Plain-language summary
ColleaiQ collects the minimum information needed to reply to your message and to operate pilot engagements. In practice that means the emails you send us and the standard server logs kept by our hosting provider. The site runs no analytics product and sets no tracking cookies.
Our site and email are hosted in the EU. You can ask for a copy, a correction, or full deletion at any time by writing to christofferdreist@colleaiq.dk.
What we collect
Two categories of data, nothing else. First, the emails you send us: the contact form opens a message in your own email client (your name, organization, and what you write), which reaches us as ordinary email, along with any reply chain that follows.
Second, standard server logs: our hosting provider records basic request data such as IP address, timestamp, and the page requested, the same as any web host. We run no analytics product, no behavioural profiling, no cross-site tracking, and no advertising pixels.
Why we collect it
Two reasons. To reply to your message, which is the lawful basis of taking steps at your request before entering into a contract (GDPR Article 6(1)(b)). And to operate pilot engagements, which falls under contract performance once a pilot agreement is signed.
Server logs rely on legitimate interest (Article 6(1)(f)), limited to keeping the site secure and operational. We do not use them to profile visitors.
How we store it
Our website and email run on Simply.com, a Danish hosting provider, with data held in the EU. Access to the mailbox and the hosting account is limited to ColleaiQ staff.
Pilot data (the documents, traces, and verdicts a customer would process through the platform) is governed by the pilot agreement, which sets where it is stored and who can reach it. The default is that it stays in the customer's region.
How long we keep it
The emails you send us are kept for the duration of the engagement, plus up to twelve months for follow-up. After that window, they are deleted.
Pilot data is governed by the pilot agreement. The default is that all customer data is returned and destroyed within thirty days of the engagement closing.
Your rights
Under GDPR Articles 15 to 22 you have the right of access, the right to rectification, the right to erasure, the right to restriction of processing, the right to data portability, the right to object, and the right not to be subject to a decision based solely on automated processing.
You also have the right to lodge a complaint with the Danish Data Protection Authority (Datatilsynet) if you believe ColleaiQ has mishandled your data.
How to exercise your rights
Write to christofferdreist@colleaiq.dk with the subject "GDPR request". Include the right you wish to exercise and enough detail for us to identify the records involved.
We acknowledge every request within 48 hours and respond substantively within thirty days, the statutory window. There is no fee for the first request in any twelve-month period.
Sub-processors
One provider handles our infrastructure: Simply.com, a Danish hosting company, runs this website and the email for the colleaiq.dk domain, with data held in the EU.
If a pilot engagement requires additional sub-processors (for example, a specific model provider), they are listed in the pilot's Data Processing Addendum and approved in writing before any data is shared.
Changes to this policy
Material changes are announced at the top of this page with a revised "last updated" date. Pilot customers receive direct notice by email at least thirty days before any change that affects how their data is processed.
Version history. v1.0 (June 2026): initial publication covering site, contact form, and pilot engagements.