Privacy policy

Version 2026-10-19

Who processes your information?

Provider: Grundblik
Email: kontakt@grundblik.dk

Information, purposes and legal bases

At registration we collect your name, email address, telephone number and user type. Professional and public-sector users also provide their company or organisation. We use information you enter to administer the account, tailor account functions and handle contact and support, including telephone contact when necessary for a support matter. Necessary account and service processing is based on GDPR Article 6(1)(b), performance of the service agreement. Security and prevention of misuse rely on Article 6(1)(f), our legitimate interest in secure operation.

Passwords are processed by Supabase Auth. Grundblik does not store your password in its own profile database. We store the account user ID, verification status, accepted terms version, acceptance time and a private session. Technical information and limited login-attempt counters are used for security and abuse prevention.

If you save address lists or request monitoring, we store your folders, lists, selected addresses, settings and check results. These are linked to your account and are not public. We send account and monitoring messages needed for the features you use. Registration is not treated as consent to marketing.

Suppliers and recipients

Cloudflare operates the website and private storage. Supabase Auth handles login, passwords, email verification and recovery. Resend delivers automated emails and processes recipient addresses and message content. Contact emails are forwarded through Cloudflare to a Google/Gmail inbox where replies are handled. Suppliers may process technical information for operation and security. Information may also be disclosed where required by law.

Suppliers may process information outside the EU/EEA. Where this occurs, a lawful transfer mechanism must be used, such as a relevant adequacy decision or EU standard contractual clauses with necessary supplementary measures. Contact us for information about the relevant suppliers and transfer mechanisms.

Retention

Account and list information is retained while the account and requested features are used. You can request closure and deletion through the contact address. Information is deleted when the relationship ends unless continued retention is necessary for a specific legal claim or legal obligation. Correspondence is retained as long as needed to handle the enquiry and follow-up.

A login session expires after no more than 30 days; logging out removes the current session. Expired sessions and security counters are cleaned up regularly. Temporary unverified accounts and suppliers’ technical logging are managed as part of account operations and cleanup. Deletion requests also cover relevant suppliers.

Cookies and local storage

Login uses a necessary secure session cookie that website JavaScript cannot read. The browser may also remember language, map layers and other preferences locally. Clearing these may reset preferences or sign you out. We measure anonymous visits and feature events, such as searches, comparisons and filters, to improve the service. Browser session storage may prevent repeated page views in one tab from being counted as new visits. This event statistics system does not store searched addresses, user IDs or IP addresses, and we do not use advertising cookies.

Your rights

Subject to the applicable rules, you may request access, correction, deletion, restriction and data portability, and object to processing based on legitimate interests. Some rights depend on the processing involved. We may request information necessary to verify your identity before disclosing or deleting data. You can complain to the Danish Data Protection Agency, Datatilsynet.

Grundblik’s property scores describe land and surroundings. We do not make automated decisions about your personal access to housing, credit, insurance or other rights.