Privacy Policy

Last updated: 3 July 2026

Læs på dansk

1. Data controller

Verkta (hereinafter "we") acts as data processor for the information our customers process on the platform, and as data controller for information about the customers themselves. Enquiries: hej@verkta.com.

2. What information do we process?

  • Account information: name, email address and password (encrypted with bcrypt) for users of the platform.
  • Workplace assessment (APV) responses: stored completely anonymously. We record neither name, email address nor IP address together with the response, and answers cannot be traced back to individuals.
  • Whistleblower reports: processed in strict confidence. The reporter's identity is stored only if the reporter chooses to disclose it. Access keys are stored only as cryptographic hash values.
  • Payment information: handled by Stripe. We never store card data.

3. Purposes and legal basis

We process the information in order to deliver the platform (GDPR Art. 6(1)(b)), to comply with legal obligations, including the Danish Working Environment Act and the Danish Whistleblower Protection Act (point (c)), and to improve the service on the basis of aggregated, anonymised usage (point (f)).

4. Retention and deletion

  • APV data is retained for as long as the customer relationship exists, by law, APV documentation must be available for at least 3 years.
  • Whistleblower cases are retained for as long as necessary for the handling of the case, after which they are deleted or anonymised.
  • Upon termination, all of the company's data can be handed over and is deleted after 90 days.

5. Data processors and transfers

Data is hosted with Vercel and Neon in the EU (Frankfurt). Emails are sent via Resend, payments via Stripe. Data processing agreements have been concluded with all sub-processors, and no personal data is transferred to unsafe third countries without a valid transfer basis. Our own data processing agreement applies automatically to all customers.

6. Your rights

You have the right of access, rectification, erasure, restriction and data portability, as well as the right to lodge a complaint with the Danish Data Protection Agency (datatilsynet.dk). Contact us at hej@verkta.com. We respond within 30 days.

7. Cookies

Verkta uses only strictly necessary cookies (login session). We do not use any tracking or marketing cookies.