Privacy policy

Last updated: 27 September 2026

This policy describes how we process personal data on fest-appen.dk (the marketing website) and — when you place an order — in connection with invoicing and payment. It covers the trial page and contact form, cookies, web server logs, and card payment via Stripe.

1. Data controller

If you have questions about this policy or want to exercise your rights, please contact us at the address above.

2. Trial page and contact form

When you fill in the form (typically to get a free trial page), we collect: name, email address, optionally phone number, your preferred short name for the guest page (the label before .fest-appen.dk, required for a trial page), whether you want a free trial page, and an optional message.

If you checked “free trial page” and gave an available short name, we create a customer and trial page record immediately and send you a welcome email. We (or the system) then set up the subdomain; the login link arrives when the page is ready. If you opted out of a trial page, we only use the data to reply to your enquiry. We do not use the data for marketing unless you separately request this.

• Legal basis: GDPR Article 6(1)(b): processing necessary to take steps at your request prior to entering into a contract (and to create the trial page when you asked for one).
• Retention: Enquiries without a trial page are kept for up to 2 years after the last exchange. If a trial/customer record is created, customer data follows bookkeeping and contract rules (typically longer for invoices).
• Processor: Welcome and notification emails are sent via Resend, Inc. (USA) under a data processing agreement and EU Standard Contractual Clauses. Processing typically takes place in the EU (AWS eu-west-1).

3. Order, invoice and card payment

When you (or we) order the package in admin (“Order”), we create an invoice and email the order confirmation + invoice. Payment can be by bank transfer or card via Stripe Checkout. We typically share name, email, invoice number and amount with Stripe to start the payment.

• Legal basis: GDPR Article 6(1)(b) (contract) and (c) (legal obligation to keep invoices for bookkeeping).
• Card details: Card numbers and secrets are entered only at Stripe (hosted Checkout). We do not store them. We store the invoice’s Stripe session/PaymentIntent id for reconciliation.
• Roles: We are the seller (Merchant of Record) and issue our own invoices/receipts. Stripe is the payment provider. See also Stripe's privacy policy.
• Retention: Invoices and payment status are typically kept for 5 years under Danish bookkeeping rules.

4. Cookies

We use three types of cookies. You choose which optional cookies to allow when the consent banner appears; you can change your choice at any time via "Cookie settings" in the footer.

Essential cookies are always set and need no consent:

Cookie	Purpose	Duration
fa_consent	Stores your cookie consent choice (accepted/declined) so you are not asked again on your next visit.	1 year
fa_consent_ts	Records the timestamp of your consent decision for internal audit purposes.	1 year
marketing_lang	Remembers your language preference (Danish/English/Swedish/Norwegian) so the site loads in the correct language on your next visit.	1 year

Analytics cookies are only set with your consent:

Cookie	Purpose	Duration	Set by
_ga	Used by Google Analytics to distinguish visitors using a pseudonymous, randomly generated browser ID. We cannot see your name or email address.	2 years	Google
_ga_*	Used by Google Analytics (GA4) to maintain session state and measure site usage. The suffix corresponds to our GA4 Measurement ID.	1 year	Google

• Legal basis for analytics cookies: GDPR Article 6(1)(a): your consent.
• Analytics data is processed by Google LLC under a data processing agreement. Data may be transferred to the USA under the EU–US Data Privacy Framework and Standard Contractual Clauses.
• We have activated IP anonymisation in Google Analytics. No full IP addresses are stored.

Marketing cookies are only set with your consent:

Cookie	Purpose	Duration	Set by
_fbp	Set by Meta Pixel (Facebook) to identify browsers across sites and domains. Used to measure and optimise ads on Facebook and Instagram. No directly personal information is stored.	3 months	Meta (Facebook)
_fbc	Stores the most recent Facebook ad click ID for the visitor. Helps Meta track whether a visit originates from a Facebook or Instagram ad.	3 months	Meta (Facebook)

• Legal basis for marketing cookies: GDPR Article 6(1)(a): your consent.
• Marketing data is processed by Meta Platforms, Inc. under a data processing agreement. Data may be transferred to the USA under the EU–US Data Privacy Framework and Standard Contractual Clauses.
• Meta Pixel is used solely to measure ad performance and to optimise advertising on Facebook and Instagram. We do not sell personal data to Meta or any other party.

5. Web server logs

Our hosting provider, Simply.com, automatically records standard HTTP access logs (IP address, timestamp, requested URL, HTTP status code, browser type). These logs are used solely for security monitoring and fault diagnosis.

• Legal basis: GDPR Article 6(1)(f): legitimate interest in maintaining a secure and operational website.
• Retention: Typically 30 days, in line with Simply.com's standard practice.

6. Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you (Article 15).
• Rectify inaccurate data (Article 16).
• Erase your data ("right to be forgotten") (Article 17).
• Restrict processing in certain circumstances (Article 18).
• Data portability: receive your data in a machine-readable format (Article 20).
• Object to processing based on legitimate interest (Article 21).
• Withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal (Article 7(3)).

To exercise any of these rights, contact us at info@fest-appen.dk. We will respond within 30 days.

7. Complaints

If you believe we are not handling your personal data correctly, you have the right to lodge a complaint with the Danish Data Protection Agency:

8. Changes to this policy

If we make material changes to this policy, we will update the "Last updated" date at the top of this page. We encourage you to review it periodically.