Legal

Privacy Policy

How we process your personal data

Data controller

Kibo Consulting ApS
CVR number: 46170385
Store Kongensgade 81D, 1th
1264 København
Email: sales@kiboconsulting.dk
Phone: +45 53635363

What information do we process?

We only process information relevant to operating the website, responding to inquiries, and providing the AI governance assessment. Assessment data includes your first and last name, work email, company, answers, locale, calculated result, processing acknowledgement, the separate report and follow-up choices, and campaign details from the link to the website. We also process technical information related to hosting and security, cookie consent choices, and aggregated analytics data if you accept analytics cookies.

Purposes and legal basis

We process the required assessment details to calculate and store a completed result after you acknowledge that processing. If you choose it, we also email the expanded report or contact you about the result. We process other information to respond to inquiries, operate and secure the website, perform web analytics with consent, and comply with legal obligations where applicable.

Recipients and processors

We use suppliers for website operation, assessment delivery, and contact flows, including Google, Google Firebase, and Resend. We do not disclose personal data to unrelated third parties unless legally required.

Transfers outside the EU/EEA

Some suppliers may process data outside the EU/EEA, for example in the United States. Where relevant, transfers are based on standard contractual clauses or another valid transfer mechanism.

Cookies

We use necessary cookies for website functionality and consent storage. Analytics cookies, such as Google Analytics cookies, are only used after consent. You can change or withdraw consent through Cookie settings in the footer.

Storage and deletion

We store information only as long as necessary for the purpose. Completed AI governance assessments are automatically deleted 12 months after completion, and incomplete responses are not stored in Firestore. Contact details, consent choices and answers are temporarily stored in the tab's sessionStorage so you can continue after a refresh. The draft and campaign details in sessionStorage are cleared once the assessment is saved or the tab's session ends. Contact inquiries are retained while relevant to the dialogue or documentation need. Technical logs are retained for a limited period according to supplier settings and security needs.

Your rights

You have rights under GDPR, including access, rectification, deletion, restriction, portability, and objection. Contact us to exercise your rights.

Updates

We update this privacy policy when our processing or applicable rules change. Latest update: September 2, 2026.

Complaint to the Danish Data Protection Agency

If you are dissatisfied with our processing of your personal data, you may complain to Datatilsynet.

Datatilsynet
Carl Jacobsens Vej 35
2500 Valby
Phone: 33 19 32 00
Email: dt@datatilsynet.dk
Website: www.datatilsynet.dk