PRIVACY NOTICE

Privacy should be understandable.

This notice explains how EU Anchor ApS processes personal data when you visit our website, send a contact or Pilot Program enquiry, subscribe to Product Updates or Press Updates, or report a security concern.

Controller: EU Anchor ApS Last updated: 6 November 2026 Contact: privacy@euanchor.eu

On this page

Controller Data we process Purposes & legal bases Recipients Retention Your rights

1. Who is responsible?

EU Anchor ApS is the data controller for the processing described in this notice.

Company EU Anchor ApS · CVR 46340191

Address Fruebjergvej 3, 2100 København Ø, Denmark

General contact contact@euanchor.eu · +45 3039 5500

Privacy contact privacy@euanchor.eu

2. What personal data do we process?

Depending on how you interact with us, we may process:

name, job title, organisation and professional contact details;
information you choose to provide through contact and Pilot Program enquiries or press enquiries;
information about your organisation and the crisis scenarios you ask us to discuss;
subscription records, list preferences, consent source/version, verification information and timestamps of requests, confirmations and withdrawals for Product Updates or Press Updates, as well as records of marketing sends where available;
security-report information, including reporter contact details, technical details, timestamps and IP addresses supplied as part of a vulnerability report;
limited technical data for website operation and security, including request logs (which may contain IP address, time, requested URL and user-agent), aggregate traffic statistics and temporary hashed-IP values used to limit form abuse.

We do not use information submitted through these website forms to create advertising profiles or sell personal data. Please avoid including confidential information, passwords, health data or other sensitive personal information in website enquiries.

3. Why do we process personal data?

General enquiries To respond to your enquiry and follow up on your requested business dialogue. Legal basis: GDPR Article 6(1)(f), our legitimate interest in responding to enquiries and developing business relationships; where you request steps towards a contract, Article 6(1)(b) may apply.

Pilot Program enquiries To discuss your requested Pilot Program enquiry, assess the relevance of an agreed pilot and manage the resulting dialogue. Legal basis: GDPR Article 6(1)(f), our legitimate interest in responding and assessing potential pilot relationships, or Article 6(1)(b) where you request steps towards a contract.

Product / press updates To send the specific Product Updates or Press Updates you choose. Legal basis: consent under GDPR Article 6(1)(a). Each list requires separate sign-up and email confirmation (double opt-in). You can withdraw consent at any time through the unsubscribe service or by contacting us. We retain limited evidence of consent and withdrawal on the basis of our legitimate interest in demonstrating compliance and handling claims (Article 6(1)(f)), subject to storage limitation.

Website security & operation To provide and protect the website, maintain technical logs, produce limited server-side traffic statistics, prevent automated form abuse and investigate incidents. Legal basis: GDPR Article 6(1)(f), our legitimate interests in service reliability, security and proportionate service measurement; where a legal duty applies, Article 6(1)(c).

Security reports To receive, investigate, remedy and coordinate responsible disclosure of suspected vulnerabilities. Legal basis: GDPR Article 6(1)(f), our legitimate interest in protecting our website and its users, and Article 6(1)(c) where we must meet a specific legal duty.

4. Service providers and data location

EU Anchor uses OVHcloud for website hosting and the website database, hosted in France. IONOS provides the website's transactional email transport for enquiries, confirmations and subscription messages. Subscription and consent records are stored in the website database; enquiries are also routed to authorised EU Anchor mailboxes. Access may be provided to appropriately authorised staff and advisers for the purposes described here.

OVHcloud also provides built-in server-side traffic statistics. EU Anchor has not installed a separate visitor analytics tag or advertising tracker. Technical request data may be processed by the hosting provider as part of service operation before statistics are aggregated.

Other recipients may include authorised hosting, email and technical support personnel, contracted service providers and public authorities where disclosure is legally required.

EU Anchor prioritises European infrastructure, data protection and operational control in the selection and management of its service providers. Our providers operate under applicable GDPR data processing agreements.

This Privacy Notice covers our public website and related business communications. EU Anchor Crisis Workspace is a separate service with its own European sovereignty requirements covering hosting, data, operations, administration and access control.

5. How long do we keep information?

We apply the following retention policies to the information we control, subject to case-specific necessity, applicable legal duties and the establishment, exercise or defence of legal claims. The exact retention periods for OVHcloud and IONOS technical logs depend on the applicable services and provider settings and should be confirmed separately.

Contact enquiriesNormally up to 12 months after the last relevant exchange, unless a continuing relationship or a legal reason requires a different period.

Pilot enquiriesNormally up to 24 months after the last relevant exchange, unless a continuing pilot dialogue or legal reason requires a different period.

Unconfirmed subscriptionsNever-confirmed, pending requests are normally removed after 30 days, provided there is no earlier confirmed or withdrawn consent history or recorded marketing activity requiring preservation. Requested-only history without an associated subscription or prior consent evidence is subject to the same 30-day rule.

Active subscriptionsWhile you remain subscribed and the list is in use; you can unsubscribe at any time.

Withdrawn subscriptions and consent historyLimited evidence is reviewed individually and may normally be retained for up to 24 months after withdrawal or the last relevant marketing communication, whichever is later, where necessary to demonstrate compliance or address claims. These records are not deleted by the automatic cleanup and are subject to manual review and minimisation.

Form abuse preventionTemporary hashed-IP form-throttling entries are automatically deleted after 7 days. Expired unsubscribe-request records and their one-time tokens are automatically removed after expiry.

Provider logs and security reportsHosting and email transport logs follow the relevant provider settings and contractual retention arrangements; their precise retention periods require separate verification. Security reports are reviewed according to investigation, remediation and legal-claim needs, with deletion or anonymisation when no longer necessary.

How deletion works: EU Anchor operates a scheduled daily database cleanup for four limited categories: hashed-IP form-throttling entries older than seven days; expired unsubscribe-request records; pending sign-ups older than 30 days that have never been confirmed or used for marketing and have no prior consent or withdrawal history; and orphaned, requested-only consent events older than 30 days without corresponding subscription or prior confirmed/withdrawn evidence. The cleanup does not delete active or withdrawn subscriptions, confirmed or withdrawn consent history, enquiry emails, provider logs or backups. These other records remain subject to manual retention review and deletion or anonymisation when no longer necessary, taking account of legal obligations, claims and applicable retention criteria. Deletion requests are assessed individually.

6. Automated decision-making

The website is not used to make solely automated decisions about individuals that produce legal or similarly significant effects.

7. Your rights

Subject to the conditions in the GDPR, you may have the right to request access to your personal data, correction, deletion, restriction of processing, data portability and to object to processing based on legitimate interests.

Where processing is based on consent, you can withdraw that consent at any time without affecting processing carried out before withdrawal.

To exercise your rights, contact privacy@euanchor.eu .

8. Complaints

You may lodge a complaint with the Danish Data Protection Agency (Datatilsynet) if you believe EU Anchor's processing of personal data does not comply with applicable data-protection law.

9. Website forms and update subscriptions

For Pilot Program enquiries, if you arrive via a campaign link, the form may include source information from the link (such as UTM source, medium and campaign). This is submitted only when you choose to send the enquiry; it is not collected through a separate tracking request.

Website forms are designed to submit information directly to EU Anchor without third-party advertising or marketing scripts. Abuse-protection measures are used only to protect the service and are not used to create advertising profiles.

For Product Updates and Press Updates, EU Anchor uses double opt-in: your subscription becomes active only after you confirm the email address. The two lists are managed separately. You can request withdrawal through Manage your email preferences. A limited consent and withdrawal history may be retained as described above.

10. Are you required to provide information?

Submitting a website enquiry or subscribing to updates is voluntary and is not a statutory requirement. Fields marked as required in a form are needed to handle that particular request; without them, we may be unable to respond or process the subscription. Any additional message content is optional. Supplying information for a pilot discussion does not itself create a contractual commitment.

We generally receive the information directly from you. If you include details about other people, we will assess any additional information obligations that apply under GDPR Article 14.

11. Changes to this notice

We will update this notice when our processing changes materially. The current version and date will always be published on this page.