Privacy policy
How Via Arezzo ApS handles personal data on the ordering website.
Who is responsible
Via Arezzo ApS, CVR 46635299, Trekronergade 105, 2500 Valby, Denmark, is the data controller. Contact us about anything in this policy at info@viaarezzo.dk.
What we collect
- Login details: your restaurant's username and password. Passwords are stored encrypted, and we can't see them.
- Orders: the name of the person ordering, the restaurant, the products and quantities, the desired delivery date, any comments, and when the order was sent.
- Technical data: our hosting and database providers keep short-lived server logs with IP addresses and browser type, to run the service and keep it secure.
We don't use tracking cookies, analytics or advertising tools.
What is stored in your browser
The site stores your login session, the name you order under, your restaurant and your recent orders in your browser's local storage, so you stay logged in and don't have to type them every time. These are needed for the site to work, so we don't ask for consent. You can delete them by logging out or clearing your browser data.
Why we use the data
- To receive, process, deliver and invoice your orders. The legal basis is our agreement with your restaurant and our legitimate interest in working with our business customers' staff (GDPR art. 6(1)(b) and (f)).
- To keep orders and invoices as the Danish Bookkeeping Act requires (GDPR art. 6(1)(c)).
- To keep the website running and secure (GDPR art. 6(1)(f)).
Who we share it with
- Suppliers and transport: the Italian suppliers and the transport company receive the order details they need, such as products, quantities and the delivery address.
- Accounting: invoices are made in our accounting system (Visma e-conomic).
- Service providers that process data for us: Supabase (database and logins, stored in the EU in Ireland), Cloudflare (website hosting) and Resend (order emails). They only act on our instructions, under data processing agreements.
Cloudflare and Resend are US companies. Transfers to them are covered by the EU–US Data Privacy Framework and the EU Commission's standard contractual clauses.
How long we keep it
- Orders and invoices: 5 years from the end of the financial year they belong to, as the Bookkeeping Act requires.
- Logins: while your restaurant uses the ordering website. We delete a login when the restaurant asks us to or stops ordering.
- Server logs: kept briefly by our providers, normally no more than a few weeks.
Your rights
You have the right to see the data we hold about you, to have it corrected or deleted, to restrict or object to our use of it, and to receive it in a portable format. Write to info@viaarezzo.dk. Some data, such as orders on invoices, has to be kept by law even if you ask us to delete it.
You can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, datatilsynet.dk.
Last updated 20 October 2026