OpenDetail Data Privacy Notice

Last updated 27.03.2026

Introduction

Welcome to OpenDetail. It is a system managed by Henning Larsen, part of Ramboll Group Denmark with the intent to enable the sharing of construction knowledge on biogenic and low carbon materials, details.

We are committed to protecting your personal data and ensuring your privacy. This privacy notice details how we collect and use your personal data when a user is created in OpenDetail.

1. Contact information about the data controller

Henning Larsen
Vesterbrogade 72
1620 København V
CVR number: 1003635060
E-mail address: contact@opendetail.org

To contact the data controller, please write an email to contact@opendetail.org.

2. Purpose and Legal Basis for Processing Your Personal Data

Ramboll processes your personal data to make sure you are not a robot, for performance purposes, to make possible knowledge sharing, and to send you newsletters with features and new knowledge.

The legal basis for the processing your personal data is The General Data Protection Regulation art. 6(1)(f), which permits processing when it is necessary for the purposes of our legitimate interests. Our legitimate interest is to enable you and others to share your knowledge on the subject of biogenic and low carbon materials, details.

3. Categories of Personal Data

Full name
Email address
Profession
Country
Company

4. Disclosure of your personal data

We make personal data available to our IT suppliers, incl. IT service and consultancy providers, that store and process personal data on our behalf for the purpose of hosting and maintaining the solution's infrastructure. Such suppliers are subject to our instructions regarding the storing and processing of personal data.

5. Processors

Supplier info:

Contact information: Supabase, Inc., a Delaware corporation with offices located at 970 Toa Payoh North #07-04, Singapore 318992
Datatype: Postgres + blob storage
Purpose: Managing data
Country: Data stored in EU-central 1 (Frankfurt, Germany)
Data Processing Agreement

Contact information: Vercel, Covina, 440 N Barranca Avenue #4133, United States
Datatype: Webapp
Purpose: Deployment
Country: Data stored in: fra1 (Frankfurt, Germany)
Data Processing Agreement

Contact information: Plus Five Five, Inc. (d/b/a Resend), 2261 Market Street #5039, San Francisco, CA 94114, United States
Datatype: Email address, message content
Purpose: Transactional email delivery (account verification, password reset, contact form)
Country: Emails sent from eu-west-1 (Ireland, EU). Email delivery metadata and logs stored in the United States.
Data Processing Agreement

Standard Contractual Clauses (SCCs) and the EU-U.S. Data Privacy Framework apply to all processors.

6. Data retention

Ramboll retains your personal data for as long as necessary to fulfill the purposes for which it was collected. Specific retention periods are as follows:

Account and profile data: Retained until you delete your account. After deletion, data is removed within 90 days (some information may remain in encrypted backups).
User-generated content (details, comments, files): Deleted when your account is deleted.
Authentication event logs (login, logout, password changes): 90 days, then automatically deleted.
Security event logs: 30 days, then automatically deleted.
IP addresses in rate limiting: 2–3 hours, then automatically deleted.
IP addresses in statistics: 24 hours, then automatically deleted.
Consent records: Retained indefinitely to fulfil our legal obligation to prove consent (user ID is anonymised upon account deletion).

For the full record of processing activities, see our Record of Processing Activities (ROPA).

7. Your rights

In accordance with the GDPR, you have several rights in relation to our processing of your personal data:

Right to access: You have the right to access the information we process about you, as well as a number of additional information.
Right to rectification: You have the right to have incorrect information about yourself corrected.
Right to erasure: In special cases, you have the right to have information about you deleted before the time of our general deletion occurs.
Right to restriction of processing: In certain cases, you have the right to have the processing of your personal data restricted.
Right to object: In certain cases, you have the right to object to our or lawful processing of your personal data.
Right to data portability: In certain cases, you have the right to receive your personal data in a structured, commonly used and machine-readable format and to have this personal data transferred from one data controller to another without hindrance.

You can read more about your rights in the Danish Data Protection Agency's guidance on the rights of data subjects, which you can find on www.datatilsynet.dk.

If you want to exercise your rights, please contact Ramboll through the contact information that is stated below.

8. Cookies

OpenDetail uses a minimal number of cookies. We do not use third-party analytics, advertising, or tracking cookies. For full details, see our Cookie Policy.

9. Security and breach notification

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit and at rest, row-level access control, input validation, rate limiting, and continuous security monitoring.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Danish Data Protection Authority (Datatilsynet) without undue delay, and no later than 72 hours after becoming aware of the breach, in accordance with GDPR Article 33. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay, in accordance with GDPR Article 34. For our full procedure, see our Breach Notification Procedure.

OpenDetail employs automated security monitoring to detect unauthorised access attempts, injection attacks, brute-force authentication attempts, and other forms of abuse. Any activity that violates applicable law — including but not limited to unauthorised access to other users' data, attempts to circumvent access controls, or exploitation of the service — may result in immediate suspension or permanent termination of your account, without prior notice, in accordance with our Terms and Conditions.

Rambøll Group Denmark and Henning Larsen reserve the right to report any unlawful activity to the relevant law enforcement and data protection authorities, and to pursue legal action where necessary to protect the security of the service, the personal data of our users, and our legitimate interests.

10. Complaint to the Danish Data Protection Authority

You have a right to lodge a complaint with the Danish Data Protection Authority, Datatilsynet, if you are dissatisfied with the way we process your personal data. You can find Datatilsynet's contact information here: www.datatilsynet.dk.

11. Contact us

If you have any questions or concerns about this privacy notice or our data practices, please contact us at:

Henning Larsen
Vesterbrogade 72, 4
1620 København V
E-mail address: contact@opendetail.org