Privacy policy
Last updated: 22 October 2026 · version 1.4
This is a courtesy translation. The Danish version is legally binding and prevails in case of any difference.
This privacy policy describes how we process personal data when you visit our website, use our time calculator, contact us, use Nemma as a customer or apply for a job with us.
1. Controller
The controller for the processing described in this policy is:
VIMESO.marketing v/ Lasse Berg Svenningsen
CVR no. 35124225
Merkurvej 4, 4200 Slagelse
Email: info@nemma.dk
We are not required to appoint a data protection officer (DPO) and have not appointed one. Enquiries about personal data should be sent to the email address above.
2. Important: two different roles
It is important to distinguish between two situations:
A. This policy (we are the controller). It concerns the personal data we process for our own purposes: visitors to our website, people who contact us, contact persons and users at our customers, and job applicants.
B. Data in the Nemma service (we are the processor). When an online store uses Nemma to handle its customer service enquiries, we process personal data about the store's end customers on the store's behalf. In this case the store is the controller, and we are the processor. That processing is governed by our data processing agreement with the individual store - not by this policy.
If you are a customer of an online store that uses Nemma and want to know how your data is processed, you should contact the store. We forward enquiries to the relevant store and do not answer them ourselves.
3. What data we process, and why
3.1 Visitors to our website
| Data | Technical information necessary to deliver the website, including IP address and browser information in connection with each individual request. We use no marketing cookies and no third-party analytics tools. Statistics are only used on the time calculator and only with your consent, see section 3.4 |
| Purpose | To operate and secure the website |
| Legal basis | Our legitimate interest in providing a working and secure website, cf. Art. 6(1)(f). Statistics on the time calculator only take place with your consent, cf. Art. 6(1)(a). If we start using other statistics or marketing cookies, this policy will be updated first |
| Retention | According to the periods stated in our cookie policy |
See our cookie policy for a concrete overview of the cookies used. You can change or withdraw your consent at any time.
3.2 Leads and enquiries
| Data | Name, email, phone number, company, online store domain and the content of your enquiry |
| Purpose | To answer your enquiry, show you the product and assess a possible collaboration |
| Legal basis | Our legitimate interest in answering enquiries and marketing our services to businesses, cf. Art. 6(1)(f). If the enquiry is part of the preparation of an agreement, Art. 6(1)(b) |
| Retention | 24 months after the most recent contact, unless an agreement is entered into |
3.3 Customers, contact persons and users
| Data | Name, email, role, company details (name, CVR, address), account details, login and activity log, and invoicing and payment details |
| Purpose | To create and administer the customer relationship, deliver and support the service, secure operations against misuse, invoice and comply with the bookkeeping obligation |
| Legal basis | Performance of the agreement with the customer and our legitimate interest in administering the customer relationship, cf. Art. 6(1)(b) and (f). Bookkeeping: legal obligation, cf. Art. 6(1)(c), read with the Danish Bookkeeping Act |
| Retention | During the customer relationship and 12 months thereafter. Bookkeeping material is kept for 5 years from the end of the financial year to which the material relates |
Dual role for user data. For data about our customers' users, we are controllers when we process it for our own administrative purposes (invoicing, support, security and operations). To the extent the data forms part of the actual operation of the service on the customer's behalf, we are processors, cf. Annex A of the data processing agreement.
3.4 The time calculator and the newsletter
On the time calculator (nemma.dk/beregn-tid), you answer three questions and enter your online store's address and your email to see your time estimate. Both fields are required. We save the calculation and send you a copy by email with a private link to the result.
| Data | Your email address and your online store's address. Also your three answers (platform, hours per week and the share spent on repeated questions), the result and the campaign code (UTM) you came from. We only use the store address to assess whether the calculator reaches relevant online stores, and we do not fetch the site automatically. The link in the copy contains a random code that only appears in the email: we only store an encoded value (hash) of the code, and the page behind the link only shows the figures from the calculation, not your email or your online store. If you sign up for the newsletter, we also store your choice with the time and the exact consent text, and when you confirm or unsubscribe. To limit misuse, we store an encoded value (hash) of your IP address for 24 hours, never the address itself |
| Purpose | To show you your time estimate, send you a copy and give you a private link to the result. To send you the newsletter if you have signed up and confirmed it. To document your consent and your unsubscription, to prevent misuse of the form and to assess which online stores and campaigns the calculator is relevant for |
| Legal basis | The time estimate, the copy and the result link: your request, cf. Art. 6(1)(b) (we do what you ask us to). The newsletter: your consent, cf. Art. 6(1)(a), and section 10 of the Danish Marketing Practices Act. Documentation of consent and unsubscription, the suppression list, the protection against misuse and the assessment of which online stores and campaigns the calculator is relevant for: our legitimate interest, cf. Art. 6(1)(f). Statistics on the use of the calculator: your consent, cf. Art. 6(1)(a) |
| Retention | A sign-up you do not confirm is deleted after 30 days. If you are not signed up for the newsletter, your contact details are deleted 90 days after your most recent calculation; after that only the figures from the calculation remain, with no link to you. The link to the result works for 90 days. If you are signed up for the newsletter, we keep the data until you unsubscribe, and when you unsubscribe it is deleted within a day. To document your consent and never write to you again after you unsubscribe, we keep a log of sign-up, confirmation and unsubscription and a suppression list. Both contain only an encoded value of your email address, not the address itself. Statistics are kept for 13 months |
The newsletter is a separate and voluntary choice: you can see your time estimate without signing up. You are only signed up once you have confirmed the sign-up in the email we send you, and you can always unsubscribe via the link in our emails. Once you have confirmed, you receive a welcome series of three emails over about a week, and then the newsletter. The links in the emails carry campaign codes (UTM), so we can see in aggregate how many visits the emails bring to our pages, but we do not measure whether you open the emails, and we do not record who clicks. We only send newsletters to confirmed subscribers, you can unsubscribe with one click in your email program or via the link in every email, and here too we measure neither opens nor individual clicks. The copy of your calculation contains no marketing.
Statistics on the time calculator. If you say yes to statistics, we store a random session ID in your browser's sessionStorage while the tab is open and record how far you get in the flow (e.g. that a step or a result was shown) and the campaign code you came from. The statistics do not contain your answers, your online store, your email or your IP address, and we do not link them to your calculation. They are only used on the time calculator and only with Nemma's own solution, without third parties. If you say no, the calculator and the copy by email work exactly as they otherwise would. See also the cookie policy.
Recipients. The data is stored with Supabase (EU) and sent by email via Resend (USA), see sections 5 and 6. We do not pass it on to anyone else and do not send it to advertising platforms.
3.5 Job applicants
| Data | Name, contact details, application, CV, education and work experience and any other information you provide to us yourself |
| Purpose | To process your application and carry out the recruitment process |
| Legal basis | Steps prior to entering into an employment contract and our legitimate interest in assessing applicants, cf. Art. 6(1)(b) and (f). Retention beyond the recruitment process only takes place with your consent, cf. Art. 6(1)(a) |
| Retention | Deleted no later than 6 months after the process ends, unless you have consented to longer retention |
We ask you not to send sensitive information (e.g. about health, trade union membership or religion) or your CPR number (Danish personal identification number) in an application.
4. Where the data comes from
We collect information directly from you when you visit our website, use the time calculator, contact us, create an account or send an application. We may supplement this with publicly available information about your business, e.g. from the Central Business Register (CVR).
5. Recipients and processors
We do not disclose your data to third parties for marketing purposes.
We use the following processors, which process data on our behalf:
| Supplier | Purpose | Region |
|---|---|---|
| Supabase | Database and data storage | EU |
| Vercel | Hosting of the website and application | EU |
| Resend | Sending of email | USA |
| Stripe | Payment processing and invoicing | USA/EU |
In addition come our auditor and any advisers, as well as public authorities where we are obliged to disclose information.
Note: This list covers our own processing as controller. The sub-processors we use to deliver the Nemma service to our customers appear in our sub-processor list.
6. Transfers to countries outside the EU/EEA
Some of our suppliers process data in the USA. The transfer takes place on the basis of:
- The European Commission's Standard Contractual Clauses (SCCs), cf. Implementing Decision (EU) 2021/914, and/or
- the EU-U.S. Data Privacy Framework, where the supplier is validly certified.
You can get a copy of the transfer basis by writing to info@nemma.dk.
7. Security
We protect your data with technical and organisational measures, including encryption in transit and at rest, access control based on need, logging and ongoing security testing. Access to personal data is limited to the people who need it.
8. Your rights
Under the General Data Protection Regulation you have the following rights:
- Access - to be told which data we process about you, and to get a copy.
- Rectification - to have inaccurate data corrected.
- Erasure - to have data deleted in certain cases.
- Restriction - to have processing restricted in certain cases.
- Objection - to object to processing based on legitimate interests, and to direct marketing.
- Data portability - to receive data you have provided to us yourself in a structured, commonly used and machine-readable format.
- Withdrawal of consent - to withdraw consent at any time. This does not affect the lawfulness of the processing before the withdrawal.
Write to info@nemma.dk to exercise your rights. As a general rule, we reply within one month. Conditions or limitations may apply to the rights.
9. Complaints
You can complain about our processing of your personal data to:
The Danish Data Protection Agency (Datatilsynet)
Carl Jacobsens Vej 35, 2500 Valby
Telephone: 33 19 32 00
Email: dt@datatilsynet.dk
www.datatilsynet.dk
We would be glad to hear from you first, so that we can try to resolve the matter.
10. Changes
We may update this privacy policy. The version in force from time to time is available on our website with its version number and date. In the event of material changes that affect you, we will notify you directly where relevant.
11. Cookies
Our use of cookies and similar technologies is described in our cookie policy, which also explains how to change or withdraw your consent.