Who is responsible for your information?
Verdan is the data controller for the personal information you give us on this website and for the information the site collects when you use it. Where a provider acts as a controller in its own right, this is stated under that provider further down.
You can email us at kontakt@verdan.dk, call +45 52 68 20 95 or write to Adelgade 20, 9000 Aalborg or Dommervænget 29A, 4000 Roskilde. Our Danish business registration (CVR) number is 42958603.
When you contact us or ask for a quote
When you send a form, we receive the details you fill in yourself:
- name, email and phone number
- whether you are a private or business customer, and your company name if you give one
- what the job is, postcode and town, its size, and when you want the work done
- whether the material has been tested for asbestos
- the indicative price from the price calculator, if you used it
- your message
Your enquiry is sent to our email and saved in our customer system, where we keep track of enquiries and quotes. We use the information to reply to you, assess the job, give you a quote and agree the next steps.
The fields marked as required must be filled in before the form can be sent. Without them we cannot reply to you or assess the job. Everything else is up to you.
The legal basis is that you have asked us for a reply or a quote and that we need to perform an agreement with you (Article 6(1)(b) of the General Data Protection Regulation), together with our legitimate interest in answering enquiries (Article 6(1)(f)).
When you visit the site
Cloudflare delivers the site to your browser and in doing so processes technical information such as your IP address, browser type and which pages are requested. This is necessary to show the site and protect it from misuse.
The forms use Cloudflare Turnstile to keep out spam. Turnstile processes technical signals from your browser and device, such as your IP address and browser details. We also use your IP address to limit how many enquiries can be sent in a short time. The legal basis is our legitimate interest in running a secure website (Article 6(1)(f)).
Advertising measurement with Meta
Only if you accept marketing cookies do we measure which ads on Facebook and Instagram lead to visits and enquiries. If you decline, we send nothing to Meta.
With your consent, both your browser (Meta Pixel) and our server (Meta Conversions API) report your visits to Meta, and the same when you have sent an enquiry. With each event we send:
- the page you visit, your IP address and details about your browser
- Meta’s cookie and click IDs, if your browser has them
- after an enquiry: your email and phone number, converted to SHA-256 hash values so that Meta can match them to an account
A hash value is still personal information. We do not send your name, your message, details of the job or the indicative price to Meta.
Our server sends the events through a queue at Cloudflare. If Meta cannot be reached, they wait in the queue for no more than 24 hours. The queue holds only the information listed above.
The legal basis is your consent (Article 6(1)(a)). Meta may link the information to your account and use it to show you ads under Meta’s own terms. We make no automated decisions about you.
Cookies and storage in your browser
Marketing cookies are off until you accept them, and you can use the whole site, including the forms, if you decline. Choose “Cookie settings” at the bottom of the page to change your choice. When you withdraw consent, the site deletes Meta’s cookies from your browser and measurement stops. What has already been sent is not affected.
- verdan_marketing_v2 remembers your cookie choice for 180 days. It is necessary and is set whichever option you choose.
- _fbp and _fbc are Meta’s marketing cookies, which link visits to ads. They are set only with consent and kept for up to 90 days, extended when you visit the site again. See Meta’s cookie policy.
- verdan_lead is set only with consent, straight after an enquiry. It holds a random code so the enquiry is counted once, and is deleted after measurement or after five minutes at the latest.
- Form draft. When you send a form, your browser keeps a temporary copy of the fields (sessionStorage) so you do not have to fill them in again if sending fails. The copy never leaves your browser and is deleted the next time a form on the site loads, or when you close the tab.
Who has access to the information?
We do not sell your information. These providers process it for us:
- Cloudflare hosts the site and our customer system, sends the form emails to us and runs Turnstile. Cloudflare is our processor, but a controller in its own right when Turnstile signals are used to improve Cloudflare’s own bot detection. See Cloudflare’s Turnstile Privacy Notice.
- Google (Google Workspace) runs our email and calendar. Enquiries and correspondence are kept in our mailbox.
- Meta Platforms Ireland Limited receives data from the Pixel and Conversions API, but only with your consent. Meta uses the information under its own terms, see Meta’s Privacy Policy. We and Meta are joint controllers for collecting the data and sending it to Meta; what Meta does with it afterwards is Meta’s responsibility. You can exercise your rights against both us and Meta. The split is set out in Meta’s Controller Addendum.
Cloudflare, Google and Meta may process information outside the EU/EEA, including in the United States. Such transfers rely on the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses. Email us if you would like a copy of the safeguards that apply. We also disclose information where the law requires it.
How long do we keep it?
We keep enquiries and correspondence for up to two years after our last contact with you. If an agreement follows, we keep invoices and other accounting records for five years from the end of the financial year, as the Danish Bookkeeping Act requires. If the information is needed to establish, exercise or defend a legal claim, we keep it for as long as that requires. Technical information from visits and the spam check, such as your IP address, is not stored in our own systems. Cloudflare uses it while the page is shown and the form is sent, and our server logs at Cloudflare are deleted automatically after seven days at most.
Your rights
You have the right to see the information we hold about you and to have it corrected or deleted. You can also ask us to restrict processing, object to it, and receive your information in a common, machine-readable format. You can withdraw consent at any time. Email kontakt@verdan.dk to use your rights.
If you are unhappy with how we handle your information, you can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, datatilsynet.dk.
Security
We protect the information with technical and organisational measures suited to the risk, including an encrypted connection (HTTPS) across the whole site.
Changes
We update this policy when we change how we handle information. The date at the top shows when it was last changed.