Privacy policy
We process your personal data with respect and in accordance with GDPR and Danish data protection law.
Controller
Token Effort (Vaeva ApS)
v/ Eirik Bakke
Højbovej 1C, 8600 Silkeborg
CVR: 41968621
E-mail: mail@token-effort.com
Phone: +45 30 42 92 85
What data do we collect?
When you use our website or contact us, we may collect the following information:
- Name and contact details (email, phone number, company name) when you submit a contact form.
- Technical data such as IP address, browser type and behaviour on the site, if you consent to analytics cookies.
- Messages and conversation flows if you use our AI chat assistant.
Purposes and legal basis
We process your personal data for the following purposes:
- Responding to enquiries (legal basis: legitimate interest, GDPR Art. 6(1)(f)).
- Delivering agreed services (legal basis: performance of a contract, GDPR Art. 6(1)(b)).
- Improving our website and services, where consent has been given (GDPR Art. 6(1)(a)).
We do not collect more information than is necessary for the specific purpose.
Retention and deletion
Personal data is not retained for longer than necessary:
- Contact enquiries: deleted no later than 2 years after the dialogue has ended, unless we have an ongoing business relationship.
- Customer data and contract material: retained for up to 5 years for compliance with the Danish Bookkeeping Act (bogføringsloven).
- Chat conversations via the AI assistant: session-based and not stored across visits.
Cookies
We use the following types of cookies:
- Necessary cookies: register your cookie consent. They do not require consent.
- Analytics cookies: loaded only with explicit consent and used to improve the user experience.
You can change or withdraw your consent at any time via the cookie banner at the bottom of the page.
Sharing with third parties
We do not sell your personal data and only share it with third parties to the extent necessary:
- Technical partners (hosting, email, analytics tools) under a databehandleraftale/data processing agreement.
- Public authorities, if we are legally required to do so.
All processors (databehandlere) are subject to GDPR and process data only on our behalf.
Your rights
You have the following rights under GDPR:
- Access: you can request access to the information we have registered about you.
- Rectification: you can have inaccurate information corrected.
- Erasure: you can request deletion of your data ("the right to be forgotten").
- Restriction: you can request that processing of your data be restricted.
- Data portability: you can receive your data in a structured format.
- Objection: you can object to processing based on legitimate interest.
Requests should be sent to mail@token-effort.com. We respond within 30 days.
Complaints
If you believe that we process your personal data in breach of applicable law, you can complain to:
Datatilsynet, the Danish Data Protection Authority
Carl Jacobsens Vej 35
2500 Valby
datatilsynet.dk
Changes to this policy
We update this privacy policy if our data processing changes. The current version is always available on this page. Material changes will be communicated clearly.
Last updated · April 2026