Defcon-App is operated and published by MVCS ApS (CVR DK-45438392), a company registered in Denmark. Where this policy says we, it means MVCS ApS. We are the data controller for the accounts we hold, for our correspondence with you, and for our own business records. For the people a customer chooses to notify, the customer decides who is contacted and what is sent: for that data the customer is the controller and we act as their processor under a data processing agreement.
This policy covers defcon-app.com, the Defcon-App platform, and the Defcon-App applications for iOS and Android.
We collect only the information you enter in the system: the details you set an account up with, the contacts you add for the people you wish to notify, and the notifications you send through the platform. If you contact us through this website, we keep your message and the details you send with it. We do not buy personal data and we do not build profiles of visitors.
To provide and support the platform, to carry the notifications a customer sends, to reply to you, to invoice, and to keep the service secure. We do not sell personal data and we do not share it for anyone else's marketing.
We process personal data under Article 6 of the GDPR: to perform our contract with a customer (Art. 6(1)(b)), to meet our legal obligations such as bookkeeping (Art. 6(1)(c)), for our legitimate interest in operating and securing the service (Art. 6(1)(f)), and on the basis of consent where we ask for it (Art. 6(1)(a)), which you may withdraw at any time.
We keep personal data only as long as it is needed: account data for as long as the account is open, and accounting records for five years, as Danish law requires. When data is no longer needed we delete or anonymise it.
Security is the heart of what we do. We apply technical and organisational measures in line with recognised security frameworks and industry best practice, and we review and improve them continually.
This website carries no advertising or tracking cookies and no third-party analytics. Signing in to the platform sets only the cookies a session needs.
We share personal data only where it is necessary to run the service, or where the law requires it. Where we do, it is with providers acting as our processors under data processing agreements, such as hosting, message delivery and payment. A list of these providers is available to customers on request. The platform is hosted in the EU, and personal data stays within the EU/EEA.
You may ask us for a copy of your personal data, to correct or erase it, or to restrict or object to how we use it. Write to [email protected] and we will respond within one month. If a customer added your details so that they could notify you, that customer controls your data, so please contact them; if you contact us, we will pass your request on. You may also complain to the Danish Data Protection Agency, Datatilsynet (datatilsynet.dk).
When this policy changes we update the date above. We tell account holders directly about material changes.
MVCS ApS, [email protected].