Under construction
Plan & Proof is not yet an officially registered company. The website and services are a concept in development. Early interest is very welcome at anders@planandproof.com.
Privacy policy
Last updated: 15 October 2026
About this policy
This policy explains how Plan & Proof collects and uses personal data when you visit planandproof.dk or planandproof.com, contact us, are a client or work with us. We only process the information we need, and only for the purposes set out here.
Data controller
Plan & Proof is the data controller for the personal data described in this policy. Write to us if you have questions or want to exercise your rights.
Company: Plan & Proof c/o Anders Butzbach Christensen (being established)
CVR no.: Not registered yet
Address: To follow once the company is registered
Email: anders@planandproof.com
Phone: Not set up yet
What personal data we process
We process ordinary personal data, mainly work-related contact details. We do not ask for sensitive information.
Contact details: name, email, phone number, company and job title.
Enquiries and correspondence: the content of emails, messages and meeting notes.
Client and contract information: proposals, agreements, invoicing and payment details and project documentation.
Technical data from the website: IP address, browser type and time of visit, recorded in server logs.
The information comes from you or from your employer when we work with the company. We may add business-related information from public sources such as the CVR register, the company website and LinkedIn to keep our contact details correct.
If we gain access to a client’s personal data during an engagement, for example in interviews or workshops, we process it under the agreement with the client and a data processing agreement where relevant.
Purposes and legal basis
We only process personal data when we have a lawful basis under Article 6(1) of the General Data Protection Regulation (GDPR).
We do not use personal data for automated decisions or profiling. Where we rely on legitimate interest, you can always object; see the section on your rights.
Website and cookies
The website does not use cookies for statistics, advertising or tracking, and we do not share data about your visit with ad networks or social media. If the site uses cookies, they are only those technically necessary for it to work.
If we later introduce statistics or marketing cookies, we will first ask for your consent through a cookie banner and update this policy.
Our hosting provider records technical data in server logs when you visit the site. It is only used for operation, troubleshooting and security.
Who we share personal data with
We only share personal data when necessary for the purposes in this policy, and we never sell personal data.
IT providers (data processors): hosting with Cloudflare, domains with one.com, Web3Forms, which forwards messages from the contact form to us by email, and providers of email, documents and accounting software. They only process data on our instructions and under a data processing agreement.
Subcontractors: consultants helping with a specific client engagement only get access to the information the work requires and are bound by confidentiality.
Advisers: auditor, bookkeeper or lawyer, when necessary.
Authorities: when required by law, for example the Danish Tax Agency.
Transfers outside the EU/EEA
You trust us with your data, and we treat it that way. We collect only what we need, store personal data in the EU/EEA wherever possible and choose our providers with care. The website is delivered through Cloudflare’s global network, and messages from the contact form are forwarded by Web3Forms. This means some data may be processed outside the EU/EEA, for example in the US.
If that happens, we ensure a valid transfer mechanism under Chapter V of the GDPR, typically the European Commission’s standard contractual clauses or an adequacy decision for the recipient country or framework. Contact us if you would like a copy.
Retention and deletion
We only keep personal data for as long as the purpose requires, and then delete or anonymise it.
Security
We protect personal data with technical and organisational measures appropriate to the risk. These include strong passwords with two-factor authentication, encryption of devices and connections, access only for those who need it, and confidentiality for subcontractors.
If a security breach occurs that may pose a risk to you, we report it to the Danish Data Protection Agency within 72 hours and notify you when the law requires it.
Your rights
You exercise your rights by writing to anders@planandproof.com, and we normally reply within one month.
Access: you can find out what information we process about you and get a copy.
Rectification: you can have incorrect information corrected.
Erasure: you can have information deleted when we no longer have a reason to process it.
Restriction: you can have processing restricted, for example while we check whether the information is correct.
Objection: you can object to processing based on legitimate interest and always to direct marketing.
Data portability: you can receive information you have given us in a structured, machine-readable format.
Withdrawal of consent: you can withdraw consent at any time. This does not affect processing that has already taken place.
There may be exceptions, for example when the law requires us to keep bookkeeping material. We may ask you to confirm your identity before we disclose information.
Complaints to the Danish Data Protection Agency
If you are dissatisfied with how we process your personal data, you can complain to the Danish Data Protection Agency (Datatilsynet). Please contact us first so we can try to resolve the matter.
Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, dt@datatilsynet.dk, datatilsynet.dk
Changes
We update the policy when our processing of personal data changes. The current version is always available at planandproof.dk, and we clearly announce significant changes on the website.
Facing a decision on digital, data and AI?
A new CIO, a new group strategy, an ERP change, many pilots and few in production, or a board asking about AI. Call when the decision is approaching.
Book an introductory meeting