Privacy policy

1. Data controller

Aarhus Street Food, Ny Banegaardsgade 46, 8000 Aarhus C, company reg. no. (CVR) 37808636, is the data controller for the processing of your personal data.

2. What information we collect

When you order, we collect: name, phone number, any email and your order.

If you enable notifications, we store a technical subscription key from your browser so we can notify you when the food is ready. The key does not contain your name or contact details.

3. Purpose

We use the information to process and deliver your order, notify you when the food is ready, send a receipt and handle any inquiries.

4. Legal basis

The processing is carried out to fulfil the agreement with you (GDPR Article 6(1)(b)). Notifications are sent on the basis of your consent (Article 6(1)(a)), which you can withdraw at any time by disabling notifications in the browser.

5. Recipients

Your order is shared with the kitchen you order from so the food can be prepared. Card payment is handled by a secure payment provider. We do not resell your information.

6. Storage

Order and accounting information is stored for as long as necessary and in accordance with the requirements of the Danish Bookkeeping Act. Notification subscriptions are deleted when they expire or are unsubscribed.

7. Your rights

You have the right to access, rectification, erasure and restriction, as well as the right to object to the processing. Contact Aarhus Street Food to exercise your rights.

8. Cookies and local storage

We use local storage (localStorage) in your browser to remember your cart, your language choice and — if you have ordered before — your contact details (name, phone and email) so they can be pre-filled on your next order. This data does not leave your device until you place an order, and can be cleared by deleting your browser data.

9. Complaints

You can complain about our processing of your personal data to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, www.datatilsynet.dk.