Privacy Policy for Permido
Last updated: 09.06.2026
Introduction
This privacy policy describes how Permido A/S processes personal data in connection with the provision and operation of digital mail and the encrypted email solution Permido.
Permido A/S respects and protects users' personal data and processes it in accordance with the European Parliament and Council Regulation (EU) 2016/679 (GDPR) and applicable Danish data protection legislation.
Data controller
Permido A/S is the data controller for the personal data processed in connection with the creation and administration of user accounts, support, security, operation, and other matters described in this privacy policy.
Permido A/S
CVR: 45728730
Linnés Allé 2
2630 Taastrup, Denmark
Denmark
Phone: +45 7027 2702
Email: help@permido.com
3. Permido's role as a data processor
When Permido is used by companies, public authorities, or other organizations to send and receive encrypted emails or digital mail, Permido fundamentally processes personal data on behalf of the customer.
In these cases, the customer is the data controller, and Permido is the data processor. The processing is governed by the data processing agreement entered into between the customer and Permido.
If you receive an encrypted email via Permido and want information about the processing of the email's content, please contact the organization or company that sent the email.
4. What information do we process?
4.1 Account Information
When creating and using Permido, we can process the following information:
4.2 Support Information
When you contact support, we can help with:
4.3 Safety and operating information
To ensure stable and secure operation of the service, we may process:
5. Purpose and basis for processing
We process personal data for the following purposes:
Service delivery
The purpose is to create and manage user accounts, authenticate users, and provide encrypted email communication.
Basis for Treatment: GDPR Article 6, paragraph 1, letter b (performance of a contract).
Two-factor authentication and security
The purpose is to protect user accounts and ensure correct user identification.
Basis for Treatment: GDPR Article 6, paragraph 1, letter b and f.
Drift, fejlfinding og informationssikkerhed
The purpose is to protect the service from abuse, errors, unauthorized access, and security incidents.
Basis for Treatment: GDPR Article 6, Paragraph 1, Letter f (legitimate interest).
Customer support
The purpose is to answer inquiries and provide technical support.
Basis for Treatment: GDPR Article 6, paragraph 1, letter b and f.
Newsletters and marketing
If you sign up for our newsletter, we will process your name and email address.
Basis for Treatment: GDPR Article 6(1)(a) (Consent).
Consent can be withdrawn at any time.
6. Encryption and content access
Permido is designed to send and receive digital mail and to protect the content of emails using encryption.
Permido A/S does not have access to the content of encrypted emails as part of its normal operations. At the moment the email is sent, it is deleted in Permido, and Permido therefore has no access to the content, just as Permido has no access to the content of incoming emails.
7. Storage Periods
We store personal data for as long as it is necessary for the purposes for which the data was collected.
User Accounts
User information is automatically deleted after 6 months of inactivity. Inactivity means there has been no login or email activity during the period.
Email login
Logging of when messages are automatically deleted, and with what encryption, after 3 months, unless otherwise agreed with the customer.
Support information
Support requests are stored for as long as necessary for documentation, troubleshooting, and follow-up.
Logo information
Security and operational logs are retained only as long as necessary for operational, security, and documentation purposes.
8. Recipients of Information
We do not sell personal information.
We can entrust personal data processing to vendors who assist us with:
These suppliers process information solely on Permido's instructions and are subject to data processing agreements.
9. Transfer to third countries
If personal data is transferred to countries outside the EU/EEA, we ensure that the transfer is carried out on a legal basis in accordance with GDPR, including by using the EU Commission's Standard Contractual Clauses or other valid transfer mechanisms.
Further information is available from Permido.
10. Your rights
Under data protection regulations, you have the following rights:
If you wish to exercise your rights, you can contact us at help@permido.com.
11. Complaint
If you believe that our processing of your personal data does not comply with data protection regulations, you have the right to lodge a complaint with the Danish Data Protection Agency.
The Danish Data Protection Agency
Carl Jacobsen's Road 35
2500 Valby
Denmark
Phone: +45 33 19 32 00
You can find additional information on the Danish Data Protection Agency's website.
12. Changes
Permido A/S reserves the right to update this privacy policy. The version in effect at any time will be available on Permido's website.
You also have the right to object to the processing of your personal data and you have the right to lodge a complaint with a data protection authority.
If you no longer wish us to process your personal data or restrict the processing of your personal data, you can also send us a request to our email address. See section 3. for contact details.
