Privacy Notice

Last updated: 18 November 2025

This Privacy Notice explains how Lophora (“we”, “us”, or “our”) collects and uses personal data when you interact with us, and describes your rights under applicable data protection laws, including the EU General Data Protection Regulation (“GDPR”).

We are the controller of the personal data described in this notice.

If you have any questions, please contact us using the details in the section “How to contact us” below.

1. Who we are

Lophora
Gyldenlundsvej 21, 1.
2920 Charlottenlund
Denmark

Email: contact@lophora.com
Website: https://www.lophora.com/

2. Personal data we collect

We collect and process the following categories of personal data:

2.1 Information you provide to us

When you:

  • subscribe to our newsletter, or

  • contact us by email or through the website,

we may collect:

  • name

  • email address

  • any other information you choose to include in your message.

2.2 Information collected automatically

When you visit our website, we use an analytics tool to help us understand how visitors use the site. This may involve the collection of:

  • IP address or truncated/anonymised IP

  • browser type and version

  • device type and operating system

  • pages visited and time spent on our site

  • referral source (how you arrived at the site)

  • date and time of your visit.

This information is used in aggregated form for statistical and security purposes and is not used to identify you as an individual, except where this would be technically or legally necessary (for example, for security or fraud-prevention purposes).

3. Purposes and legal bases for processing

We process your personal data only where we have a lawful basis under the GDPR. Depending on the context, this will be:

3.1 Newsletter and updates (consent)
If you subscribe to our newsletter, we use your name and email address to send you updates about our research, development activities, news, and events.

  • Legal basis: Your consent (GDPR Article 6(1)(a)).
    You can withdraw your consent at any time by using the unsubscribe link in our emails or by contacting us at contact@lophora.com.

3.2 Responding to enquiries (legitimate interests)
If you contact us, we use your personal data to respond to your enquiry and maintain our correspondence with you.

  • Legal basis: Our legitimate interests in communicating with stakeholders and operating our business (GDPR Article 6(1)(f)).

3.3 Website analytics and security (legitimate interests)
We use analytics to understand how our website is used, to improve its content and performance, and to maintain security and stability.

  • Legal basis: Our legitimate interests in maintaining and improving our website and services, and ensuring IT security (GDPR Article 6(1)(f)).

3.4 Legal obligations
In some cases, we may need to process your personal data to comply with legal obligations (for example, record-keeping or responding to requests from competent authorities).

  • Legal basis: Compliance with a legal obligation (GDPR Article 6(1)(c)).

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects for you.

4. Cookies and similar technologies

Our website may use cookies or similar technologies to support basic site functions and analytics.

You can control cookies through your browser settings. If you disable cookies, some parts of the website may not function optimally.

For more information, please refer to our Cookie Policy 

5. How long we keep your personal data

We keep your personal data only for as long as necessary for the purposes described above, or as required by law.

In particular:

  • Newsletter data (name and email) is kept for as long as you remain subscribed. If you unsubscribe, we will stop sending you communications and either delete or securely anonymise your data after a reasonable period, unless we need to retain it for legal reasons.

  • Enquiry data (e.g. emails) is kept for as long as necessary to handle your request and for a reasonable period afterwards, depending on the nature of the enquiry and our record-keeping obligations.

  • Analytics data is retained in accordance with the settings of our analytics tool and is primarily used in aggregated form.

6. Sharing your personal data

We may share your personal data with:

  • Service providers, such as providers of email and newsletter services, website hosting, IT support, and analytics tools, who act as processors on our behalf and are bound by contractual obligations to protect your data;

  • Professional advisers, such as lawyers or auditors, where necessary for legitimate business purposes;

  • Public authorities, regulators, or courts, where required by applicable law or where necessary to establish, exercise, or defend legal claims.

We do not sell your personal data.

7. International transfers

Some of our service providers may be located outside the European Economic Area (“EEA”) or may store data on servers outside the EEA.

Where this is the case, we will ensure that appropriate safeguards are in place, such as:

  • an adequacy decision by the European Commission, or

  • standard contractual clauses approved by the European Commission, together with additional safeguards where required.

You can contact us if you would like more information about these safeguards.

8. How we protect your personal data

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or alteration.

However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority where required by law.

9. Your rights under data protection law

If you are in the EEA, UK, or another jurisdiction with similar data protection laws, you may have the following rights in relation to your personal data:

  • Right of access – to obtain confirmation as to whether we process your personal data and to receive a copy of that data.

  • Right to rectification – to have inaccurate or incomplete personal data corrected.

  • Right to erasure – to request deletion of your personal data in certain circumstances.

  • Right to restriction of processing – to request that we limit the processing of your personal data in certain circumstances.

  • Right to data portability – to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller where technically feasible.

  • Right to object – to object, on grounds relating to your particular situation, to our processing of your personal data based on legitimate interests.

  • Right to withdraw consent – where we rely on your consent, you may withdraw it at any time. This will not affect the lawfulness of our processing before the withdrawal.

You can exercise your rights by contacting us at contact@lophora.com. We may need to verify your identity before responding to your request.

You also have the right to lodge a complaint with your local data protection authority. In Denmark, this is:

Datatilsynet
Carl Jacobsens Vej 35
2500 Valby
Denmark
Website: https://www.datatilsynet.dk/

10. Children’s data

Our website and communications are not directed at children under 18, and we do not knowingly collect personal data from children. If you believe that a child has provided us with personal data, please contact us so that we can delete the information.

11. Changes to this Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in our practices, technologies, or legal requirements. When we do so, we will update the “Last updated” date at the top of this page. We encourage you to review this page periodically.

12. How to contact us

If you have any questions, concerns, or requests regarding this Privacy Notice or our processing of your personal data, please contact us at:

Email: contact@lophora.com
Post: Lophora, Gyldenlundsvej 21, 1., 2920 Charlottenlund, Denmark