Privacy Policy
Last updated: October 2026
Introduction
TwinCurrent ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our websites, mobile applications, web applications, SaaS services, and any other digital products or services we provide (collectively, "our Services").
As a Danish company, we comply with the General Data Protection Regulation (GDPR) and applicable Danish data protection laws. Please read this policy carefully to understand our practices regarding your personal data.
Data Controller
The data controller for your personal data is Twin Current ApS, CVR 45696286, Vestergade 51C, 1., 5000 Odense C, Denmark, e-mail hello@twincurrent.dk. If you have any questions about this Privacy Policy or our data practices, please contact us using the information at the end of this document.
Information We Collect
We may collect and process the following categories of personal data:
Personal Information You Provide
Contact information (name, email address, phone number, postal address)
Account credentials (username, password)
Profile information (profile picture, preferences, settings)
Payment and billing information (processed securely through third-party payment providers)
Communications you send to us (inquiries, feedback, support requests)
Content you create, upload, or share through our Services
Business information (company name, job title, CVR number for business accounts)
Information Collected Automatically
Device information (device type, operating system, unique device identifiers)
Browser information (browser type, version, language settings)
IP address and approximate location data
Usage data (pages visited, features used, time spent, click patterns)
Log data (access times, error logs, referring URLs)
Performance data (load times, crash reports)
Information from Third Parties
Social media information (if you connect social accounts)
Information from business partners and service providers
Company information from the Danish Central Business Register (CVR)
How We Use Your Information
We use your personal data for the following purposes and legal bases:
Contract Performance
Providing and maintaining our Services
Processing transactions and managing your account
Delivering products, services, or information you request
Providing customer support and responding to inquiries
Legitimate Interests
Improving and optimizing our Services
Analyzing usage patterns and trends
Preventing fraud and ensuring security
Communicating service updates and changes
Developing new products and features
With Your Consent
Sending marketing communications
Using cookies for analytics and advertising
Processing special categories of data when applicable
Legal Obligations
Complying with applicable laws and regulations
Responding to legal requests and court orders
Meeting tax and accounting requirements
Data Sharing and Third Parties
We do not sell your personal data. We may share your information with:
Service Providers: Third parties who perform services on our behalf (hosting and email delivery)
Business Partners: Partners with whom we collaborate to provide integrated services
Legal Requirements: Authorities or third parties when required by law or to protect our rights
Business Transfers: In connection with mergers, acquisitions, or sale of assets
With Your Consent: Other parties when you have given explicit consent
All third-party service providers are contractually obligated to protect your data and process it only according to our instructions.
International Data Transfers
Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, including:
EU Commission adequacy decisions
Standard Contractual Clauses (SCCs)
Binding Corporate Rules where applicable
Other legally approved mechanisms
Data Storage and Security
We implement appropriate technical and organizational measures to protect your personal data, including:
Encryption of data in transit and at rest
Secure access controls and authentication
Regular security assessments and updates
Employee training on data protection
Incident response procedures
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. When data is no longer needed, it is securely deleted or anonymized.
Cookies and Local Storage
This site sets no cookies. Our self-hosted analytics writes two small values to your browser instead, and nothing else:
Session identifier: A rotating id held in sessionStorage so a single visit is not counted many times. It is deleted when you close the tab
Retry queue: Analytics events that failed to send are held briefly in localStorage until they can be retried, then removed
Theme preference: Your light or dark mode choice is stored in localStorage so the site does not flash the wrong theme on your next visit
No advertising or cross-site tracking: We set no marketing or advertising storage of any kind, and we do not build a profile of you across other websites
You can clear these at any time through your browser settings. Clearing them has no effect beyond resetting your theme choice and starting a new analytics session.
Your Rights Under GDPR
As a data subject, you have the following rights regarding your personal data:
Right of Access: Obtain confirmation of whether we process your data and request a copy
Right to Rectification: Request correction of inaccurate or incomplete data
Right to Erasure: Request deletion of your personal data ("right to be forgotten")
Right to Restriction: Request limitation of processing in certain circumstances
Right to Data Portability: Receive your data in a structured, machine-readable format
Right to Object: Object to processing based on legitimate interests or for direct marketing. An objection to direct marketing is always honoured, immediately.
Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
Right to Lodge a Complaint: File a complaint with the Danish Data Protection Agency (Datatilsynet)
To exercise any of these rights, please contact us using the information below. We will respond to your request within one month as required by GDPR.
Account Deletion
You have the right to request deletion of your account and associated personal data at any time. When you request account deletion:
Your account will be permanently deactivated
All personal data associated with your account will be deleted
Any content you have created may be anonymized or removed
Some data may be retained if required by law (e.g., financial records)
Processing Time: Account deletion requests are typically processed within 30 days.
Request Account Deletion
To delete your account, please contact us with your request. Include the email address associated with your account.
Request Account Deletion
Children's Privacy
Our Services are not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately. If we discover that we have collected personal data from a child under 16 without parental consent, we will take steps to delete that information promptly.
Automated Decision-Making
We do not make automated decisions about, or profile, individuals. If that ever changes, we will update this policy and inform you before it is used.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. We will notify you of any material changes by posting the updated policy on our platforms and updating the "Last updated" date. For significant changes, we may also provide additional notice such as email notification. We encourage you to review this policy periodically.
Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Twin Current ApS
Email:
Website: twincurrent.dk
You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) if you believe your data protection rights have been violated:
Datatilsynet
Carl Jacobsens Vej 35
2500 Valby, Denmark
Website: datatilsynet.dk
Sales calls to businesses (B2B)
We make personal phone calls to businesses to tell them about our services. This section explains which data we use, where it comes from and how to opt out.
Purpose: Personal phone calls to businesses about our services. Section 10 of the Danish Marketing Practices Act (markedsføringsloven) requires prior consent for marketing by electronic mail, automated calling systems and fax. Personal calls to businesses are not covered by that requirement.
Lawful basis: Our legitimate interest in direct marketing, GDPR Article 6(1)(f), cf. Recital 47.
Where the data comes from: The Danish Central Business Register, CVR (company name, address, industry, number of employees and main phone number), the company's own public website, plus what you tell us during the call. We do not buy lists, we do not collect employee data from the web, and we do not profile individuals.
Sole proprietorships: Data about a sole proprietorship is personal data, and we treat it as such.
Marketing protection: We never contact businesses that are marked as reklamebeskyttet (protected from marketing) in CVR.
At first contact: We tell you who we are, where we got your number, and that you can opt out straight away (Article 14(3)(b) and Article 21(4)).
Right to say no: You can always object to direct marketing (Article 21(3)). The right is absolute, and we honour it immediately, during or after the call.
Suppression list: When you say no, we store only SHA-256 hashes of the CVR number, phone number and e-mail, so you are never imported again. We do not keep the data itself. The hashes are still personal data, and we use them only to respect your no (Article 6(1)(f)). A no stays a no.
Follow-up e-mail: We only send an e-mail if you agreed to it during the call, and only one e-mail about what we agreed.
Retention: Leads we never called are deleted after 90 days. Leads that did not lead to working together are deleted 12 months after the last call. The hash on the suppression list is kept for as long as we make sales calls, so your no is respected.
Processors: Google (Gemini) receives company data only. Names of individuals, e-mail addresses and phone numbers are removed before anything is sent.
Access: You can always ask which data we hold about you (Article 15). We reply within one month. Write to us at the e-mail below.
Vestergade 51C, 1., 5000 Odense C, Denmark
CVR 45696286