Privacy policy
Last updated 11 October 2026.
This policy explains what data we process about you, why we do it, and what rights you have. It covers the webshop, our newsletter and messages you send us.
Data controller
Piccolo Coffee ApS
CVR (company no.) 46453522
Grønnegade 45C, st., 7100 Vejle, Denmark
hello@piccolocoffee.dk, +45 41 62 79 00
If you have questions about your data, write to us at the email above.
What we use your data for
| Purpose | Data | Legal basis |
|---|---|---|
| Webshop purchases and pre-orders at the bar | Name, address, email, phone, order, payment status and chosen delivery | Performance of the contract with you, GDPR Art. 6(1)(b) |
| Withdrawal from a purchase (Withdraw from contract) | Name, email, order number, the items you cancel, the time and the status of the case | Legal obligation under the Danish Consumer Contracts Act and Bookkeeping Act, Art. 6(1)(c) |
| Delivery | Name, address, phone and email, which we pass on to the carrier | Performance of the contract, Art. 6(1)(b) |
| Bookkeeping | Order and payment details | Legal obligation under the Danish Bookkeeping Act, Art. 6(1)(c) |
| Customer service and enquiries | What you write to us and your contact details | The contract and our legitimate interest in replying to you, Art. 6(1)(b) and (f) |
| Newsletter | Email, possibly name, and whether you open emails and click links | Your consent, Art. 6(1)(a), and section 10 of the Danish Marketing Practices Act |
| Website statistics | Page views, device, browser and where you came from | Your consent via the cookie banner, Art. 6(1)(a) |
| Ads on Facebook and Instagram | Visits and purchases on the website via the Meta pixel | Your consent via the cookie banner, Art. 6(1)(a) |
| Planning roasting and purchasing | Purchase history, for example how often which coffees are bought | Our legitimate interest in running the business, Art. 6(1)(f) |
You must give us your name, address and contact details to buy in the webshop, otherwise we cannot deliver. Everything else is voluntary.
Cookies
The website uses necessary cookies for the cart and checkout. We only use cookies for statistics and ads if you accept them in the cookie banner. You can change your choice or withdraw your consent at any time via Cookie settings at the bottom of the page.
Who we share data with
We never sell your data. We use these providers, who process data on our behalf or as independent controllers:
- Shopify: webshop, checkout and payment via Shopify Payments.
- Klarna and Vipps MobilePay: payment, if you choose them. They are independent controllers for the payment.
- Shipmondo, GLS and DAO: shipping labels and delivery.
- Resend: sending newsletters and emails from us.
- Railway: hosting of our internal system for orders, packing and statistics.
- Namecheap: our email server.
- Anthropic: AI tool that helps us sort and answer emails.
- Meta: ads on Facebook and Instagram, only if you have given consent.
- Shine and our bookkeeper: accounting and bookkeeping.
Transfers outside the EU
Some providers, for example Shopify, Resend, Railway, Anthropic and Meta, may process data outside the EU, mainly in the USA and Canada. This only happens on a valid basis, either the European Commission's adequacy decisions (the EU-US Data Privacy Framework and Canada) or the European Commission's standard contractual clauses.
How long we keep data
- Orders and bookkeeping: 5 years from the end of the financial year the purchase belongs to, as required by the Danish Bookkeeping Act.
- Withdrawals: 5 years from the end of the financial year in which we made the refund, because the withdrawal documents the refund. If a withdrawal does not lead to a refund, we delete it 3 years after the case is closed.
- Customer service: while the case is active, and then as long as claims can be made, normally no more than 3 years.
- Newsletter: until you unsubscribe. We keep opens and clicks for no more than 13 months.
- Website statistics: no more than 13 months.
Your rights
You have the right to:
- know what data we hold about you and get a copy
- have incorrect data corrected
- have your data deleted when we no longer need it
- have processing restricted
- receive your data in a common format (data portability)
- object to processing based on our legitimate interest
- withdraw your consent at any time, without affecting what we have done before
You can always unsubscribe from the newsletter via the link at the bottom of every email. Write to hello@piccolocoffee.dk to exercise your rights. We reply within one month.
We do not make automated decisions about you that have legal effects or similarly significantly affect you.
Complaints
You can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, dt@datatilsynet.dk, datatilsynet.dk. Feel free to contact us first so we can try to solve it.
Changes
We update this policy when we change how we process data. The date at the top shows when it was last changed.
This is a translation. If the Danish and English versions differ, the Danish version applies.
