Yoke is committed to protecting the privacy and security of personal data we collect from our customers. This policy outlines our practices regarding the collection, use, and protection of personal information in accordance with the General Data Protection Regulation (GDPR).
Yoke acts as the data controller for the personal data collected under this policy. Our contact details are: mail@yoke.dk

Data We Collect (Personal Data)
We collect and process the following personal data from our business customers:
- Names of company representatives
- Business email addresses
- Business phone numbers
- Job titles

This information is collected for communication purposes related to projects and services we provide.

Legal Basis for Processing
We process personal data on the following legal bases:
- Contractual necessity: to perform our services and fulfill our contractual obligations
- Legitimate interests: to maintain and improve our business relationships
- Consent: where explicitly given for specific purposes

Purpose of Data Collection
The personal data we collect is used solely for:
- Communicating about projects and services
- Providing customer support
- Maintaining our business relationship
- Fulfilling our contractual obligations

Data Protection
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

- Encryption of personal data where appropriate
- Regular testing and evaluation of the effectiveness of security measures
- Limiting access to personal information to authorized personnel only
- Staff training on data protection and security

Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Specific retention periods are documented and can be provided upon request.

Your Rights Under GDPR
You have the following rights under GDPR:
- Right to access your personal data
- Right to rectification of inaccurate or incomplete data
- Right to erasure ('right to be forgotten')
- Right to restrict processing of your data
- Right to data portability
- Right to object to processing based on legitimate interests
- Rights related to automated decision
- making and profiling
- Right to withdraw consent at any time, where processing is based on consent.
To exercise these rights, please contact us using the details provided in Data Controller section.

International Data Transfers
If we transfer personal data outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

Third-Party Sharing
We do not sell your personal data. We may share data with third-party service providers only as necessary to provide our services. All such third parties are required to maintain the confidentiality of your information and are prohibited from using it for any other purpose.

Proprietary Data and NDAs
Please note that any proprietary data that may be part of a project is regulated through separate Non-Disclosure Agreements (NDAs) and is not covered by this general privacy policy.

Data Breach Notification
In the event of a personal data breach, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, where feasible. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you without undue delay.

Updates to This Policy
We may update this policy from time to time. We will notify you of any significant changes by posting the new policy on our website and, where appropriate, contacting you directly.

Complaints
If you have concerns about our data processing activities, please contact us first so we can address your concerns. You also have the right to lodge a complaint with a supervisory authority in the EU member state of your habitual residence, place of work, or place of the alleged infringement.

Contact Us
If you have any questions about this policy or our data practices, please contact us at mail@yoke.dk