Henosia Privacy Policy

Last updated on October 8th, 2026.

This Privacy Policy applies to the end users (“End Users”) on the website (“Website”) operated and owned by Henosia ApS, company registration no. 42120014 (“Henosia”).

This Privacy Policy explains Henosia’s online practices for the collection of personal data about the End User when providing the services available on the Website as part of the subscription to the End User, and the rights the End User has to rectify or delete the personal data collected.

By using or accessing the Website the End User is agreeing to this Privacy Policy. If the End User does not agree with this Privacy Policy, the End User may not use or access the Website.

1. Controller of personal data

1.1 For the purpose of compliance with the data protection legislation, the data controller is Henosia ApS, Kronhjorten 73, 9530 Støvring, Denmark.

2. Purpose of the collection of personal data

2.1 Henosia will ensure that personal data is collected and processed only in accordance with one of the following purposes:

  1. To deliver the services on the Website.
  2. To answer the End User’s questions or complaints about the Website.
  3. To communicate with the End User about the Website, including but not limited to notify the End User about changes on the Website.
  4. To facilitate Henosia’s understanding of how to improve the Website, develop new products and services provided on the Website and to enable and promote the Website.
  5. To analyze the use of the Website, including but not limited to interaction with applications, advertising, products and services made available on the Website, linked to or offered on the Website.
  6. To ensure technical functioning of the Website.
  7. To provide, personalize and improve the End User’s experience with the Website.
  8. To provide the End User with information on current activities on the Website, general announcements, upcoming products and changes to the Website.
  9. To facilitate the provision of services ordered from Henosia, including cookies to identify End Users and remember their preferences.
  10. To enforce this Privacy Policy, including but not limited to protect the rights, property or safety of Henosia.

3. Legal basis for processing

3.1 The personal data is collected and processed in order for Henosia to provide the Website as a subscription to the End Users in accordance with Henosia’s Terms of Service which the End Users has agreed to when subscribing to the website. Consequently, the legal basis for processing the personal data is that the processing is necessary for the performance of a contract to which the End User is a party or that the processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, where such interests are not overridden by the interests or fundamental rights and freedoms of the data subject.

3.2 Notwithstanding section 3.1, statistics and marketing cookies and the related processing of personal data on the Website are only used on the basis of the End User’s consent, see Section 12.

4. What kind of personal data is collected

4.1 As the data controller, Henosia will collect, store, and/or use personal data about the End User, including but not limited to name, email address, and IP address.

5. Processing of personal data

5.1 Henosia collects personal data in various ways, including:

  1. Personal data that the End User provides to Henosia through the Website by filling in forms on the Website, including information the End User provides when it registers to use the Website.
  2. Personal data provided to Henosia through corresponding with Henosia by phone, email or otherwise.
  3. Collecting personal data through social media sites, e.g. when the End User connects to the Website from the End User’s Facebook/Google account, loyalty schemes or contests created by Henosia.

5.2 When the End User ends their subscription to use the Website, Henosia will anonymise or erase the End User’s personal data from the Website to ensure the privacy of the End User.

5.3 Notwithstanding section 5.2, Henosia will store the personal data for as long as it is relevant for the purposes set out in section 2 above and as required by law. Notwithstanding the aforementioned, Henosia will at maximum store the End User’s personal data for a period of five (5) years after the End User ends their subscription to the Website.

6. Processing of traffic data

6.1 Henosia also collects aggregate or non-personal identifiable information to track data including but not limited to the total number of visits to the Website, how the End Users found the Website, clicks on advertising, usage of the products and services offered, linked to or made available on the Website and the details of data submitted, uploaded and transmitted by the End Users. Henosia uses this information to understand how the End User uses the Website so that Henosia can improve them. Henosia may also share this information with its affiliates, its partners, or Third Party Providers.

6.2 Where traffic data is collected using cookies or similar technologies (statistics via PostHog and ad measurement via Google Ads), this only happens with the End User’s consent and may involve online identifiers such as cookie IDs and IP addresses, which can constitute personal data. See Section 12 for details.

7. Transfer of personal data

7.1 Henosia may transfer personal data to affiliate or subsidiary companies, as well as professional advisors. Furthermore, Henosia may transfer personal data to employees, agents, business partners, vendors and suppliers in order to deliver a service to Henosia or on Henosia’s behalf.

7.2 Henosia will transfer personal data in order to comply with legal requirements, hereunder when necessary to investigate fraud.

7.3 The transfer of personal data is conducted in compliance with legal requirements, hereunder that transfers are guarded by data processor agreements, to ensure that data is not processed for other purposes than clearly stated and to ensure adequate security measures.

7.4 The personal data that Henosia collects from the End User may be transferred to and stored at a destination outside the European Economic Area (“EEA”). If personal data is transferred outside of the EEA, Henosia ensures an adequate level of security by transferring to countries approved by the EU Commission as having an adequate level of protection, or by entering into an appropriately-drafted contract between Henosia and the non-EEA entity receiving the data, e.g. the EU Commission’s Standard Contractual Clauses for the transfer of personal data to third country.

8. Third party websites and third party collection of information

8.1 The Website or emails sent to the End User from Henosia may link to or integrate with third party websites or services. It is also possible that the websites and/or emails of third parties may link to Henosia’s website. Henosia is not responsible for the content or the privacy policy employed by third parties. Henosia encourages the End User to read the privacy policies of these third parties before transmitting any personal information to them.

9. Securing the End User’s personal data

9.1 Henosia will ensure appropriate security measures to protect data against accidental or unlawful destruction, loss or alteration and against unauthorized disclosure, abuse, etc. Henosia applies technical security measures such as 2-step authentication. Furthermore, Henosia applies organizational security measures to protect your personal data.

9.2 While Henosia takes reasonable data protection precautions, no security measures are completely secure, and Henosia does not guarantee the security of the End User’s data at any time. The End User can access and amend some of the information Henosia keeps on the Website, and Henosia encourages the End User to always update their personal subscriber information.

10. Right to access and rectify the End User’s personal data

10.1 If the End User has any questions regarding Henosia’s processing of its personal data, the End User can contact Henosia using the contact details described below under Section 14.

10.2 Upon the End User’s request, Henosia will provide the End User with a summary of the personal data that relates to the End User and is being processed by Henosia. This summary can include what kind of personal data is being processed, the purpose of the processing, how the personal data was collected and the category of recipients. Henosia will endeavour to provide this summary within four (4) weeks after the request.

10.3 The End User can request to receive personal data regarding the End User in a format which is structured, commonly recognized and readable for a computer, and the End User has the right to pass this personal data to other data controllers. The End User can request that Henosia passes the personal data directly to another data controller, if this is technically possible.

10.4 The End User can request that any false or misleading personal data processed by Henosia is changed, rectified or erased by Henosia.

10.5 The End User can request to have the processing restricted or to object to the processing, and the End User can withdraw the End User’s consent at any time.

10.6 If Henosia does not comply with their legal obligations, the End User can file a complaint with the Danish Data Protection Agency (“Datatilsynet”), who will consider if the complaint is legitimate.

10.7 Notwithstanding the above, the End User has the right to obtain the erasure of its personal data from Henosia in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679 of 27 April 2016). If the End User wants to know more about its rights to erasure, the End User can contact Henosia at the address set out in Section 14.

11. Updates to this Privacy Policy

11.1 Henosia will keep this Privacy Policy updated and Henosia reserves the right to change this Privacy Policy at any time without notice. Henosia encourages the End User to revisit this Privacy Policy regularly to ensure that the End User is at all times fully aware of it. Any changes will be effective immediately upon posting to Henosia’s website. The End User’s continued subscription, browsing or other use of the Website constitutes the End User’s acceptance of this Privacy Policy as amended from time to time.

12. Cookies and similar technologies

12.1 The Website uses cookies and similar technologies, such as local storage in the End User’s browser. Apart from what is strictly necessary, nothing is stored on or read from the End User’s device unless the End User has given consent in the cookie banner. The End User can choose each category below separately, reject all categories as easily as accepting them, and change or withdraw consent at any time via “Cookie settings” at the bottom of every page. Withdrawing consent does not affect the lawfulness of processing that took place before the withdrawal.

12.2 The Website uses the following categories:

  1. Necessary. Remembers the End User’s cookie choice (stored in the browser’s local storage under the name “henosia:consent-v2”), so the banner is not shown on every visit. The same choice is also stored in a small cookie named “henosia_consent” on henosia.com (kept for up to one year), so Henosia’s app at app.henosia.com can respect the choice without asking again. It only contains the choice itself. This is always on, as the Website cannot respect the End User’s choice without it. It is kept until the End User clears the browser’s storage. Legal basis: necessary to provide the service the End User has requested and Henosia’s legitimate interest in documenting the End User’s choice.
  2. Statistics. Henosia uses PostHog, hosted by PostHog in the EU, to understand how the Website is used, e.g. which pages are visited and how the End User navigates the Website. PostHog stores an identifier in a cookie and in the browser’s local storage (named “ph_…_posthog”), typically for up to one year. PostHog processes the data on Henosia’s behalf as a data processor. Legal basis: the End User’s consent (Article 6(1)(a) GDPR).
  3. Marketing. Henosia uses Google Ads (Google tag, gtag.js) to measure whether Henosia’s ads work, e.g. whether a visit to the Website came from an ad and whether the End User later contacts Henosia or signs up. Google may set cookies such as “_gcl_au” on the Website (typically up to 90 days) as well as cookies on Google’s own domains, and receives information such as the End User’s IP address, browser information, the pages visited and ad click identifiers. The Google tag is only loaded after the End User has accepted this category. Google Ireland Limited may process this data as an independent controller, and data may be transferred to Google LLC in the USA, which is certified under the EU-U.S. Data Privacy Framework. More information is available in Google’s explanation of how it uses cookies in advertising and Google’s Privacy Policy. Legal basis: the End User’s consent (Article 6(1)(a) GDPR).

    Within the same category, Henosia also uses the Meta Pixel from Meta (Facebook/Instagram) to measure whether Henosia’s ads on Meta’s platforms work and to show ads to relevant audiences. Meta may set cookies such as “_fbp” and “_fbc” on the Website (typically up to 90 days) as well as cookies on Meta’s own domains, and receives information such as the End User’s IP address, browser information, the pages visited and ad click identifiers (“fbclid”). The Meta Pixel is only loaded after the End User has accepted this category. Henosia and Meta Platforms Ireland Limited are joint controllers for the collection and transmission of this data, and Meta is an independent controller for its further processing. Data may be transferred to Meta Platforms, Inc. in the USA, which is certified under the EU-U.S. Data Privacy Framework. More information is available in Meta’s Privacy Policy and Meta’s Cookies Policy. Legal basis: the End User’s consent (Article 6(1)(a) GDPR).

    Within the same category, Henosia also uses the LinkedIn Insight Tag to measure whether Henosia’s ads on LinkedIn work, to build audiences for ads on LinkedIn and to see anonymous, aggregated demographic information about visitors to the Website. LinkedIn may set cookies such as “li_sugr”, “bcookie”, “lidc”, “UserMatchHistory”, “AnalyticsSyncHistory” and “li_fat_id” on the Website and on LinkedIn’s own domains (typically up to 90 days, some up to one year), and receives information such as the End User’s IP address, browser information, the pages visited and the time of the visit. The LinkedIn Insight Tag is only loaded after the End User has accepted this category. Henosia and LinkedIn Ireland Unlimited Company are joint controllers for the collection and transmission of this data, and LinkedIn is an independent controller for its further processing. Data may be transferred to LinkedIn Corporation in the USA, which is certified under the EU-U.S. Data Privacy Framework. More information is available in LinkedIn’s Privacy Policy and LinkedIn’s Cookie Policy. Legal basis: the End User’s consent (Article 6(1)(a) GDPR).

12.3 The End User can also delete cookies and local storage in the browser’s settings at any time. The cookie banner will then be shown again on the next visit.

13. Forms, CRM system and marketing communication

13.1 When the End User submits a form on the Website, e.g. to contact Henosia, book a demo, download material or sign up for a hackathon, Henosia stores the information the End User enters (such as name, email address, phone number, company, role and message) in Henosia’s own CRM system. Together with the submission, Henosia records the time of submission, the page the form was submitted from, the referring website, campaign parameters in the page address (UTM parameters) and, if present in the page address, ad click identifiers (such as Google’s “gclid” or Meta’s “fbclid”). Henosia also stores a one-way encrypted (hashed) version of the End User’s IP address to prevent spam and abuse. The forms do not set cookies or store anything in the End User’s browser.

13.1a When the End User follows a link from the Website to Henosia’s app at app.henosia.com (e.g. to sign in or start a free trial), the campaign parameters (UTM parameters) and ad click identifiers from the page address the End User arrived with are added to the link, so Henosia can see which campaign led to the sign-up. During the visit they are kept in the browser’s session storage only if the End User has accepted statistics or marketing cookies; they are deleted when the browser tab is closed.

13.2 Henosia uses this information to handle and respond to the End User’s enquiry or registration, and to understand which pages and campaigns lead to enquiries. Legal basis: taking steps at the End User’s request prior to entering into a contract and the performance of a contract (Article 6(1)(b) GDPR), and Henosia’s legitimate interest in following up on enquiries and measuring the effect of its marketing (Article 6(1)(f) GDPR).

13.3 Submitting a form does not sign the End User up for marketing. Henosia only sends newsletters, news, invitations and offers by email if the End User has actively given consent by ticking a separate box in the form. The box is never ticked in advance. Henosia records when and through which form consent was given and the wording the End User agreed to, so the consent can be documented. Legal basis: the End User’s consent (Article 6(1)(a) GDPR and section 10 of the Danish Marketing Practices Act).

13.4 The End User can withdraw marketing consent at any time, free of charge, via the unsubscribe link in every marketing email or by contacting Henosia, see Section 14. Henosia will then stop sending marketing, but keeps a record of the withdrawal so the End User is not contacted again by mistake.

13.5 The CRM system is operated by Henosia and hosted by Henosia’s data processors, including Supabase (database) and Netlify (hosting of the CRM system and form service), under data processor agreements, see Section 7. Information in the CRM system is stored for as long as described in section 5.3.

13.6 If the End User has accepted the marketing category in the cookie banner (see section 12.2), Henosia reports a successful form submission (e.g. a contact request or hackathon sign-up) to Meta through Meta’s Conversions API, so Henosia can measure and optimise its ads. Henosia then sends Meta a one-way encrypted (hashed) version of the End User’s email address, name and, if provided, phone number, together with the End User’s IP address, browser information, the page the form was submitted from, Meta’s cookie identifiers and ad click identifier, and the type of submission. The contents of the message or other form fields are not sent. Nothing is sent to Meta if the End User has not accepted the marketing category. Legal basis: the End User’s consent (Article 6(1)(a) GDPR), which can be withdrawn at any time via “Cookie settings”.

14. Contact details

14.1 If the End User has any questions about this Privacy Policy, its implementation, the accuracy of the End User’s personal information or the use of the information collected, the End User may contact Henosia using the email address privacy-policy@henosia.com

Made in Henosia