This privacy policy describes how GRØD ApS processes personal data when you visit www.groed.com, buy our cookbook, sign up for our newsletter or contact us through one of the forms on the site.

1. Data controller

GRØD ApS is the data controller for the personal data processed through www.groed.com.

GRØD ApS
CVR (company no.): 33862709
Lykkesholms Allé 8B, st.
1902 Frederiksberg C, Denmark

If you have questions about how we process your personal data, email info@groed.com.

2. When you visit the website

We do not use cookies, and we do not track you. We do not measure traffic with Google Analytics or similar tools, and there are no pixels from social media or advertising platforms on the site. That is why we do not ask for cookie consent.

To show you the site and its images, our hosting provider (Heroku) and our image provider (Sanity) receive the technical information your browser always sends, such as your IP address and browser type. We do not use this information to identify you. The legal basis is our legitimate interest in running a secure, working website (Article 6(1)(f) GDPR).

You choose the language on the site yourself. We do not store your choice.

3. When you buy our cookbook

When you buy through www.groed.com, we process this information:

• Name
• Delivery address
• Email address
• Phone number
• What you bought and how it should be delivered

Payment is handled by Stripe. We never see or store your card number or other payment details. The amount is reserved when you order and only charged when the parcel is shipped.

We use the information to complete and ship your order, to send you a receipt and to contact you if there are questions about the order. Your name, address, email and phone number are passed on to the carrier, so you can be notified about the delivery.

The legal basis is that the processing is necessary to fulfil the purchase contract with you (Article 6(1)(b)), and that the Danish Bookkeeping Act requires us to keep accounting records (Article 6(1)(c)).

4. Newsletter

When you sign up for our newsletter, we process your email address and the language you have chosen on the site, so we can send the newsletter in the right language. The newsletter is sent through Klaviyo.

We only send newsletters if you have given your consent (Article 6(1)(a) and section 10 of the Danish Marketing Practices Act). You can unsubscribe at any time through the link at the bottom of every newsletter. We then remove your email from the list.

5. When you contact us through a form

Complaints and concerns: when you use the form for complaints and concerns, we process what you write, and your name and contact details if you choose to give them. You can also stay anonymous. The message is sent to us by email (Mailgun). We use the information to look into and answer your message. The legal basis is the consent you give in the form (Article 6(1)(a)).

Companies, events and catering: when you send an enquiry, we process your contact details and your message to answer it and send you an offer (Article 6(1)(b) and (f)). If you have agreed to receive marketing, we also use your email for that (Article 6(1)(a)).

6. Who we share information with

We never sell your personal data. We use these providers, who process information on our behalf (data processors) or are themselves responsible for the delivery:

• Stripe Payments Europe, Ltd. (Ireland): payments. Stripe transfers information to Stripe, LLC in the USA.
• Shipmondo (Denmark): shipping and shipping labels.
• GLS and PostNord: delivery of the parcel.
• Mailgun (Sinch): sending order notifications and form messages to our inbox. The servers are in the USA.
• Klaviyo, Inc. (USA): newsletter.
• Sanity: content and images on the website. Data is stored in Belgium and the USA.
• Heroku (Salesforce, Inc., USA): website hosting.
• Microsoft: our email.

When information is transferred to countries outside the EU/EEA, such as the USA, this is based on the EU-U.S. Data Privacy Framework or the European Commission's standard contractual clauses.

7. How long we keep the information

• Orders and accounting records: 5 years from the end of the financial year the purchase belongs to, as the Danish Bookkeeping Act requires.
• Emails about orders and enquiries: as long as they are needed to handle the order or enquiry, including any complaints.
• Newsletter: until you unsubscribe.

8. Your rights

You have the right:

• to access the information we hold about you
• to have incorrect information corrected
• to have information erased
• to have the processing restricted
• to receive your information (data portability)
• to object to the processing
• to withdraw your consent. This does not affect the processing before you withdrew it.

Email info@groed.com if you want to use your rights. You can also complain to the Danish Data Protection Agency (Datatilsynet, www.datatilsynet.dk).

9. Changes

We update this policy when we change how we process personal data. The latest version is always here. Last updated: November 2026.