Privacy Policy

Last updated: January 2026

Data Controller Information

karmoventil AS is the data controller responsible for your personal data. We are registered in Denmark with company registration number CVR96325874 and VAT number DK96274138. Our registered address is Nyhavn 124, 1089 Copenhagen, Capital Region, Denmark.

Data We Collect

We collect and process various types of personal data when you interact with our services. The data we collect includes information you provide directly to us through our contact forms, consultation requests, and service enquiries. This may include your name, email address, telephone number, restaurant name, and details about your business needs and operational challenges.

We also automatically collect certain technical data when you visit our website, including your IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and information about your visit including the full URL clickstream to, through and from our site.

How We Use Your Information

We use the personal data we collect to provide our restaurant workflow optimization services, respond to your enquiries, and communicate with you about our services. We use of your data enables us to assess your restaurant's specific needs, develop customised optimization strategies, and provide ongoing support and consultation services.

We may also use your information to improve our website and services, conduct market research, and send you relevant updates about our services that may be of interest to you. All marketing communications are sent with your consent and you may opt out at any time.

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data on the following legal bases:

  • Legitimate interests: To operate our business, provide our services, and improve our offerings
  • Contract: To fulfil our contractual obligations when you engage our services
  • Consent: For marketing communications and non-essential cookies
  • Legal obligation: To comply with applicable laws and regulations

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, please refer to our Cookie Policy.

Data Sharing and Third Parties

We do not sell, trade, or otherwise transfer your personal data to third parties except as described in this privacy policy. We may share your information with trusted service providers who assist us in operating our website, conducting our business, or servicing you, provided they agree to keep this information confidential.

We may also disclose your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect ours or others' rights, property, or safety.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The specific retention period depends on the type of data and the purpose for which it was collected.

Contact enquiry data is typically retained for up to three years to enable us to respond to follow-up questions and provide ongoing support. Client project data is retained for the duration of our business relationship plus seven years for legal and tax purposes.

Your Rights

Under GDPR, you have several rights regarding your personal data:

  • Right of access: You can request copies of your personal data
  • Right to rectification: You can request correction of inaccurate or incomplete data
  • Right to erasure: You can request deletion of your personal data in certain circumstances
  • Right to restrict processing: You can request limitation of how we process your data
  • Right to data portability: You can request transfer of your data to another organisation
  • Right to object: You can object to processing based on legitimate interests or for marketing purposes

To exercise any of these rights, please contact us using the contact information provided below.

International Data Transfers

As we operate primarily within the European Union, your personal data is generally processed within the EU/EEA. If we need to transfer your data outside the EU/EEA, we ensure appropriate safeguards are in place in accordance with GDPR requirements.

Security Measures

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, regular security assessments, and staff training on data protection.

Contact Information

If you have any questions about this privacy policy or wish to exercise your rights, please contact us:

Supervisory Authority

You have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) if you believe we have not handled your personal data in accordance with applicable data protection laws.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any significant changes by posting the updated policy on our website with a new "last updated" date.