Cookies and privacy

Who is responsible?

Kampo ApS is the data controller for personal data processed through this website.

Optional analytics with PostHog

If you accept analytics, I use PostHog to understand how many people visit the website, where traffic comes from and whether the content leads to enquiries. This processing is based on your consent under Article 6(1)(a) of the GDPR.

Analytics includes the time of your visit, the page URL without query parameters or fragments, the referring domain, browser, operating system, device type, screen size and random visitor and session IDs. I measure clicks on contact buttons, email and LinkedIn links, views of the contact section and successful contact form submissions.

Your name, email address, phone number, company and contact form message are not sent to PostHog. Standard analytics does not include session recordings or automatic collection of page text. I do not create personal profiles. Visitor IDs are pseudonymous, so this data is not necessarily anonymous.

PostHog Inc. processes analytics and session replay data on behalf of Kampo ApS under a data processing agreement. I use PostHog EU Cloud, with data stored in Frankfurt. Your IP address is technically involved in establishing the connection; it is replaced with a neutral address in collected events, and geographical enrichment is disabled.

On PostHog's free plan, analytics is available within a rolling one-year window. This does not guarantee automatic deletion by PostHog. Data already collected may require a separate deletion request to the provider. If I stop using PostHog for this purpose, I will delete the project. You can contact me to request deletion of data relating to you.

Details of PostHog's processing, subprocessors and any transfers outside the EU/EEA are available in PostHog's data processing agreement and list of subprocessors. Any transfers must be covered by a valid transfer mechanism, such as the European Commission's standard contractual clauses.

User experience: session replay with masked form input

The User experience option gives consent to session recording (PostHog Session Replay), independently of standard analytics. The purpose is to identify usability problems by seeing how visitors click and scroll. This processing is based on your separate consent under Article 6(1)(a) of the GDPR.

A recording reconstructs the website's structure and changes, with timestamps, mouse or touch movements, clicks, scrolling, screen size, the page URL without query parameters or fragments, and random visitor and session IDs. It does not record your camera, microphone or activity in other tabs or applications.

Recording starts only after you actively opt in. The replay shows the page's public text, images, design and form structure. Anything you type into form fields is masked locally in your browser before data is sent to PostHog. Hidden fields and the form's spam trap are excluded. Console logs, network content, request or response bodies and headers are not collected. Canvas content and embedded frames from other domains are not recorded.

On the free plan used here, recordings are retained for up to 30 days. Final deletion by PostHog may take place shortly after this period ends. I do not export or pin recordings to extend retention. Recordings are not shared publicly. PostHog processes them under the same data processing agreement and EU Cloud configuration as analytics.

You can turn off recording at any time through Cookie settings. This stops future recording, even if you continue to allow standard analytics. Recordings already received are deleted after the retention period or may be covered by your right to request deletion. Previous visits cannot be recorded retrospectively.

Cookies and browser storage

Analytics and session recording are two independent options, both off by default. The banner lets you accept or reject both with one click. Customise choices opens the separate options, which take effect only when you save them. PostHog loads only after you accept at least one purpose. The recorder starts only after you opt in to recording. If you reject both or make no choice, no visitor data is sent to PostHog. You can use the website and contact form regardless of your choice.

You can change either choice here at any time or through Cookie settings at the bottom of the homepage. Select Reject all to withdraw both consents with one click. Collection for the rejected purpose stops immediately; when both purposes are rejected, PostHog's local visitor IDs are removed. This does not affect the lawfulness of processing already carried out. Contact me if you would like help deleting data already collected.

You will be asked again when your choice expires after 180 days. Changes to the purposes or consent text require fresh consent. The new text version covering recordings requires a new choice, even if you previously accepted analytics. Events collected after consent include both choices, the consent timestamp and text version as a record of your consent.

When you contact me

I process your name, email address, selected topic and any optional information you provide: phone number, company and message. The purpose is to respond to your enquiry and, where relevant, discuss working together.

For enquiries about entering into a contract with you, processing is based on Article 6(1)(b) of the GDPR. For other enquiries, including contact on behalf of a company, the basis is my legitimate interest in responding to relevant business enquiries under Article 6(1)(f).

Your enquiry is sent to Kampo's email address through Resend, the email delivery provider. The website is hosted on Vercel. Hosting and email providers may process information on Kampo's behalf, including technical connection data for operation and security. Their agreements and subprocessors may involve processing outside the EU/EEA, which requires a valid transfer mechanism.

Enquiries that do not lead to a working relationship are deleted within six months of the last contact. If we work together, relevant information is retained for as long as necessary for the agreement, any legal claims and statutory record-keeping obligations.

Your rights

Subject to the applicable rules, you can request access, rectification, erasure, restriction and, where relevant, data portability. You can object to processing based on legitimate interests and withdraw your analytics and recording consents separately at any time.

Write to kontakt@kampo.dk, if you would like to exercise your rights. You can lodge a complaint with the Danish Data Protection Agency.