Privacy policy

This policy explains how Upscale Strategy processes personal data on upscalestrategy.com. The site presents our services, invites you to get in touch and lets you subscribe to our newsletter. Decision Room and Strategy Lab have their own login areas, described in their own sections.

Newsletter

If you subscribe to the newsletter, we process your email address to send you the newsletter. The legal basis is your consent, given at sign-up and confirmed with one click in the email you receive (double opt-in). The address is used for nothing else. Sending is handled by Brevo, hosted in the EU and our data processor. You can unsubscribe at any time via the link in every newsletter or by writing to us, after which the address is deleted.

Data controller

Upscale Strategy
Company reg. 44571323
Ildervej 28, 8270 Højbjerg, Denmark
Email: cdla@upscalestrategy.com
Phone: +45 40 90 33 52

What we process

• Enquiries. If you contact us by email, by phone or through the contact form, we process the information you provide: typically your name, company, email and what your enquiry concerns. The form sends your message to Claus by email through Brevo and a receipt to you. If the mail service does not respond, the message is kept temporarily in a queue in our database in Ireland and sent as soon as the service is back, after which it is deleted from the queue.
• Statistics. We use cookieless, aggregated statistics without personal data in our own database in Ireland, so we can see which pages are read. No profiles are created and no data is shared for advertising.

Purpose and legal basis

• Answering your enquiry and preparing a possible engagement: legitimate interest, art. 6(1)(f), and steps prior to a contract, art. 6(1)(b).
• Improving the website through aggregated statistics: legitimate interest, art. 6(1)(f).

Cookies

upscalestrategy.com does not set marketing or tracking cookies, and no consent banner is required. Only technically necessary data for delivering the page is used.

Processors and hosting

The site is hosted on servers in the EU (Frankfurt). We do not sell your information. We only share it with processors we have a data processing agreement with, and only when it is necessary to operate the site or answer your enquiry. They are:

• Render (the application, Frankfurt, EU)
• Supabase (the database, Ireland, EU)
• Stripe (payments, EU and the United States)
• Brevo (newsletter, EU)
• Microsoft 365 (email, EU)
• Anthropic (the language model behind the tools, processing outside the EU, including in the United States)

Transfer to a third country happens for payments, where Stripe processes data in the United States under EU standard contractual clauses, and for the model call to Anthropic in the United States, which covers only the text the tool sends with that call, not your database, your journal or your files. Anthropic states that data from their API is not used to train the models. By default, Anthropic retains what is sent to and from their API for up to 30 days to detect misuse, and then deletes it. If your company requires that no information may leave the EU, write to us before you enter anything confidential; the processing can be moved into the EU.

Retention

Enquiries are kept for as long as the dialogue is relevant, and are deleted no later than three years after the last contact, unless the Danish Bookkeeping Act requires longer retention.

Your rights

You have the right to access, rectification, erasure, restriction and objection, and the right to lodge a complaint with the Danish Data Protection Agency, Datatilsynet. Write to cdla@upscalestrategy.com to exercise your rights.

Other sites

Our education programme has its own site and its own privacy policy, which covers accounts, purchases and course data: forhandlingsuddannelse.dk.