Privacy Policy

1. Controller

The data controller for this website is:

TumbleSprout Studio I/S
Tvedgade 1, st., 6760 Ribe, Denmark
CVR: 45267229  ·  VAT: DK45267229
Email: info@tumblesproutstudiois.com
Phone: +4528649137

2. Data we collect and how

Contact form

When you use our contact form we collect: your name, email address, an optional subject, and the message you write. Phone number is not asked for in the form. We also collect the date and time of submission.

Server logs

Our hosting provider automatically records standard server logs, which include the IP address of incoming requests, the URL requested, the referring URL and the browser user-agent string. These logs are retained for a short period for security and diagnostic purposes.

Cookies and local storage

See our Cookie Policy for the full list. In summary: we store your cookie consent choice in your browser's local storage. With your consent, Microsoft Advertising (UET) cookies may also be set. See section 6 for details on Microsoft as a data recipient.

3. Purposes and legal bases

• Responding to enquiries: We process contact form submissions to reply to your message. Legal basis: Article 6(1)(b) GDPR — processing is necessary to take steps at your request prior to entering into a contract, or Article 6(1)(f) — our legitimate interest in responding to business enquiries.
• Advertising campaign measurement: If you accept advertising cookies, we use Microsoft Advertising UET to measure the performance of our paid campaigns. Legal basis: Article 6(1)(a) GDPR — your consent.
• Security and service operation: Server logs are retained to maintain the security and stability of this website. Legal basis: Article 6(1)(f) — our legitimate interest in operating a secure website.

4. Retention periods

• Contact form enquiries: retained for up to 24 months after the last communication, then deleted or anonymised.
• Server logs: retained for up to 90 days.
• Cookie consent choice: stored in your browser for 12 months, after which you will be asked again.
• Microsoft UET cookies: as described in the Cookie Policy.

5. Processors and recipients

We share data only where necessary:

• Hosting provider (by category: web hosting): processes server logs and may hold form submission data in transit.
• Email service provider (by category: transactional email): used to receive and store contact form enquiries sent to us.
• Microsoft Corporation (advertising): if you accept advertising cookies, data about your visit (pages viewed, conversion events) is transmitted to Microsoft for campaign measurement through the Universal Event Tracking (UET) tag. Microsoft acts as a data processor and, in some respects, an independent controller. Data may be transferred to the United States under the EU–US Data Privacy Framework (DPF). For details, see Microsoft's Privacy Statement ↗.

6. Transfers outside the EU

If you accept advertising cookies, your data is transferred to Microsoft in the United States. This transfer is covered by Microsoft's certification under the EU–US Data Privacy Framework, which the European Commission has recognised as providing an adequate level of protection.

No other personal data is transferred outside the European Economic Area under ordinary circumstances.

7. Your rights

Under the GDPR you have the following rights regarding your personal data:

• Access: obtain a copy of the personal data we hold about you.
• Rectification: ask us to correct inaccurate or incomplete data.
• Erasure: ask us to delete your data where there is no compelling reason for us to continue processing it.
• Restriction: ask us to restrict processing of your data in certain circumstances.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interests.
• Withdraw consent: where processing is based on consent, you can withdraw it at any time (this does not affect the lawfulness of processing before withdrawal). To withdraw advertising cookie consent, use the Cookie settings link in the footer.

To exercise any of these rights, contact us at info@tumblesproutstudiois.com. We will respond within one month.

8. Right to complain

If you believe we have handled your data unlawfully, you have the right to lodge a complaint with the Danish supervisory authority:

Datatilsynet
Carl Jacobsens Vej 35, 2500 Valby, Denmark
Website: datatilsynet.dk ↗
Email: dt@datatilsynet.dk

9. Changes to this policy

We may update this privacy policy from time to time. The current version is always published at tumblesproutstudiois.com/privacy-policy. The date at the top of this page indicates when it was last revised.