Privacy policy
Effective from 26 September 2026.
This policy explains how we process personal data when you use jatid.dk or contact us. We only process the data we need, and we never sell personal data.
1. Data controller
LynBro ApS
CVR no. 46321499 (Danish company registration number)
Rødovre Parkvej 276, 2610 Rødovre
Email: info@lynbro.dk
If you have questions about how we process your data, or want to exercise your rights, write to info@lynbro.dk.
2. What we process, why, and on what legal basis
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Operating and securing the website (server logs, protection against attacks, spam and abuse) | IP address, browser and device type, pages visited, time, referring page | Legitimate interest, GDPR Art. 6(1)(f), and the duty to secure processing, Art. 32 | Up to 90 days; afterwards only anonymous counts |
| User account and providing the service | Email, name, login details and content you create | Art. 6(1)(b) (performance of a contract) | While the account is active; deleted no later than 30 days after closure unless the law requires otherwise |
| Log of sign-ins and security events | Time, IP address, device, outcome | Art. 6(1)(f) and Art. 32 | 12 months |
We do not make decisions about you based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you (Art. 22).
You are not obliged to give us any data. Without the data marked as required we cannot deliver the service or reply to you.
3. Who we share data with
We use suppliers (processors) who may only process the data on our instructions and under a data processing agreement:
- Contabo GmbH — hosting (Germany, EU).
Beyond that we only disclose data where the law requires it (e.g. to public authorities) or where it is necessary to establish, exercise or defend legal claims.
4. Transfers outside the EU/EEA
We do not transfer personal data to countries outside the EU/EEA.
5. Your rights
Under the General Data Protection Regulation you have the right to:
- access the data we process about you (Art. 15);
- have inaccurate data corrected (Art. 16);
- erasure ("the right to be forgotten") (Art. 17);
- restriction of processing (Art. 18);
- receive your data in a common machine-readable format (data portability, Art. 20);
- object to processing based on our legitimate interest, and always to direct marketing (Art. 21);
- withdraw consent at any time — this does not affect the lawfulness of processing before the withdrawal (Art. 7(3)).
These rights may be subject to conditions or limits; for example we may keep data we are required to keep under bookkeeping law or that is needed to defend legal claims (Art. 17(3)). We reply within one month and may ask you to confirm your identity before disclosing data.
6. Complaints
You can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, dt@datatilsynet.dk, www.datatilsynet.dk, or to the supervisory authority where you live. We would like to hear from you first so we can put it right.
7. Security
We protect data with technical and organisational measures: encrypted connections (HTTPS), access control, security updates, backups and access logging. No method is 100% secure; if a personal data breach occurs we handle it under Art. 33-34.
8. Changes
We may update this policy, e.g. when we start using new tools. The current version and date are always on this page. For material changes we ask for new consent where required.
Employee data in jatid
When a company uses jatid for time tracking, rosters and similar, that company (the employer) is the controller for the data about its employees, and LynBro ApS processes it as a processor under a data processing agreement. Questions and requests about such data should go to the employer; we help the employer answer them. This policy covers the website, customer accounts and our own processing.