Privacy Policy

Privacy & Cookie Policy for Koffeene ApS

Last updated: 23 October 2026

This Privacy and Cookie Policy explains how Koffeene ApS (“we”, “us”, “our”) collects, uses, and protects information when you visit our website (where we publish coffee recipes and related content) or make purchases via our payment checkout.

1. Data Controller Information

Koffeene ApS is the data controller for the processing of personal data on this website:

  • Company name: Koffeene ApS
  • CVR no.: 46755081
  • Address: C/O LegalDesk.dk ApS, Njalsgade 21F, 2nd floor, 2300 Copenhagen S, Denmark
  • Email: hej@koffeene.dk
  • Managing Director: Jan René Grimm

2. Personal Data We Collect and How We Use It

We take a privacy-first, data-minimization approach. We do not require visitors to register user accounts, and we do not track individual browsing habits across the web.

A. Browsing the Website & Server Logs

  • What data is processed: When you access our website, standard web server access logs may temporarily register your IP address, browser type, operating system, requested URL, and timestamp.
  • Purpose: To ensure the technical operation, security, stability, and integrity of our website.
  • Legal basis: GDPR Article 6(1)(f) (our legitimate interest in operating a secure and functioning website).
  • Retention: Server logs are retained temporarily for technical diagnostic and security purposes and automatically deleted or rotated regularly.

B. Inquiries and Communication

  • What data is processed: If you reach out to us by email or contact channels, we process your contact details (such as name, email address) and the content of your message.
  • Purpose: To answer your inquiry and communicate with you.
  • Legal basis: GDPR Article 6(1)(f) (our legitimate interest in responding to user inquiries) or Article 6(1)(b) (performance of a contract or pre-contractual steps).
  • Retention: Inquiries are kept for as long as necessary to address your request, after which they are deleted, unless accounting or statutory requirements require longer retention.

C. Purchases and Payments via Lemon Squeezy

  • Merchant of Record model: Any purchases or paid transactions on our website are processed through Lemon Squeezy (Lemon Squeezy, LLC), which acts as our Merchant of Record.
  • Data handling: When you make a purchase, payment information (such as credit card details, billing address, tax ID, and buyer email) is collected directly by Lemon Squeezy to complete the transaction, fulfill tax and invoicing duties, and manage fraud prevention.
  • Controller status: For payment processing, tax calculation, and order fulfillment, Lemon Squeezy acts as an independent data controller. Your transaction data is governed by Lemon Squeezy’s Terms of Service and Privacy Policy. We receive customer order summaries and fulfillment details from Lemon Squeezy to provide access to our products or digital content, which we retain in compliance with statutory Danish bookkeeping obligations (GDPR Article 6(1)(c) and the Danish Bookkeeping Act / Bogføringsloven).

3. Cookie and Tracking Policy

We respect your privacy and avoid intrusive tracking.

A. Cookieless Web Analytics (Plausible Analytics)

  • We use Plausible Analytics to gather aggregate, anonymous usage statistics (such as overall visitor count, popular recipe pages, and general referrer traffic).
  • No cookies: Plausible Analytics does not use cookies, does not write to local storage, and does not store persistent identifiers on your device.
  • No personal tracking: Plausible does not collect personal data, does not track individuals across websites or devices, and anonymizes all request telemetry.
  • Cookie banner: Because no non-essential cookies, tracking pixels, or device-fingerprinting mechanisms are placed on your terminal equipment, an intrusive cookie consent banner is not required under the Danish Cookie Order (Cookiebekendtgørelsen).

B. Necessary Cookies

  • Our site does not deploy marketing, tracking, or profiling cookies. If minimal technical session cookies are deployed by our hosting infrastructure, they are strictly necessary for delivering the website securely and efficiently.

4. Data Processors and Third Parties

We only share personal data with trusted third parties under strict confidentiality and legal obligations:

  1. Hosting & Infrastructure Providers: Our website hosting provider processes server data on our behalf as a data processor pursuant to a written Data Processing Agreement (GDPR Article 28).
  2. Plausible Analytics: Provides privacy-friendly, aggregated web analytics.
  3. Lemon Squeezy: Acts as an independent Merchant of Record for payment collection, taxation, and checkout management.
  4. Public Authorities: Data may be shared where required by applicable Danish law or court order.

We do not sell, rent, or disclose your personal data to third parties for their own commercial or advertising purposes.

5. Transfers to Third Countries

If any of our service providers transfer data outside the EU/EEA, such transfers are safeguarded under valid transfer mechanisms, such as the EU Commission’s Standard Contractual Clauses (SCCs) or the EU-U.S. Data Privacy Framework (DPF), in accordance with GDPR Chapter V.

6. Your Rights

Under the GDPR, you have the following rights regarding any personal data we hold about you:

  • Right of access (Art. 15): You have the right to request a copy of the personal data we process about you.
  • Right to rectification (Art. 16): You have the right to request correction of inaccurate or incomplete personal data.
  • Right to erasure / “right to be forgotten” (Art. 17): You have the right to request deletion of your personal data when it is no longer necessary for the purposes it was collected.
  • Right to restriction of processing (Art. 18): You have the right to request limited processing under certain conditions.
  • Right to data portability (Art. 20): You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
  • Right to object (Art. 21): You have the right to object to processing based on legitimate interests (Art. 6(1)(f)).

To exercise your rights, please contact us at hej@koffeene.dk.

7. Complaints to Datatilsynet

If you have concerns about how we process your personal data, you have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet):

8. Changes to this Policy

We may update this Privacy & Cookie Policy from time to time to reflect changes in our legal obligations, technical infrastructure, or services. Any updates will be published on this page with an updated revision date.