Privacy Policy for KANI Bakery ApS

Last updated: January 1, 2026

1. Controller

KANI Bakery ApS
Vesterbrogade 196, st. tv.
1800 Frederiksberg
CVR: 46017285
Email: [email protected]

2. What data is processed

Website visits (technical data)

When you visit this website, technical data is processed to deliver and secure the site. This can include IP address, device and browser information, timestamps, and requested pages.

Contact by email

If you email us, we process the personal data you include in your message (for example name, email address, and the content of your enquiry).

This notice covers the information a controller must provide when collecting data from users. GDPR

3. Purposes and legal basis

Website delivery and security

Purpose: operate the website, maintain security, prevent abuse, and troubleshoot.
Legal basis: legitimate interests.

Responding to enquiries

Purpose: handle and respond to messages you send us.
Legal basis: legitimate interests, and where relevant, steps prior to entering a contract.

4. Recipients and service providers

Cloudflare (hosting/CDN/security) processes technical data on our behalf to provide and protect the website. cloudflare.com

5. International transfers

Some service providers may process data outside the EU/EEA. Where applicable, transfers rely on an approved transfer mechanism (commonly EU Standard Contractual Clauses) and relevant safeguards.

6. Retention

Website security and access logs: 30 days.
Emails and related correspondence: 12 months, unless a longer period is needed to handle the enquiry or document a matter.

7. Links to third party sites

This website contains links to third party platforms (Instagram, TikTok, Facebook). If you follow those links, the third party is responsible for its own processing under its own privacy policy. We do not embed or load third party content unless you have given consent via the cookie banner.

8. Your rights and complaints

You have GDPR rights, including access, rectification, erasure, restriction, portability, and objection. GDPR

Complaints can be submitted to Datatilsynet (Danish Data Protection Agency). datatilsynet.dk