Privacy Policy

This privacy policy is effective from February 2026 and replaces all previous versions of Messy Weekend’s privacy policy.

We are the data controller – how to contact us

We are the data controller for the processing of personal data relating to our customers and partners. You can find our contact details below:

Messy Weekend ApS
Magstræde 10A, 2nd floor
1204 Copenhagen K
Denmark
CVR no. 39202247
hello@messyweekend.com

What is the purpose and legal basis for processing your personal data?

We process your personal data for the following purposes and on the following legal bases:

When you visit our website, we process information about you in order to make our website usable by enabling basic functions such as page navigation (technical cookies), to optimize design, usability, and effectiveness through the collection of visitor statistics (statistics cookies), to personalize content so it matches your interests (personalization cookies), and to display targeted advertisements to you when you browse the internet (marketing cookies).

The legal basis for processing your personal data in connection with statistics cookies, personalization cookies, and marketing cookies is your consent, cf. Article 6(1)(a) of the General Data Protection Regulation (GDPR).

The legal basis for processing your personal data in connection with technical cookies is our legitimate interest in enabling basic website functionality, cf. Article 6(1)(f) of the GDPR.

In connection with processing data for these purposes, we use cookies and similar tracking technologies to understand your behavior as a user. You can read more about our use of cookies and similar technologies in our cookie policy.

We also process your personal data for the delivery of the goods you purchase and the services you use, and to fulfill our legal obligations in this regard, including storing personal data.

The legal basis for this processing is our contract with you regarding the purchase of goods or provision of services, cf. Article 6(1)(b) of the GDPR, as well as our legal obligations, including bookkeeping requirements under applicable law, cf. Article 6(1)(c) of the GDPR.

We process your personal data to communicate with you when you contact us.

The legal basis for this processing is our legitimate interests in (i) responding to your inquiries and maintaining related records, and (ii) conducting competitions, cf. Article 6(1)(f) of the GDPR.

We process personal data for marketing on social media, including responding to your inquiries.

The legal basis for this processing is our legitimate interest in marketing Messy Weekend via social media platforms that our customers already use, cf. Article 6(1)(f) of the GDPR.

In this context, we have considered that processing your data for marketing purposes will not result in discrimination or exclusion. Furthermore, it is unlikely to cause negative feelings or disproportionate negative consequences, as the marketing involves limited personal data (see section 3.4 below). We have also considered that the data originates from an existing or previous customer relationship or from visits to our website, which supports the legitimacy of the processing. Based on a balancing of these factors against your interests, we have concluded that we have a sufficiently legitimate interest to process your data under Article 6(1)(f).

We also process personal data to establish, exercise, or defend legal claims, including preventing fraud and documenting events on our platforms and in our business.

The legal basis for this processing is our legitimate interest in protecting our legal rights, cf. Article 6(1)(f) of the GDPR.

What personal data do we process about you?

For the purposes described in sections 2.1, 2.2, and 2.3 above, and depending on your use of the website, we typically process the following personal data:

  • Name and address

  • Email address and phone number

  • Order information and purchase history

  • Information you provide when communicating with us

  • Information about your behavior on our platforms, including which pages you visit, which products you click on or add to your cart, and how you interact with our communications

  • Information collected via cookies, to the extent that you have consented to our use of cookies

For the purpose described in section 2.4 above, we process the following data:

  • Information you provide when communicating with us, including your reactions, shares, and comments on our social media posts

For the purpose described in section 2.5 above, we may process the data mentioned in sections 3.1 and 3.2.

Who do we share your personal data with?

We share your data with external partners who process data on our behalf. The data we collect about you is only shared to the extent necessary to fulfill agreements with these partners.

This includes:

  • Providers assisting with the technical operation of our website, including hosting services and functionality solutions

  • Providers assisting with marketing activities and customer communication

  • Providers of analytics tools that help us optimize our business and your customer experience

  • Partners assisting with customer service operations, including delivery of webshop orders

These partners act as data processors and process personal data in accordance with our instructions. They may not use the data for their own purposes and must treat it confidentially. We have entered into written data processing agreements with all processors.

Some partners act as independent data controllers, meaning they process your data independently in order to provide their services.

In connection with advertising collaborations, for example with social media platforms, Messy Weekend may share certain data about customers and visitors if we believe they belong to relevant target groups (e.g. based on age, interests, or location).

You can always contact us if you have questions about this. You can also read more in the privacy policies of the respective platforms:

We may also share personal data with external advisors such as auditors and lawyers, and with public authorities where required by law.

When do we transfer your data outside the EU/EEA?

We may transfer your personal data to recipients outside the EU/EEA, including:

  • Marketing and communication service providers

  • Analytics providers

  • Technical service providers, including hosting and functionality providers

When transferring data outside the EU/EEA, we ensure a valid transfer mechanism. If the recipient country is not recognized as a “safe third country,” we use standard contractual clauses approved by the European Commission or relevant authorities to ensure adequate protection.

You can request a copy of these safeguards or a list of our processors by contacting us (see section 1).

Where does your data come from?

We process personal data that you provide to us, as well as data collected automatically, including through your digital behavior (e.g. tracking technologies).

How long do we retain your personal data?

We retain your data only as long as necessary.

Information about purchases and related communication is generally deleted two years after purchase, in line with applicable complaint periods. Data may be retained longer if required by law, such as bookkeeping obligations (current year + five years), or if we have a legitimate need, for example in connection with legal claims.

Information provided through communication that is not related to purchases is stored as long as relevant, depending on the nature of the inquiry.

Data collected for analysis and statistics is deleted after two years.

Information you share on social media remains on those platforms unless you delete it yourself.

For information collected via cookies, please refer to our cookie policy.

How do we inform you about changes?

You can always stay updated on changes via www.messyweekend.dk. We encourage you to review our policy regularly.


Your rights

Under the GDPR, you have the following rights:

  • The right of access to your data and additional information

  • The right to rectification

  • The right, in certain cases, to restriction of processing

  • The right to data portability

  • The right, in certain cases, to erasure before our standard deletion deadlines

  • The right to object to processing

You also have the right to withdraw your consent at any time by contacting us at the email listed above. Please note that withdrawing consent or requesting deletion may affect our ability to provide certain services.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

You can read more about your rights on the website of the Danish Data Protection Agency: www.datatilsynet.dk.

You are always welcome to contact us at hello@messyweekend.com with any questions.

Complaints

You have the right to lodge a complaint with the Danish Data Protection Agency if you are dissatisfied with how we process your personal data. Contact details can be found at www.datatilsynet.dk.