Privacy policy

1. Who is responsible

The data controller is Enterfield, Sole proprietorship, CVR 41 20 40 79. Owner: Stefan Alin Maestro. Address: Stevnshøjvej 4A, 5800 Nyborg, Denmark. Telephone: +45 50 12 88 47. Email: hello@enterfield.dk. Data-protection requests: privacy@enterfield.dk.

Field is the product. This site does not collect payment, create user accounts, or operate a customer database. This policy describes the processing that actually happens now, and the processing that will apply once paid Fields are accepted.

We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and the Danish Data Protection Act (databeskyttelsesloven).

2. What we process — and why

Enquiries you send us

If you telephone us or write by post, we process your name, telephone number, the content of the message, a return address if you give one, and any plan you mention. Purpose: to answer you. Legal basis: GDPR Article 6(1)(b) (steps at your request before a contract) and Article 6(1)(f) (legitimate interest in answering correspondence). We keep correspondence only as long as the dialogue requires, and bookkeeping copies if a contract later exists for five years from the end of the financial year (bogføringsloven).

On-device Field, language and cookie choice

The live Field, your language, and your cookie choice can be stored in local storage on your device. This does not send a profile to Enterfield. Legal basis: GDPR Article 6(1)(f) for the strictly necessary operation of the site, and — where the Cookiebekendtgørelse requires it — consent under GDPR Article 6(1)(a) for any non-essential storage. See the cookie policy.

Technical logs from hosting

The site is hosted by Vercel Inc. (processor / host). The host may process IP address, user agent, timestamps and similar security logs to deliver and protect the site. Legal basis: Article 6(1)(f). Retention is short, typically days to a few weeks, unless a security incident requires longer.

What we do not do today

• No user accounts, passwords, or customer profiles.
• No payment data — we do not take payment on this site.
• No contact form that stores or emails your message.
• No advertising networks, no social pixels, no sale of data.
• No automated decision-making with legal or similarly significant effect (GDPR Article 22).
• Statistics and marketing storage are off unless you opt in — and no such tools are loaded on this site today even if you do.

3. Recipients and transfers

Hosting: Vercel Inc.. EU region where available; US parent with Standard Contractual Clauses. Where data may reach the United States, we rely on the European Commission’s Standard Contractual Clauses and any applicable adequacy decision.

We may share data with professional advisers (lawyers, accountants) under confidentiality, or with public authorities if the law requires it.

4. Your rights

You have the right to:

• Access (Article 15)
• Rectification (Article 16)
• Erasure (Article 17)
• Restriction (Article 18)
• Data portability (Article 20), where applicable
• Object to processing based on legitimate interests (Article 21)
• Withdraw consent at any time, without affecting prior lawful processing

Call +45 50 12 88 47 or write to privacy@enterfield.dk or Stevnshøjvej 4A, 5800 Nyborg. We respond within one month, extendable by two months for complex requests.

You may lodge a complaint with the Danish Data Protection Agency — Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, https://www.datatilsynet.dk, dt@datatilsynet.dk, +45 33 19 32 00. If you live in another EU/EEA country you may also contact your local supervisory authority.

5. Children

Information society services offered directly to a child in Denmark require consent from age 13 (databeskyttelsesloven § 6). This site is aimed at adults and organisations. We do not knowingly collect data from children under 13.

6. Security and incidents

We apply appropriate technical and organisational measures (HTTPS, minimisation, no unnecessary databases). Personal data breaches are assessed under GDPR Articles 33–34 and, where required, notified to Datatilsynet within 72 hours.

7. Changes

We will update this policy when our processing changes — for example when paid Fields open, or new processors are used. The date at the top is the current version.