Privacy Policy
Last updated: 9 May 2026
Data Controller
FikaArt is operated by:
Humble Venture Group Media ApS
CVR 45148246 · VAT DK45148246
Honningvænget 3, 1. tv
8381 Tilst
Denmark
Email: [email protected]
Our role
FikaArt is a platform that facilitates workshops on behalf of independent artists. The seller of each workshop is the artist; FikaArt collects the payment on the artist's behalf and deducts a 10% platform fee. When you make a booking we process your data both for our own purposes (platform, payment, accounting) and to deliver the booking to the artist running the session. See our terms for how responsibility is divided.
What we collect
- Booking data: name, email address, phone number (where needed), number of guests, session selection
- Payment data: handled by Stripe, we never store card details on our servers
- Contact form: name, email, message
- Technical data: IP address, browser type and language (for security and debugging)
- Analytics (after consent): page views, events, anonymised visitor flow via Google Analytics
Legal basis
- Contract (GDPR art. 6.1.b): bookings, payment, confirmations, cancellations
- Legitimate interest (GDPR art. 6.1.f): security, fraud prevention, internal admin
- Consent (GDPR art. 6.1.a): analytics and marketing cookies (revocable at any time)
- Legal obligation (GDPR art. 6.1.c): accounting under Danish/EU law
How long we keep data
- Booking data: 24 months after last interaction, then deleted or anonymised
- Payment data: 5 years per accounting law
- Contact messages: 12 months
- Cookies: see the cookie table below
Third parties (data processors)
| Service | Purpose | Location |
|---|---|---|
| Stripe | Payments | EU + USA (DPF) |
| Cloudflare | Hosting, CDN, security | EU + USA (SCC) |
| Supabase / Lovable | Database, transactional email | EU |
| Google (Tag Manager / Analytics) | Analytics (after consent) | EU + USA (DPF) |
Transfers to countries outside the EU/EEA are made under the EU Commission's Standard Contractual Clauses (SCC) or the EU-US Data Privacy Framework (DPF).
Cookies we use
| Name | Service | Purpose | Duration |
|---|---|---|---|
| fikaart-cookie-consent | FikaArt | Stores your cookie choices | 12 months |
| fikaart-lang | FikaArt | Language preference (sv/en) | Until tab closed |
| __cf_bm | Cloudflare | Bot protection | 30 min |
| cf_clearance | Cloudflare | Security verification | 30 days |
| __stripe_mid / __stripe_sid | Stripe | Fraud prevention at checkout | 12 mo / 30 min |
| _ga, _ga_* | Google Analytics | Analytics (consent only) | 2 years |
| _gid | Google Analytics | Analytics (consent only) | 24 hours |
You can change your cookie preferences at any time via the Cookie settings link in the footer.
Your rights (GDPR)
- Right of access to your data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restriction of processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent at any time
To exercise these rights, contact us at [email protected]. We respond within 30 days.
Right to lodge a complaint
If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with a supervisory authority. Since the data controller is a Danish company, the lead supervisory authority is:
Datatilsynet (Denmark)
Carl Jacobsens Vej 35, 2500 Valby, Denmark
www.datatilsynet.dk
If you live in Sweden, you may also contact the Swedish authority:
Integritetsskyddsmyndigheten (IMY)
Box 8114, 104 20 Stockholm
www.imy.se