Privacy policy.

Most of this site can be read without giving us any personal data. We only receive information when you choose to provide it, or when your browser shares technical data necessary to load the page.

• Contact and reader notes. When you use a form, we collect the name, email address, organisation and message you send. This is held so we can reply personally and, where relevant, keep a record of the conversation.
• Newsletter sign-ups. If you subscribe, we store your email address and the source page so we can send occasional notes and measure how the list grows.
• Authentication. Admin users sign in through a secure identity provider. We store only the user identifier and role information needed to grant access to the admin area.
• Technical logs. Our hosting provider records IP addresses, browser type, requested pages and timestamps for a short period to keep the site secure and available.

We use personal data only for the purpose for which it was given: answering enquiries, sending newsletters, maintaining the security of the site, and — where you have explicitly consented — understanding how readers move through the content.

We do not sell personal data. We do not use it for automated profiling or decisions that produce legal effects. We do not share it with third parties except those necessary to run the site, such as hosting, email delivery and — if connected — analytics providers.

Contact correspondence and reader notes are kept for as long as the relationship requires — usually up to five years after the last interaction — then deleted or anonymised.

Newsletter subscriptions remain active until you unsubscribe. Once you unsubscribe, your address is removed from the active list and suppressed so it cannot be accidentally re-added.

Technical logs are retained for the shortest period our hosting provider allows, typically between seven and thirty days.

Under the General Data Protection Regulation (GDPR), you have the following rights in relation to your personal data:

• Right of access. You can ask us to confirm whether we process your personal data, and to receive a copy of the information we hold.
• Right to rectification. You can ask us to correct inaccurate or incomplete personal data.
• Right to erasure (“right to be forgotten”). You can ask us to delete your personal data where there is no overriding legal reason for us to keep it.
• Right to restrict processing. You can ask us to limit how we use your data while we verify its accuracy or consider your objection.
• Right to data portability. You can ask us to provide your data in a structured, commonly used, machine-readable format, where processing is based on consent or contract.
• Right to object. You can object to processing based on legitimate interests, including direct marketing and profiling related to direct marketing.
• Right to withdraw consent. Where processing relies on your consent, you can withdraw it at any time. This does not affect the lawfulness of processing before withdrawal.

To exercise any of these rights, write to contact@saxskiold.com with enough detail for us to identify you and understand your request. We will respond within one month, free of charge. If a request is complex or unfounded, we may extend the deadline or decline it, and we will explain why.

You can also submit a data rights request through our secure form, which records your request directly and gives you a reference.

If you are not satisfied with our response, you have the right to complain to the Danish Data Protection Agency (Datatilsynet).