QualiQ Academy Privacy Notice
Last updated: 25 June 2026
QualiQ Consulting ApS ("QualiQ", "we", "us") respects your privacy. This notice explains what personal data we process, why, on what legal basis, who we share it with, and your rights. It covers our website (ai-qualiq.com), the QualiQ Academy online course platform, consulting engagements, our social-media channels, and ordinary business contact.
1. Who we are
QualiQ Consulting ApS is the data controller for the personal data described here.
| Field | Value |
|---|---|
| Legal name | QualiQ Consulting ApS |
| CVR no. | 46513053 |
| Address | C.F. Møllers Allé 70, 4. th, 2300 Copenhagen S, Denmark |
| [email protected] | |
| Phone | +45 22 37 88 69 |
| Websites | www.ai-qualiq.com (also qualiq.dk, qualiq.ai) |
We are not required to appoint a Data Protection Officer and have not done so. Privacy questions go to the email above.
2. The data we process, why, and on what legal basis
| Who you are | Data we process | Purpose | Legal basis (GDPR Art. 6) |
|---|---|---|---|
| Website visitor | IP address, device and browser data, pages viewed, cookies | Operate and secure the site; analytics and advertising (planned) only with consent | Legitimate interest 6(1)(f) for essential operation; consent 6(1)(a) for analytics and advertising cookies |
| Prospect / lead | Name, work email, company, role, message content | Respond to enquiries, prepare proposals | Steps prior to a contract 6(1)(b); legitimate interest 6(1)(f) |
| Client contact | Name, work contact details, correspondence, engagement records | Deliver the engagement, invoicing, records | Contract 6(1)(b); legal obligation 6(1)(c) for accounting; legitimate interest 6(1)(f) |
| Course customer / learner | Name, email, account, billing details and payment confirmation, course progress, test results, certificate | Sell and deliver the course, issue certificates, support, accounting | Contract 6(1)(b); legal obligation 6(1)(c) for accounting and VAT |
| Social-media follower | Public profile data and interactions you choose to make | Community engagement, audience insights | Legitimate interest 6(1)(f); your consent on the platform 6(1)(a) |
| Job / collaboration applicant | Application, CV, correspondence | Assess the application | Steps prior to a contract 6(1)(b); consent 6(1)(a) |
| Newsletter subscriber | Name, email, and engagement with the newsletter (e.g., opens and clicks) | Send our newsletter and related updates | Consent 6(1)(a) |
| Meeting participant | Name, email, audio and video; transcript or summary only if the meeting is recorded | Hold and document online meetings | Legitimate interest 6(1)(f); consent 6(1)(a) where a meeting is recorded or AI-summarized |
We do not knowingly process special-category data (Article 9). Our services are aimed at professionals and are not directed at children.
Where personal data within client material is processed during a consulting engagement, QualiQ acts as a data processor on the client's instructions; that processing is governed by the data-processing agreement, not by this notice.
3. Courses and payments
Our online courses are delivered through the learning platform Thinkific, hosted on our own domains. Payments are processed by Stripe. When you buy a course, Thinkific and Stripe process your account and payment data to give you access and to take payment; we receive confirmation of payment and your course account and progress. Card details are handled by Stripe, not by us.
4. Social media and newsletter
We reach our audience through social-media channels—currently Instagram, TikTok, and LinkedIn—and an email newsletter via Substack. When you interact with us there, the platform processes your data under its own privacy terms and we see only what the platform shows us, such as aggregate insights. If you subscribe to our newsletter, we process your name and email to send it, on the basis of your consent. Every newsletter has an unsubscribe link, and you can withdraw your consent at any time; we keep your details only until you unsubscribe.
5. AI tools, online meetings, and automated decisions
QualiQ is an AI-native consultancy and uses generative-AI tools in its work, as set out in our AI-tools disclosures. When we meet online (Zoom, Microsoft Teams, or Google Meet), the call itself is an ordinary video meeting. We use an AI meeting assistant to record, transcribe, or summarize a call only when we tell the participants first, and you can ask us not to. Any recording, transcript, or summary is kept only as long as we need it for the engagement and is then deleted. We do not use your personal data to train or fine-tune AI models, and we do not make decisions producing legal or similarly significant effects about you by automated means alone (Article 22).
6. Where the data comes from
Most data comes directly from you. Website and course data is generated by your use of the site and platform. For prospecting we may use public professional sources such as company websites or LinkedIn; where we do, this notice and your rights apply from first contact.
7. Who we share data with
We share personal data only with service providers acting on our instructions, and with authorities where the law requires.
| Category | Provider | Location |
|---|---|---|
| Static website hosting | DanDomain WebHotel Starter Linux | EU (Denmark) |
| Domains, DNS, mail hosting | DanDomain | EU (Denmark) |
| Company email | Google Workspace | US provider; EU data regions |
| Online meetings (video conferencing) | Zoom, Microsoft Teams (Google Meet via Google Workspace) | US providers; EU data regions |
| Online course platform (LMS) | Thinkific | Canada (with adequacy decision) |
| Payment processing | Stripe | EU (Ireland) / US |
| Web analytics (planned, consent-gated) | Google Analytics | US |
| Advertising / conversion tracking (planned, consent-gated) | Google Ads | US |
| Accounting / bookkeeping | Dinero (Visma) | EU (Denmark) |
| Payroll | Salary.dk | EU (Denmark) |
| Generative-AI providers (consulting, remote-API mode) | Anthropic, OpenAI, Google (US); Mistral (EU) | US / EU |
| Email newsletter | Substack | US |
We do not sell personal data.
8. International transfers
Where a provider processes data outside the EEA, we rely on a valid transfer mechanism: an adequacy decision (Canada, for Thinkific; and the EU–US Data Privacy Framework for US providers that are certified, such as Stripe and Google), the European Commission's 2021 Standard Contractual Clauses with a transfer impact assessment, or an Article 49 derogation. You can ask us which mechanism applies to a given provider.
9. How long we keep data
| Data | Retention |
|---|---|
| Prospect / enquiry data | Up to 24 months from last contact |
| Client and engagement records | Engagement duration plus the statutory bookkeeping period (5 years from the end of the financial year, Danish Bogføringslov) |
| Course accounts and progress | Duration of access plus up to 24 months; billing and payment records kept with accounting records for 5 years |
| Social-media interactions | Held by the platform under its own retention; we keep only aggregate insights |
| Applications | 6 months unless we agree otherwise |
| Newsletter subscription | Until you unsubscribe |
| Meeting recordings, transcripts, and AI summaries | Kept only as long as the engagement needs them, then deleted; none made by default |
We hold meetings by video using Zoom, Microsoft Teams, or Google Meet, which process participants' name, email, and audio/video. Where a meeting is recorded, we inform participants in advance and record only on a lawful basis, keeping the recording only as long as needed for the stated purpose.
10. Your rights
You may access your data, have it corrected or erased, restrict or object to processing, receive it in a portable format, and, where processing rests on consent, withdraw consent at any time without affecting prior processing. To exercise a right, email [email protected]. We respond within one month and may extend by two further months for complex requests, telling you if we do.
You may lodge a complaint with the Danish supervisory authority: Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, +45 33 19 32 00, [email protected], www.datatilsynet.dk.
11. Cookies
Our website currently uses only strictly necessary cookies. We plan to add analytics (Google Analytics) and advertising (Google Ads) cookies, which would be set only with your consent through a cookie banner and are not active until that banner is live. The categories, purposes, and your choices are described in our Cookie Notice, and you will be able to change your choice at any time through the "Cookie settings" link in the site footer.
12. Changes
We update this notice when our processing changes. The date at the top shows the current version. Material changes affecting learners are communicated directly.