Privacy policy

Last updated October 2026

This policy explains how Brands That Impact (CVR 42007072, Copenhagen, Denmark), the data controller for activecitizenship.dk, processes personal data under the GDPR and the Danish Data Protection Act.

What we collect and why

• Email address — to create your account, send login links and connect your payment to your access. Legal basis: performance of a contract (GDPR art. 6(1)(b)).
• Payment data — handled entirely by Stripe Payments Europe Ltd. We receive your email, the amount, the plan and a payment reference, not your card number. Legal basis: contract, and bookkeeping obligations (art. 6(1)(c); Danish Bookkeeping Act, 5 years).
• Study progress — quiz and exam scores and which questions you got wrong, so the site can show your results. Legal basis: contract.
• Technical data — server logs (IP address, browser, time) kept by our hosting provider for security, usually for 30 days. Legal basis: legitimate interest (art. 6(1)(f)).
• Preferences such as the Danish/English switch are stored in your browser only (localStorage) and never sent to us.

We do not use advertising trackers or sell data. We do not use cookies other than those strictly necessary for logging you in.

Who processes data for us

• Supabase (database and login emails) — EU region.
• Stripe (payments) — Stripe Payments Europe, Ireland; card data may be processed outside the EU under Stripe’s standard contractual clauses.
• Vercel (hosting) — EU edge where possible; standard contractual clauses apply for any transfer.

How long we keep it

Account and progress data: until 12 months after your access ends, or earlier if you ask us to delete it. Purchase records: 5 years after the end of the financial year, as required by Danish bookkeeping law.

Your rights

You can ask for access to, correction or deletion of your data, restriction of processing, data portability, and you can object to processing based on legitimate interest. Email hello@activecitizenship.dk from the address on your account. You can also complain to Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, datatilsynet.dk.

Changes

We will post any changes here with a new date.