Privacy policy

This privacy policy explains what information we collect, why we use it, who we share it with, how long we keep it, and what rights you have. The online shop is intended for private customers who shop as guests without a permanent customer account.

1. Data controller

Eat-On-Bornholm ApS is the data controller responsible for the processing of your personal data.

Eat-On-Bornholm ApS
Gl. Rønnevej 17A
3730 Nexø
CVR No. 39588145
Telephone: +45 22 20 48 00
Email: info@eat-on-bornholm.com

2. What information we process

Depending on how you use the website, we may process the following information:

• Name, email address, telephone number, billing address and delivery address.
• Information about your order, the products you have purchased, payment, delivery, returns and complaints.
• Correspondence and information that you provide to us via contact forms, emails or other enquiries.
• Your email address and proof of consent, if you sign up for the newsletter.
• Technical information about your use of the website, such as your IP address, browser, device, pages visited and cookie ID, provided you have given the necessary consent.

You can shop as a guest. We will therefore not create a permanent customer profile or account for you.

3. Purpose and legal basis for processing

Purchasing and delivery

We use your contact, order and delivery details to receive and process your order, accept payment, deliver the goods and handle cancellations, returns and complaints. This processing is necessary for the purposes of entering into or performing the contract with you, in accordance with Article 6(1)(b) of the General Data Protection Regulation.

Accounting and legal requirements

We retain the information necessary for accounting, record-keeping and compliance with other legal obligations. The legal basis for this is Article 6(1)(c) of the General Data Protection Regulation.

Customer service and security

We process enquiries, complaints and relevant technical information in order to respond to you, document the course of events, prevent misuse and protect the website. The legal basis for this is our legitimate interest in providing customer service and operating a secure online shop, in accordance with Article 6(1)(f).

Newsletter

If you subscribe to the newsletter, we will use your email address to send you inspiration, news and offers. This is based on your consent, in accordance with Article 6(1)(a). You can unsubscribe at any time via the link in the newsletter or by contacting us. Withdrawing your consent does not affect the lawfulness of any processing carried out before your consent was withdrawn.

Statistics and marketing

Once you have given your consent in the cookie settings, we may use Google Analytics and Meta Pixel to collect visitor statistics, improve the website and measure the effectiveness of our marketing. The legal basis for this is your consent, in accordance with Article 6(1)(a). You may change or withdraw your consent at any time via the website’s cookie settings. If Meta Pixel is not enabled, no data will be collected via this service.

4. Payment

Payments are processed via Nets. Eat-On-Bornholm does not receive your full card details. Nets processes the information required to complete and document the payment, such as the payment amount, payment reference and billing details.

5. Cookies and similar technologies

The website uses essential cookies for purposes such as the shopping basket, security and technical functionality. Statistics and marketing cookies are only used once you have given your consent. Google reCAPTCHA may be used to protect forms against misuse and automated enquiries.

You can read more about the specific cookies, their expiry dates and providers in our Cookie Policy and change your consent via the cookie settings.

6. Recipients and data processors

We only share personal data when it is necessary to provide our services, operate the website or comply with a legal requirement. Data may be shared with:

• Dandomain in relation to hosting and technical operations.
• Nets in connection with payments.
• PostNord, DAO or GLS for delivery.
• Mailchimp for newsletters.
• Google, in connection with Google Analytics and reCAPTCHA.
• Meta in connection with Meta Pixel, provided the service is enabled and you have given your consent.
• Auditors, advisers or public authorities, where necessary or as required by law.

We do not sell your personal data.

7. Transfers to countries outside the EU and the EEA

Some of our suppliers, including Mailchimp, Google and, where applicable, Meta, may process data outside the EU and the EEA. If data is transferred to a third country, this is done on a valid legal basis, such as the European Commission’s adequacy decision, the EU-US Data Privacy Framework or the European Commission’s Standard Contractual Clauses, possibly supplemented by additional safeguards.

8. How long we retain information

• As a general rule, purchase and accounting records are retained for 5 years following the end of the relevant financial year, unless a longer retention period is necessary due to a specific case or a legal requirement.
• General enquiries are deleted once the matter has been resolved and the information is no longer relevant.
• Information relating to complaints is retained for as long as is necessary to deal with the matter and document the course of events.
• Information for the newsletter will be retained until you withdraw your consent. Records of your consent may be retained for a subsequent period if this is necessary to demonstrate our compliance with the regulations.
• Information from statistics and marketing services is retained for the periods specified in the cookie policy and in our settings with each individual supplier.

9. Your rights

Under data protection regulations, you have a number of rights. Depending on the circumstances, you may be entitled to:

• Access to the information we process about you.
• Correction of inaccurate or incomplete information.
• Deletion of information.
• Restriction of treatment.
• Objection to processing based on our legitimate interests.
• To receive certain information in a structured, commonly used and machine-readable format and to have it transferred to another data controller where the rules on data portability apply.
• To withdraw consent with effect for future processing.

If you wish to exercise your rights, please contact us at info@eat-on-bornholm.com. We may ask you for information necessary to verify your identity.

10. Complaint to the Data Protection Authority

If you are dissatisfied with the way we process your personal data, please feel free to contact us first. You also have the right to lodge a complaint with the Danish Data Protection Agency. The Danish Data Protection Agency’s contact details can be found at www.datatilsynet.dk.

11. Safety

We implement appropriate technical and organisational security measures to protect personal data against accidental or unlawful destruction, disclosure, loss, alteration, misuse and unauthorised access.

12. Amendments

We may update our privacy policy if there are changes to our data processing practices, our suppliers or the law. The current version will always be available on our website.

Last updated: 10 September 2026.