Privacy Policy

Privacy Policy

Effective date: August 11, 2026

This Privacy Policy explains how I, Kasper Bo Mogensen, collect and use personal information when you visit my portfolio website at kbmportfolio.dk or contact me through the website. I am the data controller for the processing that I carry out through this website. Certain third-party services may act as processors or as separate controllers for their own processing, as described below.

1. Information I collect

Information you provide

If you use the contact form, I may collect:

  • your name;
  • your email address; and
  • the content of your message.

Please do not include sensitive personal information in your message unless it is genuinely necessary.

Technical and consent information

Limited technical information may be processed to operate and secure the website and to manage cookie consent. I use CookieYes to record and remember your cookie choices. CookieYes may store information such as a consent identifier, consent status, date and time, country where available, and proof of consent.

Analytics information

I use Microsoft Clarity to understand how visitors interact with the portfolio. Clarity may process website-interaction information such as page rendering, clicks, scrolling, mouse movements, navigation, device/browser information and related diagnostic or usage events. Microsoft uses this information to provide behavioural analytics, heatmaps and session replays.

Session replays are reconstructed from website-interaction data; they are not ordinary video recordings of your physical screen or anything outside this website. Microsoft states that content entered into input boxes is masked and cannot be unmasked in Clarity. Clarity may also use IP-address-based geolocation to determine an approximate location. I do not use Clarity to obtain precise GPS location.

If you do not consent to analytics cookies, Clarity can operate in a limited cookieless mode. In that mode, Clarity does not set its first-party or third-party cookies and does not maintain the same cross-page or cross-session continuity. If you consent to analytics, Clarity can use cookies and its full analytics functionality.

2. How I collect information

I collect information in the following ways:

  • Directly from you when you submit the contact form.
  • Automatically through the website where necessary for operation, security and consent management.
  • Through Microsoft Clarity for website analytics and improvement. Before analytics consent, Clarity may process limited cookieless interaction data; cookie-based analytics is enabled only in accordance with your consent choice.

I do not buy personal information from data brokers, marketplaces or similar third-party sources.

3. Cookies and similar technologies

I use CookieYes to manage consent for cookies and similar technologies. Strictly necessary technologies may be used where they are required to operate the website or remember your consent choice.

Microsoft Clarity Consent Mode is enabled. The implementation has been tested so that Clarity does not set its first-party cookies _clck and _clsk when analytics consent is rejected. When valid analytics consent is granted, Clarity may set analytics cookies and use full session functionality. CookieYes communicates your consent choice to Clarity.

Clarity may still send limited cookieless analytics data when analytics consent has not been granted. This does not use Clarity cookies to persist the visitor across page views or sessions.

You can accept, reject or customise optional cookies through the cookie banner. You can later change or withdraw your choice using the Cookie Settings control on the website.

More detailed information about the cookies used on this website is available in my Cookie Policy.

4. Purposes of processing

I use personal information for the following purposes:

  • to operate, maintain and secure the website;
  • to respond to messages submitted through the contact form;
  • to remember and document cookie-consent choices;
  • to obtain limited cookieless measurements of website use where permitted by applicable law; and
  • with consent, to use Clarity cookies and full analytics functionality to understand website usage and improve the content, structure and usability of my portfolio.

I do not use information collected through this website to send marketing communications. I do not use Microsoft Clarity for targeted advertising.

5. Legal bases under the GDPR

Where the GDPR applies, I rely on the following legal bases:

  • Consent – Article 6(1)(a): for optional cookie-based analytics and related Microsoft Clarity functionality where consent is required.
  • Legitimate interests – Article 6(1)(f): for responding to genuine contact requests, maintaining the security and proper operation of the website, and limited cookieless website measurement where this basis is permitted and is not overridden by your rights and interests.
  • Legal obligations – Article 6(1)(c), where applicable: where limited records must be retained to demonstrate compliance with applicable privacy obligations.

6. Microsoft Clarity

I use Microsoft Clarity, a behavioural analytics service provided by Microsoft, to understand how visitors use and interact with my portfolio. I use Clarity for website optimisation and usability analysis, not for advertising.

For visitors in the EEA, United Kingdom and Switzerland, Microsoft requires a valid consent signal before Clarity may use its cookies. CookieYes passes consent choices to Clarity. When analytics consent is denied, Clarity operates in a limited no-consent mode without Clarity cookies. When analytics consent is granted, Clarity may set cookies and provide full session continuity and related analytics features.

According to Microsoft’s current retention documentation, ordinary Clarity playback data is retained for 30 days. Click data, heatmap data, and labelled or favourited sessions may be retained for up to 9 months.

For more information, see the Microsoft Privacy Statement.

7. Service providers and recipients

Personal information may be processed by the following service providers:

  • Simply.com A/S – website hosting and storage.
  • CookieYes – cookie-consent management and consent logging.
  • Microsoft Clarity / Microsoft – behavioural analytics, heatmaps and session replays, with cookie use controlled by your consent choice.
  • eclipso Mail Europe – the email service I use to receive and manage messages sent to my contact email address.

I may also disclose personal information where required by applicable law or a competent public authority. I do not sell or rent personal information collected through this website.

8. International data transfers

Some providers may process personal information outside Denmark or outside the European Economic Area.

Microsoft states that Clarity customers in the EU contract with Microsoft Ireland Operations Limited, and Microsoft uses contractual safeguards, including Standard Contractual Clauses where applicable, for relevant transfers between Microsoft entities, including transfers to the United States.

Where personal information is transferred to a country without an applicable adequacy decision, appropriate safeguards such as the European Commission’s Standard Contractual Clauses may be used where required.

9. How long information is retained

  • Contact-form messages: normally for up to 12 months, unless I need to retain a message longer for ongoing correspondence, the establishment or defence of a legal claim, or another lawful reason.
  • Cookie-consent records: for as long as reasonably necessary to document consent choices and meet applicable privacy-accountability requirements.
  • Microsoft Clarity playback data: 30 days according to Microsoft’s current documentation.
  • Microsoft Clarity click/heatmap data and labelled or favourited sessions: up to 9 months according to Microsoft’s current documentation.
  • Technical hosting and security data: according to the operational and security-retention rules of the relevant provider and only for as long as necessary for those purposes.

When personal information is no longer needed for a lawful purpose, I will delete or anonymise it where reasonably possible and where no legal obligation requires continued retention.

10. Is providing personal information required?

You are not legally or contractually required to use the contact form or provide personal information through it. However, I need a way to contact you if you want a response. You can refuse optional analytics cookies and still use the portfolio and its main content.

11. Your choices and withdrawal of consent

You can reject optional analytics cookies and still use the portfolio. You can change or withdraw your cookie consent at any time through the Cookie Settings control available on the website. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

12. Your GDPR rights

Depending on the circumstances, you may have the right to:

  • request access to personal information I hold about you;
  • request correction of inaccurate or incomplete information;
  • request deletion of personal information;
  • request restriction of processing;
  • object to processing based on legitimate interests;
  • receive personal information in a portable format where data portability applies; and
  • withdraw consent at any time where processing is based on consent.

To exercise your rights, contact me using the details below. I may need to verify your identity before responding to a request.

You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet). Information about complaints is available on Datatilsynet’s website.

13. Automated decision-making

I do not use personal information collected through this website to make decisions based solely on automated processing that produce legal effects or similarly significant effects concerning you. Clarity performs automated analytics, but I do not use those analytics to make such individual decisions.

14. Children

This portfolio is not directed at children. Microsoft states that Clarity should not be used on websites or apps targeting users under the age of 18. I do not knowingly solicit personal information from children through this website.

15. Security

I take reasonable steps to protect personal information against unauthorised access, loss, misuse or disclosure. The website uses HTTPS, and the providers used for hosting and related services maintain their own technical and organisational security measures. No method of internet transmission or digital storage can be guaranteed to be completely secure.

16. Links to other websites

This portfolio may contain links to external websites or services. I am not responsible for their privacy practices. Their own privacy policies apply when you leave this website.

17. Changes to this Privacy Policy

I may update this Privacy Policy if the website, the services I use or applicable legal requirements change. The effective date at the top of this page will be updated when material changes are made.

18. Contact

If you have questions about this Privacy Policy or want to exercise your data-protection rights, you can contact me:

Data controller: Kasper Bo Mogensen
Country: Denmark
Email: kasper.bm@eclipso.dk
Contact page: kbmportfolio.dk/#contact

This policy was generated using CookieYes as a starting point and adapted to reflect the actual services and consent configuration used on this website.