally erase it.
• Right to restriction of processing: In certain cases you can have our processing of your data restricted.
• Right to object: In certain cases you can object to our processing of your data.
• Right to data portability: In certain cases you can ask to receive your data in a structured, commonly used and machine-readable format.

You can read more about your rights in the Danish Data Protection Agency's guidance on the rights of data subjects at www.datatilsynet.dk.

You can exercise your rights by contacting us at contact@iqopta.com, or by filling in and submitting a request here.

10. Security

We have implemented appropriate technical and organisational security measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

11. Contact and complaints

If you have questions about this privacy policy or our processing of your personal data, you are welcome to contact us at contact@iqopta.com or by post at the address in section 1.

You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) if you are dissatisfied with how we process your personal data. Its contact details are below:

We may update this privacy policy from time to time, for example if we change how we process personal data or if the law changes. The latest version is always available on this page.