Privacy Policy
We like to keep things simple – including how we handle your data. Here's what we collect, why, and what you can do about it.
Last updated: 28 October 2026
Who we are
Oranje Nyhavn ApS (CVR 42217360) runs Restaurant Oranje, moored at Nyhavn 65A, 1051 København K. We are the data controller for the personal data described here.
Questions about your data? Write to info@oranjenyhavn.dk or call +45 31 23 66 45.
What we collect – and why
Table bookings. When you book through our booking system (Bordibyen), we receive your name, phone number, email, the date and time, number of guests and any comments you add. We use it to hold your table and contact you about your booking. Legal basis: to fulfil the booking you asked for (GDPR art. 6(1)(b)).
Allergies and dietary needs. If you tell us about allergies, we use it only to prepare your food safely. Because this can be health information, we only process it with your consent (GDPR art. 9(2)(a)), and we delete it once your visit is over.
Emails, calls and the contact form. When you write or call us – for example about a private event – we use your name, contact details and message to answer you and plan your event. Legal basis: our legitimate interest in replying to you, or steps before an agreement (GDPR art. 6(1)(f) and 6(1)(b)).
Private events and invoices. If you book an event, we keep the agreement and invoice details needed for bookkeeping. Legal basis: legal obligation under the Danish Bookkeeping Act (GDPR art. 6(1)(c)).
Tickets and gift cards. If you buy tickets or gift cards directly on our website, we use your name, contact details and order details to deliver your purchase, answer questions and keep our accounts. Payments are handled by a secure payment provider – we never see your full card number. If you buy through an external ticket provider, that provider also processes your data under its own privacy policy. Legal basis: to fulfil your purchase and our bookkeeping obligations (GDPR art. 6(1)(b) and 6(1)(c)).
Website statistics. If you accept statistics cookies, we use Google Analytics and Squarespace Analytics to see how the website is used – which pages are visited, roughly where visitors come from and which device they use. We use this to make the site better. Legal basis: your consent (GDPR art. 6(1)(a)). You can withdraw it at any time – see our Cookie Policy.
Technical data. When you visit the site, our hosting provider processes technical data such as your IP address and browser type to deliver the page and keep it secure. Legal basis: our legitimate interest in running a safe website (GDPR art. 6(1)(f)).
We don't sell your data, and we don't use it for automated decisions or profiling.
Who we share it with
We only share data with partners who help us run the restaurant and the website, and only what they need:
Squarespace (website hosting, forms and statistics) · Google (Google Analytics, Google Tag Manager and Google Maps) · Bordibyen (table booking) · Weglot (translation of the Danish website) · One.com (email) · our accountant (bookkeeping).
Some of these partners, such as Squarespace and Google, may process data outside the EU – mainly in the USA. When that happens, the transfer is protected by the EU–US Data Privacy Framework or the EU's standard contractual clauses.
How long we keep it
Booking details: up to 12 months after your visit. Allergy information: deleted after your visit. Emails and enquiries: up to 12 months after our last contact, unless they lead to an agreement. Invoices and accounting records: 5 years from the end of the financial year, as required by law. Statistics: Google Analytics data is deleted automatically 14 months after your last visit.
Your rights
You have the right to see the data we hold about you, to have it corrected or deleted, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time. Just write to info@oranjenyhavn.dk – we'll reply within a month.
If you're not happy with how we handle your data, you can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, www.datatilsynet.dk.
Cookies
Read about the cookies we use, and how to change your choice, in our Cookie Policy.
Changes
If we change how we handle your data, we'll update this page and the date at the top.
