This page explains what personal data anitasommer.com processes, why, and what your rights are.
Who is responsible
The data controller is Anita Friis Sommer. You can reach her at sommer@corc.au.dk.
Contact form
When you send a message through the contact form, we process the name, email address, subject and message you enter. They are sent by email to Anita through Proton Mail (Proton AG, Switzerland) and are only used to answer your enquiry and any follow-up. The legal basis is our legitimate interest in answering enquiries (GDPR Article 6(1)(f)) or, if you ask about an engagement, steps taken at your request before entering into an agreement (Article 6(1)(b)). We keep the emails for as long as the enquiry and any resulting collaboration need them, and then delete them.
While you write, your browser keeps a copy of the form in its session storage, so your text is not lost if sending fails. The copy stays on your device, is removed when the message has been sent and disappears when you close the tab.
To keep spam out, the form uses hCaptcha from Intuition Machines, Inc. (USA). hCaptcha is only loaded once you start filling in the contact form. It then processes your IP address and technical information about your browser and device to tell people from bots; this may involve processing outside the EU and the use of cookies or similar technology by hCaptcha. See hCaptcha’s privacy policy: hcaptcha.com/privacy. The legal basis is our legitimate interest in protecting the form against abuse (Article 6(1)(f)).
Visitor statistics
We count visits with Matomo, which runs on our own server in Germany. Matomo sets no cookies and respects your browser’s Do Not Track setting. The statistics only show how the site is used and are not shared with anyone. The legal basis is our legitimate interest in understanding how the site is used (Article 6(1)(f)).
Hosting and server logs
The site is hosted by Hetzner Online GmbH in Germany. Like all web servers, it logs technical details of each request, such as IP address, time, requested page and browser, to keep the site secure and working. The logs are kept for a limited time and then deleted. The legal basis is our legitimate interest in running a secure website (Article 6(1)(f)).
Cookies, fonts and links
The site itself sets no cookies for visitors. Fonts are served from this site, so no data is sent to Google or other font services. Links to LinkedIn, Google Scholar, ResearchGate and other sites take you to those sites, where their own privacy policies apply.
Your rights
You have the right to access, correct and delete your personal data, to restrict or object to its processing, and to data portability. To use these rights, email sommer@corc.au.dk. You can also complain to the Danish Data Protection Agency (Datatilsynet) at datatilsynet.dk.
Last updated: 23 October 2026.