Privatlivspolitik — Roserne Tarot
Sidst opdateret / Last updated: 3 April 2026
Dataansvarlig (Data controller)
Roserne Sonne
E-mail: rosernetarot@gmail.com
Hvilke oplysninger indsamler vi? (What data do we collect?)
Booking
When you book a session through the booking page, we collect:
- Name
- Email address
- Phone number (optional)
- Notes / message (optional)
- Date and time of the booking
Guestbook
When you post a message in the guestbook, we collect:
- Name (as entered by you)
- Message text
Your name and message are publicly visible on the guestbook page. Messages may be moderated or removed by the site administrator.
Technical data for abuse prevention
When you submit a guestbook post, a one-way hash of your connection data (IP address) is temporarily stored to enforce rate limiting. The raw IP address is not stored. These hashed identifiers expire automatically after 5 minutes.
Hvorfor indsamler vi dine data? (Purpose of processing)
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Booking information | To process and confirm your booking, and to send you a confirmation email | Art. 6(1)(b) — necessary for performance of a contract (delivering the requested service) |
| Guestbook name and message | To display your message on the public guestbook | Art. 6(1)(a) — your consent, given by voluntarily submitting the form |
| Hashed IP for rate limiting | To prevent abuse of the guestbook | Art. 6(1)(f) — legitimate interest in protecting the service |
Hvor længe opbevarer vi dine data? (Data retention)
- Booking data is retained for up to 36 months after the appointment date. After that period, personal identifiers may be removed or anonymised while a non-identifying record of the booking may be kept for operational purposes.
- Guestbook messages are stored until deleted by the site administrator or by request from the poster.
- Rate-limiting hashes expire automatically after 5 minutes.
Hvem deler vi dine data med? (Sub-processors)
We use the following third-party services to operate the website. All process data within the EU or under adequate safeguards:
| Service | Purpose | Data region | Privacy policy |
|---|---|---|---|
| Upstash (Upstash, Inc.) | Database — stores booking and guestbook data | EU (Frankfurt) | upstash.com/trust/privacy |
| Resend (Resend, Inc.) | Email delivery — sends booking confirmation emails | EU | resend.com/legal/privacy-policy |
| Vercel (Vercel, Inc.) | Hosting and compute — form submissions are processed through Vercel's infrastructure; no booking or guestbook content is stored by Vercel as your database | EU (via EU–US Data Privacy Framework) | vercel.com/legal/privacy-policy |
No data is sold to or shared with any other third parties.
Dine rettigheder (Your rights)
Under GDPR, you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — request correction of inaccurate data
- Erasure— request deletion of your data ("right to be forgotten")
- Restriction — request that we limit processing of your data
- Portability — receive your data in a structured, machine-readable format
- Object — object to processing based on legitimate interest
- Withdraw consent — for guestbook posts, you may request removal at any time
To exercise any of these rights, contact us at: rosernetarot@gmail.com
We will respond within 30 days.
Klage (Complaints)
If you believe your data is being processed in violation of GDPR, you have the right to file a complaint with the Danish Data Protection Agency:
Datatilsynet
Carl Jacobsens Vej 35
2500 Valby
Telefon: 33 19 32 00
E-mail: dt@datatilsynet.dk
Web: datatilsynet.dk
Cookies
This website does not use tracking cookies or analytics cookies that process personal data. A functional session cookie is used for administrator authentication only and does not apply to visitors.
Attributions (Kreditering)
Zodiac sign icons on this website are from Tabler Icons (MIT License).
Ikoner for stjernetegn på dette website stammer fra Tabler Icons (MIT-licens).
The blog page card carousel is built with Swiper (MIT License).
Blogkort-karrusellen på blogsiden er bygget med Swiper (MIT-licens).
Ændringer (Changes to this policy)
This privacy policy may be updated periodically. The date at the top of this page indicates the most recent revision.