Privacy Policy

1. Data Controller

The data controller responsible for the processing of your personal data is:

Mr Red Holding ApS is a company registered in Denmark and operates in accordance with the General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679 — and applicable Danish data protection legislation, including the Danish Data Protection Act (Databeskyttelsesloven).

2. Scope of This Policy

This Privacy Policy applies to all personal data collected through our website and related educational services. It describes what data we collect, how we use it, the legal bases for processing, how long we retain it, and your rights as a data subject. This policy applies to all visitors, users, and participants who interact with our website or contact us through any available channel.

3. Personal Data We Collect

We may collect the following categories of personal data:

3.1 Data You Provide Directly

• Contact information: Full name, email address, and phone number provided through our contact form.
• Program preferences: Your selected program and preferred learning format as indicated in the contact form.
• Message content: Any free-text message or inquiry you submit through our website.
• Consent records: Your acknowledgment and acceptance of this Privacy Policy when submitting the contact form.

3.2 Data Collected Automatically

• Technical data: IP address, browser type and version, operating system, device type, screen resolution, and language settings.
• Usage data: Pages visited, time spent on pages, referral source, click patterns, and navigation paths.
• Cookie data: Data collected through cookies and similar tracking technologies as described in our Cookie Policy.

4. Purposes of Processing

We process your personal data for the following purposes:

• Responding to inquiries: To respond to your questions, requests for information, and communications submitted through our contact form or via email.
• Program administration: To provide information about our educational programs and to facilitate enrollment or participation where applicable.
• Website functionality: To ensure the proper operation, security, and performance of our website.
• Analytics and improvement: To understand how visitors use our website, improve content, and enhance user experience.
• Legal compliance: To comply with legal obligations under Danish law, EU regulations, and applicable data protection legislation.
• Security: To detect, prevent, and address fraud, abuse, security issues, and technical problems.

5. Legal Bases for Processing

We process your personal data based on the following legal grounds under Article 6 of the GDPR:

• Consent (Article 6(1)(a)): When you submit a contact form with the consent checkbox checked, you provide your explicit consent for us to process the data you submit and to contact you. You may withdraw your consent at any time by contacting us at [email protected].
• Legitimate interests (Article 6(1)(f)): We process certain technical and usage data based on our legitimate interest in maintaining a secure, functional website and improving our educational services. Our legitimate interests do not override your fundamental rights and freedoms.
• Legal obligation (Article 6(1)(c)): We may process data where necessary to comply with a legal obligation to which we are subject under Danish or EU law.

6. Data Sharing and Recipients

We do not sell, rent, or trade your personal data to third parties. We may share your data only in the following limited circumstances:

• Service providers: We may engage trusted third-party service providers who assist us with website hosting, email delivery, analytics, and security. These providers process data solely on our behalf and under contractual data processing agreements in compliance with Article 28 of the GDPR.
• Legal requirements: We may disclose your data if required by law, regulation, legal process, or governmental request under Danish or EU jurisdiction.
• Protection of rights: We may disclose data where necessary to protect the rights, property, or safety of Mr Red Holding ApS, our users, or the public.

7. International Data Transfers

Our educational services are offered to learners in Canada, and certain data processing may occur outside the European Economic Area (EEA). Where personal data is transferred outside the EEA, we ensure that appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, adequacy decisions, or other legally recognized transfer mechanisms under Chapter V of the GDPR. You may request further details about the specific safeguards applied by contacting us at [email protected].

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law:

• Contact form submissions: Retained for up to 24 months from the date of submission, unless a longer retention period is required for ongoing communication or legal compliance.
• Technical and usage data: Retained for up to 12 months for analytics and security purposes.
• Cookie data: Retained according to the specific cookie duration described in our Cookie Policy.
• Legal and compliance records: Retained as required under Danish bookkeeping regulations (Bogføringsloven) or other applicable legal requirements, typically up to 5 years.

After the applicable retention period expires, your personal data will be securely deleted or anonymized.

9. Your Rights

Under the GDPR and applicable Danish data protection law, you have the following rights regarding your personal data:

• Right of access (Article 15): You have the right to request a copy of the personal data we hold about you and to receive information about how it is processed.
• Right to rectification (Article 16): You have the right to request correction of inaccurate or incomplete personal data.
• Right to erasure (Article 17): You have the right to request deletion of your personal data where it is no longer necessary for the purpose it was collected, or where you withdraw consent.
• Right to restriction of processing (Article 18): You have the right to request that we restrict the processing of your data in certain circumstances.
• Right to data portability (Article 20): You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller.
• Right to object (Article 21): You have the right to object to processing based on legitimate interests, including profiling.
• Right to withdraw consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days of receipt, as required by the GDPR.

10. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to ensure proper functionality, analyze usage patterns, and improve the user experience. You can manage your cookie preferences through your browser settings. For detailed information about the types of cookies we use, their purposes, and their duration, please refer to our Cookie Policy.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include HTTPS/SSL encryption for data in transit, secure server infrastructure, access controls, regular security assessments, and data minimization practices. While we take reasonable precautions to protect your data, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Children's Privacy

Our website and educational programs are designed for adults, students, professionals, educators, entrepreneurs, and lifelong learners. We do not knowingly collect personal data from children under the age of 16. If you believe that a child under the age of 16 has provided us with personal data, please contact us at [email protected] and we will take steps to delete such data promptly.

13. Third-Party Links

Our website may contain links to external websites or services that are not operated by Mr Red Holding ApS. We are not responsible for the privacy practices or content of those third-party websites. We encourage you to review the privacy policies of any external websites you visit.

14. Supervisory Authority

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet):

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data. Continued use of our website after any modifications constitutes your acknowledgment of the updated policy.

16. Governing Law and Jurisdiction

This Privacy Policy is governed by and construed in accordance with the laws of Denmark and the European Union, including the General Data Protection Regulation (GDPR) and the Danish Data Protection Act (Databeskyttelsesloven). Any disputes arising from or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of Denmark.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us: