GDPR Information

Last updated: August 14, 2026

Your Data Protection Rights Under GDPR

The General Data Protection Regulation (GDPR) gives individuals in the European Union specific rights regarding their personal data. This page explains how we comply with GDPR and how you can exercise your rights.

Data Controller

For the purposes of GDPR, the data controller is:

Legal Basis for Processing

We process your personal data under the following legal bases:

Contractual Necessity: Processing is necessary to fulfill orders you place with us, including preparing your items and communicating pickup details.

Legitimate Interests: We process data to improve our website, analyze usage patterns, and enhance customer service, provided these interests do not override your fundamental rights and freedoms.

Consent: For certain activities such as marketing communications or non-essential cookies, we rely on your explicit consent, which you can withdraw at any time.

Legal Obligations: We may process data to comply with legal requirements, such as tax reporting and record-keeping obligations.

Your GDPR Rights

Under GDPR, you have the following rights:

Right to Access

You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data. We will provide this information in a clear and accessible format.

Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request correction or completion. We will respond to rectification requests without undue delay.

Right to Erasure (Right to Be Forgotten)

You can request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or when you withdraw consent. Note that we may be required to retain certain information for legal or regulatory reasons.

Right to Restriction of Processing

You can request that we limit how we use your personal data in specific situations, such as when you contest the accuracy of the data or object to processing.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller without hindrance.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before the withdrawal.

Right to Lodge a Complaint

If you believe we have not handled your data in accordance with GDPR, you have the right to lodge a complaint with your national data protection authority. In Denmark, this is the Danish Data Protection Agency (Datatilsynet).

How to Exercise Your Rights

To exercise any of the rights described above, contact us at [email protected]. Please include sufficient information to identify yourself and specify which right you wish to exercise.

We will respond to your request within one month of receipt. In complex cases, we may extend this period by two additional months, in which case we will inform you of the extension and the reasons for delay.

Data Processing Activities

Order Processing: When you place an order, we collect your name, email, selected items, and pickup preferences. This data is processed to fulfill your order and is retained for accounting and legal compliance purposes.

Website Analytics: We collect technical data such as IP addresses, browser types, and page views to understand site usage and improve user experience. This data is anonymized where possible.

Email Communications: We use your email address to send order confirmations and respond to inquiries. We do not send marketing emails unless you have explicitly opted in.

Data Transfers

We do not transfer personal data outside the European Economic Area (EEA). If we engage service providers located outside the EEA in the future, we will ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

Data Security

We implement technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include encryption, access controls, and regular security assessments.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations. Order data is typically retained for up to seven years for accounting and tax purposes.

Contact Information

For questions about GDPR compliance or to exercise your data protection rights, contact us at: