Privacy policy
How we process your personal data when you apply with us, contact us or visit the website.
In short
TrailBlaze uses your personal data to match students with companies, to respond to enquiries and to run the website.
- If you apply with us, we keep your profile for 1 year, and we only share it with a company if you have said yes.
- You can always get access to your data, have it corrected or have it deleted. Write to info@trailblaze.dk.
Who is responsible for your personal data?
The data controller is:
The Trailblaze Company ApSCVR 45515796
c/o Victor Bach Petersen
Istedgade 35, 3. tv.
9000 Aalborg
The person responsible for your personal data is Magnus Kjeldgaard Nørholm. If you have any questions about how we process your personal data, write to info@trailblaze.dk.
What happens to your personal data when you apply with us?
When you fill in our application form, we use the information to assess your profile, look for relevant student jobs for you and contact you.
What we ask for
- Name, email address, phone number and your LinkedIn profile, if you have one
- Address, postcode, town and home town
- Your education: level, degree programme, place of study, semester and whether you have graduated
- Your job preferences: fields, skills and tools you know
- Transport: whether you have a car and a driving licence, and how far you are willing to travel
- Your answers about yourself and your motivation
- Your CV, if you attach it
Applying with us is voluntary, but without the information we cannot assess your profile. Do not include sensitive information in your CV or your answers, e.g. about your health or your civil registration (CPR) number. We do not need it.
Legal basis
Your consent, which you give in the form (Article 6(1)(a) of the General Data Protection Regulation, GDPR). You can withdraw it at any time.
Where is the information stored?
The form is hosted by Tally. From there, your information is moved automatically to our closed candidate database with Google, which only the employees who work with recruitment have access to.
If you are employed by us as a TrailBlazer, our employee policy on personal data applies. You can find it on the intranet.
Do we share your profile with companies?
Only if you have said yes to it. With your consent, we may share your CV, your photo and relevant information from your profile with the companies we match you with. The company itself then becomes responsible for the information it receives.
You can withdraw your consent whenever you like. If we have already shared the information with a company, it may still be held in the company’s own systems.
Do we use artificial intelligence?
Yes, as internal tools. We use Google’s Gemini and Anthropic’s Claude to, among other things, help us create your CV profile so that we can find the best match.
We use the paid business versions, where your data is not used to train the models, and we have data processing agreements with both Google and Anthropic.
We do not make any decisions about you based solely on AI. A person from the team always assesses your match.
What do we store when you contact us?
When you write to us, e.g. via the contact form, we use your name, email address, phone number, company (if you provide it) and message to reply to you. If you contact us on behalf of a company, we also use them to make and follow up on an agreement.
When you submit the contact form, we receive your enquiry by email. The email is sent by Tally via SendGrid in the USA (see “Transfers outside the EU” below).
Legal basis
That we can enter into and perform an agreement with you (Article 6(1)(b) GDPR), and our legitimate interest in responding to enquiries and maintaining the collaboration (Article 6(1)(f) GDPR).
We may tell others about a collaboration, e.g. on the website or LinkedIn. We only use names and photos of contact persons with their explicit consent. We may also provide Danish universities with anonymous statistics about our collaborations. The statistics cannot be traced back to any individual person.
Do we use photos, video and testimonials?
Only with your consent. If you have said yes, we may use photos, video and testimonials featuring you on the website, on social media and in printed material.
We use them until you withdraw your consent. We cannot always fully remove material that has already been published, e.g. printed or shared on social media.
What happens when you visit the website?
When you visit the website, our server receives your IP address and technical information about your browser, because it needs them to send you the page. The server does not store visitors' IP addresses in access logs. The legal basis is our legitimate interest in running the website (Article 6(1)(f) GDPR).
On the pages with a form (the home page, Companies, Students and Contact), your browser only loads the form from Tally when you press “Fill in the form”. Tally then receives your IP address and technical information about your browser, even if you do not send the form. Tally does not set cookies, but stores a random ID and, while you type, your answers in your browser so they are not lost (see the cookie policy). Tally also counts how many people view the form and sends technical information about the visit to Sentry (USA), which Tally uses to find errors. Tally is our data processor and stores data in the EU. The legal basis is our legitimate interest in being able to offer the form (Article 6(1)(f) GDPR).
The headings are set in the Futura font, which your browser loads from Adobe Fonts (Adobe). Adobe receives your IP address so that it can send the font, but it does not store it and sets no cookies. Adobe records which fonts are displayed on which website, so that the type designers can be paid. The legal basis is our legitimate interest in displaying the website in our own font (Article 6(1)(f) GDPR).
The website currently only uses necessary cookies. Read more in our cookie policy, where you can also change your choice.
Who do we share your personal data with?
- Companies you are matched with, but only with your consent. The company becomes the data controller for the information it receives.
- Our suppliers (data processors), who process data on our behalf and according to our instructions:
- Hetzner Online GmbH (hosting of the website in the EU)
- Tally (forms and emails with new enquiries from the contact form)
- Google (email, documents, the candidate database and the AI tool Gemini)
- Anthropic (the AI tool Claude)
- Pipedrive OÜ, Estonia (CRM system for contacts at companies; for students, only the name)
- Adobe, which provides the font for the headings (Adobe Fonts) and receives your IP address when the website is displayed (see “What happens when you visit the website?”).
- Public authorities when required by law.
We have data processing agreements with our suppliers.
Transfers outside the EU
Google and Anthropic may process data outside the EU, including in the USA. This is done on the basis of the European Commission’s Standard Contractual Clauses and, in Google’s case, also the EU-U.S. Data Privacy Framework. Pipedrive may use sub-processors outside the EU, including in the USA, also on the basis of the Standard Contractual Clauses. Adobe may send the font from servers outside the EU, including in the USA, and is certified under the EU-U.S. Data Privacy Framework.
Tally sends emails with new enquiries from the contact form via SendGrid (USA) and uses Sentry (USA) to find errors in the forms. This is done on the basis of the European Commission’s Standard Contractual Clauses, which are part of our data processing agreement with Tally.
How long do we keep your personal data?
We keep information that we are required to store under, e.g., the Danish Bookkeeping Act, for as long as the law requires.
How do we protect your personal data?
- Only employees who need it for their work have access.
- We log in with two-step verification and store passwords in a secure password manager.
- When an employee leaves, we close their access within one hour.
- We have data processing agreements with the suppliers who process data for us.
- If there is a personal data breach, we report it to the Danish Data Protection Agency (Datatilsynet) within 72 hours. We notify you when the law requires it.
What are your rights?
You own your personal data. You have the right to:
- access the data we hold about you
- have inaccurate data corrected
- have your data erased
- restrict our processing
- receive your data so that you can take it with you (data portability)
- object to our processing
- withdraw your consent. This applies from the time you withdraw it.
Write to us at info@trailblaze.dk. We will reply no later than one month after we have received your request.
If you ask to be deleted completely, we only keep your email address and phone number on an encrypted, closed list for 2 years. We use it solely to make sure that your profile is not created again, so that we can respect your wish. The legal basis is our legitimate interest in being able to comply with your request for erasure (Article 6(1)(f) GDPR).
Where can you complain?
If you are not satisfied with how we process your personal data, you can complain to the Danish Data Protection Agency (Datatilsynet). We would like to hear from you first, so that we can try to resolve it.
DatatilsynetCarl Jacobsens Vej 35
2500 Valby
datatilsynet.dk
Do we change the policy?
We update the policy when we change how we process personal data. The latest version is always available here, with the version number and date at the top.