Privacy Policy
Last updated 08/10/2026.
This policy explains which personal data Volt ApS processes, why, for how long, who we share it with, and what rights you have.
1. Data controller
Volt ApS · CVR 42439916 · Smallegade 52E, 2000 Frederiksberg, Denmark · privacy@getvolt.dk
Volt is the data controller for the data described in this policy. Questions about personal data and GDPR go to privacy@getvolt.dk.
2. When this policy applies
This policy applies when you:
- buy or rent lockers, charging, Soundboks batteries or partner products directly from Volt, for example in our webshop, through pre-booking or on site at a festival
- visit our websites, including getvolt.dk, getvolt.tech, getvolt.no, getvolt.se, getlocker.dk, getlocker.tech and getcharge.tech
- contact us as a customer, partner or supplier
- volunteer with Volt
- apply for a job at Volt
This policy does not apply when Volt processes data on behalf of others:
- Permanent locker installations: the venue is the data controller and Volt is the processor. See the venue's own privacy policy.
- Pre-booking through a festival or its partners: the festival is the data controller for the data it sends us.
Read more about the roles on our data processing agreement page. The link is also at the bottom of the page.
3. What data we process and why
Guests and customers
| Purpose | Data | Legal basis |
|---|---|---|
| Booking, purchase and delivery of the service (access codes, swaps, deposits) | Name, email, phone number, booking and order data, access data (codes, locker openings), purchase ID | Performance of a contract (Art. 6(1)(b)) |
| Payment, refunds and deposits | Payment status, transaction ID, payment method, where applicable the last four digits of the card. Full card data is only processed by the payment provider | Performance of a contract (b) |
| Bookkeeping | Order and transaction data | Legal obligation under the Danish Bookkeeping Act (c) |
| Customer support and complaints | Content of your request, contact details, purchase ID | Performance of a contract (b) and legitimate interest in handling requests (f) |
| Marketing to existing customers | Name and email | Section 10(2) of the Danish Marketing Practices Act and legitimate interest (f). You can always opt out, see section 4 |
| Security, operation and troubleshooting | IP address, device and browser data, log data, error reports | Legitimate interest in a secure and stable platform (f) |
| Items left behind and lost property | Description of items and, where relevant, booking information | Legitimate interest in returning the items (f) |
Visitors to our websites
We use cookies and similar technologies. See section 5.
Business contacts (festivals, venues, partners and suppliers)
| Purpose | Data | Legal basis |
|---|---|---|
| Cooperation, contracts, invoicing and support | Name, position, employer, work email and phone, correspondence | Legitimate interest in running our partnerships (f) and performance of a contract (b) |
| User accounts in our administration portal | Name, email, role, activity log | Legitimate interest (f) |
Volunteers
| Purpose | Data | Legal basis |
|---|---|---|
| Sign-up, shift planning and communication | Name, address, email, phone number, shifts and emergency contact (name and phone number) | Performance of a contract (b) and legitimate interest (f) |
| Access to the festival | Name and any information the festival requires for accreditation | Performance of a contract (b) |
| Deposit at selected festivals, refunded when all shifts are completed | Payment status and transaction ID from Stripe or Vipps MobilePay, and a record of completed shifts. We do not receive your card details | Performance of a contract (b) and legal obligation under the Danish Bookkeeping Act (c) |
If you give us an emergency contact, please make sure that person knows. We only use the emergency contact in an emergency. Please also read our terms for volunteers. The link is also at the bottom of the page.
Job applicants
| Purpose | Data | Legal basis |
|---|---|---|
| Assessing your application | Application, CV, contact details, references and interview notes | Legitimate interest in recruiting (f) and steps prior to entering a contract (b) |
Please do not send sensitive information, such as health information, with your application unless it is relevant to the position.
4. Marketing
If you have bought from us, we may send you offers by email about similar Volt products, such as lockers, charging and batteries for upcoming festivals. You can opt out when you buy and in every message we send. Opting out is free. You can also write to privacy@getvolt.dk.
Marketing is sent via Mailchimp from a separate list that only contains the name and email of customers who bought directly from Volt. Customers of venues, festivals and partners are never added to the list. We do not send marketing by text message. We do not send you marketing if you have opted out, and we do not share your data with others for their marketing.
5. Cookies and tracking
Our websites use:
- Necessary cookies from Shopify for the cart, checkout and security. These do not require consent.
- Statistics via Google Analytics and Google Tag Manager. Requires your consent.
- Marketing via the Meta Pixel (Facebook and Instagram), so we can measure and target ads. Requires your consent.
You give or refuse consent in the cookie banner and can change your choice at any time by deleting the cookies in your browser, after which the banner is shown again. Statistics and marketing cookies are only loaded after you consent. When you consent to Meta, we are joint controllers with Meta for collecting and transferring data from our website. Meta's further processing follows Meta's own privacy policy.
6. Who we share data with
Processors that process data on our behalf and on our instructions:
| Supplier | Task | Location |
|---|---|---|
| DigitalOcean, LLC | Hosting of platform, database and backups | Frankfurt, Germany |
| Shopify International Ltd. | Webshop and pre-booking | Ireland and USA |
| AC PM, LLC (Postmark) | Transactional emails | EU server |
| Twilio Ireland Limited | Text messages | Ireland |
| Functional Software, Inc. (Sentry) | Error logging | EU (Frankfurt) |
| Google Cloud EMEA Limited (Google Workspace) | Email and documents | EU |
| 650 Industries, Inc. (Expo) and Apple Inc. | Push notifications in our internal staff app | USA |
| The Rocket Science Group LLC (Intuit Mailchimp) | Sending marketing emails | USA |
Independent controllers that process data under their own terms:
- Stripe and Vipps MobilePay, which handle payments
- Google and Meta, when you have consented to statistics and marketing cookies
- Festivals and venues, for example when items left behind are handed over to lost and found, or when they need data to give you access
- Partners such as Mojo Studio ApS, when you rent a partner product
- Police and authorities, when required by law
- Auditors and advisers, when necessary
We never sell your data.
7. Transfers outside the EU
We store our data in the EU. Some suppliers have parent companies in the USA or other countries outside the EU, such as DigitalOcean, Postmark, Sentry, Expo, Apple, Shopify, Mailchimp, Google and Meta. Transfers are based on the European Commission's adequacy decision on the EU-U.S. Data Privacy Framework or the European Commission's standard contractual clauses.
8. How long we keep data
| Data | Retention |
|---|---|
| Name, email and phone number for a booking | 90 days after the booking period ends |
| Booking data without name and contact details (pseudonymised, can be found via the purchase ID) | 24 months after the booking period |
| Bookkeeping records (order and transaction data) | 5 years from the end of the financial year |
| Logs and error reports | Up to 24 months |
| Data used for marketing | Until you opt out, but no longer than 24 months after your latest purchase |
| Support requests | 12 months after the case is closed |
| Business contacts | For the duration of the cooperation and 3 years after |
| Volunteers | 24 months after your latest shift. Deposit records that form part of our bookkeeping are kept for 5 years |
| Job applicants | 6 months after the recruitment ends, unless you consent to longer storage |
| Cookies | See the cookie banner for each cookie's lifetime |
9. Your rights
You have the right to:
- access the data we hold about you
- have incorrect data corrected
- have data erased
- have processing restricted
- receive your data in a machine-readable format (data portability)
- object to processing based on legitimate interest, and always to marketing
- withdraw consent, for example to cookies. This does not affect processing carried out before you withdrew it
Write to privacy@getvolt.dk. We reply within one month. If you include your purchase ID, we can find your purchase faster. We may ask you to confirm your identity.
10. Complaints
You can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, datatilsynet.dk. You can also complain to the data protection authority in the country where you live. We would like the chance to resolve the matter first, so please write to us.
11. Changes
We update this policy when we change how we process data. The date at the top shows when it was last changed.
In case of differences between the Danish and English versions, the Danish version applies.
Volt ApS · CVR 42439916 · Smallegade 52E, 2000 Frederiksberg, Denmark · privacy@getvolt.dk