Professional data, handled with care.

1. Who is responsible for your data?

MediaDatabase is operated by PEHANSEN ApS, also trading as PressPort (CVR 38965271). We are the data controller when we decide why and how personal data is used for this website and the MediaDatabase directory.

Postal address:
Søndre Molevej 10D, 1.
4600 Køge
Denmark

Privacy enquiries can be sent to [email protected].

2. The personal data we handle

Member and website data

When you create or use an account, we process information such as your name, email address, country, password hash, email-verification status, account role, sign-in and security events, plan entitlements, saved media lists, contact reveals, and contributions. We never store your password in readable form.

We also process technical information needed to operate and protect the service. IP addresses and user-agent strings recorded for account security and contact reveals are stored as one-way hashes rather than in readable form.

Professional media-directory data

The directory contains information about media outlets and people acting in a professional media role. Depending on what is relevant and available, this may include a name, professional title or function, outlet, business email address, business telephone number, location, website, and information about the outlet's audience, subject matter, or market.

We do not intentionally build profiles about people's private lives, and we do not seek special-category data such as health, political beliefs, religion, ethnicity, or sexual orientation for the directory.

3. Sources and provenance

Directory information may come from outlet websites, mastheads, media kits, newsroom and professional profile pages, public registers, direct communications, contributions from members or contacts, and media data maintained by PressPort.

We maintain provenance information for professional contact details, including a dated record of the source from which the information was gathered or against which it was reviewed. Community additions and corrections must include a source URL and explanation and are reviewed before publication. This helps us investigate questions, correct stale information, and avoid reintroducing information that has been suppressed.

4. Our lawful bases under the GDPR

We select a lawful basis for each purpose under Article 6 of the GDPR. The bases relevant to MediaDatabase are:

• Legitimate interests (Article 6(1)(f)): maintaining an accurate, useful directory of professional media information; enabling relevant professional communications; preventing misuse; securing the service; and improving the product. We balance these interests against the rights and reasonable expectations of the people concerned.
• Contract and steps requested before a contract (Article 6(1)(b)): creating and administering member accounts, providing requested features, and supporting paid services where applicable.
• Consent (Article 6(1)(a)): where we specifically ask for permission, including optional communications or non-essential technologies where consent is required. Consent can be withdrawn at any time without affecting earlier processing.
• Legal obligations (Article 6(1)(c)): keeping information or responding to authorities where the law requires us to do so.

Rules protecting freedom of expression and journalistic activity may apply to specific editorial processing. A journalistic exemption is not itself an Article 6 lawful basis, and we assess any such processing separately. We do not rely on public task or vital interests for the ordinary operation of MediaDatabase.

5. How we use personal data

• To operate accounts, authenticate members, and provide requested features.
• To make relevant professional outlet and newsroom information discoverable.
• To review, verify, correct, and update directory records.
• To manage contact-access allowances and investigate scraping or misuse.
• To maintain saved lists and process sourced contributions.
• To measure and improve the service and communicate about accounts or requests.

6. Responsible access to contact details

Professional email addresses are not exposed to anonymous visitors. A signed-in member must intentionally reveal an available address, and free-account reveals are metered. We keep an audit record of the member, contact, and time of each first reveal so we can enforce allowances and investigate misuse.

Members may use directory information only for relevant professional outreach. Automated harvesting, resale, unrelated sales campaigns, and indiscriminate bulk messaging are not permitted. Members remain responsible for the content and lawfulness of their own outreach, including respecting objections and applicable direct-marketing rules.

7. Contributions and corrections

If you add an outlet or suggest a correction, we process the information submitted, your evidence URL and explanation, and—where provided—your name, email address, or member reference. Contributor details are used for review and audit purposes and are not added to the public outlet page by the contribution form.

8. Cookies and analytics

MediaDatabase uses essential cookies and similar storage for sign-in, security, anti-forgery protection, session continuity, and preferences such as colour theme. Disabling these may prevent account features from working correctly.

Our first-party product analytics use a random session identifier and record events such as searches, profile views, registration, contact reveals, saved media, and contributions. Search text, email addresses, readable IP addresses, and user-agent strings are deliberately excluded. If you register in the same session, earlier events from that random identifier may be associated with your new account.

We also use Google Analytics to understand aggregate website usage. Google may process online identifiers and device, browser, and usage information in accordance with Google's privacy policy. You can restrict or remove cookies through your browser settings.

9. Sharing and international transfers

Professional directory information is made available to visitors or signed-in members according to the access controls described above. We also use service providers for hosting, storage, email delivery, security, analytics, and technical operations. They may process only the information needed to provide their service and are subject to appropriate contractual and security obligations. We do not sell personal data or provide the directory for unrelated consumer advertising.

Some providers may process data outside Denmark or the European Economic Area. Where the GDPR requires it, we use an adequacy decision, approved contractual safeguards, or another lawful transfer mechanism.

10. Security

We use access controls, encryption in transit, password hashing, one-way hashing of selected request metadata, rate limits, audit records, and review workflows appropriate to the risks. No internet service can promise absolute security, but we work to prevent unauthorised access, alteration, disclosure, or loss.

11. How long we keep data

• Account data: kept while the account is active and then deleted or retained only where needed for legal claims, fraud prevention, accounting, or another legal obligation. Deleting your profile removes the account and its website-owned lists, reveal history, entitlements, tokens, and linked first-party analytics records.
• Security and verification data: kept for the token's validity period or as long as reasonably needed to protect the service and investigate abuse.
• Contributions and provenance: kept as needed to review the contribution and preserve an appropriate accuracy and accountability record.
• Directory information: kept while relevant to a professional media role, subject to review, correction, objection, and suppression. A limited suppression record may be kept to honour a request and prevent the details from being reimported.

12. Your data-protection rights

Depending on the circumstances, you may ask us for access, correction, deletion, restriction, portability, or a copy of information you supplied. You may object to processing based on legitimate interests and withdraw consent where processing is based on consent. MediaDatabase does not use directory or member data for solely automated decisions that produce legal or similarly significant effects.

To exercise a right, email [email protected] and tell us whether your request concerns a member account, a directory contact, or both. We may ask for information needed to verify your identity. Members can also delete their account and website-owned profile data from the profile page.

We normally respond within one month. If you are unhappy with our response, you can lodge a complaint with the Danish Data Protection Agency (Datatilsynet) or the supervisory authority where you live or work.

13. Changes to this notice

We may update this notice when the service, our data practices, or the law changes. The date at the top shows the latest revision. If a change materially affects how we use member data, we will provide an additional notice where appropriate.