Legal

Privacy policy

Storyco.dk is operated by Story & Co. We take the protection of your personal data seriously. This privacy policy explains how we collect, use and protect your information.

Data controller

Storyco.dk is operated by Story & Co. ApS, which is the data controller for the personal data processed through this website.

Story & Co. ApS
Grønlandsvej 2
5700 Svendborg
Denmark
Company reg. no. (CVR) 43843249
Phone: +45 70 70 25 40
E-mail: hello@storyco.dk

What information we collect

Information you give us

Contact form: name, e-mail address, phone number, company name and whatever you write in your message.
Meeting bookings: name, e-mail address, the time slot you choose and any notes you add in the booking form.
Enquiries: the information you provide when you contact us by e-mail or phone.
Productions: in connection with a video production we process the contact details and material needed to carry out the assignment.

Information we collect automatically

IP address (truncated when Google Analytics is used), browser type, device type, operating system and screen resolution.
Which pages you visit, how long you stay and how you reached the site, including clicks on our ads.
Technical log files at our web host, used for operations and security.

We do not collect sensitive personal data, and we do not make decisions about you based solely on automated processing.

Purposes and legal basis

We process your data for the following purposes:

To answer your enquiry and give you a quote. Legal basis: steps taken at your request prior to entering into a contract, Article 6(1)(b) GDPR, and our legitimate interest in responding to enquiries, Article 6(1)(f).
To arrange and hold meetings you book yourself. Legal basis: Article 6(1)(b).
To enter into and perform video production agreements. Legal basis: Article 6(1)(b).
To measure and improve the website using statistics. Legal basis: your consent, Article 6(1)(a), cf. the Danish Cookie Order.
To measure the effect of our advertising and show relevant ads. Legal basis: your consent, Article 6(1)(a).
To meet bookkeeping and accounting requirements. Legal basis: legal obligation, Article 6(1)(c), cf. the Danish Bookkeeping Act.
To keep the site secure and prevent misuse. Legal basis: our legitimate interest in a secure and well-functioning website, Article 6(1)(f).

Cookies and consent

We use cookies and similar technologies. Necessary cookies are always set, because the site does not work without them. Statistics, preference and marketing cookies are only set once you have given your consent in the cookie banner. We use Google Consent Mode, which means Google's tools do not store data on your device until you have said yes.

The main cookies are:

cookieyes-consent - necessary - remembers your cookie choice - 1 year.
wp_consent cookies - necessary - pass your consent choice on to the plugins used by the site - 1 year.
wp-wpml_current_language - necessary - remembers your language choice - session.
_ga and _ga_ cookies - statistics - Google Analytics, distinguishes visitors and sessions - up to 2 years.
_gcl_au - marketing - measures conversions from Google Ads - up to 90 days.
IDE and test_cookie (doubleclick.net) - marketing - used by Google's ad network to measure and target ads - up to 13 months.
LinkedIn Insight cookies (bcookie, lidc, UserMatchHistory, li_sugr) - marketing - measure the effect of ads on LinkedIn - up to 6 months.
Vimeo and YouTube cookies - set when you play an embedded video.
Calendly cookies - functional - only set if you use the booking module.

You can change or withdraw your consent at any time via the cookie settings at the bottom of the site, and you can delete cookies in your browser settings.

Who we share information with

We never sell your data. We use the following providers, which process data on our behalf or as independent controllers:

one.com - web hosting and e-mail (EU).
Google Ireland Limited and Google LLC - Google Analytics, Google Tag Manager and Google Ads.
CookieYes Limited - consent management.
Calendly LLC - meeting bookings.
LinkedIn Ireland Unlimited Company - ad measurement.
Vimeo Inc. and YouTube - playback of embedded videos.

Data may also be passed on to our accountant, to subcontractors on a specific production and to public authorities where we are required to do so.

Transfers outside the EU and EEA

Some of our providers are based in the United States. Transfers of personal data there take place under the European Commission's adequacy decision on the EU-US Data Privacy Framework or, where it does not apply, under the European Commission's standard contractual clauses combined with supplementary safeguards. You can request a copy of the transfer basis by writing to hello@storyco.dk.

How long we keep your information

Enquiries that do not lead to an agreement: up to 24 months after the last contact.
Client and project data: for the term of the agreement and then for 5 years from the end of the financial year the material relates to, cf. the Danish Bookkeeping Act.
Bookings: up to 12 months after the meeting.
Google Analytics statistics: at user level for up to 14 months. After that only aggregated figures remain, which cannot be traced back to you.
Your cookie consent: 1 year, after which you are asked again.

Your rights

Under the GDPR you have the following rights:

The right of access to the data we process about you.
The right to have inaccurate data corrected.
The right to erasure when we no longer have a basis for processing.
The right to restriction of processing.
The right to object to processing based on our legitimate interests.
The right to data portability, that is to receive your data in a commonly used format.
The right to withdraw consent. This does not affect the lawfulness of processing carried out before the withdrawal.

Write to hello@storyco.dk if you wish to exercise any of your rights. We normally reply within one month.

Filming people

When we film for a client, people may appear in the footage. Recordings of identifiable people are processed on the basis of consent from the person taking part or by agreement with the client who is the controller for that production. If you appear in a production and want to know more, write to hello@storyco.dk.

Complaints to the Danish Data Protection Agency

If you are unhappy with how we process your personal data, we would like to hear from you first. You can also complain to the Danish Data Protection Agency:

Datatilsynet
Carl Jacobsens Vej 35
2500 Valby, Denmark
Phone: +45 33 19 32 00
E-mail: dt@datatilsynet.dk
www.datatilsynet.dk

Security

We protect your data with technical and organisational measures, including an encrypted connection (HTTPS), access control, updated systems and regular backups. Only staff with a work-related need have access to the data.

Children

Storyco.dk is aimed at businesses and is not directed at children. We do not knowingly collect data about anyone under the age of 15.

Changes to this privacy policy

We update this privacy policy when our processing of personal data changes or when legislation requires it. The date of the latest update appears at the top of the page. The Danish version of this privacy policy is available at storyco.dk/privatlivspolitik.