Privacy Policy

XBRTags B.V. ("XBRTags", "we", "us") is committed to protecting the privacy of clients, prospective clients and website visitors. This policy explains what personal data we collect through xbrtags.dk, why we collect it, how long we keep it and what rights you have under the GDPR and the Danish Data Protection Act (Databeskyttelsesloven).

Cookies and similar technologies are covered separately in our Cookies Policy.

Who is responsible for your data

The data controller is XBRTags B.V., Rietbaan 2, 2908 LP Capelle aan den IJssel, The Netherlands. You can reach us at hello@xbrtags.dk or +31 (10) 8906661.

Personal data we collect

We collect only what we need to respond to you and to deliver our services:

Enquiry and quote forms: your name, company, business email address, phone number, CVR number, financial year end, the filing type and reporting class you select, and any message you write.
Client documents: the annual reports, financial statements and related files you send us for iXBRL tagging.
Technical data: your IP address and the time of submission when you send a form, together with standard server logs used for security and troubleshooting.
Preferences: your language choice and your cookie choice, stored on your device (see our Cookies Policy).

We do not intentionally collect special categories of personal data, and this website is not directed at children.

Why we use your data

We use personal data only for the purposes below, each with its legal basis under Article 6 of the GDPR.

To answer your enquiry and prepare a quotation - steps taken at your request before entering into a contract, and our legitimate interest in running our business (Article 6(1)(b) and (f)).
To carry out an agreed engagement, including preparing and, where agreed, submitting your filing - performance of a contract (Article 6(1)(b)).
To keep the website and forms secure and to prevent spam and abuse, using a CAPTCHA, a hidden anti-spam field and the IP address logged with each submission - our legitimate interest (Article 6(1)(f)).
To measure how the website is used, only if analytics is switched on and you have accepted it - your consent (Article 6(1)(a)), which you can withdraw at any time.
To meet legal obligations such as accounting and tax rules - legal obligation (Article 6(1)(c)).

How we handle client documents

Client documents are used solely to prepare your iXBRL filing and are never shared with third parties or used for any other purpose, except where you ask us to submit the filing to Erhvervsstyrelsen on your behalf. Documents are transferred and stored using TLS 1.3 encryption on EU-based infrastructure, and website analytics never process them.

We do not sell personal data. We share it only with:

Service providers acting on our behalf, such as web hosting and email providers, who are bound by data processing agreements.
Erhvervsstyrelsen or Finanstilsynet, only when you instruct us to submit a filing for you.
Public authorities, courts or professional advisers, where the law requires it or where needed to establish or defend a legal claim.

Third-party services on this website

Some content on this site is loaded from other providers, which means your IP address is sent to them when a page loads:

Google Fonts delivers the Roboto typeface from Google servers.
OpenStreetMap provides the map on our contact page.
Google Analytics is used only if we switch analytics on, and only after you accept it.

These providers process data under their own privacy policies.

International transfers

XBRTags is based in the Netherlands and uses EU-based hosting. If a provider processes personal data outside the EU/EEA, we rely on an adequacy decision or the Standard Contractual Clauses of the European Commission.

How long we keep data

Client documents: for the agreed engagement period only, then destroyed, unless the law requires a longer period.
Enquiries and quote requests: only as long as needed to respond and follow up, then deleted.
Invoices and accounting records: for as long as the law requires.
Cookie choice: 12 months, after which we ask you again.

Security and certifications

XBRTags is ISO 27001 certified for information security management and ISO 9001:2015 certified for quality management. Every specialist signs a confidentiality agreement.

Your rights

Under the GDPR you have the right to access your personal data, to have it corrected or erased, to restrict or object to its use, to receive it in a portable format, and to withdraw consent at any time. To exercise a right, email hello@xbrtags.dk. We aim to reply within one month.

Complaints

If you believe we have handled your data unlawfully, you may complain to the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk) or to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), which supervises us as a Netherlands-based company. We would appreciate the chance to resolve your concern first.

Changes to this policy

We update this policy when our practices or the law change. The date at the top shows when it last changed.

Contact

Questions about privacy can be sent to hello@xbrtags.dk, or to XBRTags B.V., Rietbaan 2, 2908 LP Capelle aan den IJssel, The Netherlands.