Last updated: 07.11.2025
1. Data controller
IT Smart Solutions, Thorsgade 2, 2200 København N, Danmark · CVR — · Phone 71 48 44 47 · info@lostfound.dk. Contact us about anything regarding your personal data.
2. What we process
- When you report an item: name, email, phone (optional), description, place, date, photos and location (only if you tap “Use my location”).
- When you message a reporter or us: name, email and the message.
- When you create an alert (“Notify me”): keywords, category, area, email and/or phone.
- At handover in the shop: name, phone/email, the type of ID shown (never the ID number) and your signature.
- Technical: IP address when reporting (against abuse) and one necessary session cookie.
3. Purposes and legal basis
- Reuniting items with owners and sending you email/SMS updates – to provide the service you ask for (GDPR Art. 6(1)(b)).
- Handover receipts and preventing abuse/fraud – our legitimate interest (Art. 6(1)(f)).
- Complying with the Danish lost property rules and police requests – legal obligation (Art. 6(1)(c)).
4. What is public?
Public reports show title, description, category, place, date and photos. Your name, email and phone number are never shown publicly. You can choose “Private” so only we can see the report, and you can hide the photos.
5. Who we share with
- Simply.com – website and email hosting (processor).
- SMSGate (sms-gate.app) – relays SMS sent from our own phone (phone number and message text).
- OpenStreetMap – maps load only if you tap “Show map”. api.qrserver.com creates QR codes on posters and labels (the QR code only contains a link).
- The police – if an item is handed in under the Danish lost property act.
We never sell your data or use it for marketing.
6. How long we keep data
Active reports close automatically after a period without activity (you get a reminder first). Closed, reunited and archived cases – including photos, messages and signatures – are deleted automatically 180 days after the last change. Alerts are deleted after 180 days. You can always delete your report yourself via your “Track your case” link.
7. Your rights
You have the right of access, rectification, erasure, restriction, data portability and objection. Write to info@lostfound.dk and we reply within 30 days. You can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, datatilsynet.dk.
8. Cookies
We use only one necessary cookie (session cookie) that remembers your language and protects forms against abuse. No statistics, advertising or tracking cookies, and no fonts or maps are loaded from others until you choose so.
9. Security
Protected forms, limits on repeated attempts, password-protected administration and blocked direct access to data. Hidden information in photos (e.g. GPS in EXIF) is removed on upload.