CultureCache Privacy Policy
Last Updated: October 17, 2025
1. Our Commitment to Your Privacy
Welcome to CultureCache. We are **CultureCache ApS (CVR: 45523691)**, a company based in Denmark. We are the "data controller" for your personal data. This policy explains what data we collect, why we collect it, and how we keep it safe. We are fully committed to protecting your privacy in compliance with the EU's General Data Protection Regulation (GDPR).
2. What Personal Data We Collect
We collect different types of data to provide and improve our Service:
- Account Information: When you create an account, we collect your email address and name. This is necessary to create and manage your account.
- User-Generated Content (UGC): Any photos, videos, audio recordings, text, and other cultural data you upload to the platform. This content may contain personal data, including sensitive information if you choose to share it.
- Usage Data: We collect aggregated and anonymized information about how you interact with our Service, such as feature usage and page views. This data is fully anonymized and cannot be used to identify you.
3. How We Use Your Data & Our Lawful Basis
Under GDPR, we must have a legal reason (a "lawful basis") for processing your data. Here’s how we use your data and the lawful basis for each activity:
| Purpose of Processing | Lawful Basis (GDPR) |
|---|---|
| To create and manage your user account. | Performance of a Contract |
| To host, display, and secure your User-Generated Content. | Performance of a Contract |
| To analyze your User Content using AI to provide insights and discovery features. | Explicit Consent |
| To analyze anonymized Usage Data to improve platform stability and features. | Legitimate Interest |
4. Specifics on AI Data Processing
To power our AI Features, we use third-party services from Google (Vertex AI). When you provide your explicit consent, we may send your User Content to these services for analysis. We have a Data Processing Agreement with Google to ensure your data is handled securely and is not used to train their general models. You can withdraw your consent for this processing at any time in your account settings.
5. Your GDPR Rights
As a user in the EU, you have the right to:
- Access, Rectify, or Erase your personal data.
- Restrict or Object to certain types of processing.
- Data Portability (receive your data in a machine-readable format).
- Withdraw Consent at any time for processing based on consent.
You can exercise most of these rights directly through your account settings. For any other requests, please contact our Data Protection Officer at dpo@culturecache.net.
6. Data Security and Retention
We implement robust technical and organizational measures to protect your data. We retain your personal data for as long as your account is active. If you delete your account, we will permanently delete your personal data within 30 days, unless required by law to retain it for longer.
7. Third-Party Services (Sub-processors)
We use trusted third-party services to operate our platform, such as Google for AI processing. We have vetted their security and data privacy practices and have signed Data Processing Agreements with them.
8. Changes to This Privacy Policy
We may update this policy. We will notify you of any significant changes, and your continued use of the platform after such changes indicates your acceptance of the updated policy.
9. Contact Us
For any questions about this policy or your data, please contact our Data Protection Officer:
Email: dpo@culturecache.net
10. Supervisory Authority
If you have concerns, you have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet).
Datatilsynet
Carl Jacobsens Vej 35
2500 Valby, Denmark
