Privacy Policy
Last updated: 9 May 2026
Data Controller
FikaArt is operated by:
Humble Venture Group Media ApS
CVR 45148246 · VAT DK45148246
Honningvænget 3, 1. tv
8381 Tilst
Denmark
Email: [email protected]
What we collect
- Booking data: name, email address, phone number (where needed), number of guests, session selection
- Payment data: handled by Stripe, we never store card details on our servers
- Contact form: name, email, message
- Technical data: IP address, browser type and language (for security and debugging)
- Analytics (after consent): page views, events, anonymised visitor flow via Google Analytics
Legal basis
- Contract (GDPR art. 6.1.b): bookings, payment, confirmations, cancellations
- Legitimate interest (GDPR art. 6.1.f): security, fraud prevention, internal admin
- Consent (GDPR art. 6.1.a): analytics and marketing cookies (revocable at any time)
- Legal obligation (GDPR art. 6.1.c): accounting under Danish/EU law
How long we keep data
- Booking data: 24 months after last interaction, then deleted or anonymised
- Payment data: 5 years per accounting law
- Contact messages: 12 months
- Cookies: see the cookie table below
Third parties (data processors)
| Service | Purpose | Location |
|---|---|---|
| Stripe | Payments | EU + USA (DPF) |
| Cloudflare | Hosting, CDN, security | EU + USA (SCC) |
| Supabase / Lovable | Database, transactional email | EU |
| Google (Tag Manager / Analytics) | Analytics (after consent) | EU + USA (DPF) |
Transfers to countries outside the EU/EEA are made under the EU Commission's Standard Contractual Clauses (SCC) or the EU-US Data Privacy Framework (DPF).
Cookies we use
| Name | Service | Purpose | Duration |
|---|---|---|---|
| fikaart-cookie-consent | FikaArt | Stores your cookie choices | 12 months |
| fikaart-lang | FikaArt | Language preference (sv/en) | Until tab closed |
| __cf_bm | Cloudflare | Bot protection | 30 min |
| cf_clearance | Cloudflare | Security verification | 30 days |
| __stripe_mid / __stripe_sid | Stripe | Fraud prevention at checkout | 12 mo / 30 min |
| _ga, _ga_* | Google Analytics | Analytics (consent only) | 2 years |
| _gid | Google Analytics | Analytics (consent only) | 24 hours |
You can change your cookie preferences at any time via the Cookie settings link in the footer.
Your rights (GDPR)
- Right of access to your data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restriction of processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent at any time
To exercise these rights, contact us at [email protected]. We respond within 30 days.
Right to lodge a complaint
If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with a supervisory authority. Since the data controller is a Danish company, the lead supervisory authority is:
Datatilsynet (Denmark)
Carl Jacobsens Vej 35, 2500 Valby, Denmark
www.datatilsynet.dk
If you live in Sweden, you may also contact the Swedish authority:
Integritetsskyddsmyndigheten (IMY)
Box 8114, 104 20 Stockholm
www.imy.se