Privacy policy

How MKP Digital collects, uses, stores and protects personal data.

Version
1.2
Effective from
8 October 2026
Document owner
MKP Digital

Data controller

Mathias Kjær Pedersen, trading as MKP Digital, CVR 45731170, Trygsvej 1.D, 8230 Åbyhøj, Denmark. Phone: +45 29 86 77 47. Email: kontakt@mkpdigital.dk.

You may contact me at any time with questions about the processing of your personal data.

Data collected

When you use the contact form, I process the information you provide. If you contact me by email, I process the information included in your email. If the dialogue becomes a client relationship, I also process necessary company, quotation, agreement, project communication, invoicing and payment data.

  • Name and email
  • Selected enquiry category
  • Project or problem description
  • Optional budget
  • Selected form language (Danish or English)

Purposes and legal bases

Data is used to respond to and follow up on enquiries, prepare quotations, enter into and perform agreements, administer client relationships, invoice and comply with legal obligations.

Pre-contractual steps and contract performance rely on GDPR Article 6(1)(b). Statutory record keeping relies on Article 6(1)(c). Operation, security and legal claims rely on the legitimate-interest basis in Article 6(1)(f).

Spam and abuse protection

When the contact form is submitted, the email address and client IP address are used temporarily to limit repeated submissions and protect against abuse under GDPR Article 6(1)(f). They are held only as temporary counters in server memory for no more than one hour and are not stored in a separate database for this purpose.

Retention

Enquiry data is retained while needed to handle and follow up on the dialogue and then for up to three years unless you request earlier deletion.

If an agreement is entered into, related data may be retained throughout the client relationship and afterwards where needed for documentation, legal claims or applicable law. Accounting records are retained for the period required by Danish bookkeeping law.

Processors and international transfers

Data is not shared with third parties for commercial purposes. Vercel Inc. hosts the website, Apple Inc. (iCloud Mail) sends contact-form email, Functional Software Inc. (Sentry) provides technical error and performance monitoring, and OpenAI Ireland Ltd. processes public AI-assistant content when the assistant is used.

Where personal data is transferred outside the EU/EEA, a valid transfer mechanism is used, such as an adequacy decision, the EU-U.S. Data Privacy Framework for participating organisations or EU Standard Contractual Clauses with necessary supplementary measures.

MKP Digital's internal use of AI services

MKP Digital may use external AI services for code, analysis, documentation, testing and quality assurance. Identifiable client or contact information is not entered into this internal use.

AI assistant on the website

When you use the AI assistant, the message you write and the necessary visible conversation context are sent to the OpenAI API to generate an answer. You do not need to provide a name or email address, but content may contain personal data if you write it yourself. Do not share passwords, API keys or other secret login credentials.

MKP Digital does not store a chat transcript in a database. History exists only in browser runtime memory while the page is open and is sent with the current chat request. API calls use store: false, and sharing inputs and outputs for product improvement is disabled for this production use.

A pseudonymous browser identifier and IP address are used temporarily for abuse protection, rate limiting and security. OpenAI Ireland Ltd. processes chat content on MKP Digital's behalf. Processing relies on GDPR Article 6(1)(f) and, where the chat is used for a specific pre-contractual enquiry, may also rely on Article 6(1)(b).

When MKP Digital acts as a processor

Where MKP Digital processes personal data on behalf of a client as part of a client solution, the client is normally the controller and MKP Digital the processor. Processing is governed by the applicable data processing agreement and the client's documented instructions.

Server logs

Vercel may automatically record technical information such as IP address, browser type, time of visit and pages viewed. Logs are used only for operation and security and are deleted according to the provider's standard policy.

Error monitoring

Sentry receives limited error diagnostics, page routes without query strings or fragments, browser and operating-system information, release, environment, operational tags, sampled server response times and HTTP status. Sentry may infer an approximate geographical area from the network connection. Necessary error monitoring, server performance and external availability checks rely on the legitimate interest in a stable and secure website under GDPR Article 6(1)(f).

Optional browser performance and Web Vitals measurements rely on consent under GDPR Article 6(1)(a), with around 20 percent of flows sampled. You can withdraw consent through Cookie settings at the bottom of the page by selecting Necessary only. Server traces use a default 20 percent sampling rate and respect sampling inherited from linked traces.

Session Replay is disabled. Automatic collection of user information, cookies, headers (except the browser User-Agent), request bodies, local variables and AI input/output is disabled. Our operational errors do not include form or chat content. IP addresses are used for network transport but should not be stored in Sentry events. Data is sent to Sentry's EU infrastructure. Error messages can accidentally contain information, so both SDK filtering and Sentry data scrubbing are applied.

Cookies

Your optional browser-measurement preference is stored in localStorage and is valid for 180 days. Expired preferences are removed when read again. The entry may remain longer if you do not return or clear the website's browser data. Browser performance requires consent. We do not use Session Replay, marketing cookies or cross-visit profiling. See the cookie policy for details and withdrawal options.

Your rights

Subject to the conditions in data-protection law, you may exercise the following rights:

  • Access the personal data MKP Digital holds about you
  • Correct inaccurate data
  • Request erasure
  • Restrict or object to processing
  • Receive relevant data in a structured format where data portability applies
  • Withdraw consent where processing relies on consent
  • Complain to the Danish Data Protection Agency (Datatilsynet)

Contact

Questions about personal-data processing can be sent to kontakt@mkpdigital.dk or through the contact page.

Applicable framework

MKP Digital processes personal data in accordance with the General Data Protection Regulation (GDPR) and Danish data-protection legislation.

Summary

MKP Digital processes the information necessary for enquiries, agreements and statutory administration. The public AI assistant sends visitor-written messages and necessary visible context to OpenAI to generate answers; it has no persistent MKP Digital chat database. No tracking cookies are used, and data is not shared for commercial purposes.