Privacy policy

Who we are

UTM Tool is operated by Omnicom Media Group Denmark and TRKKN Denmark ([legal entity name, CVR number, address]) ("we"). It lets advertisers and our consultants create and check consistent campaign tracking links (UTM links). We are the data controller for the personal data described below.

What we collect

When you sign in with Google we receive and store:

• your name, email address and profile picture URL;
• whether Google has verified your email address;
• the Google Workspace domain of your account, if any (for example omc.com), which we use to recognise Omnicom Media and TRKKN employees;
• sign-in tokens issued by Google for your session.

While you use the tool we store:

• your session: a session identifier, its expiry time, your IP address and browser type;
• which clients you have access to and your role on each;
• invitations sent to or by you (email address, role, dates);
• an audit log of changes you make (for example creating a client, inviting someone, or changing a role), including who made the change and when;
• campaigns and tracking links you create, and who created them.

We do not use advertising cookies or third-party analytics on this site. We set one strictly necessary cookie to keep you signed in.

Why we use it and our legal basis

• To provide the tool, control who can see each client's data, and keep you signed in (performance of our agreement with the advertiser you work for, and our legitimate interest in securing client data – GDPR art. 6(1)(b) and (f)).
• To keep an audit trail of changes so clients can trust their tracking setup (legitimate interest – GDPR art. 6(1)(f)).

Advertising and analytics data

Advertisers can connect a Google Analytics 4 property so the tool can show sessions and conversions per tracking link. We read aggregated reports only (for example sessions per campaign); we do not receive data about individual website visitors. To check that a link works, the tool opens the landing page in an automated browser; it does not log in or submit forms.

Who we share it with

The tool runs on Google Cloud in the European Union (region europe-west1, Belgium). Google Ireland Limited processes the data as our processor under a data processing agreement. Sign-in is provided by Google. People with access to the same client in the tool can see your name, email and role on that client. We do not sell personal data.

How long we keep it

• Sessions: until they expire (7 days) or you sign out.
• Unaccepted invitations: 30 days.
• Your account and roles: while you have access to at least one client, then [12 months].
• Audit log and links you created: [for the duration of the client agreement + X years].

Your rights

You can ask for access to, correction of, or deletion of your personal data, object to our processing, and ask for a copy of your data. Contact us at [privacy contact email]. You can also complain to the Danish Data Protection Agency (Datatilsynet), www.datatilsynet.dk.

Changes

We will update this page if we change how we handle personal data and change the date above.