Privacy policy

1. Data controller

The data controller responsible for processing your personal data is:

• —2W ApS (trading as Hyde Media)
• —Danish company reg. no. (CVR) 45377393
• —Blokken 88, 3460 Birkerød, Denmark
• —Email: ma@hydemedia.dk
• —Phone: +45 52 76 11 85

If you have questions about this policy or want to exercise your rights, contact us using the details above.

2. What we process and why

When you visit the website. When a page is served, our hosting provider processes technically necessary data such as IP address, browser type, time and the page you visit. The purpose is to deliver the website and protect it against misuse and attacks.

• —Legal basis: our legitimate interest in a secure and stable website, Article 6(1)(f) GDPR.
• —Retention: technical logs are kept briefly and deleted on a rolling basis, as a rule within 30 days.

Statistics. We use Vercel Web Analytics and Speed Insights to see overall traffic and page speed. They use no cookies, store nothing on your device, and do not let us identify you. If you consent to statistics cookies, we also use Google Analytics, as described in our cookie policy.

• —Legal basis for Vercel Web Analytics: our legitimate interest in improving the website, Article 6(1)(f).
• —Legal basis for Google Analytics: your consent, Article 6(1)(a). You can withdraw it at any time.
• —Retention: statistics data in Google Analytics is deleted after no more than 14 months.

When you contact us. If you use the contact form, email or call us, we process the details you give us — typically name, email, phone number, company and the content of your enquiry. The purpose is to respond and, where relevant, to send a quote.

• —Legal basis: taking steps prior to a possible contract, Article 6(1)(b), and our legitimate interest in answering enquiries, Article 6(1)(f).
• —Retention: up to 12 months after the last contact if the enquiry does not lead to an agreement.

Newsletter. If you sign up for our newsletter, we process your email address, your language, where on the site you signed up, and the time and IP address of your signup and confirmation. You only receive the newsletter after confirming your signup through the link in the email we send you. The purpose is to send you news about available placements, case studies and insight into outdoor advertising.

• —Legal basis: your consent, Article 6(1)(a), and section 10 of the Danish Marketing Practices Act.
• —You can unsubscribe at any time through the link at the bottom of every newsletter or by writing to us.
• —Retention: until you unsubscribe. After that we keep only the record of your consent and unsubscription needed to show that we followed the rules.

Customers, partners and property owners. When we enter into an agreement with a company or a property owner, we process contact persons’ names, job titles, email addresses and phone numbers, together with information about the agreement, invoicing and payment. The purpose is to plan and run campaigns, administer the agreement and meet our bookkeeping obligations.

• —Legal basis: performance of the contract, Article 6(1)(b), our legitimate interest in administering the relationship, Article 6(1)(f), and our legal obligation under the Danish Bookkeeping Act, Article 6(1)(c).
• —Retention: for the term of the agreement and thereafter as long as needed to document it. Accounting records are kept for 5 years from the end of the financial year they relate to.

Photos of campaigns in public spaces. We photograph our placements and campaigns and use the images on the website and in our marketing. Passers-by may appear in them. We do not use the images to identify anyone.

• —Legal basis: our legitimate interest in documenting and showing our placements, Article 6(1)(f).
• —If you recognise yourself and want an image removed or blurred, contact us and we will take care of it.

3. Who we share data with

We never sell personal data. We use selected suppliers who process data on our behalf and on our instructions (data processors):

• —Vercel Inc. — website hosting and cookieless statistics.
• —Google — email and office systems (Google Workspace), and Google Analytics if you have consented.
• —Intuit Inc. (Mailchimp) — sending the newsletter and managing signups.

Data may also be disclosed to advisers such as our auditor and lawyer where necessary, and to public authorities where we are legally required to.

4. Transfers outside the EU/EEA

Vercel, Google and Intuit (Mailchimp) may process data in the United States. Such transfers rely on the European Commission’s adequacy decision for the EU-US Data Privacy Framework, under which these companies are certified, supplemented by the Commission’s standard contractual clauses.

5. Your rights

Under data protection law you have a number of rights. At any time you can:

• —access the data we process about you
• —have inaccurate data corrected
• —have data erased once it is no longer needed
• —have the processing of your data restricted
• —object to processing based on our legitimate interest
• —receive the data you gave us in a common machine-readable format (data portability)
• —withdraw consent — this does not affect the lawfulness of processing before withdrawal

Email ma@hydemedia.dk and we will respond as quickly as possible and within one month at the latest. Some rights may be limited, for example by our duty to keep accounting records.

6. Complaints to the Danish Data Protection Agency

If you are unhappy with how we process your personal data, you can complain to the Danish Data Protection Agency (Datatilsynet). We would appreciate the chance to resolve the matter with you first.

• —Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, Denmark
• —Email: dt@datatilsynet.dk
• —Website: datatilsynet.dk

7. Automated decisions and profiling

We do not make decisions about you based solely on automated processing, and we do not use profiling.

8. Security

We protect your data with technical and organisational measures, including encrypted connections (HTTPS), restricted access to systems, and data processing agreements with our suppliers.

9. Changes

We update this policy when our processing of personal data changes. The version shown here, with the date at the top, is always the one in force.