QualiQ Privacy Notice
Last updated: 19 October 2026
QualiQ Consulting ApS ("QualiQ", "we", "us") respects your privacy. This notice explains what personal data we process, why, on what legal basis, who we share it with, and your rights. It covers our websites (www.ai-qualiq.com, including its Italian pages, and www.qualiq.dk), the QualiQ Academy online course platform, consulting engagements, our social-media channels, and ordinary business contact.
1. Who we are
QualiQ Consulting ApS is the data controller for the personal data described here.
| Field | Value |
|---|---|
| Legal name | QualiQ Consulting ApS |
| CVR no. | 46513053 |
| Address | C.F. Møllers Allé 70, 4. th, 2300 Copenhagen S, Denmark |
| [email protected] | |
| Websites | www.ai-qualiq.com, www.qualiq.dk and qualiq.ai |
We are not required to appoint a Data Protection Officer and have not done so. Privacy questions go to the email above.
2. The data we process, why, and on what legal basis
| Who you are | Data we process | Purpose | Legal basis (GDPR Art. 6) |
|---|---|---|---|
| Website visitor | IP address, device and browser data, pages viewed, cookies | Operate and secure the site; analytics (consent-gated, active) and advertising (planned) only with consent | Legitimate interest 6(1)(f) for essential operation; consent 6(1)(a) for analytics and advertising cookies |
| Prospect / lead | Name, work email, company, role, message content | Respond to enquiries, prepare proposals | Steps prior to a contract 6(1)(b); legitimate interest 6(1)(f) |
| Client contact | Name, work contact details, correspondence, engagement records | Deliver the engagement, invoicing, records | Contract 6(1)(b); legal obligation 6(1)(c) for accounting; legitimate interest 6(1)(f) |
| Course customer / learner | Name, email, country of residence, account, billing details and payment confirmation, course progress, test results, certificate | Sell and deliver the course, apply the correct VAT, issue certificates, support, accounting | Contract 6(1)(b); legal obligation 6(1)(c) for accounting and VAT |
| Business buyer and named users | Company name and address, VAT number, contact person's name and work email, invoice and payment records; name and work email of each named user | Issue the invoice, check the VAT number, enroll the named users, accounting | Contract 6(1)(b) where you are the buyer; legitimate interest 6(1)(f) for contact persons and named users; legal obligation 6(1)(c) for accounting and VAT |
| Social-media follower | Public profile data and interactions you choose to make | Community engagement, audience insights | Legitimate interest 6(1)(f); your consent on the platform 6(1)(a) |
| Job / collaboration applicant | Application, CV, correspondence | Assess the application | Steps prior to a contract 6(1)(b); consent 6(1)(a) |
| Newsletter subscriber | What Substack makes available to us, such as name, email, and engagement with the newsletter | Manage our newsletter on Substack and, if you choose, send it to you by email | Consent 6(1)(a), given on Substack when you subscribe |
| Meeting participant | Name, email, audio and video; transcript or summary only if the meeting is recorded | Hold and document online meetings | Legitimate interest 6(1)(f); consent 6(1)(a) where a meeting is recorded or AI-summarized |
We do not knowingly process special-category data (Article 9). Our services are aimed at professionals and are not directed at children.
Where personal data within client material is processed during a consulting engagement, QualiQ acts as a data processor on the client's instructions; that processing is governed by the data-processing agreement, not by this notice.
3. Courses and payments
Our online courses are delivered through the learning platform Thinkific, hosted on our own domains. Payments at the checkout are processed by Thinkific Payments, Thinkific's payment service, which is built on Stripe. When you buy a course, Thinkific and Stripe process your account and payment data to give you access and to take payment; we receive confirmation of payment, the country used to apply VAT, and your course account and progress. Card details are handled by the payment service, not by us.
Businesses buy by invoice. We issue the invoice through our accounting system, Dinero, check EU VAT numbers in the European Commission's VIES system, keep the invoice details with our accounting records, and enroll the named users on the platform once the invoice is paid.
4. Social media and newsletter
We reach our audience through social-media channels, currently Instagram, TikTok, and LinkedIn, and through our newsletter on Substack. The newsletter is published on Substack and can be read there. If you choose to receive it by email, you agree to that on Substack, and Substack manages the subscription and the email delivery under its own terms.
When you interact with us on these platforms, the platform processes your data under its own privacy terms, and we see only what the platform makes available to us, such as profile information, comments, messages, subscriber information, and aggregate insights.
You can unsubscribe through the link in any Substack email or through your Substack account settings.
5. AI tools, online meetings, and automated decisions
QualiQ is an AI-native consultancy and uses generative-AI tools in its work, as set out in our AI-tools disclosures. When we meet online (Zoom, Microsoft Teams, or Google Meet), the call itself is an ordinary video meeting. We use an AI meeting assistant to record, transcribe, or summarize a call only when we tell the participants first, and you can ask us not to. Any recording, transcript, or summary is kept only as long as we need it for the engagement and is then deleted. We do not use your personal data to train or fine-tune AI models, and we do not make decisions producing legal or similarly significant effects about you by automated means alone (Article 22).
6. Where the data comes from
Most data comes directly from you. Website and course data is generated by your use of the site and platform. For prospecting we may use public professional sources such as company websites or LinkedIn; where we do, this notice and your rights apply from first contact.
7. Who we share data with
We share personal data only with service providers acting on our instructions, and with authorities where the law requires.
| Category | Provider | Location |
|---|---|---|
| Static website hosting | DanDomain.dk | EU (Denmark) |
| Domains and DNS | DanDomain.dk | EU (Denmark) |
| Company email and website contact form (Google Forms and Google Sheets) | Google Workspace | US provider; EU data regions |
| Online meetings (video conferencing) | Zoom, Microsoft Teams (Google Meet via Google Workspace) | US providers; EU data regions |
| Online course platform (LMS) | Thinkific | Canada (with adequacy decision) |
| Payment processing at the checkout | Thinkific Payments (Thinkific, built on Stripe) | Canada (with adequacy decision); for Stripe, EU (Ireland) / US |
| Web analytics (active, consent-gated) | Google Analytics | US |
| Advertising / conversion tracking (planned, consent-gated) | Google Ads | US |
| Accounting, bookkeeping, and invoicing | Dinero (Visma) | EU (Denmark) |
| Payroll | Salary.dk | EU (Denmark) |
| Generative-AI providers (consulting, remote-API mode) | Anthropic, OpenAI, Google (US); Mistral (EU) | US / EU |
| Email newsletter | Substack | US |
We do not sell personal data.
8. International transfers
Where a provider processes data outside the EEA, we rely on a valid transfer mechanism: an adequacy decision (Canada, for Thinkific; and the EU–US Data Privacy Framework for US providers that are certified, such as Stripe and Google), the European Commission's 2021 Standard Contractual Clauses with a transfer impact assessment, or an Article 49 derogation. You can ask us which mechanism applies to a given provider.
9. How long we keep data
| Data | Retention |
|---|---|
| Prospect / enquiry data | Up to 24 months from last contact |
| Client and engagement records | Engagement duration plus the statutory bookkeeping period (5 years from the end of the financial year, Danish Bogføringslov) |
| Course accounts and progress | Duration of access plus up to 24 months; billing and payment records kept with accounting records for 5 years |
| Business invoices, including any named users listed on them | 5 years from the end of the financial year, with the accounting records (Danish Bogføringslov) |
| Records of sales to consumers in other EU countries, including the information used to determine the country of residence | 10 years from the end of the year of the sale, as EU VAT rules require for the One Stop Shop |
| Social-media interactions | Held by the platform under its own retention; we keep only aggregate insights |
| Applications | 6 months unless we agree otherwise |
| Newsletter subscription | Until you unsubscribe |
| Meeting recordings, transcripts, and AI summaries | Kept only as long as the engagement needs them, then deleted; none made by default |
We hold meetings by video using Zoom, Microsoft Teams, or Google Meet, which process participants' name, email, and audio/video. Where a meeting is recorded, we inform participants in advance and record only on a lawful basis, keeping the recording only as long as needed for the stated purpose.
10. Your rights
You may access your data, have it corrected or erased, restrict or object to processing, receive it in a portable format, and, where processing rests on consent, withdraw consent at any time without affecting prior processing. To exercise a right, email [email protected]. We respond within one month and may extend by two further months for complex requests, telling you if we do.
You may lodge a complaint with the Danish supervisory authority: Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, +45 33 19 32 00, [email protected], www.datatilsynet.dk.
11. Cookies
Our website uses strictly necessary cookies, and analytics cookies (Google Analytics) only after you consent through our live cookie banner—consent-gated and active behind the banner. We plan to add advertising (Google Ads) cookies, which would likewise be set only with your consent. The categories, purposes, and your choices are described in our Cookie Notice, and you can change your choice at any time through the "Cookie settings" link in the site footer.
12. Changes
We update this notice when our processing changes. The date at the top shows the current version. Material changes affecting learners are communicated directly.