How we process your personal data

1. We are the data controller – how do you contact us?

legalXtract ApS is the data controller for the processing of the personal information we have received about you. Our contact information is

legalXtract ApS

CVR no.: 39401940

Toldbodgade 89

DK-1253 Copenhagen K

Phone: 71 99 21 30


2. Purpose and basis for our processing of your personal data

We process your personal data for the following purposes:

  • Invoicing of our services
  • License management, so we ensure that licensing conditions are in order
  • Support so you get the right service when you contact us

The legal basis for our processing of your personal data follows from Article 6(1)(a) or (b) of the General Data Protection Regulation (GDPR). Normally, the basis for collecting and processing the information will be that we have obtained consent from the data subject or that it is necessary for the performance of the contract with our customers.

For customers who have entered into a license agreement to use our web application, a separate data processing agreement will be entered into, which describes in detail our obligations as a data processor.

3. Categories of personal data

We only process ordinary personal data, such as name, address, place of work, telephone number, email address and IP address.

4. Transfer and disclosure

We disclose personal data to our system suppliers in accordance with data processing agreements, and only for the purpose that we can use our IT systems. Otherwise, we will not disclose your personal data to others.

We do not transfer your personal data to recipients outside the EU and EEA.

5. Where does your personal data come from

When you or your employer create a user profile on our website, we receive a number of information about you, typically name, place of work and email address.

An employer (or other person or entity purchasing our Services for your use) may provide us with information about their employees or subcontractors who use our Services. We may receive information about your field of work, your title and the IP address that you intend to use for the use of legalXtract.

6. Storage of your personal data

We have appropriate technical and organizational measures in place to safeguard against unauthorized access to, loss or destruction of the personal data and other data under our responsibility. Only persons who have a legitimate need to process personal data for the purposes mentioned have access to the personal data.

At this time, we cannot say how long we will keep your personal data. However, we can inform you that we will consider whether there is an ongoing or completed customer relationship with you or the authority or company where you work when determining how long your information will be stored.

7. The right to withdraw consent

You have the right to withdraw your consent at any time. You can do this by contacting us at the contact details listed above in section 1. 

If you choose to withdraw your consent, it does not affect the lawfulness of our processing of your personal data based on your previously given consent and up to the time of withdrawal. If you withdraw your consent, it will therefore only take effect from that time.

8. Your rights

Under the General Data Protection Regulation, you have a number of rights in relation to our processing of information about you.  

If you want to exercise your rights, please contact us. 

Right to view information (right of access)

You have the right to gain insight into the information we process about you, as well as a number of additional information. 

Right to rectification (correction)

You have the right to have incorrect information about yourself corrected. 

Right to erasure

In special cases, you have the right to have information about you deleted before the time of our general general deletion occurs. 

Right to restriction of processing

In certain cases, you have the right to have the processing of your personal data restricted. If you have the right to have the processing restricted, we may in future only process the information – except for storage – with your consent, or for the purpose of establishing, exercising or defending legal claims, or to protect a person or important public interests. 

Right to objections

In certain cases, you have the right to object to our or lawful processing of your personal data. You can also object to the processing of your data for direct marketing purposes. 

Right to transmit information (data portability)

In certain cases, you have the right to receive your personal data in a structured, commonly used and machine-readable format and to have this personal data transferred from one data controller to another without hindrance.

You can read more about your rights in the Danish Data Protection Agency's guidelines on the rights of data subjects (in Danish) or visit the agency’s website at

9. Complaint to the Danish Data Protection Agency

You have the right to lodge a complaint with the Danish Data Protection Agency if you are dissatisfied with the way we process your personal data. You will find the Danish Data Protection Agency's contact information on

Updated July 4, 2023 – legalXtract ApS