TilskudTjek1. Data Controller
The data controller for the processing of personal data in connection with tilskudtjek.dk and affiliated services is:
TilskudTjek
Email: tilskudtjek@gmail.com
All inquiries regarding data protection, access requests, or deletion of data can be directed to the email address above. We aim to respond to inquiries within 30 calendar days in accordance with GDPR Article 12(3).
2. Data We Collect
We collect and process the following categories of data:
2.1 Information You Provide
| Data Category | Examples | When |
|---|---|---|
| CVR Number | Your company's CVR number | During free scan and report ordering |
| Contact Info | Name, email address, phone number | During report ordering, contact form, newsletter signup |
| Company Info | Company name, industry, employee count (supplementary) | During report ordering if supplied manually |
| Payment Info | Payment method, transaction ID | When purchasing a report (processed by payment provider) |
| Communication | Emails, support messages | When contacting us |
2.2 Information from Public Registers
| Data Category | Source | Content |
|---|---|---|
| CVR Data | Danish Business Authority's CVR register (public) | Company name, address, industry code, legal form, founding date, status, employee count (range), financial info |
| Financial Data | Published annual reports via CVR | Revenue, gross profit, net income, equity, balance sheet (to the extent publicly available) |
| Ownership Info | The Public Register of Shareholders | Ultimate beneficial owners (to the extent publicly available) |
2.3 Technical Data (Automatically Collected)
| Data Category | Examples | Purpose |
|---|---|---|
| Browser Data | IP address (anonymized), browser type, device type, OS | Security, debugging, statistics |
| Usage Data | Page views, click rates, session duration | Service improvement |
| Cookies | Functional and analytical cookies | See section 8 |
3. CVR Data & Public Registers
TilskudTjek's core service is based on queries and analysis of publicly available business data from the Danish CVR register (Central Business Register). This section explains how we handle this data.
3.1 Published Data
The CVR register is a publicly accessible register. The information we use is already public and can be accessed by anyone via datacvr.virk.dk.
3.2 What We Do with CVR Data
We use CVR data to:
- Identify your company's industry, size, and legal form
- Assess the potential relevance of grant programs, tax deduction schemes, and support programs
- Calculate indicative estimates of potential financial value
- Generate the personalized report (upon purchase)
3.3 Data Quality & Limitations
4. Purpose of Processing
We process your data for the following specific purposes:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Providing free CVR scan | CVR number, public CVR data, technical data | Consent / Legitimate interest |
| Providing paid report | CVR number, public CVR data, contact info, payment info | Contractual performance |
| Payment processing | Payment info | Contractual performance |
| Customer support | Contact info, communication | Contract / Legitimate interest |
| Email communication & follow-up | Email address, name | Consent |
| Service improvement | Anonymized usage data, technical data | Legitimate interest |
| Security & abuse prevention | IP address, technical data | Legitimate interest |
| Accounting & bookkeeping | Invoice and transaction data | Legal obligation (Bookkeeping Act) |
5. Legal Basis (GDPR Article 6)
Our processing of personal data is based on the following legal grounds:
5.1 Consent (Article 6(1)(a))
When you actively submit your CVR number and initiate a free scan, you consent to our processing of the publicly available data linked to that CVR number to deliver the scan result.
5.2 Contractual Performance (Article 6(1)(b))
When you order a paid report, we process your data to fulfill the contract — i.e., deliver the personalized report, process payment, and provide customer support.
5.3 Legal Obligation (Article 6(1)(c))
We are required to store certain transaction data according to the Bookkeeping Act (typically 5 years from the end of the fiscal year the transaction relates to).
5.4 Legitimate Interest (Article 6(1)(f))
We process certain technical data and anonymized usage data based on our legitimate interest in operating, maintaining, and improving our service, as well as protecting against security threats and abuse.
6. Free Scan vs. Paid Report — Data Handling
| Aspect | Free Scan | Paid Report |
|---|---|---|
| Data You Provide | CVR Number | CVR number, name, email, payment info |
| Data We Fetch | Public CVR data (session duration) | Public CVR data (stored for delivery) |
| CVR Data Storage | Deleted after session (not permanently saved) | Stored in connection with the delivered report |
7. Third Parties & Processors
We share your data with the following categories of third parties — only to the extent necessary to provide our service:
- Payment processors (e.g., Stripe)
- Hosting and infrastructure providers
- Email services for report delivery
- Analytics tools (anonymized statistics)
We NEVER sell your data.
8. Cookies & Tracking
Cookies are used to remember your preferences, ensure the website works correctly, and collect anonymized statistics about site usage.
On your first visit, a cookie banner appears allowing you to accept or reject non-essential cookies.
9. Storage & Deletion
We store your data as briefly as possible and only as long as necessary. Invoice data is kept for 5 years per the Bookkeeping Act. Report data is typically kept for up to 3 years for support.
10. Security
We take appropriate technical and organizational measures to protect your data, including TLS/HTTPS encryption, access controls, and regular security reviews.
11. Your Rights
Under GDPR, you have the right to access, correction, deletion, restriction of processing, data portability, and objection. Contact us at tilskudtjek@gmail.com to exercise your rights.
12. Transfers to Third Countries
We strive to store data in the EU/EEA. Where transfers to third countries occur, we ensure a valid transfer basis (e.g., EU-U.S. Data Privacy Framework or SCCs).
13. Disclaimer
All TilskudTjek results are indicative. They do not constitute legal or tax advice. We rely on public CVR data, which may be outdated or incorrect.
14. Children
Our services are aimed at businesses. We do not knowingly collect data from individuals under 16.
15. Changes
We may update this policy periodically. Significant changes will be announced via email or on the website.
16. Contact
E-mail: tilskudtjek@gmail.com
17. Complaints
You have the right to lodge a complaint with the Danish Data Protection Agency (datatilsynet.dk).
This Privacy Policy was last updated on January 15, 2026. This policy was not prepared by a lawyer and does not constitute legal advice.