Privacy Policy

Last Updated: November 20, 2025

1. Introduction

RateYourBoss Denmark ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data in compliance with the EU General Data Protection Regulation (GDPR) and Danish data protection law.

2. Data Controller

The data controller responsible for your personal data is:

RateYourBoss Denmark
Email: privacy@rateyourboss.dk

3. What Data We Collect

3.1 Account Information

  • Username: Your chosen username (publicly visible)
  • Email address: For account verification and communication
  • Password: Stored in encrypted form
  • Name: First and last name (not publicly displayed)
  • Employment status: For analytics purposes only

3.2 Review Data

  • Workplace reviews and ratings
  • Comments and feedback
  • Job position and salary information (optional)
  • Employment verification documents (if provided)
  • Voting activity (likes/dislikes)

3.3 Technical Data

  • IP address
  • Browser type and version
  • Device information
  • Usage analytics via Google Analytics

4. How We Use Your Data

We use your personal data for:

  • Account Management: Creating and maintaining your account
  • Service Provision: Displaying your reviews and enabling platform features
  • Communication: Sending important updates about your account
  • Moderation: Reviewing reported content and verification documents
  • Analytics: Understanding how users interact with the platform
  • Legal Compliance: Complying with legal obligations

5. Legal Basis for Processing

We process your personal data based on:

  • Consent: You provide explicit consent when creating an account
  • Contract: Processing is necessary to provide the Service
  • Legitimate Interest: Platform security, fraud prevention, and service improvement
  • Legal Obligation: Compliance with Danish and EU law

6. Data Sharing

We do not sell your personal data. We may share data with:

  • Third-party Services: Google Analytics (anonymized analytics)
  • Hosting Provider: Heroku (server infrastructure)
  • Legal Authorities: When required by law

All third parties are GDPR-compliant and process data according to our instructions.

7. Data Retention

We retain your data for:

  • Account data: Until you delete your account
  • Reviews: Until you delete them or close your account
  • Verification documents: 30 days after verification or rejection
  • Logs: 90 days for security purposes

8. Your Rights Under GDPR

You have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate data
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Restriction: Limit how we process your data
  • Portability: Receive your data in a machine-readable format
  • Objection: Object to processing based on legitimate interest
  • Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact: privacy@rateyourboss.dk

9. Cookies and Tracking

We use cookies for:

  • Essential cookies: Session management and authentication
  • Analytics cookies: Google Analytics (anonymized)

You can disable cookies in your browser settings, but this may affect functionality.

10. Data Security

We implement appropriate security measures including:

  • Encrypted passwords (hashed with industry-standard algorithms)
  • HTTPS encryption for all data transmission
  • Regular security updates and monitoring
  • Access controls and authentication

11. Children's Privacy

Our Service is not intended for users under 18 years of age. We do not knowingly collect data from children.

12. International Data Transfers

Your data may be processed on servers located outside Denmark but within the EU/EEA. All transfers comply with GDPR requirements.

13. Changes to Privacy Policy

We may update this Privacy Policy. We will notify you of significant changes via email or platform notification.

14. Complaints

If you believe we have not handled your data properly, you can file a complaint with:

Datatilsynet (Danish Data Protection Agency)
Website: www.datatilsynet.dk

15. Contact Us

For privacy-related questions or to exercise your rights:

Email: privacy@rateyourboss.dk

Summary: We collect minimal data needed to run the service, keep it secure, and you can request deletion at any time. Your reviews are public but your email and name are private.