Privacy policy

Data controller

IQ Connect ApS - registered as Inqubo Group ApS, company registration (CVR) number 44319020 - is the controller for the processing described here.

Questions about this policy, or about the data we hold on you, go to our group mailbox:

Email us

What the site does not collect

iq-connect.io is static files. There is no form, no login, no database and no backend to send anything to. This is not a setting we switched off - it was never built.

• No cookies. The site sets none at all, not even a "necessary" one.
• No analytics. No Google Analytics, no pixels, no visitor counting.
• No trackers, no ad networks and no social media sharing.
• No third-party requests. Fonts, icons, images and the one JavaScript file are served from our own domain.
• No storage in your browser. Nothing is written to localStorage, sessionStorage or anywhere else.
• No contact form. Contact goes by email and phone, on your initiative.

The single JavaScript file on the site assembles our email address in your browser, so it is not sitting in the HTML where robots harvest addresses. It sends nothing anywhere.

Cookies

There are none. iq-connect.io sets no cookies and uses no other form of storage in your browser. That is also why there is no cookie banner to dismiss: there is nothing to consent to, or refuse.

If you ever meet a consent box on this domain, something has changed. It will be written in this policy, and the date at the top will have moved.

Server logs

The web server writes one line per request. It is the only record created when you read the site:

• The visitor's IP address - the real one, passed to us by Cloudflare
• The time of the request
• The address requested and the server's response code
• The number of bytes sent
• The referring page and the browser's user agent, if they are sent

The purpose is operation and security: seeing whether the server answers, finding faults, and being able to act on abuse. The processing rests on our legitimate interest in keeping the site up and secure - Article 6(1)(f) of the GDPR.

The log is not used for analytics, profiling or marketing. It is not combined with other data, and it is not shared with anyone. It is kept only as long as it is needed for operation and security, and is then deleted.

We generally cannot tell who an IP address belongs to, and we do not try to find out.

Cloudflare in front of the site

The site sits behind Cloudflare, which terminates the encrypted connection, filters traffic and serves the page from a server near you. All traffic to iq-connect.io therefore passes through Cloudflare before it reaches our own server.

In doing so, Cloudflare processes your IP address and technical details of the request, among other things to protect against bots and denial-of-service attacks. Cloudflare is our processor and acts on our instructions.

• Cloudflare's own privacy policy

If you write or call

If you write to us, we receive what you send: typically your name, email address, phone number and the content of your enquiry. The mailbox is a group mailbox, readable by those of us who answer enquiries.

Our email runs on Google Workspace, and Google is the processor for it. The domain has SPF, DKIM and DMARC configured, so a recipient can verify that mail from us really is from us.

The purpose is to answer you and, where it goes that way, to enter into an agreement. The processing rests on Article 6(1)(b) where it concerns an agreement or the steps before one, and otherwise on our legitimate interest in answering enquiries, Article 6(1)(f).

Correspondence is kept as long as it is relevant to the enquiry or the customer relationship. Where it becomes part of an accounting record, it is kept for as long as the Danish Bookkeeping Act requires.

If you call, we do not record the conversation. Your number may appear in the phone's call list and with the telephone operator.

Who receives the data

No one beyond the two suppliers who run the site and the mail:

• Cloudflare, Inc. - TLS, traffic filtering and delivery of the page
• Google Ireland Limited - email on Google Workspace

We do not sell personal data, do not trade it, and do not use it for marketing or advertising. Data is disclosed to public authorities where we are legally obliged to do so - not otherwise.

Transfers outside the EU and EEA

Cloudflare and Google are US groups, so processing may take place outside the EU and EEA. Transfers rely on those suppliers' own transfer mechanisms - the EU-US Data Privacy Framework and, where relevant, the European Commission's standard contractual clauses.

Your rights

You have the right to access the data we process about you, to have it corrected or erased, to have the processing restricted, to object to processing that rests on a legitimate interest, and to receive the data you gave us yourself in a machine-readable format.

Write to us if you want to use one of them - we answer within a month. For server logs there is a practical limit: we cannot tie a log line to a named person. If you need something from the log, we will have to ask for the time and the IP address it concerns.

If you are unhappy with how we process your data, you can complain to the Danish Data Protection Agency: Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, Denmark, datatilsynet.dk.

No profiling, no automated decisions

We do not use your data for profiling, and no decisions about you are made solely on the basis of automated processing.

Customers and installations

This policy covers the website. If you are a customer, the controller and its data live on the installation in your own building, and the processing there is set out in the agreement we have with you - not here.

The "Security and privacy" section on the front page describes how the solution is built. That is marketing about the product, not this policy.

Changes

If we change what the site does, or who processes data for us, this page is updated and the date at the top moves with it.