Privacy Policy

How we handle your data. Short version: we keep it minimal.

Data Controller

Holeebao
Åboulevard 7, st tv
1635 København V, Denmark

Email: info@holeebao.dk

Holeebao is the data controller responsible for the processing of personal data described in this policy.

What We Collect and Why

Website analytics

We use Vercel Web Analytics to understand how our website is used. It is cookieless: it sets no cookies, uses no cross-site tracking, and does not identify individual visitors. We only see aggregated, anonymous data such as page views, approximate country, referrer, and device type. Legal basis: our legitimate interest in improving the website, Art. 6(1)(f) GDPR.

Server logs

When you visit the website, our hosting provider automatically records technical information such as your IP address, browser type, and the time of your visit. This is used solely for security and to keep the website running reliably. Legal basis: legitimate interest, Art. 6(1)(f) GDPR.

When you contact us

If you email us or send us information through the website, we process the details you provide (such as your name, email address, and message) to respond to you. Legal basis: taking steps at your request, Art. 6(1)(b) GDPR, and our legitimate interest in handling enquiries, Art. 6(1)(f) GDPR.

We do not sell your data, and we do not use it for advertising.

Processors and Third Parties

We use the following service providers to run the website:

  • Vercel Inc. hosts the website and provides the cookieless analytics described above.
  • Supabase Inc. provides database infrastructure for interactive website features.
  • Dully.io and Wolt handle online ordering. When you order through them, you leave our website and their own privacy policies apply.

International Transfers

Vercel Inc. is based in the USA. Where personal data (such as server log data) is transferred outside the EU/EEA, the transfer is safeguarded by the EU-US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses (SCCs).

Retention

We keep personal data only as long as necessary for the purposes described above. Server logs are retained for a short period by our hosting provider for security purposes. Emails and enquiries are kept only as long as needed to handle your request and any follow-up, after which they are deleted.

Your Rights

Under the GDPR you have the right to:

  • Access the personal data we hold about you
  • Have inaccurate data rectified
  • Have your data erased
  • Restrict the processing of your data
  • Object to processing based on legitimate interest
  • Receive your data in a portable format

To exercise any of these rights, email us at info@holeebao.dk. You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet), www.datatilsynet.dk.

Contact

Questions about this policy or how we handle your data? Reach us at:

Holeebao
Åboulevard 7, st tv
1635 København V, Denmark
info@holeebao.dk

Last updated: 16 July 2026

This policy is provided for transparency and should be reviewed by a legal professional before final publication.