Privacy policy — Whistleblower Software by Formalize

Cited by

Facts read from this source

• Entity Report an error

  “Data Controller: Formalize ApS. Address: Kannikgade 4.1, 8000 Aarhus, Denmark.”

• Certifications Report an error

  “We maintain ISAE 3000 certification for assurance engagements related to data privacy and control environments, providing independent verification of our protection measures. Additionally, we are ISO 27001 certified, a global standard for information security management.”

• Data breach notification Report an error

  “Breaches are assessed for risk and, where required, reported to supervisory authorities within 72 hours and to affected individuals without undue delay.”

• GDPR rights response time Report an error

  “we respond to data rights requests within one month, extendable to three months for complex requests”

• Policy approval date Report an error

  “This policy was approved by Formalize’s senior management the 1st of December 2025 and may be updated to reflect legal changes or operational improvements.”

• Eea transfers Report an error

  “Formalize may transfer personal data between Group entities within the European Economic Area (Denmark, Spain, Italy) under appropriate intra-group agreements.”

• Categories Report an error

  “Analytics service providers (e.g., Google Analytics, website performance tools) Marketing automation platforms (for email campaigns and CRM) for lead management and trial follow up Customer support tools and chatbot providers Content delivery networks (CDN) for website performance Partners with whom we organize events or webinars”

• List available on request Report an error

  “We maintain a list of all authorized sub-processors, available upon request at: gdpr@formalize.com”

• No sale Report an error

  “We do not sell your personal data to third parties.”

• Retention technical Report an error

  “Essential technical data (IP address for security, session management). Website operation, security, fraud prevention. Legitimate interest (Art. 6.1.f). Max. 14 months.”

• Retention marketing contacts Report an error

  “Identification and contact data, professional information, preferences, and interaction history. Sending commercial communications, event invitations, webinars, and promotions. Explicit consent (Art. 6.1.a). Until consent is withdrawn. Max. 24 or 36 months without commercial interaction.”

Scores citing this record

• The Compliance Officer Legal compliance alignment
• The Compliance Officer Security & anonymity assurance
• The Compliance Officer European sovereignty
• The Compliance Officer Legal compliance alignment
• The Compliance Officer Security & anonymity assurance
• The Compliance Officer European sovereignty
• The Compliance Officer Security & anonymity assurance
• The Compliance Officer European sovereignty
• The Compliance Officer Security & anonymity assurance
• The Compliance Officer European sovereignty
• The Group Counsel Legal compliance alignment
• The Group Counsel Security & anonymity assurance
• The Group Counsel European sovereignty
• The Group Counsel Security & anonymity assurance
• The Group Counsel European sovereignty
• The Group Counsel Security & anonymity assurance
• The Group Counsel European sovereignty
• The Group Counsel Security & anonymity assurance
• The Group Counsel European sovereignty
• The Reporter's Advocate Legal compliance alignment
• The Reporter's Advocate Security & anonymity assurance
• The Reporter's Advocate European sovereignty
• The Reporter's Advocate Security & anonymity assurance
• The Reporter's Advocate European sovereignty
• The Reporter's Advocate European sovereignty
• The Reporter's Advocate Security & anonymity assurance
• The Reporter's Advocate European sovereignty
• The Reporter's Advocate Security & anonymity assurance
• The Reporter's Advocate European sovereignty
• The Security Auditor Legal compliance alignment
• The Security Auditor Security & anonymity assurance
• The Security Auditor European sovereignty
• The Security Auditor Legal compliance alignment
• The Security Auditor Security & anonymity assurance
• The Security Auditor European sovereignty
• The Security Auditor Reporting channels & reporter experience
• The Security Auditor Security & anonymity assurance
• The Security Auditor European sovereignty
• The Security Auditor Security & anonymity assurance
• The Security Auditor European sovereignty
• The Skeptic Reporting channels & reporter experience
• The Skeptic Legal compliance alignment
• The Skeptic Security & anonymity assurance
• The Skeptic European sovereignty
• The Skeptic Legal compliance alignment
• The Skeptic Security & anonymity assurance
• The Skeptic European sovereignty
• The Skeptic Reporting channels & reporter experience
• The Skeptic European sovereignty
• The Skeptic Reporting channels & reporter experience
• The Skeptic Security & anonymity assurance
• The Skeptic European sovereignty
• The SME Operator Legal compliance alignment
• The SME Operator Security & anonymity assurance
• The SME Operator European sovereignty
• The SME Operator Security & anonymity assurance
• The SME Operator European sovereignty
• The SME Operator Security & anonymity assurance
• The SME Operator European sovereignty
• The SME Operator Legal compliance alignment
• The SME Operator Security & anonymity assurance
• The SME Operator European sovereignty