Data controller
SmallClaims is the data controller for the processing of the personal data we have received. You will find our contact details below:
Sortedam Dossering 55
2100 Copenhagen Ø, Denmark
CVR 43188739
+45 27 13 26 22
info@smallclaims.ai
Purpose and legal basis for processing personal data
SmallClaims processes your personal data for the purposes and on the legal bases listed below:
- Where processing is necessary for SmallClaims to pursue our clients' legitimate interests, namely the legitimate interest in our clients recovering their outstanding claims through legal proceedings. The legal basis follows from GDPR art. 6(1)(f).
- Where processing is necessary to comply with a legal obligation, including the Danish Bookkeeping Act. The legal basis follows from GDPR art. 6(1)(c).
- Where processing may be necessary for a legal claim to be established, including any processing of your CPR number (Danish civil registration number). The legal basis follows from section 11(2)(4) of the Danish Data Protection Act.
Categories of personal data
SmallClaims processes various categories of personal data. Which personal data SmallClaims processes in a specific case may vary, but it generally falls into one or more of the categories below:
- Ordinary personal data, including name, address, email, phone number and financial circumstances.
- CPR number (Danish civil registration number).
Recipients of personal data
The following recipients receive personal data from SmallClaims:
- Data processors
- Courts
- Clients
Origin of the personal data
SmallClaims has received personal data from the following sources:
- Clients
- The CVR register (the Danish Central Business Register)
- The courts
- Publicly available registers
Retention of personal data
SmallClaims stores personal data for as long as necessary to fulfil our contractual obligations, and for as long as required by statutory retention periods, including the Danish Bookkeeping Act. How long we store personal data therefore varies from case to case. We delete data when it is no longer necessary to keep it, and as a rule we apply a retention period of five years from the conclusion of a case.
Your rights
Under the General Data Protection Regulation (GDPR), you have certain rights regarding the processing of your personal data. The most important rights are listed below:
- Right of access
- You have the right to access the data we process about you.
- Rectification
- If any of the data we process about you is incorrect, you have the right to have it rectified.
- Erasure
- In some cases, you have the right to have data we process about you deleted before the end of our ordinary retention period described in section 6.
- Objection
- In some cases, you have the right to object to our processing of your personal data.
- Restriction
- In some cases, you have the right to have processing restricted if particular circumstances apply.
- Data portability
- You have the right to receive the personal data you have provided to a data controller in a commonly used, machine-readable format, and to transmit that data to another data controller.
Cookies
This website uses cookies. Cookies are small text files stored on your device when you visit a website. You can change your consent at any time via "Cookie settings" in the footer.
Necessary cookies
These cookies are required for the website to function and do not require consent.
- sc_cc — stores your choice in the cookie banner so it is not shown again on later visits. Set by SmallClaims. Expiry: 365 days.
Analytics (requires consent)
We use HubSpot to understand how visitors use the website and to link contact form submissions to the preceding activity, so we can see where our potential customers come from. HubSpot's tracking script is only loaded if you accept "Analytics" in the cookie banner. If you withdraw your consent, HubSpot cookies are deleted from your browser.
- hubspotutk — anonymous visitor ID. Expiry: 13 months.
- __hstc — marketing source data (campaign, referring page, first and most recent visit). Expiry: 13 months.
- __hssc — current session. Expiry: 30 minutes.
- __hssrc — detects whether the browser has been restarted within the same session. Expiry: session.
HubSpot is operated by HubSpot, Inc., Cambridge, Massachusetts, USA. Transfers of personal data to the USA take place on the basis of the EU Commission's Standard Contractual Clauses (SCCs) as included in HubSpot's data processing agreement.
We also use PostHog for product analytics — for example which pages and buttons visitors use — so we can improve the website. PostHog is only loaded if you accept "Analytics" in the cookie banner. If you withdraw your consent, collection stops and PostHog cookies are deleted from your browser.
- ph_* — anonymous visitor and session ID for product analytics. Expiry: 12 months.
PostHog is provided via PostHog Cloud EU, hosted in the EU (Frankfurt, Germany), so data is not transferred to third countries.
Complaints to the Danish Data Protection Agency
You have the right to lodge a complaint about SmallClaims' processing of your personal data with the Danish Data Protection Agency (Datatilsynet). You will find the agency's contact details at www.datatilsynet.dk.