Data ethics considerations

As part of our work with responsible data use (the Danish D-mærket labelling scheme), DynaFlow ApS has reviewed a series of data-ethical questions covering our externally facing activities: the website dynaflow.dk with its contact form, and our consultancy and advisory services on Microsoft Business Central Online. The questionnaire is approved by CEO Rasmus Torpe and is updated at least once a year.

1. 1. Have we considered solutions that improve our work with data ethics?

   Measures implemented

   We have written a Data Ethics Policy, made this questionnaire a fixed part of our annual review, and established a channel for data-ethical dilemmas. The topic is discussed on an ongoing basis among the partners.

2. 2. Have we considered involving relevant stakeholders on an ongoing basis in order to avoid unintended bias?

   Some considerations

   As a small B2B consultancy with no user- or consumer-facing algorithms of our own, the risk of bias is primarily tied to our advisory process with clients. Client dialogue and the partners’ joint assessment act as informal stakeholder involvement, but we do not have a formal process for involving external stakeholders.

3. 3. Have we considered the consequences of influencing user behaviour (e.g. addiction, overconsumption, harassment)?

   Not relevant

   We neither develop nor operate consumer-facing products, apps or platforms designed to influence user behaviour. Our core business is B2B advisory and implementation of Microsoft Business Central for business clients, plus an informational website with a contact form.

4. 4. If we influence user behaviour — have we considered how this can be made more transparent?

   Not relevant

   The premise (that we influence user behaviour) does not apply, cf. question 3.

5. 5. Have we considered how the user’s rights are prioritised over commercial interests?

   Some considerations

   Our Data Ethics Policy establishes the principle of "people at the centre" — that data and solutions affecting individuals must always be assessed by their consequences for the individual. The principle has not yet been translated into a concrete, documented checklist for the individual enquiry or client assignment.

6. 6. Have we considered how the user gets the most possible value out of the data collected?

   Some considerations

   The data collected via the contact form is used solely to answer the specific enquiry quickly and relevantly — which is in itself the value the user receives.

7. 7. Have we considered how we avoid unintended consequences such as surveillance, misuse of data or misinformation?

   Measures implemented

   This is covered by our IT policy, our Data Ethics Policy (including confidentiality in client assignments) and our privacy policy.

8. 8. Have we considered how we can protect particular groups (e.g. children, vulnerable groups)?

   Not relevant

   Our externally facing activities (website/contact form and B2B advisory) are aimed at business clients and company representatives, not at children or other particularly vulnerable groups.

9. 9. Have we considered whether our data collection and solutions could limit citizens’ rights?

   Not relevant

   We do not develop publicly available products, surveillance solutions or the like that could limit citizens’ rights.

10. 10. Have we considered whether we can avoid reinforcing social and ethical problems (e.g. inequality, segmentation, exclusion)?

    Not relevant

    We do not use segmentation, profiling or personalisation algorithms towards end users or website visitors.

11. 11. Do we communicate our privacy-by-design strategy to our users?

    Some considerations

    Our privacy policy communicates what data we collect, why, and on what legal basis — but does not yet explicitly describe our privacy-by-design approach.