Privacy policy

1. Who is the data controller

Insight Logic ApS is the data controller for the processing of the personal data described in this policy.

2. What information we collect

On afklaret.dk you can check a .dk domain and order registration or transfer of it. We collect only what is necessary for that:

Orders and registrant details

If you order a domain, we collect the information Punktum dk requires of a registrant, because we have to pass it to the registry in order to create the domain:

• Name, address, email address and telephone number — your registrant details
• CVR number, if you order as a company
• Domain name(s) you order
• Documentation of your consent to Punktum dk's terms — the time, which version of the text you were shown, which language you read it in, and your IP address. Punktum dk requires us to be able to document this for at least one year.
• Payment information — see section 5. We neither see nor store your card number.

Account

If you create an account, we store your email address and an id from our login system, so that you can sign in and see your domains. If you have ordered before, we suggest your previous registrant details so that you do not have to type them again.

Domain check

When you enter a domain name in the check on the front page, our server passes a lookup on to Punktum dk's whois service. The domain name itself is stored temporarily (up to 1 hour) to avoid overloading Punktum dk's service with repeated lookups. Who performed the lookup is not stored, beyond ordinary server logs (see section 7).

Ordinary server logs

Like most websites, our server keeps a technical log of visits (time, page, browser type, an anonymised version of the IP address). We use that solely for statistics on visitor numbers and to detect errors or abuse — see section 7 on cookies and analytics.

3. Purposes and legal basis

You can withdraw your consent at any time — see section 9.

4. How long we keep the information

• Registrant details: for as long as you hold the domain with us, and thereafter for as long as we need to be able to document the relationship
• Consent documentation: at least 1 year after the consent was given — that is Punktum dk's requirement of us as registrar
• Accounting records, including invoices: 5 years from the end of the financial year the material concerns, cf. the Danish Bookkeeping Act
• Account information: until you ask us to delete the account
• Whois cache: max. 1 hour
• Server logs: up to 10 days, after which they roll off automatically

5. Who we share information with

We never sell, rent out or trade your information. The following recipients have access, solely in order to deliver the service:

Punktum dk publishes certain registrant details in the whois register under their own rules. If you are a private individual, you can ask Punktum dk not to have your details published. If you are a legal person, your email address is published — which is why it should not contain personal data.

6. Transfer outside the EU/EEA

Stripe may process information in the USA. This takes place on the basis of the European Commission's Standard Contractual Clauses (SCCs) and/or Stripe's certification under the EU-U.S. Data Privacy Framework.

Cloudflare, Inc. is a US company. Transfer of information for the purpose of DNS lookups takes place on the basis of the European Commission's Standard Contractual Clauses (SCCs) and/or Cloudflare's certification under the EU-U.S. Data Privacy Framework, where relevant. DNS lookups do not contain your registrant details — Cloudflare only sees which domain and IP address a visitor looks up, which is necessary for the DNS system to work at all.

7. Cookies and analytics

We do not track you

afklaret.dk does not use tracking pixels, analytics tools or third-party scripts, and we do not follow you across visits or across other websites. Our visitor statistics are generated solely from the server's own access logs, where IP addresses are anonymised before the statistics are produced.

We set two cookies, and only when you sign in:

• afklaret.customer — keeps you signed in between page views.
• afklaret.loginflow — keeps track of the sign-in process itself while you are sent to and from our login service.

Both are technically necessary to deliver the function you ask for yourself when you sign in. There is therefore no requirement for cookie consent when visiting the site, and we do not show a consent banner. If you visit the site without signing in, no cookies are set.

If you click one of our advertisements on Google, Google adds a click id (gclid) to the address of the page you land on. If we receive an order from that visit, we store this id together with the order so we can see whether our advertising actually leads to sales. The id says nothing about who you are, and we send no information back to Google — we insert neither Google's tracking code nor any other third party's code on the site. The processing takes place under Article 6(1)(f) of the General Data Protection Regulation (legitimate interest in being able to assess our own marketing), and the id is deleted together with the order according to the periods in section 4.

8. Security

All traffic to afklaret.dk is encrypted (HTTPS/TLS). Registrant details and other customer data are stored on a server accessible only to us. We never see your card number — it is handled solely by Stripe.

9. Your rights

Under the General Data Protection Regulation you have the right to:

• Obtain access to the information we hold about you
• Have corrected incorrect or incomplete information
• Have erased your information ("the right to be forgotten")
• Have restricted the processing of your information
• Object to the processing
• Receive your information in a structured, commonly used format (data portability)
• Withdraw your consent at any time, without affecting the lawfulness of processing carried out before you withdrew it

You exercise your rights by writing to hej@afklaret.dk. Please note that we cannot delete registrant details for a domain you still hold with us — they are a condition of the domain existing, and Punktum dk requires them to be correct.

10. Complaining to Datatilsynet

If you are dissatisfied with our processing of your personal data, we would like to hear from you directly first. You also have the right to complain to Datatilsynet (the Danish Data Protection Agency):

11. Changes to this policy

We update this policy if our processing of personal data changes — for example when we launch further services. Material changes will be announced clearly on the page, and the date at the top of the document will always show when the policy was last updated.

12. Contact

Questions about this policy or about our processing of your information can be sent to hej@afklaret.dk.