Privacy Notice & Cookie Policy (GDPR Compliant)

Data Controller

MS-Hermes ApS - Vesterbrogade 9, st. th. - 8000 Aarhus C – Denmark - CVR: 39904330

Email: info@pastadiem.dk

MS-Hermes ApS is responsible for personal data processing through the Pastadiem platform and the website www.pastadiemshop.com.

1. Personal Data We Collect

  • First and last name
  • Email address
  • Phone number
  • IP address and device technical data
  • Location data (if enabled)
  • Order history
  • Account or purchase information

We only collect data necessary to deliver our services.

2. Purpose of Processing

  • Identify users
  • Manage orders, deliveries and customer support
  • Communicate service-related updates
  • Improve user experience
  • Generate anonymous statistics
  • Provide personalised advertising (with consent)

3. Legal Basis

Processing is based on:

  • Consent (marketing cookies, newsletters)
  • Contract (orders, account, fulfilment)
  • Legitimate interest (security, fraud prevention, analytics)

4. Data Retention

Data is retained only as long as required for the purposes or legal obligations. After expiry, data is securely deleted.

5. Data Sharing

Data may be shared with:

  • Technical providers
  • Hosting partners
  • Payment processors (Stripe + authorised partners like Sator1)
  • Marketing agencies (PK Medier)
  • Analytics services (Google Analytics)

Data is never sold. If transferred outside the EU, GDPR safeguards apply.

6. Data Security

MS-Hermes ApS implements technical and organisational measures to prevent:

  • Unauthorised access
  • Data loss
  • Illegal processing
  • Improper disclosure

7. Cookie Policy

We use cookies for:

a. Strictly necessary cookies Enable login, checkout, secure sessions.

b. Analytics cookies Anonymous statistics (Google Analytics).

c. Marketing cookies Personalised content and advertising (only with consent).

Third-party cookies May be installed by:

  • Google
  • Meta
  • TikTok
  • Stripe

Managing cookies

Users may manage cookie preferences via browser settings or the consent banner. More information: http://minecookies.org/cookiehandtering

8. Your Rights (GDPR)

You have the right to:

  • Access your data
  • Request correction
  • Request deletion
  • Restrict processing
  • Object based on legitimate interest
  • Receive data in portable format
  • Withdraw consent anytime

Requests: hello@pastadiem.dk - Complaints: www.datatilsynet.dk

9. Publisher

The Pastadiem website and platform are operated by:

MS-Hermes ApS - Vesterbrogade 9, st. th. - 8000 Aarhus C – Denmark


Last updated: 10 december 2025