Privacy policy

3peat ApS, CVR 46268555, Persiensvej 8, 2300 Koebenhavn S, Denmark, is the data controller for 3peat.dk, the 3PEAT webshop at 3peat.dk/shop, and the Standbook service (formerly called Standkassen and Holobog) at standbook.3peat.dk. Questions and requests go to info@3peat.dk.

Account data: your e-mail address, a password hash, and, if you sign in with Google or Discord, the name, e-mail address and profile picture URL those services share with us. We request only the basic profile and e-mail scopes. We never receive your Google or Discord password.

Webshop data: name, delivery address, phone number, the items you order, order references, payment status and shipping labels. Card details are entered on the payment provider’s pages and never reach our servers.

Standbook data: the stand or business name, optional CVR number and address you enter, the purchase and sales vouchers you create, inventory, and the counterparties named on those vouchers. As a user of Standbook you are the data controller for your own counterparties; 3peat ApS processes that data on your behalf under the data processing agreement shown inside the service.

Technical data: server logs with IP address, browser type and time of access, kept for security and debugging.

To create and secure your account, to deliver what you ordered, to send order and account e-mails, to keep the bookkeeping records Danish law requires, and to protect the services against abuse. Our legal bases are performance of a contract, our legal obligations (bogføringsloven, momsloven, hvidvaskloven) and our legitimate interest in running the services safely.

We do not sell personal data and we do not use it for advertising.

We set only the cookies needed to keep you signed in and to remember a “remember me” choice. The stand app under /kasse/app sets its sign-in cookies on 3peat.dk for the same purpose. Stripe’s checkout form runs in an iframe and sets its own cookies for fraud prevention and payment; they are necessary for the purchase. There are no advertising or tracking cookies and no analytics scripts, and because every cookie is necessary for the service you asked for, no cookie banner is shown.

The webshop also keeps your cart and the delivery details you last typed (name, address, phone, e-mail) in your browser’s local storage so you do not have to retype them. That data stays on your device until you place an order, with one exception: when the country is Denmark, what you type in the address field is sent through our server to Dataforsyningen (api.dataforsyningen.dk, the Danish public address register) to suggest matching addresses, and we do not store those fragments.

Sign in with Google and Discord works through Supabase Auth. When you use it, the provider tells us your e-mail address and basic profile, and we create or match an account with that e-mail. You can remove the connection at any time from your Google or Discord account settings.

Processors that host and run the services, all under written data processing terms: Supabase (database and authentication, EU region), Vercel (hosting), Stripe (payments), Shipmondo (shipping labels), Google and Discord (sign-in, only when you choose it). Shipmondo books the parcel with GLS, dao or PostNord depending on the destination and what is available, and the carrier receives your name, address and phone number to deliver it.

Address suggestions in the checkout come from Dataforsyningen, a Danish public authority. It receives the address fragments you type and nothing else. Authorities receive data only where the law requires it, for example SKAT for bookkeeping records.

Order and voucher records are kept for five years after the end of the financial year, as bogføringsloven requires. Account data is kept while your account exists and is deleted within 30 days after you close it, except records we must keep by law. Server logs are kept for at most 90 days.

You can ask for access to, correction of, deletion of, or a copy of your personal data, ask us to restrict processing, object to processing, and withdraw consent where processing is based on consent. Write to info@3peat.dk. You can complain to Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, datatilsynet.dk.

We update this page when the services change. The date at the top tells you when. Material changes are announced inside the service or by e-mail.