Last updated 26 October 2026
Privacy notice
This notice explains how Rainbow Insights ApS handles personal data when you visit rainbow-insights.com or contact us. Our data products describe areas, not people, and contain no personal data; this notice covers only the website.
Who is responsible
Rainbow Insights ApS, CVR 36418141, Skolevej 5, 5953 Tullebølle, Denmark, is the data controller. Contact: contact@rainbow-insights.com.
What we collect, and why
- Contact form. Your first name, optional last name, email address and message. We use them only to answer your enquiry and any follow-up conversation. Legal basis: our legitimate interest in replying to you, or steps you ask us to take before a contract (GDPR art. 6(1)(f) and 6(1)(b)).
- Server logs. Our hosting provider processes IP addresses and request details briefly to deliver the site and protect it against abuse. Legal basis: legitimate interest in a secure, working website.
What we do not do
- No analytics, advertising or tracking cookies, and no cookie banner because there is nothing to consent to.
- Fonts and images are served from our own domain; your browser makes no calls to third-party font or analytics services.
- We never sell personal data or use it for profiling.
Who processes the data for us
The site is hosted on Cloudflare, and contact-form messages are delivered to our inbox by an email delivery provider. Both act as data processors under agreements that include the EU standard contractual clauses where data may leave the EU/EEA.
How long we keep it
Enquiries that do not lead to a business relationship are deleted within 12 months. Correspondence that becomes part of a customer relationship is kept as long as Danish bookkeeping and contract law requires.
Your rights
You can ask for access to, correction or erasure of your data, restrict or object to its processing, and receive it in a portable format. Write to contact@rainbow-insights.com. You may also complain to the Danish Data Protection Agency (Datatilsynet), datatilsynet.dk.