Privacy policy

Dansk Negroni Forening, CVR 46643720, C/O Lasse Langstrup Hägerstrand, Ahlmannsgade 4, 4. tv, 2200 København N, is the data controller for Negronikortet. The association has not appointed a data protection officer (DPO); enquiries about personal data are handled at the address below.

You can see venues and ratings without an account. Necessary technical information may be processed to deliver the app, detect faults and protect it from abuse. When a venue page is opened, an aggregate daily counter is incremented, which also records whether the venue was featured. The counter stores no user, device, cookie, session or location identifier and is used only for aggregate traffic measurement, never to follow individuals, profile them or target marketing. For the association’s own statistics, submitted, approved and rejected community ratings are also counted anonymously with a time and a venue, without an account or moderator identifier.

Favourites are stored locally on your device and are not sent to the association. They can be deleted by removing the favourites or clearing the app’s or the browser’s local data.

Negronikortet uses the browser’s local storage to remember your favourites and, when you sign in, for the necessary Supabase session details. Favourites are kept until you remove them or clear local data. Sign-in details are removed when you sign out, when the session is no longer valid, or when you clear the browser’s data. Google may use cookies and similar technologies when Maps or Places load. On the web a service worker may store the app’s static files locally for performance and for an offline page; that cache contains no personal data. We do not ourselves use these technologies for targeted marketing, profiling or individual visitor statistics. Cloudflare Turnstile may use technically necessary technologies on account forms, both on the website and in the iPhone and Android apps, where the security check is shown through a page from negronikortet.dk. If we later introduce non-essential technologies, they will load only after a valid choice where one is required.

You must be 18 or over and have an e-mail-confirmed account to submit a rating to the community. We process your e-mail, a technical user ID, an automatically derived display name (which is not published), e-mail confirmation, the accepted version of the terms, your 18+ confirmation, the necessary sign-in and security details, and the private link between the account and your ratings. For a rating we process the venue, the scores, any comment, the date of visit and the price, 1–3 photos, the time of submission and the moderation status. The purpose is to administer the account, document acceptance of the terms, prevent abuse, and moderate and possibly publish Negroni ratings.

On approval the association selects at most one of the submitted photos. Approved scores, comments, dates of visit, prices, the selected photo and the date of the rating are visible to everyone. The contribution is shown as “Community rating” without a name or contact details. At most the five most recent approved contributions per venue are kept and shown. Comments must not contain personal data, and photos must not show faces, recognisable people or private information.

People aged 18 or over can create an account as a Negroni enthusiast. The account’s role (enthusiast, member or administrator) is the only access control, and extended roles are granted separately by the association. For member and administrator accounts we also process the account role along with moderation decisions and their time. The password is handled by the authentication provider and cannot be read by the association in plain text.

You can delete your own ratings under My ratings and delete the account permanently from Profile. Deleting the account removes your Auth account, e-mail, private profile, community ratings and photos. Any contributions to the association’s shared official rating may be kept without your account as their public author. The deletion cannot be undone.

The app uses Google Maps and Google Places. In the native apps, venue searches are sent through the association’s own server, which forwards them to Google; Google does not receive your IP address for those lookups, and the server’s technical sender records (account ID or IP) are deleted within two days. Negronikortet stores only the venue provider, any external venue ID, the name, the formatted address and the coordinates of venues. If you actively choose the map’s location control or sorting by nearest venue, the app asks for access to your location while the app is in use. The location is used in the app’s memory to centre the map and calculate distances. It is not stored locally, in Supabase or on a profile, and it disappears when the session ends. You can decline and still use the rest of the app. When the Google map is shown around your location, Google receives requests for map content for the displayed area along with technical information such as your IP address. Google’s own processing is described at policies.google.com/technologies/partner-sites. If you choose “Directions”, the venue’s name and coordinates open in Apple Maps (iPhone and iPad) or Google Maps (other devices) in a separate app or on the provider’s website under its own terms; your own location is not sent by Negronikortet.

We use Supabase for the database, sign-in and image storage, Expo/650 Industries for EAS Hosting and any native build and distribution services, Zoho for account and security e-mails, Cloudflare Turnstile for bot protection, and Google for Maps and Places. The primary Supabase database and Storage are located in Ireland. Some suppliers may process technical data outside the EU/EEA; transfers take place on a valid basis such as an adequacy decision or the EU’s standard contractual clauses. We have no separate analytics, advertising-profile or error-tracking supplier. Moderators can see private contributions and photos, but not the contributor’s e-mail or account ID.

Rejected ratings and unselected photos are deleted during moderation; failed photo deletions are placed in a cleanup queue. Abandoned uploads are made ready for cleanup after 24 hours, and technical rate-limiting records are deleted within two days. At most five approved contributions are kept per venue. Technical operations, security and abuse records are normally kept for at most 30 days, and aggregated daily counts for at most 24 months. Deleted database records may remain in encrypted backups for at most 30 days; image files are not part of Supabase’s database backups. Manual deletion requests are normally completed within 30 days of the necessary identity check.

Depending on the circumstances you can ask for access, rectification, erasure, restriction and data portability, and object to processing based on legitimate interests. These rights are not absolute. Contact info@dansknegroniforening.dk; we aim to acknowledge receipt within seven days and normally reply within one month of receiving your request.

You can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, telephone +45 33 19 32 00, e-mail dt@datatilsynet.dk. We encourage you to contact us first so we can look into the matter.

We use access control, role-based database policies, encrypted transport and restricted administrator access. The policy is updated when the app’s features, suppliers or processing change. Significant changes are communicated clearly.