Version 1.1, effective from 8 November 2026 – “Opening soon”: no cookies, visitor statistics without cookies, CCTV in the shop
Privacy policy
This version applies as long as the website only shows the “Opening soon” page. When the website opens, this version will be replaced by the full privacy policy.
Translation of the Danish text.
Data controller
CIKLIDER.DK ApS, CVR (Danish company reg. no.) 45449939, Storegade 32, 6700 Esbjerg, Denmark, info@ciklider.dk, tel. +45 50 65 70 75.
What information we process
- When you visit the website: your IP address and the information your browser sends with every visit (e.g. browser and operating system). They reach Cloudflare, which runs the website for us. Our server at Cloudflare keeps a security log of every request: your IP address and what Cloudflare derives from it (internet service provider, country, city, postcode and an approximate location), the address of the page requested, the page that referred you, and your browser and operating system. We use the log only to fend off attacks and misuse and to find errors (legitimate interests, Article 6(1)(f) of the GDPR, the General Data Protection Regulation (EU) 2016/679); only the management has access to it, and it is deleted after no more than 7 days, unless it is needed to investigate or report a specific attack or misuse – in that case, we keep the relevant log entries until the matter has been resolved. Cloudflare itself also uses information about the traffic, e.g. IP addresses, to protect its network – Cloudflare is responsible for this under its own privacy policy.
- Visitor statistics without cookies (see “Visitor statistics”).
- If you call or write to us: your name, your phone number or your email address and what you ask about.
- CCTV in the shop: recordings of you when you are in the shop – video and sound, including what you say – and live video, without sound, that the staff can watch on screens in the shop and that the management can also watch outside the shop (see “CCTV in the shop”).
Purposes and legal basis
- Displaying the website and keeping it secure – legitimate interests (Article 6(1)(f) of the GDPR).
- Replying when you call or write – legitimate interests (point (f)): being able to answer questions before the shop opens.
- Visitor statistics – see “Visitor statistics”.
- CCTV in the shop: preventing and investigating theft, vandalism and other criminal offences, and keeping customers, staff and animals safe – including when the staff or the management watch the video live; the audio only for preventing and investigating theft, threats and robbery – legitimate interests (point (f)), see “CCTV in the shop”.
Retention
We keep an enquiry until it has been answered and closed, and delete it no later than 6 months after our last reply. If the enquiry leads to an agreement with us, it is kept together with the agreement. The log is deleted after no more than 7 days, unless it is needed to investigate or report a specific attack or misuse – in that case, we keep the relevant log entries until the matter has been resolved. The visitor statistics records are deleted after 3 months – of these, we see only aggregated figures (see “Visitor statistics”). The recordings from the CCTV in the shop – video and sound – are deleted automatically no later than 30 days after they were made (section 4 c(4) of the Danish CCTV Act, tv-overvågningsloven) – the exceptions are set out under “CCTV in the shop”.
Recipients
Cloudflare (hosting, the log, visitor statistics and the recordings from the CCTV in the shop, which are stored only in the EU – see “Visitor statistics” and “CCTV in the shop”), Microsoft (emails to and from us, Microsoft 365) and the police if we report an attack or misuse – or a criminal offence in the shop shown by the CCTV recordings, or if the police ask for recordings for the purpose of investigating crime (section 4 c(1)(3) of the CCTV Act). Cloudflare and Microsoft process the information as our processors under data processing agreements. Microsoft stores emails in the EU; Cloudflare runs the website from data centres around the world, including in the USA. Transfers to the USA – including Microsoft’s support from there – take place under the European Commission’s adequacy decision on the EU-US Data Privacy Framework (Decision (EU) 2023/1795, Article 45 of the GDPR), under which Cloudflare, Inc. and Microsoft Corporation are certified. If a certification lapses, or information is processed in another country outside the EU/EEA, the European Commission’s standard contractual clauses in the data processing agreement apply (Article 46 of the GDPR).
Visitor statistics
We count visits on our server at Cloudflare, which runs the website for us. When your browser requests a page, we record for the statistics only the address of the page, the domain of the page that referred you here, the country and the time – neither your IP address nor any ID – and no statistics script runs in your browser. We see only aggregated figures, and the records are deleted after 3 months. The legal basis is our legitimate interest in improving the website (Article 6(1)(f) of the GDPR).
Cookies
The website sets no cookies and stores nothing in your browser.
CCTV in the shop
The shop at Storegade 32 is monitored by CCTV with video and sound. This is signposted at the entrance and at each camera (section 3 of the CCTV Act). The cameras cover the areas of the shop where customers go; toilets and staff rooms are not monitored, and sound is never recorded in the back room, the stockroom or the staff rooms. The purpose is to prevent and investigate theft, vandalism and other criminal offences and to keep customers, staff and animals safe – our legitimate interests (Article 6(1)(f) of the GDPR). The audio also captures conversations in the shop and is recorded only to prevent and investigate theft, threats and robbery. The staff can watch the cameras live on screens in the shop – the video only, never the sound. The screens are placed where only the staff can see them, and only staff who are on duty watch them. The live view has the same purpose as the recordings. The management can also watch the video live outside the shop, on a phone or computer – the video only, never the sound. This happens only when it is necessary for the purpose, e.g. when an alarm goes off, on suspicion of theft, vandalism or burglary, or to see whether there has been a burglary or vandalism while the shop is closed – not to follow the staff’s work, breaks or working time. The screens show only the video as it is right now: they cannot rewind, and the live view stores nothing. Only the management has access to the recordings and views them only when something specific has happened, e.g. theft, vandalism, injury or damage, or a dispute with a customer – and listens to the audio only in the event of theft, threats or robbery. The recordings – video and sound – are stored in encrypted form by our processor Cloudflare on servers in the EU and are deleted automatically no later than 30 days after they were made (section 4 c(4) of the CCTV Act). If we have reported a criminal offence, or we are handling a specific dispute, we keep the relevant part of the recordings until the matter has been resolved (section 4 c(5)) – if the dispute concerns you, we will let you know within the 30 days, and you can get a copy of the recording. We pass recordings on to the police only for the purpose of investigating crime – e.g. when we report a criminal offence, or when the police ask for recordings of a crime we have not reported ourselves – or where the law otherwise requires it (section 4 c(1)(2) and (3)) – never to anyone else, and we never publish them. You can access recordings of yourself (see “Your rights”); we will then ask you to tell us when you were in the shop, and we protect other people in the recording by blurring them or cutting them out – in both video and sound – before you receive the copy. The staff are informed in writing about the CCTV, the audio recording, the live screens, the purpose and the rules before the cameras start recording and the screens are switched on – new staff before they start. The staff are themselves on camera, but neither the recordings nor the live view is used to monitor their work, breaks or working time.
Logs of the CCTV system. The system that controls the CCTV keeps an operating log: when recording started and stopped, which cameras were changed, the cameras’ events (e.g. lost connection), and which administrator made a change (as a user number). The log contains no video or sound. So that we can document who has done what with the CCTV, and so that the log files cannot be deleted or changed afterwards, we store a copy in a closed storage location at Cloudflare in the EU. The copy is locked and can be neither changed nor deleted for 13 months, and is then deleted. The legal basis is our legitimate interests in being able to document and secure the CCTV (Article 6(1)(f) of the GDPR) and the security requirements in Article 32.
Your rights
You can access your data, have it rectified or erased, restrict its processing and object to processing based on our legitimate interests (point (f)). Write to info@ciklider.dk or call +45 50 65 70 75. You can complain to the Danish Data Protection Agency (Datatilsynet) – or to the data protection authority in the country where you live or work: in Sweden, the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), and in Norway, the Norwegian Data Protection Authority (Datatilsynet).
Security
All traffic to and from the website is encrypted.