Privacy
Privacy policy
For entria.io. The domain entria.dk forwards to entria.io and is covered by the same policy.
1. Data controller
Entria ApS
CVR 46725220
[email protected]
2. Purpose
This privacy policy describes how Entria ApS collects and processes personal data when you visit entria.io, and when you contact us through the contact form or by email.
3. What personal data we collect
3.1 When you visit the website
We use PostHog to understand how the website is used: which pages are visited, what is clicked, and roughly where visitors come from. How it runs depends on your choice in the cookie banner:
- Until you choose, and if you reject, PostHog is not loaded at all. Nothing is collected and nothing is sent to PostHog.
- If you accept, PostHog stores an identifier in a cookie and in localStorage, so that your visits are counted as the same visitor.
We do not record sessions, and we do not use the data for advertising. PostHog is reached through our own domain, so your browser does not contact PostHog directly. Fonts and scripts are served from our own server, not from third parties.
If you choose the light or dark theme, your choice is stored in your own browser (localStorage). It is not sent to us. Your answer in the cookie banner is stored the same way, so the banner does not ask again.
When you open a page, your request goes through Cloudflare, which protects the website against attacks and passes the request on to our server. Cloudflare and our server receive your IP address, because they need it to send the page to you. We do not keep access logs with IP addresses.
3.2 When you contact us
When you fill in the contact form, we collect:
- Your name, company and work email
- Your phone number, if you give it
- What you write about your Azure environment, if you write anything
The enquiry is sent as an email to [email protected], together with the time it was sent.
Like everything else on the website, the form passes encrypted through Cloudflare on its way to us. Cloudflare does not store what you write.
To protect the form against misuse, we use your IP address to limit how many enquiries can be sent from the same sender. The IP address is held only in the server's memory, for at most an hour, and is not stored.
If you email us directly, we process what you send.
3.3 If you say yes to an Azure review
After an intro call we typically offer an Azure review. It requires you to give our application Entria Discovery read access to your Azure tenant. That processing is not covered by this privacy policy. It is covered by our terms for the Azure review, which you accept before you give consent.
3.4 When you become a customer
When you become a customer of Entria, we process further data as described in the operating agreement and the data processing agreement. Processing of personal data in the customer's environment is not covered by this privacy policy, but by the data processing agreement.
4. Purposes and legal basis
| Purpose | Data | Legal basis |
|---|---|---|
| Delivering and protecting the website | IP address and the request itself (which page, your browser) | Legitimate interest, GDPR art. 6(1)(f) |
| Understanding how the website is used | Pages visited, clicks, browser and device type, approximate location from the IP address, and an identifier stored in a cookie | Consent, GDPR art. 6(1)(a) and the Danish cookie rules |
| Protecting the form against misuse | IP address, briefly | Legitimate interest, GDPR art. 6(1)(f) |
| Answering enquiries and following up on a possible collaboration | The data in section 3.2 | Legitimate interest, GDPR art. 6(1)(f) |
| Sales and customer relationships | Contact details and the agreements | Performance of a contract, GDPR art. 6(1)(b) |
| Bookkeeping | Accounting records | Legal obligation, GDPR art. 6(1)(c), under the Danish Bookkeeping Act |
Our legitimate interest is being able to answer the people who contact us, and keeping the website secure and available.
5. Recipients and data processors
We do not sell personal data, and we do not pass it on to others unless the law requires it. We use the following data processors:
| Data processor | What they do for us | Where the data is |
|---|---|---|
| Microsoft Ireland Operations Ltd. | Microsoft 365: the email with your enquiry is received and stored in our mailbox | EU/EEA |
| Microsoft Ireland Operations Ltd. | Microsoft Azure: hosting of the website and the contact form | EU/EEA (the Azure region Sweden Central, Sweden) |
| PostHog Inc. | Website analytics, as described in section 3.1 | EU (PostHog's EU cloud in Frankfurt, Germany) |
| Cloudflare, Inc. | Network and security: every request to the website passes through Cloudflare, which protects it against attacks and passes the request on to Azure. Cloudflare also answers lookups for our domain names (DNS) | Cloudflare's global network. The request is handled in the data center nearest to you, typically in the EU. Cloudflare may process log data in the US |
Microsoft stores data in the EU/EEA. In limited cases, for example for support, Microsoft may process data from countries outside the EU/EEA. Such a transfer is then based on the EU-US Data Privacy Framework and the European Commission's standard contractual clauses.
PostHog stores the analytics data in the EU. PostHog Inc. is a US company, and if it processes data from outside the EU/EEA, the transfer is based on the European Commission's standard contractual clauses in PostHog's data processing agreement.
Cloudflare, Inc. is a US company. A transfer to the US is based on Cloudflare's certification under the EU-US Data Privacy Framework, and otherwise on the European Commission's standard contractual clauses in Cloudflare's data processing agreement.
6. Retention
| Data | Retention period |
|---|---|
| Access logs at the hosting provider | Not kept |
| Request data at Cloudflare (IP address, page, browser) | For a limited period set by Cloudflare. We have no access to it |
| Analytics data in PostHog | 12 months, then deleted |
| IP address used to protect the form | At most an hour, in memory only |
| Enquiries that do not lead to a customer relationship | 12 months after the last contact, then deleted |
| Enquiries that lead to a customer relationship | As part of the customer relationship, see section 3.4 |
| Accounting records | 5 years from the end of the financial year they relate to, under the Danish Bookkeeping Act |
7. Cookies and local storage
We only set cookies if you accept them in the cookie banner. Then PostHog stores an identifier in the cookie ph_<key>_posthog, which expires after 12 months, and in localStorage.
Without your consent, the website stores only two things in your browser:
- Your choice of light or dark theme
- Your answer in the cookie banner
You can change your answer at any time under Cookie settings at the bottom of every page, or delete everything by clearing your browser's data for entria.io.
8. Your rights
Under the General Data Protection Regulation you have the right to:
- Access the personal data we process about you
- Have inaccurate data corrected
- Have data erased when it is no longer needed
- Restrict the processing
- Object to processing based on legitimate interest
- Data portability, when the processing is based on a contract
- Withdraw your consent to cookies at any time, under Cookie settings on every page
Write to [email protected] if you want to use your rights. We answer without undue delay, and within one month at the latest.
9. Complaints
You can complain to the Danish Data Protection Agency if you believe that our processing of your personal data breaks the data protection rules.
Datatilsynet
Carl Jacobsens Vej 35
2500 Valby, Denmark
[email protected]
10. Changes
We update this privacy policy when there are significant changes to how we process personal data. The date of the latest update is shown below.
Last updated