Privacy Policy
Last updated: 28 July 2026
About This Site
henrikbr.dk is a personal promotional website for Henrik Busch Rasmussen — a place to present his background and make his CV available for download. It is also used for educational and demonstration purposes, showcasing web development, security, and analytics techniques as hands-on practice.
Data Controller
Henrik Busch Rasmussen operates henrikbr.dk and is the data controller for the information described here. You can reach me at .
Cookies
This site uses only one cookie. It does not require consent, as it falls under the "strictly necessary" exemption for cookies essential to the site's basic function:
| Name | Purpose | Expiry |
|---|---|---|
| sid | Session for bot protection, admin dashboard login, and remembering your chosen language (Danish/English) and color theme (light/dark) during your visit | When the browser is closed |
Your language and theme choices are stored only in this session — not in a separate cookie — so they're forgotten once the browser is closed. On your first page view in a session, your language is guessed from your IP address's approximate location, and the color theme always starts in dark mode. You can always change either manually.
The admin dashboard additionally uses localStorage (not a cookie) to remember a display preference. This is never sent to the server.
Data Collected on Visits
For operational purposes, security, and to understand traffic to the site, the following is logged for each visit: IP address, approximate geographic location (country/city derived from the IP address), browser type, device type, referring page (where applicable), the page visited, time spent on the page, and screen resolution. The legal basis is legitimate interest (GDPR Art. 6(1)(f)) — specifically, operating and securing the website and protecting against abuse.
Data is retained for a maximum of 2 years from the time of the visit, after which it is automatically deleted. Data may also be deleted manually before then as part of routine maintenance.
Third Parties
This site shares your IP address with a small number of third-party services, each for a specific purpose:
| Service | Purpose |
|---|---|
| ipapi.co | Guessing your language (Danish/English) from your country on your first page view |
| ip-api.com | Approximate location and VPN/proxy detection, for the visit log described above |
Flag icons for language selection are served via flagcdn.com, without sharing your IP address. The "prove you're human" check used to block automated bots is rendered entirely on this server, without contacting any third party. No other personal data is shared with any of the services above.
Security
All traffic to this site is encrypted via HTTPS. Cookies are protected with Secure and SameSite flags, and the session cookie cannot be accessed from JavaScript (HttpOnly).
Your Rights
Under the GDPR, you have the right to access, correct, and erase information held about you, and to object to its processing. Contact me at the email above to exercise these rights. You may also lodge a complaint with your national data protection authority (in Denmark, Datatilsynet).
Changes
This policy may be updated from time to time. The date of the most recent update is shown at the top of this page.