Privacy policy

Who is responsible

Discoverable is run by Concensur, CVR 40069674. Concensur is the data controller for the personal data we process about you. You can always contact us at hej@discoverable.dk.

When you request a free AI snapshot

We store what you enter in the form: name, email, phone number, company, CVR number, website, industry, what you sell, where your customers are, number of employees, competitors and your questions. We also store which consents you gave, and when.

We use this to make your snapshot and contact you about it. The legal basis is your consent (Article 6(1)(a) GDPR), which you give with the required checkbox. If you also said yes to newsletters and offers, we send them to your email until you unsubscribe. You can withdraw consent at any time by emailing us.

To stop abuse, we count how many requests come from the same IP address and email. For that we store only a one-way hash, never the address itself.

Question suggestions and company lookup

When you type a company name in the form, we look it up in the Danish CVR register at the Danish Business Authority (Erhvervsstyrelsen) and show suggestions. If you press the button that suggests questions, we send the company details from the form to an AI service (OpenAI by default), which suggests questions. Your name, email and phone number are not sent. To limit the number of suggestions per visitor, we store a one-way hash of your IP address, which is deleted after two days.

When we test your questions in AI services

For snapshots, analyses and our monthly programmes, we ask your questions to ChatGPT (OpenAI), Gemini (Google) and Claude (Anthropic) through their APIs. An AI model then reads the answers and judges whether your company is named and recommended. We send the questions and the company and competitor names needed to judge the answers, but not your contact details. So please keep personal data out of the questions.

Cookies and Google Analytics

We use Google Analytics to see how many people visit the site and which pages they read. Google Analytics is loaded only if you accept in the cookie banner. Only then does Google set cookies (_ga and _ga_<id>), which are kept for up to two years. We do not use Google Analytics data for advertising. The legal basis is your consent.

If you decline, we set no analytics cookies. We remember your choice in your browser, and you can change it at any time under Cookie settings at the bottom of the page. If you decline after accepting, we delete the Google Analytics cookies again. The fonts on the site are served from our own server, so they send nothing to anyone else.

Who we share data with

We never sell your data. We use these providers, which process data on our behalf:

• Google Firebase and Google Cloud: hosting the website, server functions and the database of requests. Functions and database are in the EU.
• Google Workspace: our email, including when we send you a snapshot or a report.
• Google Analytics: visitor statistics, only if you accepted cookies.
• OpenAI, Google and Anthropic: the AI services we ask questions to.

Company lookups go to the CVR register at the Danish Business Authority, a public authority.

Transfers outside the EU

OpenAI, Anthropic and Google are US companies, and some data may be processed in the United States. Transfers rely on the EU-U.S. Data Privacy Framework where the company is certified, and otherwise on the European Commission’s standard contractual clauses.

How long we keep data

• Snapshot requests: up to 12 months after we send the snapshot, unless you become a customer.
• Customers: for as long as we work together, and accounting records for five years as required by the Danish Bookkeeping Act.
• Newsletter sign-ups: until you unsubscribe.
• Google Analytics: data is deleted after two months.

Your rights

You have the right to access the data we hold about you and to have it corrected, deleted or restricted. You can object to our processing and ask for your data in a portable format. Email hej@discoverable.dk and we will reply within a month.

If you are unhappy with how we handle your data, you can complain to the Danish Data Protection Agency (Datatilsynet) at datatilsynet.dk.

Changes

We update this policy when we change how we process data. The date at the top shows the latest change.