Privacy Policy

1. Data Controller

Spekir is the data controller responsible for the processing of your personal data in connection with your use of spekir.com and Spekir Atlas (atlas.spekir.com).

2. What data do we collect?

We collect and process the following categories of personal data:

• Account data: Email address, name and password (encrypted) when you create an account.
• Workspace data: Application, capability and strategy data that you register in Atlas.
• Usage data: Information about how you use the service, including login times and in-product actions.
• Cookies and technical data: Session cookies for authentication and functional cookies for language preferences.
• Communication: Emails you send to us, and emails we send to you (transactional and optional newsletters).

3. Purpose of processing

• Service delivery: To create and manage your account and provide you with access to Atlas.
• Product improvement: To understand usage patterns and improve the service's functionality and performance.
• Communication: To send important service notices, security updates and (with your consent) newsletters.
• Legal obligations: To comply with applicable law, including accounting requirements.

4. Legal basis

• Contract (GDPR Art. 6(1)(b)): Processing necessary to fulfil our agreement with you for the delivery of Atlas.
• Legitimate interest (GDPR Art. 6(1)(f)): Processing for product improvement and security, where our interests are not outweighed by your rights.
• Consent (GDPR Art. 6(1)(a)): For marketing communications and analytics cookies, where we obtain your explicit consent.

5. Sub-processors and third parties

We use the following sub-processors to deliver the service. All process data on our behalf and under our instruction:

SCCs = EU Standard Contractual Clauses, approved transfer mechanism to third countries.

6. Retention period

We retain your personal data for as long as your account is active. When you delete your account, your data is deleted within 30 days of the deletion request, except where we are required to retain it longer under applicable law (e.g. Danish bookkeeping law, 5 years).

7. Your rights

You have the following rights under GDPR. You can exercise them by contacting us at hello@spekir.com:

• Access: Right to receive a copy of the data we process about you.
• Rectification: Right to have inaccurate data corrected.
• Erasure: Right to have your data deleted ('right to be forgotten').
• Portability: Right to receive your data in a structured, machine-readable format.
• Objection: Right to object to processing based on legitimate interest.
• Restriction: Right to request restriction of processing in certain circumstances.

8. Cookies

We use the following types of cookies:

• Necessary cookies: Session cookies for authentication. These are necessary for the service to function and do not require consent.
• Functional cookies: Cookies to remember your language preferences and navigation mode.
• Analytics cookies (future): If we add analytics tools (e.g. PostHog), we will request your consent via the cookie banner before placing such cookies.

9. Right to complain

You have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, email: dt@datatilsynet.dk, if you believe our processing of your personal data does not comply with data protection law.

10. Changes to this policy

We may update this privacy policy from time to time. Material changes will be communicated via email or a prominent notice in the product. The current version is always available on this page with the date of last update.