Policies - Privacy

Last updated: 15 july 2026

1. GENERAL

1.1 This policy on the processing of personal data (“Privacy Policy”) describes how the Danish Technological Institute ("DTI", "us”, “our”, “we”) collects and processes information about you when you communicate with us, order services from us or use our website teknologisk.dk (“the Website”).

1.2 Our services are primarily aimed at businesses, and the information we process therefore relates primarily to the company you represent. If you contact us as a private individual, we will process your personal data in accordance with this policy.

1.3 This Privacy Policy applies to personal data that you provide to us or that we collect via the Website or other sources.

1.4 DTI is the data controller for your personal data. Contact details are set out in section 7.

1.5 We use cookies on the Website, amongst other things, to optimise your use of the Website. This is described in more detail in our cookie policy. (www.teknologisk.dk/cookie-politik).

2. WHAT PERSONAL DATA WE COLLECT AND FOR WHAT PURPOSE

2.1 When you visit the Website: 

We automatically collect information about you and your use of the Website, including information about your IP address, browser type, which pages you visit, which links you click on, and how you generally navigate the Website.

Purpose: To optimise the user experience and the Website’s functions, as well as to record visiting patterns and display relevant content to you.

Legal basis: Article 6(1)(f) of the General Data Protection Regulation (legitimate interest). DTI's legitimate interest consists in improving the Website and its functionality.

Retention: The data will be deleted at the latest when you have not visited the Website for more than 36 months.

2.2 When you subscribe to our newsletters and marketing communications:

We collect information about your name, email address, telephone number, the company you represent, your sector, and your interests and preferences, if you choose to provide this information yourself.

Purpose: To be able to send you newsletters and targeted marketing.

Legal basis: Article 6(1)(a) of the General Data Protection Regulation (consent). You have the right to withdraw your consent at any time, see section 6.7. For existing customers, marketing relating to similar services may be carried out on the basis of Article 6(1)(f) (legitimate interest), see section 10 of the Marketing Act.

Retention: The data will be deleted when your consent is withdrawn, unless we have a legitimate need for longer retention.

2.3 When you order a service from us or receive an offer from us:

We collect information about your name, the company you represent, your telephone number, email address, payment method and details of the services you order, including the time and method of delivery.

Purpose: To provide the services offered or agreed and, in general, to fulfil the contract entered into, including managing your rights to make a complaint.

Legal basis: Article 6(1)(b) of the General Data Protection Regulation (performance of a contract) or Article 6(1)(f) (legitimate interests), where the processing is not strictly necessary for the performance of the contract.

Retention: As a general rule, the data will be deleted 5 years after the end of the calendar year in which the agreement was entered into. The data may be retained for longer if this is necessary to establish, exercise or defend a legal claim, or to comply with legal obligations. Accounting records are retained for 5 years from the end of the relevant financial year, in accordance with the Accounting Act.

2.4 When you enrol on a course with us

We collect information about your name, your email address, your telephone number and the company you represent.

Purpose: To manage your course registration and ensure your participation. This information is a prerequisite for your registration and subsequent administration.

Legal basis: Article 6(1)(b) of the General Data Protection Regulation (fulfilment of a contract for course participation).

Retention: The information will be deleted no later than 3 years after the end of the course, unless retention is necessary for legal reasons.

2.5 When you participate in research and development applications or projects:

We collect information about your name, email address, telephone number, the organization you represent, and any other information you have provided to us in connection with the application or project.

Purpose: To apply for funding for research and development projects and to fulfil the agreements we enter into with you and any funding bodies.

Legal basis: Article 6(1)(b) of the General Data Protection Regulation (performance of a contract) or Article 6(1)(f) (legitimate interests).

Retention: As a general rule, the information is deleted 6 years after the project’s completion. If the project application is not approved, the information is deleted 3 years after the rejection.

2.6 When applying for a position:

Applications for positions at DTI or our subsidiaries can only be made via our recruitment system at www.teknologisk.dk/job , where you will be informed about the processing of your personal data during the recruitment process.

If you submit an application by email, the email and any attached files will be deleted without your personal data being processed.

2.7 When you communicate with us or ask questions:

We collect information about your name, your email address, your telephone number, the company you represent and the content of your enquiry.

Purpose: To answer your questions and provide the service you require.

Legal basis: Article 6(1)(f) of the General Data Protection Regulation (legitimate interest). DTI's legitimate interest consists in being able to respond to enquiries and provide good customer service.

Retention: The information is retained for as long as is necessary to respond to your enquiry and deal with any follow-up questions, after which it is deleted. As a general rule, the information is deleted no later than 12 months after the enquiry has been concluded.

2.8 When you are the contact person for a company that is one of our customers:

We collect information about your name, your email address, your telephone number, the company you represent, and any other information you choose to provide us with.

Purpose: To communicate with you and provide you and the company you represent with the best possible service, including taking into account any specific requests and needs. We also use the information to contact you regarding your satisfaction with our services and to send you information about the same or similar services.

Legal basis: Article 6(1)(f) of the General Data Protection Regulation (legitimate interest).

Retention: The information will be deleted no later than 3 years after the end of the customer relationship, unless retention is necessary for legal reasons.

2.9 When you represent a supplier:

We collect information about your name, your email address, your telephone number, the company you represent, and any other information you choose to provide to us.

Purpose: To communicate with you in connection with tasks that you or the company you represent carry out for us as a supplier.

Legal basis: Article 6(1)(f) of the General Data Protection Regulation (legitimate interest).

Retention: The data will be deleted no later than 3 years after the end of the supplier relationship, unless retention is necessary for legal reasons.

3. RECIPIENTS OF PERSONAL DATA, INCLUDING TRANSFERS TO THIRD COUNTRIES

3.1 We only share your personal data with third parties where we are required to do so by law, or where it is necessary to provide our services.

3.2 Categories of recipients and data processors: Your data may be disclosed to or processed by the following categories of recipients:

• IT and system providers (e.g. for the operation of the Website, CRM systems and email systems)
• Payment platforms and financial institutions
• Email marketing platforms
• Web analytics tools (e.g. for measuring traffic on the Website)
• Any subcontractors who assist in the provision of our services
• Public authorities, where required by law

These recipients act as data processors under our instructions, and we have entered into written data processing agreements with all relevant parties. The data processors may not use the information for any purpose other than fulfilling the agreement with us.

3.3 Transfers to third countries: To the extent that we transfer personal data to countries outside the EU/EEA, the transfer is based on the European Commission’s Standard Contractual Clauses (Article 46(2)(c) of the General Data Protection Regulation) or another valid legal basis for transfer. You can obtain further information about the legal basis for the transfer by contacting us, see section 7.

4. Automated decision-making and profiling

DTI does not use automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you, see Article 22 of the General Data Protection Regulation.

5. Security

We have implemented appropriate technical and organizational security measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access, see Article 32 of the General Data Protection Regulation.

6. Your rights

You have the following rights under the General Data Protection Regulation. You may exercise these rights by contacting us, as set out in section 7.

6.1 Right of access (Article 15)

You have the right to be informed about what personal data we process about you, for what purpose, how long it is retained, who receives it, and where it originates from. You also have the right to a copy of your personal data.

6.2 Right to rectification (Article 16)

You have the right to have any inaccurate or incomplete personal data concerning you rectified.

6.3 Right to erasure (Article 17)

In certain circumstances, you have the right to have your personal data erased, for example if you withdraw your consent and we do not have another legal basis for the processing. The right to erasure does not apply if the processing is necessary to comply with a legal obligation or to establish, exercise or defend a legal claim.

6.4 Right to restriction of processing (Article 18)

In certain circumstances, you have the right to have the processing of your personal data restricted to storage only, for example if you contest the accuracy of the data.

6.5 Right to data portability (Article 20)

Where the processing is based on your consent or on a contract with you, and the processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used and machine-readable format and to request that the data be transferred to another data controller.

6.6 Right to object (Article 21)

You have the right at any time to object to the processing of your personal data based on legitimate interests, including processing for the purposes of direct marketing. If you object to direct marketing, we will immediately cease processing your data for this purpose.

6.7 Right to withdraw consent (Article 7(3))

If the processing is based on your consent, you have the right to withdraw your consent at any time. Withdrawal does not affect the lawfulness of the processing carried out prior to the withdrawal.

6.8 Right to lodge a complaint (Article 77)

You have the right to lodge a complaint with the Danish Data Protection Agency if you believe that our processing of your personal data is in breach of data protection legislation:

The Danish Data Protection Agency Carl Jacobsens Vej 35 2500 Valby Email: dt@datatilsynet.dk Telephone: +45 33 19 32 00 www.datatilsynet.dk

7. CONTACT DETAILS

If you have any questions about this Privacy Policy, or wish to exercise your rights, please feel free to contact us using the form on this page. https://www.dti.dk/privacy?cms.query=privacy

8. Changes to the Privacy Policy

We reserve the right to update this Privacy Policy. The current version will be available on the Website at all times. Significant changes will be communicated to you by email or on the Website, where relevant.