Privacy Policy

1. Data controller

CreditReports.dk is operated by Valuatum Oy, a company registered in Finland. The service provides credit risk analysis and company valuation tools for Danish companies.

Contact: creditreports.dk/en/contact/

2. Data we collect

When you register for or use our platform, we may collect the following types of personal data:

• Account information: Name, email address, company name, and password (stored as a hash)
• Usage data: Information about how you interact with the platform, reports you generate, and companies you access
• Technical data: IP address, browser type, operating system, and device information collected automatically via logs
• Communication data: Messages sent to us via the contact form or email

We do not collect financial payment data directly — payments, if applicable, are handled by our payment processor (Stripe) under their own privacy policy.

3. How we use your data

We use your personal data for the following purposes:

• To create and manage your user account
• To provide access to credit risk reports and valuation tools
• To communicate service updates, security notices, and support responses
• To improve the platform through aggregated, anonymized usage analytics
• To comply with legal obligations under Danish and Finnish law

4. Legal basis for processing

We process your personal data on the following legal grounds under GDPR (Regulation (EU) 2016/679):

• Contract performance (Art. 6(1)(b)): To provide the services you have registered for
• Legitimate interest (Art. 6(1)(f)): For platform security, fraud prevention, and product improvement
• Consent (Art. 6(1)(a)): For optional communications such as newsletters (where applicable)
• Legal obligation (Art. 6(1)(c)): Where required by applicable law

5. Data sharing

We do not sell your personal data. We may share your data with:

• Service providers: Hosting, analytics, and email delivery providers who process data on our behalf under data processing agreements
• Valuatum Oy: Our parent company and technology partner, which develops and maintains the platform
• Legal authorities: Where required by law, court order, or to protect the rights and safety of our users

6. Data retention

We retain your personal data for as long as your account is active and for up to 3 years after account closure, unless a longer retention period is required by law. Usage logs are retained for up to 12 months. You may request deletion of your data at any time.

7. Your rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access: Request a copy of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your personal data
• Right to restrict processing: Request limitation of processing in certain circumstances
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interest

To exercise any of these rights, please contact us. You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) at datatilsynet.dk.

8. Cookies

We use strictly necessary cookies for platform functionality such as session management and authentication. We do not use advertising or tracking cookies. Any analytics cookies are used in anonymized, aggregated form only.

9. Data security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. All data transmission is encrypted using HTTPS/TLS.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email. Continued use of the platform after changes become effective constitutes acceptance of the updated policy.