Privacy policy
Last updated: 29 September 2026
1. Data controller
Fishmaster ApS, CVR no. 41488506
Lihmevej 5A, 7183 Randbøl, Denmark
Email: info@fishmasterbutik.dk · Phone: +45 20 99 66 45
Fishmaster ApS is the data controller for the processing of your personal data on fishmasterbutik.com. Send any data-protection request to info@fishmasterbutik.dk – we reply within 30 days at the latest.
2. What we process, why, and on what legal basis
| Purpose | Data | Legal basis (GDPR) | Retention |
|---|---|---|---|
| Processing orders, payment, delivery/pickup, complaints | Name, address, email, phone, order and payment details | Art. 6(1)(b) – performance of contract | 5 years after the end of the financial year (Danish Bookkeeping Act) |
| Customer account | Name, email, addresses, order history | Art. 6(1)(b) – contract | Until you delete the account; order data as above |
| Wholesale (B2B) customers | Company name, CVR/VAT no., contact person, addresses | Art. 6(1)(b) and (f) – contract and legitimate interest in the customer relationship | For the duration of the relationship + 5 years |
| Newsletter | Name, email, open/click data | Art. 6(1)(a) – consent | Until you unsubscribe |
| Customer service and contact form | Your messages and contact details | Art. 6(1)(b) and (f) | Up to 2 years after the last contact |
| Security and fraud prevention | IP address, device and order data | Art. 6(1)(f) – legitimate interest | Up to 12 months |
| Statistics and marketing via cookies | Cookie IDs, visit data | Art. 6(1)(a) – consent (ePrivacy rules) | See section 4 |
| Accounting and legal obligations | Invoice and payment data | Art. 6(1)(c) – legal obligation | 5 years |
We do not sell your personal data and we do not make automated decisions about you.
3. Recipients (data processors)
- Shopify International Ltd. (Ireland) – shop platform, hosting, checkout.
- Payment provider – processing payments. We never see your full card details.
- Carriers – name, address and phone for delivery.
- Accounting system (e-conomic) – invoicing and bookkeeping.
- Meta (Facebook/Instagram), TikTok, Google – only if you have consented to marketing cookies.
Transfers to countries outside the EU/EEA (e.g. the USA) rely on the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework.
4. Cookies
On your first visit we show a cookie banner. Only strictly necessary cookies (cart, language/currency, login, security and checkout) are set without consent. Preference, statistics and marketing cookies are set only after you accept them. Rejecting is as easy as accepting.
| Category | Examples | Purpose | Lifetime |
|---|---|---|---|
| Necessary | cart, localization, _shopify_essential, keep_alive, _tracking_consent | Cart, language/currency, security, storing your cookie choice | Session – 1 year |
| Statistics | _shopify_y, _shopify_s, _shopify_sa_t, _shopify_sa_p | Visit statistics (Shopify Analytics) | 30 min – 1 year |
| Marketing | _fbp (Meta), _ttp (TikTok), _gcl_au (Google) | Measuring and targeting ads | Up to 13 months |
Withdraw or change consent: delete cookies in your browser or open the cookie settings via the "Cookie settings" link at the bottom of the page. Withdrawal does not affect the lawfulness of processing before the withdrawal.
5. Your rights
You have the right of access, rectification, erasure, restriction, data portability, and to object to processing based on legitimate interest. You can withdraw consent at any time (newsletter: via the "unsubscribe" link in every email). Write to info@fishmasterbutik.dk.
6. Complaints
You can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, www.datatilsynet.dk, dt@datatilsynet.dk – or to the supervisory authority in your own EU country.
7. Security and children
We protect your data with encryption (HTTPS), access control and data processing agreements. The shop is not aimed at children and we do not knowingly collect data about children under 15. Alcohol is sold only in line with Danish age limits.
8. Changes
We may update this policy. The current version and the date of the latest change are always shown on this page.