Privacy & data protection
Privacy policy
Viewed on
This document sets out how Quazrelxkriz (“we”, “us”) processes personal data in connection with the public website at quazrelxkriz.ddd. It is written to align with the General Data Protection Regulation, the ePrivacy rules as they apply to our operations, and practical expectations in Ireland and nearby markets.
Scope and who we are
The controller of personal data for this information-only site, unless a separate data processing agreement with your employer states otherwise, is Quazrelxkriz, with a correspondence address at Klampenborgvej 215, 2800 Kongens Lyngby, Denmark. The policy covers visitors, prospective clients, journalists, and anyone who uses the contact form, reads legal pages, or toggles the cookie tool. It does not replace a signed contract; where a service agreement has stricter or different terms, that agreement prevails for the work it describes, and this page still explains the baseline for the public website.
What we collect and why
Technical and usage data
Server logs, content delivery tools, and security systems may process IP address, time of request, path, result code, and browser or device identifier in an aggregated or pseudonymous form. We use that data to keep the service available, to detect misuse, and to plan capacity. Where analytics cookies are on with your consent, additional event data may be collected in line with the cookie policy.
Form and business inquiries
When you use the contact form, we may receive your name, email, free-text message, and the fact that you ticked the required awareness box. We use that information only to read your question, to reply, and to file a proportionate internal record if a commercial relationship is discussed.
We do not ask you for special categories of data through this form. If you choose to type health, belief, or union information without being asked, we will delete or anonymise the excess material where the law allows, and we will ask you to re-send a neutral version of your question if a reply is still required.
Leads, advertising, and interaction with ad platforms
If you reach us through a paid ad (for example a search or display campaign), we may not know which creative you saw, but the same contact form and the same terms on marketing and fair representation apply. We do not use the form to build sensitive health categories for ad targeting, and we do not sell or rent your enquiry as a “lead” list to other brands. If we use a third-party ad platform, we may receive aggregated reports that do not identify you, as described in the cookie policy for any optional tags you have enabled. Denmark’s data protection and marketing rules, together with the GDPR, set the standard we aim for, including minimising data and being clear about who we are in every channel.
Legal bases and consent
Where the GDPR applies, the legal basis for form handling is often Article 6(1)(b) or (f): steps at your request, or a legitimate interest in running a small studio. Where the law or our risk assessment says consent is appropriate for a particular channel, we will ask in plain language, separate from the general terms, and you may withdraw that consent at any time without affecting the lawfulness of past processing. Cookie choices are stored separately, as described in the cookie page.
Retention and where data sits
We keep an inquiry in active correspondence files until a thread clearly ends, then in a restricted archive. The usual outer bound is two years from the last substantive email unless a longer period is required for tax, a dispute, or a signed customer agreement. Backups of mailboxes may last longer in encrypted storage but are overwritten on a rolling basis.
Logs at infrastructure providers are governed by their documentation; we expect retention from a few days to a few months depending on the product tier, and we choose regions and settings that default to the shortest practical window.
Security measures
We use transport layer security on the public site, access barriers on mailboxes, device encryption where the operating system supports it, and vendor review before sharing credentials. No online channel is free of risk; you should not send high-risk information until we have both agreed a secure channel, such as an encrypted file exchange, where that is available.
Your rights and how to use them
You may request access, rectification, erasure, restriction, portability, and objection under the conditions set out in Articles 15 to 22 GDPR. We respond within one month in ordinary cases, or we explain why a longer period is required. If we need to check your identity, we will ask for proportionate information and will not use that request to harvest extra data. If a request is manifestly unfounded or excessive, we may charge a reasonable fee or refuse, as the law allows.
Supervisory authority and complaints
If you are in Ireland, you may contact the Data Protection Commission or another competent authority. If the processing is primarily in Denmark, the Danish Data Protection Agency is also available. We welcome the chance to resolve issues directly first through the address below.
Children and schools
Our workday nutrition material is for adults. We do not deliberately collect data from children, and the contact form should not be used on their behalf for marketing. Educational institutions with their own legal duties should use official procurement routes.
Changes, questions, and contact
We update this page when our processing, tools, or legal opinions change, and the hero date you see is generated in your browser at load time to give you a simple sense of which calendar day you are reading. It does not by itself form a version stamp for regulatory filings; the text below still controls.