Adhera
DanskEnglish
Book a demo

Privacy policy

This is an English translation. The Danish version applies in case of doubt.

Last updated: 6 October 2026

This privacy policy describes how Adhera ApS processes personal data about visitors to the website, people who contact us, contact persons at customers and business partners, and job applicants. The policy contains the information we are required to give you under Articles 13 and 14 of the General Data Protection Regulation (GDPR).

The policy does not cover the personal data processed in the Adhera platform on behalf of our customers, for example data about trial participants. That processing takes place on the customer's instructions and under a data processing agreement with the customer, who is the data controller.

1. Data controller

Adhera ApS, CVR no. 46820991 (Danish company registration number), Kronprinsessegade 54, 1306 København K, is the data controller for the processing of personal data described in this policy.

Questions about our processing of personal data can be sent to info@adhera.dk.

2. Enquiries via the contact form, email and phone

When you contact us via the contact form on the website, we process your name, your email address and the content of your message. If you contact us by email or phone, we process the information you give us yourself, including your name, contact details and the content of your enquiry.

The purpose of the processing is to answer your enquiry and, where relevant, to explore a possible collaboration.

The legal basis is Article 6(1)(f) of the GDPR, as we have a legitimate interest in answering enquiries and following up on them. If the enquiry concerns entering into a contract with you, the legal basis is Article 6(1)(b).

Messages sent via the contact form are forwarded by email to the Adhera employees who handle enquiries. They are sent via our data processor (see section 6).

3. Customers, suppliers and business partners

For contact persons at customers, suppliers and business partners, we process their name, job title, work email address and phone number, as well as the correspondence and documents exchanged as part of the collaboration.

The purpose is to enter into, perform and administer contracts, including project management, invoicing and bookkeeping.

The legal basis is Article 6(1)(b) of the GDPR when you are a party to the contract yourself, and Article 6(1)(f) when you are a contact person for a company or institution, as we have a legitimate interest in being able to communicate with our customers and business partners. Accounting records are kept on the basis of Article 6(1)(c), in accordance with the Danish Bookkeeping Act (bogføringsloven).

4. Job applicants

When you apply for a position with us, we process the information you send us, typically your name, contact details, application, CV, certificates, portfolio and any links to public profiles such as LinkedIn or GitHub. We may also process information from interviews and from any assignments you complete as part of the recruitment process.

As a rule, the information is collected from you. References are only obtained by agreement with you.

The purpose is to assess your application and carry out the recruitment process. The legal basis is Article 6(1)(b) of the GDPR, as the processing takes place with a view to possibly entering into an employment contract, and Article 6(1)(f), as we have a legitimate interest in recruiting qualified employees.

We ask you not to send us sensitive personal data (see Article 9), for example health data, or your CPR number (Danish personal identification number), unless we expressly ask for it.

5. Visits to the website

When you visit the website, our hosting provider records technical information in server logs, including IP address, time, browser type and the pages accessed. The purpose is to operate, troubleshoot and secure the website. The legal basis is Article 6(1)(f) of the GDPR.

The website loads the Fraunces typeface from Google Fonts, which is operated by Google Ireland Limited. When a page loads, your browser fetches the typeface directly from Google, and Google receives your IP address in the process. Google Fonts does not set cookies. The legal basis is Article 6(1)(f) of the GDPR, as we have a legitimate interest in displaying the website consistently. Other typefaces are served from our own domain.

For visitor statistics we use Plausible Analytics from Plausible Insights OÜ, Estonia. Plausible does not set cookies and stores no information on your device. When a page loads, your browser fetches Plausible's script from plausible.io and sends information about the page visited, the referring page, browser, operating system, device type and country, which is derived from the IP address. Plausible also records clicks on links to other websites, file downloads and submissions of the contact form, but not what the form contains. The IP address is not stored. It is used together with the browser's user agent to create an anonymous identifier that changes every day, so that we can count visitors without being able to recognise you. The data is processed and stored in the EU, and we only see it in aggregated form. The purpose is to understand how the website is used so that we can improve it. The legal basis is Article 6(1)(f) of the GDPR.

The website does not set cookies. See our cookie policy for a description of how the website handles cookies, local storage and visitor statistics.

6. Recipients and data processors

We do not disclose your personal data to third parties for marketing purposes. Personal data may be disclosed to our auditor and legal advisers and to public authorities where we are legally obliged to do so.

We use the following data processors, which process personal data on our behalf and on our instructions under data processing agreements we have entered into:

  • Vercel Inc., USA: hosting of the website, including server logs and running the contact form.
  • Twilio Inc. (SendGrid), USA: sending messages from the contact form as email.
  • Google LLC (Google Workspace), USA: email, calendar and document management.
  • Plausible Insights OÜ, Estonia: anonymous visitor statistics for the website. Data is processed and stored in the EU.

7. Transfers to countries outside the EU/EEA

Some of our data processors are established in the USA. Where the provider is certified under the EU-U.S. Data Privacy Framework, personal data is transferred on the basis of the European Commission's adequacy decision under that framework. Otherwise, transfers are based on the European Commission's standard contractual clauses under Article 46(2)(c) of the GDPR. You can obtain a copy of the basis for the transfer by contacting us.

8. Retention and deletion

We keep personal data for as long as is necessary for the purposes for which it was collected, according to the following guidelines:

  • Enquiries via the contact form, email or phone are deleted no later than 12 months after the most recent contact, unless the enquiry leads to a customer relationship or another agreement.
  • Information about customers, suppliers and business partners is kept for as long as the contractual relationship continues, and thereafter to the extent required by the Danish Bookkeeping Act, that is, for 5 years from the end of the financial year to which the material relates.
  • Information about job applicants is deleted no later than 12 months after the recruitment process has ended, unless you have consented to us keeping your application for longer. If you are hired, the information is transferred to your personnel file.
  • Server logs are deleted automatically after the hosting provider's standard period, which is short and serves operation and security only.
  • Visitor statistics from Plausible contain no IP addresses or other information that can identify you, and are kept in aggregated form for as long as we use the service.

9. Your rights

Under the GDPR, you have a number of rights in relation to our processing of information about you:

  • The right of access to the information we process about you (Article 15).
  • The right to rectification of inaccurate information (Article 16).
  • The right to erasure of information when the conditions for this are met (Article 17).
  • The right to restriction of processing (Article 18).
  • The right to data portability where the processing is based on a contract or consent (Article 20).
  • The right to object to processing based on our legitimate interest (Article 21).

Where processing is based on your consent, you can withdraw your consent at any time. The withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

You can exercise your rights by contacting us at info@adhera.dk. We will respond to your request without undue delay and no later than one month after receipt.

10. Complaints to the Danish Data Protection Agency

You have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) if you are dissatisfied with the way we process your personal data. Datatilsynet's contact details are available at www.datatilsynet.dk. Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby.

11. Changes

We may update this privacy policy, for example if our processing or the law changes. The current version is always available on this page, with the date of the most recent update.