Privacy policy

Kavata ApS
Borgbjergsvej 13, 2450 København SV
CVR 46 30 32 61
nesrin@kavata.dk

Kavata is the data controller for the information described here. If you have any question about your data, write to us at nesrin@kavata.dk.

When you send a catering or event inquiry

We collect your name, email address, and — if you choose to give them — your phone number, the date and type of event you have in mind, and whatever you write in your message. We use this only to read, reply to, and arrange the event you have asked about. The legal basis is taking steps at your request before a possible agreement, together with our legitimate interest in answering people who contact us.

When you use the contact form

The same applies: we use what you send only to respond to you.

When you subscribe to our newsletter

We collect your email address so we can send you the Kavata Chronicles. The legal basis is your consent, which you give when you sign up and can withdraw at any time. We keep our own record of subscribers and send the newsletter through Substack; we also pass your address to Fresto, our booking and customer-records provider, so your details stay consistent across our systems.

When you book a table, buy a gift card, or order through our shop

These run on hosted pages provided by Fresto, and the information you enter there — including any payment details — is handled by Fresto under their own terms. We receive the booking details needed to host you, but we never see or store your card details.

When you visit the site

Our hosting providers keep standard technical logs, such as IP address and browser type, for security and to keep the site running. To understand how the site is used we rely on privacy-friendly analytics that measures activity in aggregate and does not identify you individually. If something goes wrong, an error-monitoring service (Sentry) records the technical details of the fault so we can fix it; we have configured it not to collect personal data such as your IP address or anything you typed. When you choose a language, we store that choice in a single functional cookie (kavata_locale) so the site remembers it next time, for one year. It holds nothing but your language preference and is not used to track you. Aside from this we set no advertising or tracking cookies, which is why you won’t see a cookie banner.

Inquiries and contact messages

We keep these until 90 days after your event date, then delete them. For inquiries without a specific date, we delete them 90 days after you contacted us. By that point any arrangement is concluded and any bill is settled.

Accounting records

Where an inquiry becomes an actual booking or sale, the associated financial records are kept in our accounting system for 5 years, as Danish bookkeeping law (bogføringsloven) requires. This is separate from the inquiry record above and is kept on a separate legal basis.

Newsletter

We keep your email address on our subscriber list until you ask to be removed. The unsubscribe link in each Substack newsletter stops further newsletters; to be removed from our own records as well, write to nesrin@kavata.dk and we will delete you.

We do not sell your information or share it for advertising. We use a small number of trusted service providers to run the site and reach you, and they process data on our behalf. Most of your data is processed within the EU; our newsletter provider Substack is based in the United States, where data that reaches them is covered by appropriate safeguards for international transfers. The providers we use:

Every newsletter we send through Substack includes an unsubscribe link that stops further newsletters. To be removed from our records entirely — including our own subscriber list — write to nesrin@kavata.dk and we will delete you.

Under the GDPR you can ask us to show you the personal data we hold about you; correct anything that is wrong; delete your data; restrict or object to how we use it; send you a copy in a portable format; and withdraw consent you have given for the newsletter, at any time.

To exercise any of these, write to nesrin@kavata.dk. If you believe we have handled your data improperly, you have the right to complain to the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk).

If we change how we handle your data, we will update this page and the date shown at the top.