Privacy policy & cookies
At Tholstrup Restaurants we look after your information the way we look after our guests. Here you can read which personal data we process, why we do it, how long we keep it, and which rights you have.
Data controller
Nyhavns Restauranter ApS (Tholstrup Restaurants)
CVR no. 40608524
Gråbrødretorv 8, 1154 Copenhagen K
Email: info@tholstrup.dk
The policy applies to tholstrup.dk and to our four restaurants: Cap Horn (Nyhavn 21), Nyhavns Færgekro (Nyhavn 5), Zeleste (Store Strandstræde 6) and Huks Fluks (Gråbrødretorv 6–8). If you have questions about how we process your data, or want to exercise your rights, you can always write to info@tholstrup.dk.
When do we process your data?
When you book a table
Table bookings are made through our booking partner EasyTable. Here we process your name, email address, phone number, number of guests, date and time, and any comments you write in the booking yourself, for example the occasion or allergies. The legal basis is Article 6(1)(b) of the General Data Protection Regulation, performance of the contract with you. Booking data is kept for up to 2 years after your visit and then deleted.
When you buy a ticket for an event
Tickets for our events, for example wine tastings, are sold through EasyTable. In addition to the data above, we process your purchase details. Payment is handled by EasyTable’s payment solution. We never see or store your card details. The legal basis is Article 6(1)(b). Data about your purchase is kept for 5 years from the end of the financial year, as required by the Danish Bookkeeping Act.
When you buy a gift card
Gift cards are sold through our gift card partner Lifepeaks. Here your name, email address and purchase details are processed, and the recipient’s name if the gift card is sent directly to the recipient. Payment is handled by Lifepeaks’ payment solution, and we do not store card details. The legal basis is Article 6(1)(b) and (c), the Bookkeeping Act’s requirement to keep records for 5 years from the end of the financial year.
When you send a party or contact enquiry
If you fill in a form on tholstrup.dk, for example a party enquiry or an enquiry as a company, we process the data you provide yourself: name, email, phone number, company name if any, number of people, preferred date and your message. The enquiry is sent to the restaurant or restaurants you choose, or to our sales team. The legal basis is Article 6(1)(b). Enquiries that do not lead to an agreement are deleted no later than 2 years after the last contact.
When you write or call us
If you contact us by email or phone, we process the data you give us in order to reply to you. The legal basis is our legitimate interest in answering enquiries, Article 6(1)(f). Ordinary correspondence is deleted when it is no longer needed, and no later than after 2 years.
When you sign up for the newsletter and loyalty club
If you sign up for Tholstrup’s newsletter or loyalty club, we process your email address, your name and your interests, private or business, in order to send you news, events and offers from Tholstrup and our four restaurants. We use Klaviyo as the platform for sending. The legal basis is your consent under section 10 of the Danish Marketing Practices Act and Article 6(1)(a) of the General Data Protection Regulation. You can unsubscribe at any time via the link at the bottom of our emails or by writing to info@tholstrup.dk. When you unsubscribe, sending stops immediately, and documentation of your consent is kept for up to 2 years after unsubscribing because of the limitation rules.
When you apply for a job with us
If you apply for a position at Tholstrup, we process the data you send us in your application and CV. The legal basis is Article 6(1)(b) and (f). Applications are deleted no later than 6 months after the recruitment is completed, unless you consent to us keeping it longer.
Cookies
tholstrup.dk uses cookies. On your first visit you choose in our cookie banner which cookies you want to accept, and you can always change or withdraw your consent via the Cookie settings link at the bottom of the page.
- Necessary cookies make the site work, for example your cookie choice and security. They do not require consent.
- Preference cookies remember your choices, for example your choice of language between Danish and English. Set only with your consent.
- Statistics cookies help us understand how the site is used, so we can improve it. We use Google Analytics 4. Set only with your consent.
- Marketing cookies are used for advertising and measuring our ads with Meta and Google. Encrypted email address, IP address and advertising IDs may be shared. Set only with your consent.
The legal basis for statistics and marketing cookies is your consent under Article 6(1)(a) and the Danish Cookie Order.
Who do we share data with?
We never pass your data on to third parties for sale. We use the following suppliers, who process data on our behalf:
- EasyTable — table booking and ticket sales
- Lifepeaks — gift cards
- Klaviyo (USA) — newsletter and loyalty club
- Google (USA) — statistics and advertising
- Meta (USA) — advertising on Facebook and Instagram
- Our web agency and hosting provider — operation and maintenance of tholstrup.dk
When data is transferred to suppliers in the USA, it is done on the basis of the EU-U.S. Data Privacy Framework or the European Commission’s standard contractual clauses, which ensure a level of protection equivalent to the EU’s.
Your rights
Under the General Data Protection Regulation you have the right to access the data we process about you, to have incorrect data corrected, to have data deleted, to have processing restricted, to object to processing, to receive your data in a machine-readable format, and to withdraw consent at any time, without affecting the lawfulness of the processing carried out before the consent was withdrawn.
Write to info@tholstrup.dk if you want to exercise your rights. We reply as quickly as possible and no later than within one month.
Complaints
If you are unhappy with how we process your data, we would rather hear it from you first, but you can always complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, via datatilsynet.dk.
Changes to this policy
We update this policy when our processing of personal data changes. The current version is always on this page.
Last updated: 16 September 2026