Privacy policy

1. Controller and scope

The data controller is Loonar ApS, registered at Vesterbrogade 192, 2. 10, 1800 Frederiksberg C, Denmark, CVR/VAT 46064933, which operates coosmo.co under the coosmo brand. For information and requests about your data: info@coosmo.co. This notice covers website visits and enquiries through the published contact details. Processing carried out within client projects is governed separately.

2. Website operation

The hosting infrastructure processes technical data needed to deliver and secure the website, including your IP address, request time, requested URL and browser information. The initial language may use your saved preference, browser language or, as a fallback, the country derived from your IP address. The site does not request your device’s precise location.

This processing supports website operation and security. Its legal basis is the controller’s legitimate interest in providing an accessible website and preventing abuse under Article 6(1)(f) GDPR.

3. Enquiries and applications

The site links to email, telephone and LinkedIn; there is no active contact form. If you contact us, we use your contact details and the information you choose to send to respond and follow up. For pre-contractual requests made by the individual concerned and spontaneous job applications, the legal basis is Article 6(1)(b) GDPR. Other professional correspondence is based on our legitimate interest in handling enquiries, Article 6(1)(f). Applicable legal obligations are based on Article 6(1)(c).

Providing this information is optional, but we may be unable to respond without sufficient details. Please do not send unnecessary health or other sensitive information. Contacting us does not subscribe you to promotional messages: newsletter subscriptions are not currently active on the site. No decisions producing legal or similarly significant effects are made solely through automated processing.

4. Cookies and browser storage

The technical cookie coosmo_locale remembers your language for up to 365 days, renewed when the preference is saved. The sessionStorage entry coosmo:preloader-seen avoids repeating the opening animation during the same browser-tab session. You can clear these through your browser settings; language detection and the animation may then run again.

The website code does not integrate profiling, advertising or traffic measurement tools. Fonts are served by the site. External links open only when selected; external destinations process data under their own notices.

5. Recipients and international transfers

Data is accessible to authorised people handling enquiries and to providers needed for hosting, security and communications, within their respective roles. Hosting is provided by Vercel Inc. Data may also be disclosed to authorities where required by law. We do not sell personal data.

Vercel’s infrastructure may involve processing in the United States and other countries outside the European Economic Area. In its notice, Vercel states that it participates in the EU-US Data Privacy Framework for covered transfers and uses standard contractual clauses or other legally recognised mechanisms for further transfers. Contact the controller to request information about safeguards applying to your data and a copy. Vercel information: https://vercel.com/legal/dpa and https://vercel.com/legal/privacy-notice.

6. Retention

Technical preferences have the durations stated above. Hosting data follows the retention windows of the services used and security needs; the website does not copy it into an application-level browsing archive.

Correspondence is retained as needed to handle the enquiry and its follow-up. Application data is retained for evaluation and the related response; retaining it for future opportunities requires a specific notice. If a contractual relationship starts, the associated retention obligations apply. Further retention is limited to legal obligations or the defence of rights in a dispute for the relevant period. These criteria take account of the enquiry’s status, the relationship established and applicable obligations.

7. Your rights

Where the GDPR provides, you may request access, correction, erasure, restriction and portability. You may object to processing based on legitimate interests on grounds relating to your situation. Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing.

Contact info@coosmo.co. We normally respond within one month and will notify you within that period of any extension permitted by the GDPR. You may complain to a competent supervisory authority, including in the country where you live or work; in Italy, the Garante per la protezione dei dati personali: https://www.garanteprivacy.it; in Denmark, Datatilsynet: https://www.datatilsynet.dk. Changes to this notice are published here with an updated date.