Privacy notice
What happens to the data you send us.
ontolo.tech is a brochure site with one form. This notice says what that form collects, who handles it, how long we keep it and what you can ask of us. It is written for the people who use the site, and it tries to be short.
Who is responsible
The data controller is
- Company
- Ontolo ApS
- CVR
- 46828747
- Address
- Gearhalsvej 6, 1. tv, 2500 Valby, Denmark
- hello@ontolo.tech
We are a Danish company and the Danish Data Protection Act and the EU General Data Protection Regulation (GDPR) apply. We have not appointed a data protection officer; the company is small enough that it is not required. Questions go to the address above.
The contact form
When you use the form on the front page we receive what you type in: your name, your email address, the optional line about your company, role and fleet size, and your message. Nothing is collected from the form before you press the button.
Why we process it
To read your message and reply, and to set up the call you asked for. If that leads to a pilot or a partnership, the data moves into that relationship and the agreement we sign then governs it.
Legal basis
Our legitimate interest in answering people who write to us (GDPR Article 6(1)(f)). Where you write on your own behalf rather than for an employer, the basis is also that we are taking steps at your request before entering into a contract (Article 6(1)(b)). You are not obliged to give us anything; without an email address we simply cannot answer.
Who handles the message on the way
The form does not store anything on the website. It passes your message through three services we use as processors, each bound by a data processing agreement:
Cloudflare
Cloudflare, Inc., San Francisco, USA, hosts the site and runs the small function that receives the form. Your submission is handled on Cloudflare's European network. Cloudflare also provides the Turnstile check that stops automated spam; see "Spam protection" below.
Resend
Resend (Plus Five Five, Inc., San Francisco, USA) turns your submission into an email to us. We send through Resend's EU region (Ireland). Resend keeps a copy of each sent message in its sending log for the retention period of our plan, currently 30 days, after which it is deleted there.
Google Workspace
The email lands in our company mailbox, which runs on Google Workspace (Google Ireland Limited). That is where the message lives for as long as we keep it.
Transfers outside the EU
Cloudflare, Resend and Google are US companies. Each is certified under the EU-US Data Privacy Framework, and each data processing agreement also contains the EU Standard Contractual Clauses as a fallback, so the transfer rests on Article 45 and, failing that, Article 46 of the GDPR. The copy of your message that Resend holds for 30 days may be stored in the United States.
How long we keep it
12 months after our last exchange, then we delete the message from our mailbox. If a pilot or partnership follows, the agreement for that sets its own retention. If you ask us to delete it sooner, we will.
Spam protection
The form is protected by Cloudflare Turnstile, which decides whether the submission comes from a browser operated by a person. To do that, Turnstile's script loads from Cloudflare when the page opens and sends Cloudflare your IP address and technical signals from your browser. Turnstile does not read what you type into the form, does not set cookies and does not use the data for advertising. Cloudflare keeps it for a few weeks at most. The basis is our legitimate interest in keeping the form usable (Article 6(1)(f)). When you submit, our function also forwards your IP address to Cloudflare to confirm the check belongs to your browser.
Hosting and server logs
Like any website, ours is delivered by a hosting provider that sees the IP address and the technical details of each request. Cloudflare serves the site from its European network and may keep short-lived technical logs for security and reliability. We do not run analytics, do not use tracking pixels and do not load fonts, scripts or images from third parties other than the Turnstile script described above. Fonts and the page's code are served from our own domain.
Videos
The two product videos are hosted on YouTube. Nothing from YouTube loads until you press one of the "Watch" buttons. When you do, the player loads from youtube-nocookie.com, YouTube's reduced-tracking domain. From that moment Google (Google Ireland Limited) receives your IP address and may store identifiers in your browser's cookies and local storage, under Google's privacy policy. If you would rather not have that, use the "Open on YouTube" link in the same dialog in a browser where you accept Google's terms, or ask us for the video another way.
Cookies and local storage
The site itself sets no cookies and stores nothing in your browser. The only time anything is stored is when you choose to play a video, as described above.
Your rights
You can ask us at any time to
- tell you what we hold about you and give you a copy (access),
- correct it (rectification),
- delete it (erasure),
- stop using it in a particular way (restriction),
- object to processing that rests on our legitimate interest (objection),
- give it to you in a portable form where the basis is a contract (portability).
Write to hello@ontolo.tech. We answer within a month. We do not make automated decisions about you and we do not profile you.
If you think we have handled your data wrongly, you can complain to the Danish Data Protection Agency: Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, Denmark, datatilsynet.dk, dt@datatilsynet.dk. We would rather hear from you first.
Pilots and customer data
This notice covers the website only. Data that a ship manager shares with us during a pilot, such as inspection findings, maintenance records or safety management documents, is covered by the data processing agreement we sign with each partner, under which we act as processor. The commitments on the front page describe what that agreement promises.
Changes
If we change how the site handles data, for example by adding analytics, we update this notice first and change the date at the top.