Privacy policy

Last updated 20 October 2026

How we handle personal data when you visit or order from onestopcoffee.eu.

Who is responsible

Kaffeværkstedet ApS, CVR 36906731, Ringstedvej 531, 4632 Bjæverskov, Denmark, is the data controller. Contact: [email protected].

What we collect and why

• Order and contact details (company name, your name, email, delivery and billing address, VAT number) to process and deliver your order and to communicate about it. Legal basis: performance of a contract (GDPR art. 6(1)(b)).
• VAT number verification: your VAT number is checked against the EU VIES system to determine the correct VAT treatment and to document the sale. Legal basis: legal obligation and legitimate interest (art. 6(1)(c) and (f)).
• Accounting records: invoices and order data are kept as required by Danish bookkeeping law, currently five years after the end of the financial year. Legal basis: legal obligation (art. 6(1)(c)).
• Technical data such as IP address and country, used to operate and secure the site and to apply our regional availability. Legal basis: legitimate interest (art. 6(1)(f)).

Who receives data

We share data only with providers that help us run the shop:

• Stripe, for card payments.
• Resend, for transactional emails such as order confirmations.
• Cloudflare, for network delivery and security of the website.
• Carriers and freight forwarders, for delivery.
• Our accounting and business systems.

Some providers may process data outside the EU/EEA. Where they do, transfers rely on an adequacy decision or the EU Standard Contractual Clauses.

Cookies and browser storage

The shop stores your cart identifier in your browser’s local storage so that your cart is kept between visits. We do not use advertising or analytics cookies. Web fonts are loaded from Google Fonts, which means your IP address is transmitted to Google when a page loads.

Your rights

You can ask us for access to, correction or deletion of your data, restriction or objection to processing, and data portability, to the extent GDPR provides for them. Contact us at [email protected]. You may also complain to the Danish Data Protection Agency (Datatilsynet), datatilsynet.dk, or to your local authority.