Ravelinen’s Privacy Policy
Ravelinen is committed to ensuring a high level of data security and protection of personal information – for both our guests and employees.
Below you can read how we handle your personal data.
1. Data Controller
Contact information:
Restaurant Ravelinen
Torvegade 79
1400 Copenhagen K
Phone: +45 32 96 20 45
Email: [email protected]
CVR: 17685937
Ravelinen processes personal data in accordance with applicable legislation and will continuously adapt our procedures to comply with EU regulations, including the General Data Protection Regulation (GDPR), which came into force on 25 May 2018.
2. What Information Is Collected?
As a restaurant, Ravelinen only collects the information you voluntarily provide when booking our services. By submitting your personal data, you also consent to our use of this information.
We collect personal data in the following ways:
- When you subscribe to Ravelinen’s newsletter
- Via browser cookies
- When you request a quote by email or enter into a cooperation agreement
- When you use our digital platforms, such as our website, and make a booking
- Via CCTV surveillance
We ensure that all data is stored and processed in accordance with applicable legislation.
CCTV is installed both outdoors and indoors as a safety measure.
3. Collection of Personal Data
We collect the following personal data:
- General personal data such as name, address, phone number, and email address
- Name and email address in connection with table reservations
- Name and email address when subscribing to Ravelinen’s newsletter
- Browser information
- Feedback from participation in online competitions
4. Special Categories of Personal Data
In addition to general personal data, you may voluntarily provide Ravelinen with special personal data, such as accessibility needs, allergies, or specific medical information. If we receive such information from you, we consider this as consent to register and process the data.
5. Information from Third Parties
For bookings and reservations, Ravelinen stores the information you have provided for up to 60 months, after which it is deleted. However, data may be stored for a longer period if we have a legitimate need, for example, if it is necessary to establish, exercise, defend legal claims, or to comply with legal obligations.
Apart from fulfilling the booking itself, the information provided will only be used if, for example, you contact us with questions or if there are errors in the booking.
6. Purpose of Data Collection
Ravelinen collects personal data in connection with the services we provide to our customers and guests, as described in this privacy policy.
7. When Do We Collect Personal Data
We collect personal data when:
- Processing purchases of our services
- You subscribe to Ravelinen’s newsletter
- Sending newsletters, if you have given consent
- You sign up for our competitions
- Conducting ongoing analysis of your interests in relation to our services, with the aim of continuously improving them
- Complying with legal obligations
8. Legal Basis
We process your data based on our legitimate interests:
- To deliver services to our customers
- To enter into customer collaborations and contracts
- To improve the overall customer experience through analysis and statistics of general user behaviour
We therefore process your personal data as part of entering into a collaboration or a specific contract.
We collect and process your personal data based on legitimate interest, unless your interests override this. For example, we send newsletters to which you have voluntarily subscribed, and which you can unsubscribe from at any time. Legitimate interests may also include analysing general user behavioor to improve your experience with Ravelinen’s services.
If you provide special information relevant to the service (e.g. allergies, disabilities), we use this data to tailor our services accordingly.
9. Disclosure of Personal Data
We work with suppliers and may disclose personal data to external partners who process data on our behalf. We use external partners for various purposes, including technical operations, system hosting, optimisation of hansenshave.dk, newsletter distribution, targeted marketing (including retargeting), and customer reviews.
We have entered into data processing agreements with all parties who process personal data on our behalf. According to these agreements, data processors may not use the data for any purpose other than fulfilling the agreement with us and are bound by confidentiality.
Some of these data processors, such as Facebook, are based in the USA. The necessary safeguards for transferring data to the USA are ensured through the processor’s certification under the EU-U.S. Privacy Shield, pursuant to Article 45 of the GDPR. If we use other processors outside the EU, this will always be done under valid transfer guarantees.
We only retain your personal data for as long as necessary – both in accordance with applicable law and to deliver our services to you.
Personal data is then securely deleted. As a general rule, we retain your data for up to 24 months after you are no longer a customer.
Some personal data is retained for shorter or longer periods. Accounting records and similar data required for bookkeeping are retained for up to 5 years in accordance with applicable law.
Ravelinen uses cookies for our digital services.
10. Security
We have implemented appropriate technical and organisational security measures to prevent personal data from being accidentally or unlawfully destroyed, lost, altered, or disclosed, and to prevent unauthorised access or misuse.
Only employees who have a legitimate need to access your personal data to perform their duties have access.
11. Your Rights
Under the Danish Data Protection Act, you have the right to access the personal data Ravelinen holds about you and to update this data at any time. You also have the right to request deletion of the personal data Ravelinen holds about you. If you request this, Ravelinen will delete all data that we are not legally required to retain.
If you have given consent for Ravelinen to process your personal data, you may withdraw your consent at any time.
If you wish to have all your personal data deleted, please contact us in writing with your name, address, phone number, and email address.