This Privacy Policy explains how da capo vintage ApS collects, uses, stores and shares your personal data when you visit our website, place an order, contact us or subscribe to marketing.

Data controller

da capo vintage ApS is responsible for the processing of your personal data.

da capo vintage ApS
CVR: 45565939
Address: Elmegade 17 kld. th, 2200 København N, Denmark
Email: hello@dacapo-vintage.com
Telephone: +45 31 10 55 50

Personal data we collect

Depending on how you interact with us, we may collect:

• Your name, billing address and delivery address

• Your email address and telephone number

• Order details, purchase history and return information

• Payment status and transaction information

• Messages and other correspondence with us

• IP address, device information and website activity

• Newsletter preferences and records of your consent

• Information necessary to prevent fraud, protect our website and resolve disputes

We do not receive or store your complete payment-card information. Payment details are processed securely by our payment provider, Stripe.

Orders and customer service

We process your contact, order and transaction information to:

• Process and deliver your order

• Send order and delivery updates

• Handle payments, returns, refunds and complaints

• Respond to questions and provide customer service

The legal basis is that processing is necessary to fulfil our agreement with you or take steps at your request before entering into an agreement, under Article 6(1)(b) of the GDPR.

Accounting and legal obligations

We process and retain relevant order and transaction information to comply with accounting, tax and other legal obligations.

The legal basis is compliance with a legal obligation under Article 6(1)(c) of the GDPR.

Operation and security of the website

We may process technical information such as your IP address, device information and activity logs to operate the website, maintain security, prevent misuse and investigate technical issues or suspected fraud.

The legal basis is our legitimate interest in operating a secure and functional webshop under Article 6(1)(f) of the GDPR.

Newsletter and direct marketing

If you subscribe to our newsletter, we process your name, email address and marketing preferences to send you news, product updates and offers.

The legal basis is your consent under Article 6(1)(a) of the GDPR. You may withdraw your consent at any time by using the unsubscribe link in an email or contacting us at [email address]. Withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal.

We do not use information from an order to send electronic marketing unless you have consented or another lawful exception applies.

Analytics and marketing cookies

If you consent through our cookie banner, we may use analytics and marketing technologies to understand how the website is used, improve our content and measure or personalise advertising.

The legal basis for processing personal data through non-essential cookies is your consent under Article 6(1)(a) of the GDPR. You may change or withdraw your cookie consent at any time.

More information about the cookies used on the website, including their providers, purposes and duration, is available in our Cookie Policy.

Who we share data with

We only share personal data when necessary and with relevant service providers, including:

• Our webshop and website provider, Squarespace

• Our payment provider, Stripe

• Delivery companies, including dao, GLS, PostNord, UPS, and Bring

• Our accounting system and professional advisers

• Our hosting, IT and security providers

• Analytics and advertising providers, if you have consented

• Public authorities when required by law

Service providers processing personal data on our behalf may only use it according to our instructions and applicable data-protection law.

Delivery companies and payment providers may act as independent data controllers for parts of their processing. Their own privacy policies will then apply.

We do not sell your personal data.

Transfers outside the EU/EEA

Some of our service providers may process personal data outside the EU/EEA.

Where this occurs, we ensure that a valid transfer mechanism is in place, such as an adequacy decision from the European Commission or the European Commission’s Standard Contractual Clauses, together with any necessary supplementary safeguards.

You may contact us for further information about the safeguards used for relevant international transfers.

How long we retain data

We retain personal data only for as long as necessary for the purposes described in this policy or as required by law.

• Order and accounting documentation is normally retained for five years from the end of the relevant financial year in accordance with Danish accounting rules.

• Customer-service correspondence is retained for as long as necessary to handle the matter and any related legal claims.

• Newsletter information is retained until you withdraw your consent or we otherwise stop sending you marketing. We may retain limited documentation of your consent for as long as necessary to demonstrate compliance.

• Cookie and analytics data is retained for the periods stated in our Cookie Policy.

• Technical and security logs are retained for 2 years, unless longer retention is necessary to investigate misuse or protect legal claims.

Data may be retained for longer if required by law or necessary to establish, exercise or defend a legal claim.

Your rights

Subject to the conditions and exceptions in data-protection law, you may have the right to:

• Request access to the personal data we process about you

• Have inaccurate or incomplete data corrected

• Request deletion of your data

• Request restriction of processing

• Object to processing based on legitimate interests

• Object at any time to direct marketing

• Receive certain data in a structured, commonly used and machine-readable format

• Withdraw consent at any time where processing is based on consent

• Submit a complaint to a data-protection authority

To exercise your rights, contact us at hello@dacapo-vintage.com. We may request additional information if necessary to verify your identity.

Complaints

If you are dissatisfied with how we process your personal data, please contact us first so we can try to resolve the matter.

You may also submit a complaint to:

Datatilsynet
Carl Jacobsens Vej 35
2500 Valby
Denmark
www.datatilsynet.dk

Automated decision-making

We do not use your personal data for automated decision-making that produces legal or similarly significant effects.

Security

We use appropriate technical and organisational measures to protect personal data against accidental or unlawful loss, alteration, disclosure, misuse or unauthorised access.

No method of transmission or storage is completely secure, but we regularly assess the measures used by us and our service providers.

Changes to this policy

We may update this Privacy Policy when our website, services or legal obligations change. The current version will always be available on our website.

Last updated: 27-07-2026