Privacy
Data controller
Spilcafeen ApS is the data controller for the processing of the personal data we receive about you. Our contact details are below.
Spilcafeen ApS CVR: 37354244 Vestergade 58A, 8000 Aarhus C, Denmark Email: jo@spilcafeen.dk
Which personal data we process
We only process the personal data needed to deliver our services and run our cafés. This typically includes:
- Table bookings: name, phone number, email, number of people and time
- Membership: name, email, phone number and purchase history
- Newsletter: email and any interests
- Enquiries: the information you send us, e.g. via email or contact form
- Technical data: IP address, browser, device type and visit patterns (see the cookies section)
Purpose and legal basis
We process your data to accept bookings, manage memberships, send newsletters if you've signed up, answer enquiries and improve our website.
The legal basis is typically GDPR Article 6(1)(b) (performance of a contract, e.g. booking or membership), (a) (consent, e.g. newsletter and marketing cookies) or (f) (legitimate interest, e.g. operation and security of the website).
How long we keep your data
We only keep your personal data for as long as needed for the purpose. Booking data is typically deleted after 12 months. Member data is kept as long as the membership is active and up to 3 years after. Accounting records are kept for 5 years as required by the Danish Bookkeeping Act. Newsletter data is kept until you unsubscribe.
Recipients and data processors
We don't share your personal data with third parties for marketing purposes. However, we use a number of data processors who process data on our behalf under data processing agreements:
- Easytable — table booking
- Getregulars — membership cards and gift cards
- Klaviyo — newsletter sending
- Google (Maps, Fonts) — directions and web fonts
- Adobe (Typekit) — web fonts
- Our hosting provider — running the website
Some of these providers may transfer data to countries outside the EU/EEA. In that case, the transfer is based on the EU Commission's Standard Contractual Clauses or another valid transfer mechanism.
Your rights
Under GDPR you have a number of rights regarding our processing of your data:
- The right to access the data we process about you
- The right to rectification of incorrect data
- The right to erasure in certain cases
- The right to restriction of processing
- The right to data portability
- The right to object to processing
- The right to withdraw consent
You can exercise your rights by contacting us at jo@spilcafeen.dk. You also have the right to complain to the Danish Data Protection Agency (Datatilsynet) — find contact details at datatilsynet.dk.
Cookies
A cookie is a small text file stored in your browser that lets a site recognise your device on subsequent visits. We use cookies to make the website work, measure traffic and — if you consent — target marketing.
We use the following categories of cookies:
- Necessary cookies that make the website work. These don't require consent.
- Statistics cookies that help us understand how the site is used so we can improve it.
- Marketing cookies used to show you relevant ads on our or others' platforms. For example, Klaviyo is used when you sign up to the newsletter.
You can withdraw or change your cookie consent at any time via the cookie banner at the bottom of the page. You can also delete cookies via your browser settings.
Changes to this policy
We update this policy when we change how we process personal data or when the law changes. The latest version is always available here on this page.
Contact
If you have questions about how we process your personal data, you're welcome to email us at aarhus@spilcafeen.dk or call the café nearest you.
