Privacy Policy
Last updated: 30 April 2026
1. Who is responsible for your data
The data controller is:
KPMG P/SCVR no. DK25578198
Dampfærgevej 28
2100 Copenhagen Ø
Denmark
For privacy questions or to exercise your rights, contact us at info@optomo.ai.
2. What we collect, why, and on what legal basis
There are three sources of personal data on this site.
2.1 Website analytics
We use a third-party web analytics provider, hosted in the EU, to understand how visitors use our website. This helps us improve content, navigation, and performance.
The analytics provider stores a unique identifier in your browser to recognise you across pages and visits. If you submit a form on our website, we associate that identifier with the contact details you provide so that we can understand the journey that led to your enquiry and follow up appropriately. We do not record sessions, and we do not share your behavioural data with third parties.
- Data processed: pages visited, referrer, approximate location (country/region), device and browser type, interaction events (e.g. button clicks), and (after form submission) the contact details you provided.
- Legal basis: your consent under GDPR Article 6(1)(a). Analytics are loaded only after you accept them in our cookie banner. You can withdraw your consent at any time through the cookie settings link in our website footer.
- Retention: up to 12 months from your last visit.
2.2 Contact form submissions
When you submit our contact form, we process the information you provide so we can respond to you.
- Data processed: name, work email, company, and the content of your message; date and time of submission.
- Legal basis: GDPR Article 6(1)(b) (steps taken at your request prior to entering a contract) and/or Article 6(1)(f) (our legitimate interest in responding to business enquiries).
- Retention: up to 24 months from your last interaction with us, after which the submission is deleted unless we have entered into a contractual or other ongoing relationship that requires longer retention.
2.3 Server and security logs
Our hosting provider records technical request data (IP address, timestamp, requested URL, response status, user agent) for security monitoring, abuse prevention, and troubleshooting.
- Legal basis: legitimate interest under Article 6(1)(f), namely the secure operation of our service.
- Retention: up to 30 days, unless retained longer in connection with a specific security incident.
3. Cookies and similar technologies
We use two categories of browser storage on this website.
Strictly necessary (no consent required):
- A preference cookie that records your cookie banner choice.
- Session cookies used to operate our content management system for our staff. These are not set when you browse the public website as a visitor.
Analytics (loaded only with your consent):
- Our analytics provider stores a unique identifier in your browser (as a cookie and/or in browser local storage) so that your interactions with our site can be associated with each other and, after a form submission, with the contact details you provided. This is set only after you accept analytics in our cookie banner.
You can change or withdraw your consent at any time through the cookie settings link in the website footer. Withdrawal does not affect the lawfulness of any processing carried out before withdrawal.
We do not use advertising cookies, profiling cookies, or cross-site tracking technologies.
4. Recipients and sub-processors
We share personal data only with the providers that operate our website and communications. Each operates under a written data processing agreement with us. The categories of recipients are:
| Category | Purpose | Location of processing |
|---|---|---|
| Cloud hosting provider | Web and database hosting | EU (Amsterdam) |
| Web analytics provider | Website analytics | EU |
| Transactional email provider | Sending us email notifications when you submit the contact form | United States |
A current list of named sub-processors is available on request from info@optomo.ai.
We do not sell personal data, and we do not share it with third parties for their own marketing purposes.
5. International transfers
Email notifications generated by contact form submissions are delivered through a transactional email provider that processes data in the United States. The provider is certified under the EU-US Data Privacy Framework ("DPF"), which the European Commission has recognised as providing an adequate level of protection for personal data transferred from the EU to certified US organisations. Transfers therefore take place on the basis of that adequacy decision. The provider additionally maintains the EU Standard Contractual Clauses in its data processing agreement as a fallback safeguard. You can request a copy of the relevant safeguards by contacting us.
All other processing of your personal data takes place inside the European Union.
6. Your rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erase your data ("right to be forgotten") in the circumstances set out in Article 17.
- Restrict processing in the circumstances set out in Article 18.
- Object to processing carried out on the basis of legitimate interest, including any direct marketing.
- Data portability for data you have provided to us, where processing is based on consent or contract.
- Withdraw consent at any time, where processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, email us at info@optomo.ai. We will respond within one month.
You also have the right to lodge a complaint with a supervisory authority. In Denmark this is Datatilsynet (datatilsynet.dk). You may also complain to the supervisory authority in the EU member state where you live or work.
7. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top reflects the most recent change. Material changes will be communicated on the website before they take effect.