How we process your personal data

1. Data Controller

Company: IT IS DONE
CVR: 44211181
Address: Nørredige 32, 6893 Hemmet, Denmark
Email: kontakt@itisdone.dk
Phone: +45 71 75 00 14

2. What Information Do We Collect?

We only collect information necessary to process your inquiry, provide quotes, and deliver our services (private cleaning, summer house and Airbnb cleaning).

• Contact information: name, phone number, email.
• Task information: address/area, property type, desired date/time, any message fields you fill out.
• Technical information: IP address, device/browser information, and cookies (only if you consent via the cookie banner).
• Google lead forms: If you fill out a lead form directly in a Google ad, we receive the information you enter there.

3. Purpose and Legal Basis (GDPR)

We process personal data for the following purposes:

• Responding to inquiries and quotes (GDPR Art. 6(1)(b) – to enter into/prepare a contract).
• Customer and task management, including planning and follow-up (GDPR Art. 6(1)(b) and/or Art. 6(1)(f) – legitimate interest in operations).
• Marketing and ad measurement (GDPR Art. 6(1)(a) – consent, when required, e.g., via cookies/marketing tags).
• Compliance with legal requirements, e.g., accounting records for invoicing (GDPR Art. 6(1)(c)).

4. Cookies, Tracking, and Consent

We use a cookie banner (Klaro) to obtain consent where required.

• Necessary cookies may be active to make the website function.
• Statistics/marketing cookies (e.g., Google tags) are only activated if you accept them in the cookie banner.

Google Ads / Google Tag

We use Google Ads and associated Google tag to measure the effectiveness of our ads (e.g., clicks and conversions) and to improve advertising. If you have consented to marketing/advertising, Google may process data in accordance with their policies.

Read more at Google: Google's Privacy Policy.

5. Lead Forms (Google Lead Forms)

If you fill out a lead form directly in an ad (Google Lead Forms), your information is sent to us via Google Ads. We use the information to contact you about your cleaning needs.

• The information typically includes name, email and/or phone number, as well as any answers you provide.
• Storage: Leads may be available in Google Ads for a limited period (typically up to 30 days) depending on Google's features and settings.

6. Recipients and Data Processors

We only share your information when necessary:

• IT providers (hosting, email, website tools) as data processors.
• Advertising platforms (e.g., Google) in connection with measurement/advertising – typically based on consent for marketing.
• Public authorities if we are legally obligated.

7. Transfer to Countries Outside the EU/EEA

Some providers (e.g., Google) may process data outside the EU/EEA. In such cases, this is done on the basis of relevant transfer mechanisms, such as the EU Commission's Standard Contractual Clauses (SCC) and supplementary measures where required.

8. Retention and Deletion

We retain personal data for as long as necessary for the purpose:

• Inquiries/quotes: typically up to 12 months after last contact, unless an agreement is entered into.
• Customer relationships: for the duration of the customer relationship and a reasonable period after (typically 3-5 years), depending on documentation needs.
• Accounting records: retained according to applicable accounting rules.
• Cookie/marketing data: according to consent and in accordance with the relevant platforms' and our cookie settings.

9. Your Rights

You have the following rights under GDPR:

• Right to access your information.
• Right to rectification of incorrect information.
• Right to erasure (in certain cases).
• Right to restriction of processing.
• Right to data portability (in certain cases).
• Right to object to processing based on legitimate interest.
• Right to withdraw consent (if processing is based on consent). Withdrawal does not affect the lawfulness of prior processing.

Contact us at kontakt@itisdone.dk to exercise your rights.

10. Complaints

If you wish to complain about our processing of your personal data, you can contact the Danish Data Protection Agency (Datatilsynet).

Datatilsynet: www.datatilsynet.dk

11. Security

We use appropriate technical and organizational security measures to protect your information against unauthorized access, loss, or misuse.

12. Changes

We may update this privacy policy as needed. The latest version will always be available on our website.