Privacy policy

Last updated: 13 September 2026

1. Data controller

MITC ApS, company registration no. 40057048, Enighedsvej 44, 2920 Charlottenlund, Denmark. CordPrism is a service of MITC ApS. Contact: [email protected].

2. What we collect

When you request a free sample or buy a dossier, we collect the information you provide: employer/company name, your email for the report link, candidate legal name, optional work email and profile seeds, role/purpose, consent attestation (who consented, when, and scope), authorization confirmation, and optional comments. For a purchase, we also receive payment-related data via Stripe (such as your email and transaction ID). We do not intentionally collect special categories of personal data, CPR numbers, credit data, or criminal records.

3. Purpose

We use this information to process your request, prepare the consented public-footprint dossier you ordered, deliver the report link, handle the one-time payment, and respond to service enquiries.

4. Lawful basis

Processing of the ordering employer’s data is primarily to perform a contract or steps before contract (your request and purchase). Processing of the candidate’s public-footprint data is limited to the attested consent and purpose you supply, and, where relevant, our legitimate interest in operating a secure, efficient report service and preventing abuse. We do not run open person-search. Contact us if you believe another basis applies to a specific processing activity.

5. Retention

Form, consent attestation, and order data are kept as long as needed to deliver the dossier, meet accounting obligations, and handle support or disputes — typically up to several years for payment data. Candidate dossier files and download links expire after the period stated when sent (default about 30 days). You may request deletion of candidate data where we are not required to retain it; we will also delete or restrict processing on a valid erasure request from the data subject where the law requires it.

6. Deling og databehandlere

Vi sælger ikke dine personoplysninger. Betaling håndteres af Stripe som selvstændig databehandler. Websitet og rapportfiler hostes på DigitalOcean (App Platform og Spaces). E-mail til intern modtagelse af leads kan gå via SendGrid. Vi deler kun oplysninger, når det er nødvendigt for at levere tjenesten eller overholde loven.

7. Rapportlinks

Rapporter leveres via et personligt link (capability URL). Linket giver adgang til en PDF uden login. Del ikke linket offentligt. Vi vedhæfter ikke rapportfiler i e-mail.

8. Cookies og lokal lagring

Vi bruger Google Analytics 4 kun, hvis du accepterer cookies i banneret. Sprog- og valutavalg gemmes lokalt i browseren uden statistik-cookies. Se også vilkår om cookies.

9. Dine rettigheder

Du kan anmode om indsigt, berigtigelse, sletning, begrænsning eller indsigelse mod behandling, samt dataportabilitet hvor det gælder. Klage kan indgives til Datatilsynet. Kontakt [email protected] for anmodninger.

10. Kontakt

Spørgsmål om privatliv: [email protected]

Back to home