Privacy policy

Who is responsible

Lokale is operated by oo ApS, CVR 46654862, Ewaldsgade 7, 2200 København N, Denmark. For any question about your data, or to exercise the rights below, write to august@fremtidensfundraising.dk.

If you use Lokale through your building or employer, they decide who has access to your account and your bookings. We process the data on their behalf.

What we store

Your account: name, email address, your role, and which company and building you belong to.

Your bookings: room, date and time, the title you give the meeting, and any attendees you add.

Company details entered by an administrator: company name, and optionally a contact person, contact email, registration number and email domain.

Requests to create a building: the building name, chosen address, room names, and the requester's name and email.

Technical logs kept briefly by our hosting provider, including IP addresses, to keep the service running and to stop abuse.

Why we store it

To provide the service you or your building asked for: showing the calendar, preventing double bookings, sending calendar invitations, and letting administrators manage access. This is necessary to perform the agreement with you or your building.

To keep the service secure and available, for example rate limits and abuse prevention. This is our legitimate interest in a safe service.

Who can see your bookings

Everyone in your building can see when a room is busy, because that is the point of a shared calendar. The title of a meeting and its attendees are only visible to you, to people in your own company, and to your building's administrator. This is enforced by the database, not just the interface.

Buildings are completely separate from one another. No one in one building can see anything from another.

Who else processes data

Supabase stores the database and handles sign-in. Data is hosted in Zurich, Switzerland, a country covered by the EU's adequacy decision.

Resend delivers our email, such as login links and calendar invitations. Email is processed in the EU (Ireland).

Vercel hosts the application itself, served from Frankfurt, Germany.

If you subscribe to your personal calendar feed, your bookings are also read by whichever calendar app you add it to.

Cookies and local storage

We use a small number of strictly necessary cookies to keep you signed in. We store your language and light or dark mode preference in your browser's local storage. We use no advertising cookies and no third-party analytics, so no consent banner is required.

How long we keep it

Your account and bookings are kept while your building uses Lokale. When an administrator deletes your account, or a building is deleted, the associated data is deleted with it. Requests to create a building that are declined are deleted once they are no longer needed.

Your rights

You can ask for a copy of your data, have it corrected, have it deleted, restrict or object to processing, and receive it in a portable format. Write to august@fremtidensfundraising.dk and we will respond within one month.

If you believe we handle your data incorrectly, you can complain to the Danish Data Protection Agency, Datatilsynet, at datatilsynet.dk.

Security

Access rules are enforced in the database itself, so they cannot be bypassed by the interface. Sign-in happens through one-time links or a password you choose; we never see your password. Public sign-up is disabled: you only get in by invitation, through an email domain your company has registered, or by creating a building and confirming your email. More detail on our security page.

Changes

If we change how we handle data, we update this page and the date at the top. Significant changes will be communicated to building administrators by email.