Privacy policy

1. General

Center for Digital Youth Care only collects, stores, and processes the most necessary personal data about you. You should also know that we do everything we can to protect that data, as well as the information you choose to share in the app, and that we delete your data when we no longer need it.

You can always find the current version of the privacy policy at backop.dk, where you can also read the full privacy policy of Center for Digital Youth Care.

Data controller and contact details

Center for Digital Youth Care (CfDP)
CVR: 37251771
Skanderborgvej 156
8260 Viby J
E-mail: gdpr@cfdp.dk

2. About BackOp

BackOp is a digital community for young people where they can take part in conversations, communities and activities in a safe environment.

3. Purpose – why do we process your data?

We process your data in order to:

Create and manage your account
Provide access to BackOp’s features and communities
Moderate content and create a safe environment
Protect users against misuse, harassment, and illegal content
Send necessary messages about your account
Send push notifications if you have chosen to receive them
Improve the operation, security, and functionality of the app
Comply with applicable legislation

4. Legal basis and authority – are we allowed to do this?

We process your personal data in accordance with the General Data Protection Regulation (GDPR), including:

GDPR Article 6(1)(a) (consent, where this is necessary, for example for certain notifications)
GDPR Article 6(1)(b) (performance of the agreement on the use of BackOp)
GDPR Article 6(1)(f) (legitimate interests in the operation, security, and moderation of the platform)

5. Categories of data – what data do we collect?

When you visit and move around the BackOp universe, we may collect personal data about you. This may happen when you register as a user or when you share content on BackOp. This data can be necessary for you to log in and for us to ensure your authentication.

We may process the following data:

Account data

Email address (a one-time code is sent by email when you log in)
Date of birth

Profile data

BackOp – The open communities:

Username selected from a pre-approved list
Avatar selected from a pre-approved list

BackOp – The closed groups:

First name or nickname
Profile picture, if you choose to upload one

Information about communities

Municipality where you live
Municipalities you are interested in
Participation in groups and communities

Content you share

Posts
Comments
Polls
Images uploaded to closed groups
Any links

Technical data

Data necessary for the operation, security, and troubleshooting of the app
Data about use of the app in our administration systems

6. Sharing of data

Center for Digital Youth Care stores your personal data confidentially and securely. We do not sell your personal data and otherwise do not share your personal data with third parties.

We may share data with data processors and technical suppliers who help us with the operation, hosting, security, and maintenance of BackOp. It is our responsibility to ensure that your personal data is processed properly. We therefore place strict requirements on our partners. We have entered into data processing agreements with the relevant suppliers, and they may only process data on instructions from Center for Digital Youth Care.

We may also disclose data if this is necessary to comply with legislation or an order from the authorities.

What happens when you add a GIF?

We use a third-party GIF catalog service (Heypster) only through our own server when you search for an animation. We do not share your BackOp profile identity with Heypster for advertising or tracking purposes.

We do not store your GIF search queries. Your search is used only to display results at that moment, and only the animation you select is copied to our servers.

Selected animations are copied to our own servers so they can be displayed reliably and deleted together with your post or message.

Searching for GIFs does not require access to your camera, microphone, or photo library.

7. Cookies

The BackOp mobile app does not use cookies to store information on your device. The app stores login tokens securely on the device and communicates with our servers via an encrypted connection (HTTPS). When you log in, you may be shown a login page operated by our identity provider (Keycloak). That page may use cookies under the provider’s own terms and privacy policy; the app does not have access to these cookies.

8. Moderation and security

To ensure a safe community, content on BackOp is moderated. Posts, comments, images, and other content may be reviewed and monitored by moderators before publication or as part of the ongoing moderation of the platform.

Security of processing

We keep the processing of your personal data secure by implementing appropriate technical and organizational measures. Among other things, we carry out risk assessments of our processing of personal data and keep our employees updated on GDPR through ongoing awareness training.

Processing of personal data relating to young people under the age of 18

We take the protection of children and young people’s online safety and privacy seriously. We therefore do not target marketing at persons under the age of 18, and we do not collect personal data about children under the age of 15 without permission from a parent or guardian.

There are, however, some exceptions. If the matter concerns counselling or help for children and young people, special rules apply. In brief, this means that some online services – especially those that provide support, guidance, or help – may be used by young people without their parents having to give consent first.

This also applies to BackOp. This is precisely to ensure that young people can always seek out the communities and receive the support they need.

9. Storage of data

We only collect the data we need for a specific purpose and only store personal data for as long as is necessary for the purposes for which it was collected, or for as long as required by law.

When an account is deleted, personal data will be deleted or anonymized within a reasonable time, unless we are required to store it for longer.

10. Your rights

You have the right to:

Access the data we process about you
Have incorrect data corrected
Have data deleted in certain cases
Restrict the processing of your data
Object to the processing
Receive your data in a structured format where the law gives you the right to do so

If you have questions about our privacy policy or wish to exercise your rights, you can contact us at gdpr@cfdp.dk.

11. Deletion of account

You can delete your account directly in BackOp at any time.

You can also find information about account deletion on our website.

When your account is deleted, your personal data will be deleted or anonymized in accordance with applicable legislation and our internal procedures.

12. Complaint

If you are dissatisfied with our processing of your personal data, you can contact us at gdpr@cfdp.dk.

You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet):

Danish Data Protection Agency (Datatilsynet)
Carl Jacobsens Vej 35
2500 Valby

Email: dt@datatilsynet.dk
Telephone: +45 33 19 32 00

www.datatilsynet.dk

13. Changes

We update this privacy policy on an ongoing basis and at least once a year. The latest version will always be available via backop.dk and our website. This policy was last updated on 5 June 2026.