Privacy Policy – Handpan Copenhagen ApS

1. Who we are

We are the data controller for the purposes of the General Data Protection Regulation (GDPR).

2. What data we collect

We may collect:

• Contact details (name, email address, phone number) when you contact us or register for events.
• Booking and proposal details when you request a session or proposal (such as your organisation, location, group size, preferred timing, and any context you choose to share).
• Payment details if you purchase products or services from us (processed securely by payment providers).
• Technical data (IP address, browser type, device information, pages visited) via cookies and analytics.
• Other information you voluntarily provide.

3. Sensitive (special category) information

Some of our sessions are designed for care, accessibility, and wellbeing settings. If you choose to share information about participants’ health, disabilities, mobility, mental wellbeing, or similar needs so that we can adapt a session, this is treated as special category data under Article 9 of the GDPR.

We only process this information on the basis of your explicit consent, given when you submit a request, and we use it solely to plan and adapt the session to the group’s needs. You do not have to provide it. Please share only what is necessary, and avoid including identifying details about specific individuals where general information would be enough.

You can withdraw your consent at any time by contacting us at [email protected], and we will delete this information unless we are legally required to keep it.

4. How we use your data

We use your personal data to:

• Process orders and payments.
• Respond to your inquiries.
• Prepare and discuss proposals and quotes for sessions you request.
• Send newsletters or updates if you have opted in.
• Improve our services and website.
• Comply with legal requirements.

We only process your personal data when we have a legal basis, such as your consent, a contract, legal obligations, or our legitimate interests.

5. Cookies

We use cookies to improve your browsing experience and analyse site traffic. You can manage or disable cookies in your browser settings.

6. Sharing your data

We do not sell or rent your personal data. We may share it with:

• Service providers (e.g., hosting, payment processing, email services) under GDPR-compliant agreements.
• Public authorities if required by law.

The processors we rely on to run this website and handle your requests include:

• Resend, to deliver and process the contact and proposal emails you send us.
• PostHog, for privacy-conscious product analytics (only after you accept cookies).
• Cloudflare Turnstile, to protect our forms from spam and abuse.

Some of these providers may process data outside the EU/EEA. Where that happens, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses to protect your data.

7. Data retention

We keep your personal data only as long as necessary for the purposes it was collected, or as required by law. If you unsubscribe from our newsletter, we will delete your data from our mailing list.

8. Your GDPR rights

You have the right to:

• Access your personal data.
• Correct or update your data.
• Request deletion (“right to be forgotten”).
• Withdraw your consent at any time.
• Object to processing.
• Request data portability.
• File a complaint with Datatilsynet (the Danish Data Protection Authority).

To exercise these rights, contact us at [email protected].

9. Security

We use appropriate technical and organisational measures to protect your data against unauthorised access, loss, or misuse.

10. Changes to this policy

We may update this Privacy Policy when necessary. The latest version will always be available on our website.

Contact us