Privacy and cookies
This page explains how we handle information when you visit the Proviant Brewing website, contact us or subscribe to our newsletter.
Last reviewed:
Data controller and contact
The following is responsible for processing information on this website. You can contact us about your information and your rights.
Thomas Karmisholt Samuelsen, Proviant Brewing ApSWilly Brandts Vej 13, 2. th, 2450 København SV
Company registration number (CVR): 46357795
proviant@proviantbrewing.dk
When you contact us
We receive your name, email, message and optional subject. We also store language, time, your consent and information about our handling of the enquiry. The message is stored in the website inbox and may be included in an email notification and subsequent correspondence.
We use this information to read and answer your enquiry and follow up on its subject. Please do not send national identification numbers, health information or other sensitive information through the form.
The form relies on your consent to this processing under GDPR Article 6(1)(a). You can withdraw consent by contacting us.
Contacting us is optional. Name, email, message and consent are required to use the form. Consent to an enquiry does not subscribe you to the newsletter.
Optional statistics
If you choose Allow statistics, we process usage information to understand which content is read and improve the website. This is based on your consent under GDPR Article 6(1)(a). The website and forms also work if you reject statistics.
If you accept, we measure page views, sections, links, scrolling, time on the page and completed forms. We use a temporary browser-tab identifier and store a digest of it with the events. We also record language, device-size group, selected traffic sources and approximate country when available. Form contents are not included in statistics.
Statistics use a coded browser-tab identifier. Statistics records do not contain names, emails, message text or raw IP addresses. We measure known public content pages; privacy, statistics preferences and unsubscribe or confirmation links are excluded. These are our own statistics and are not used for advertising.
Choose Reject statistics to withdraw permission and stop new statistics. Withdrawal clears this tab's statistics identifier but does not delete previously collected events.
Change statistics preferencesOperations, security and editorial content
When you use the website, our server and operations providers process technical information such as IP address, time and request to deliver the site and prevent abuse. Logs may contain this information. Request limits for the statistics endpoint use coded keys derived from IP address and browser-tab identifier, with counters in 10-minute windows. Expired counters are cleared hourly.
These necessary operations and protections rely on our legitimate interest in a working, secure website under GDPR Article 6(1)(f). Admin login also stores the account, IP address, browser information and expiry time to protect the administration area.
The journal and events may contain people's names and images. Contact us if you have questions about content relating to you or would like it corrected or removed; we assess each request individually.
Providers and recipients
Render Services, Inc. operates the website, databases, image storage and operational logs. Our web service, databases and image disk are in Frankfurt, Germany. Nordicway ApS provides incoming domain email and SMTP for ordinary system emails from servers in Germany. Mail to our contact address is also forwarded to the owner's Proton Mail at Proton AG, which reports mail servers in Switzerland, Germany and Norway. Encrypted copies of the website databases and images are stored locally on the owner's Mac. There is no separate external analytics or monitoring service. Newsletter subscriptions are stored, but campaign sending is currently disabled; no separate campaign provider has been selected.
Processing outside the EU/EEA
Render is a US provider. Even with our servers in Frankfurt, information may be processed or accessed in the US and by Render's subprocessors. Render's data processing addendum describes the EU-US Data Privacy Framework as a transfer basis and the European Commission's standard contractual clauses as an alternative where that framework does not apply. Nordicway's agreement requires the customer's prior written approval for transfers outside the EU/EEA. Proton Mail may process email in Switzerland, which has a European Commission adequacy decision. Contact us for information about the relevant agreements and a copy of the transfer safeguards.
Social media links lead to external services. If you follow a link, that service processes information under its own privacy policy.
Retention and deletion
Website statistics records older than 90 days are deleted daily. This also applies to statistics collected before consent is withdrawn. Rejection stops new collection but does not itself delete previous records. The 90-day period applies to statistics records; other information and backups follow the criteria below.
When you contact us
The owner reviews enquiries and related emails monthly. Closed enquiries are deleted within 12 months of closure unless there is a specific documented reason to retain them longer, such as an ongoing agreement or dispute. In that case, only necessary information is kept and the need is reassessed during the monthly review. Deletion covers the website message, internal notes, notification copies and correspondence at Nordicway and Proton Mail.
Newsletter and resubscription
Active subscriptions are kept while the signup remains valid and we still intend to send the updates you requested. The owner reviews this at least annually, including while sending is paused. After an opt-out, only necessary consent and opt-out evidence is retained to respect your choice and handle potential complaints; that need is reviewed annually. Delivery history is reviewed monthly and deleted 12 months after a campaign ends unless a specific complaint requires longer retention. Used or expired resubscription requests older than 30 days are deleted during the monthly review. The link's 24-hour expiry does not itself delete the request.
Operations, security and editorial content
Render operational logs are available for 14 days on our current Pro plan. Render provides a seven-day database recovery window and daily image-disk snapshots retained for seven days. Separately saved evidence of a specific security incident is kept only while investigation and documentation are necessary. The owner reviews admin access, expired sessions and completed or failed job data monthly; information with no continuing operational, security or evidential need is deleted after approval. Local encrypted backups are reviewed monthly. Copies older than 30 days are deleted after verification and approval when at least two newer verified recovery sets exist. Backups are used only for recovery. Approved deletions and opt-outs must be reapplied before normal operations and the mail queue restart after a restore. The mail providers' own backups follow their agreements: Proton Mail reports up to 30 days; Nordicway's standard agreement permits retention for up to five years after the customer relationship ends unless the customer gives another deletion instruction.
Deletion of other information is reviewed and approved manually. An expired confirmation, an opt-out or an expired admin login does not itself delete the associated records. When handling a deletion request, we consider information in the website, email and backups together.
Your rights
Depending on the processing and the conditions in the GDPR, you have the right to:
- Access your information and receive a copy.
- Have inaccurate information corrected.
- Erasure or restriction of processing where the conditions are met.
- Object to processing based on legitimate interests, including direct marketing.
- Receive information you provided in a usable format where data portability rules apply.
You can withdraw consent at any time. This does not affect the lawfulness of processing already carried out with your consent. Use statistics preferences for statistics, the unsubscribe link for newsletters, or contact us.
Send your request to the contact under Data controller and contact.
You can complain about our processing to the Danish Data Protection Agency, Datatilsynet.
The website does not make automated decisions about you with legal or similarly significant effects.