This privacy policy describes how Esbern Snare ApS (“we”, “us”) processes personal data when you use our website, make purchases, book a table, sign up for Klub ES, receive our newsletters or contact us.
Data controller: Esbern Snare ApS
CVR no.: 39715384
Address: Kordilgade 17, 4400 Kalundborg, Denmark
E-mail: info@esbern-snare.dk
Phone: 25 14 44 00
We are the data controller for the processing of your personal data when we determine the purposes and means of the processing.
We typically process the following data, depending on your relationship with us:
Name, address, e-mail, phone number (for purchases/accounts, where relevant)
Order details (goods/services, amounts, times, order number, status)
Technical data (IP address, browser/device, log data)
Data from cookies and similar technologies (see section 10)
Name, phone number, e-mail
Booking details (date/time, number of guests, any comments)
Identity/contact details you choose to share via MobilePay Login (typically name, phone number, e-mail and possibly address)
Membership details (tier, start/end, status)
Transaction details (amount, reference/order ID, time of payment, payment status)
E-mail address (and name, if you provide it)
Consent details (when and how you signed up)
Newsletter statistics (e.g. opens and clicks), if enabled
Name, e-mail, phone number
The content of your enquiry and our correspondence
We process personal data for the following purposes:
To deliver and administer purchases and services (including webshop purchases and Klub ES)
To administer table reservations
To handle payments, subscriptions and membership status
To provide customer service and respond to enquiries
To send newsletters and relevant marketing, if you have given consent
To ensure operation, troubleshooting, statistics and IT security
To comply with legal obligations (e.g. bookkeeping)
We process your data on one or more of the following grounds:
Contract: when processing is necessary to fulfil an agreement with you (e.g. purchases, Klub ES, reservations)
Legal obligation: when we are required by law to retain data (e.g. accounting records)
Legitimate interest: e.g. operation, security, prevention of misuse, documentation and improvements
Consent: e.g. newsletters, marketing cookies and the sharing of profile data via MobilePay Login
We use the following suppliers/systems to deliver our services. Where a supplier processes personal data on our behalf, this is done under our instructions and typically as a data processor.
We use OnlinePOS for sales and administration of purchases in the restaurant as well as relevant operations/reporting. OnlinePOS has its own privacy policy.
We use Superb Experience to handle reservations. Superb Experience describes its processing in its own privacy policy.
We use Mailchimp to send newsletters and manage mailing lists. Mailchimp may process data in the USA. Mailchimp states that it uses the EU–US Data Privacy Framework and that Standard Contractual Clauses (SCC) are included via its data processing agreement (DPA) as the basis for transfers.
When you make a payment and/or use Login via Vipps MobilePay, data is processed in MobilePay/Vipps’ systems.
MobilePay Login: When you log in, you can give consent to share selected profile data with us (e.g. name, phone number and e-mail). When we receive this data, we process it as an independent data controller for our own purposes (e.g. setting up and administering Klub ES).
Delegated consents/loyalty: Vipps MobilePay has a data processing agreement covering certain processes (including the collection of delegated consents in the login flow and loyalty-related processing, depending on the chosen solution).
5.5 Digital purchases via MobilePay
We use WooCommerce as the webshop platform on our website. WooCommerce is a technical solution on our site for handling the order flow. Automattic (the WooCommerce/WordPress ecosystem) has an overarching privacy policy for its services.
Please note: If additional WooCommerce/Automattic services are added (e.g. certain extensions), separate processing may take place under the terms of those services.
Some suppliers may process personal data outside the EU/EEA, including in the USA (e.g. Mailchimp). In such cases, transfers take place on a lawful basis, e.g. the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses (SCC).
We store personal data for as long as necessary for the purpose, and delete it afterwards.
As a general rule:
Purchases/transactions (accounting): stored for the period required by bookkeeping and documentation rules
Klub ES: stored for the duration of your membership and thereafter to the extent necessary for documentation, accounting or the handling of claims
Reservations: stored for a reasonable period for administration and documentation
Newsletter: stored until you unsubscribe or withdraw your consent
Customer service: stored for as long as relevant for case handling and documentation
You have the following rights (subject to the limitations that follow from the rules):
Access
Rectification
Erasure
Restriction of processing
Objection (especially in the case of legitimate interest)
Data portability (in relevant cases)
Withdrawal of consent (where processing is based on consent)
If you have shared data with us via MobilePay Login, you can see in the MobilePay app which businesses you have given access to, and withdraw your consent. Once withdrawn, MobilePay stops sharing your data with us, but this does not in itself end your agreement with us (e.g. a membership), which must, where relevant, be cancelled under the agreed terms.
We use cookies and similar technologies on our website. Necessary cookies may be used to ensure functionality. Statistics and marketing cookies are only used if you give consent via our cookie banner.
We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss, misuse or unlawful alteration.
If you believe that our processing of your personal data does not comply with the rules, you can lodge a complaint with the Danish Data Protection Agency (Datatilsynet).
We may update this privacy policy from time to time. The current version will always be available on our website. In the event of significant changes, we may notify you separately by e-mail or another suitable channel.
