Go to homepage
€0.00

Privacy Policy

Last updated: 25 September 2026

1. Who is responsible for your data

Tidal Wave ApS
CVR no. 45416011
Virumvej 64, DK-2830 Virum, Denmark
Email: info@tidal-wave.eu
Phone: +45 47 51 23 00

Tidal Wave ApS is the data controller for the personal data we process about you in our webshops (tidal-wave.eu and its country shops) and in our customer service. We have not appointed a data protection officer, as we are not required to.

2. What we process, why, and on what legal basis

Orders, delivery, returns and complaints

We process your name, delivery and billing address, email address, phone number, order details and payment status to process and deliver your order, handle returns, withdrawals and complaints, and send you order and shipping emails. Legal basis: performance of the contract with you (GDPR art. 6(1)(b)).

You must give us your name, delivery address and email address to place an order. Without them we cannot fulfil the contract. Your phone number is passed to the carrier for delivery notifications.

Customer account

If you create an account, we process your login details, addresses, order history and customer group (for example member prices). Legal basis: contract (art. 6(1)(b)). Creating an account is optional; you can also shop as a guest.

Customer service

When you contact us, we process your messages, our replies and the related order details. Legal basis: contract, and our legitimate interest in answering your enquiries (art. 6(1)(b) and (f)).

Checking VAT numbers of business customers

If you enter an EU VAT number, we check it in the European Commission's VIES system and keep a record of the check (company name, VAT number, result and time). Legal basis: our legal obligation to document VAT-free sales under the VAT rules (art. 6(1)(c)).

Fisker Owners Association (FOA) member prices

Members of the Fisker Owners Association (FOA) get member prices. To check whether you are a member, we send only your email address to FOA through FOA's membership check system (api.fiskeroa.com). This happens when you log in to your customer account, and once a day for all registered customer accounts, so that member prices start when you become a member and stop if your membership ends.

FOA only replies whether the email address belongs to an active member. No other data about you is sent to FOA, and we do not tell FOA what you buy. We only use FOA's reply to place your account in, or remove it from, the customer group "FOA Member", which gives member prices. We do not combine the reply with any other data about you.

Legal basis: our legitimate interest, and that of our customers who are FOA members, in giving member prices automatically and only to verified members (art. 6(1)(f)). You have the right to object to this check at any time by writing to info@tidal-wave.eu. We will then stop checking your email address; you will then not get member prices.

FOA is an association based in the USA. Its membership service runs on Microsoft Azure servers in the EU, so the e-mail address is processed in the EU.

Newsletter

If you sign up for our newsletter, we process your email address, name (if given) and whether you open and click on the newsletter. Legal basis: your consent (art. 6(1)(a)). You can unsubscribe at any time via the link in every newsletter.

Reminders about items left in your basket

If you leave items in your basket while logged in or after entering your email address, we may send you reminder emails about the items through Brevo. To recognise your visit, Brevo uses the cookie "is_sib_cuid", which is only set if you accept it in our cookie settings (see section 8). Legal basis: your consent (art. 6(1)(a)), which you give in our cookie settings and can withdraw at any time. You can opt out at any time via the link in the email.

Bookkeeping and VAT

We keep invoices and order data to meet our obligations under bookkeeping and VAT law. Legal basis: legal obligation (art. 6(1)(c)).

Operation and security of the webshop

When you visit the webshop, our server processes your IP address, browser and device information and technical logs to deliver the pages, keep the webshop secure and prevent fraud. Legal basis: our legitimate interest in a secure and working webshop (art. 6(1)(f)).

Website statistics (Google Analytics)

If you accept statistics cookies, we use Google Analytics 4 to see how visitors use the webshop, for example which pages are visited, how visitors find us and where they leave, so that we can improve the webshop. Google Analytics sets cookies in your browser and processes information about your device and browser, the pages you visit, an online identifier and your approximate location (derived from your IP address). According to Google, Google Analytics 4 does not store IP addresses of visitors in the EU. We do not use Google Analytics to identify you personally. Legal basis: your consent (art. 6(1)(a) and the Danish cookie rules). You can withdraw your consent at any time via "Cookie settings".

Embedded videos

Some pages contain videos from YouTube (Google) or Vimeo. The video is only loaded, and YouTube or Vimeo only receives data about your visit, if you have accepted this in our cookie settings. YouTube and Vimeo are responsible for their own processing under their own privacy policies.

Legal claims

We may use order and correspondence data to establish, exercise or defend legal claims. Legal basis: our legitimate interest (art. 6(1)(f)).

3. Payment data

Card details are entered directly with our payment provider and are never stored by us. We only receive information on whether the payment succeeded. If you pay with Klarna or with PayPal Pay Later / Pay upon invoice, the provider may check your creditworthiness. Payment providers are independent data controllers for their own processing, under their own privacy policies.

4. Who we share data with

Processors (who process data only on our instructions and under a data processing agreement)

  • OlrikIT (Denmark): operation of the webshop, on servers at Hetzner Online GmbH in Germany
  • Hetzner Online GmbH (Germany): server hosting
  • Brevo (France): newsletter, order and service emails, basket reminders
  • e-conomic / Visma (Denmark): invoicing and bookkeeping
  • Zammad: customer service system, run on our servers at Hetzner Online GmbH in Germany
  • Fastmail Pty Ltd (Australia): email for info@tidal-wave.eu, with data centres in the USA and the Netherlands
  • Google Ireland Limited (Ireland): website statistics with Google Analytics, only with your consent

Independent recipients (who are responsible for their own processing)

  • Payment providers, depending on the method you choose: AltaPay, MobilePay, Vipps, PayPal, Klarna, Apple Pay, Google Pay and the providers of Bancontact, EPS, BLIK, iDEAL and Przelewy24
  • Carriers: GLS (Denmark) and FedEx (other countries): name, address, phone and email for delivery and delivery notifications; for deliveries outside the EU also the data needed for customs
  • Fisker Owners Association (FOA): only your email address, for the membership check (see section 2)
  • The European Commission (VIES) and tax authorities: VAT number checks and VAT reporting
  • Google (Google Analytics), YouTube and Vimeo: only if you accept the relevant cookies (see sections 2 and 8)
  • Public authorities, our accountant and legal advisers, when required by law or needed for a legal claim

We do not sell your personal data.

5. Transfers outside the EU/EEA

Most of our providers process data in the EU/EEA. The following recipients are located in, or can access data from, countries outside the EU/EEA:

  • Google (Google Analytics, Google Pay, YouTube): data may be transferred to Google LLC in the USA, which is certified under the EU-US Data Privacy Framework; Google also uses the EU standard contractual clauses.
  • FedEx: data may be transferred to FedEx companies in the USA and other countries under FedEx's binding corporate rules, which are approved by the EU data protection authorities, and to other recipients under the EU standard contractual clauses.
  • PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A. in Luxembourg transfers data to other PayPal companies, including in the USA, under PayPal's binding corporate rules.
  • Apple Pay: data may be transferred to Apple Inc. in the USA, which is certified under the EU-US Data Privacy Framework.
  • Klarna (Sweden): if Klarna transfers data outside the EU/EEA, it uses the EU standard contractual clauses or an adequacy decision.
  • Brevo (France): data is stored in the EU, but some of Brevo's sub-processors are located in the USA; these transfers are covered by the EU standard contractual clauses.
  • Fastmail: Fastmail Pty Ltd is in Australia and stores data in the USA and the Netherlands. The transfer is covered by the EU standard contractual clauses in Fastmail's data processing agreement.
  • Vimeo: if you play a Vimeo video, data is transferred to Vimeo in the USA. The transfer is based on the EU-US Data Privacy Framework or the EU standard contractual clauses.
  • FOA: FOA is based in the USA, but its membership service runs on Microsoft Azure in the EU, and your email address is processed in the EU.

AltaPay (Denmark), e-conomic (Denmark), Hetzner (Germany), OlrikIT (Denmark), Zammad (Germany) and GLS process data within the EU/EEA.

For transfers from the United Kingdom and Switzerland, the same safeguards are used together with the UK and Swiss extensions of the Data Privacy Framework or the UK/Swiss addenda to the standard contractual clauses. You can ask us for a copy of the safeguards.

6. How long we keep your data

  • Orders, invoices and other accounting records: 5 years from the end of the financial year they relate to (Danish Bookkeeping Act). Where VAT rules require a longer period, we keep the data needed for that period: 10 years for sales to consumers in other EU countries reported under the EU One-Stop-Shop VAT scheme, and 6 years for UK VAT records.
  • VIES checks: as part of the accounting records above.
  • Customer account: until you delete it, or 3 years after your last login or purchase, after which it is deleted.
  • Customer service emails: 3 years after the case is closed.
  • FOA member status: as long as you have a customer account. The email addresses sent to FOA are not stored separately.
  • Newsletter: until you unsubscribe.
  • Basket reminder data: 30 days after the basket was last changed.
  • Google Analytics data: 14 months.
  • Cookies: see the lifetimes in section 8.
  • Server logs: up to 60 days.

7. Your rights

You have the right to:

  • access the data we hold about you
  • have incorrect data corrected
  • have your data erased
  • have processing restricted
  • receive your data in a portable format (data portability)
  • object to processing based on our legitimate interest, including the FOA membership check, and at any time to direct marketing
  • withdraw your consent at any time, where processing is based on consent; this does not affect processing before the withdrawal

We do not make decisions based solely on automated processing that have legal or similarly significant effects for you. To use your rights, write to info@tidal-wave.eu.

8. Cookies

Cookies are small text files stored in your browser. We only use cookies that are necessary for the webshop to work. All other cookies are only set if you accept them in our cookie banner. You can change or withdraw your consent at any time via "Cookie settings" in the footer.

Several of the cookies below ("…-enabled", "youtube-video", "vimeo-video", "shopware-payments-…") only store your choice in the cookie banner. When you accept a category, the provider's own cookies (for example "_ga") can then be set; they are listed under the same category.

Necessary cookies

  • session-… – Tidal Wave (Shopware). Keeps your session, basket and login. Lifetime: until you close the browser.
  • timezone – Tidal Wave (Shopware). Stores your time zone so that times are shown correctly. Lifetime: 30 days
  • cookie-preference – Tidal Wave (Shopware). Stores your cookie choices. Lifetime: 30 days.

Payment

  • shopware-payments-paypal – Tidal Wave (Shopware Payments / PayPal). Allows the PayPal payment buttons and scripts to be loaded; PayPal can then set its own cookies. Lifetime: 30 days
  • shopware-payments-google-pay – Tidal Wave (Shopware Payments / Google). Allows Google Pay to be loaded; Google can then set its own cookies. Lifetime: 30 days

Statistics

  • google-analytics-enabled – Tidal Wave (Shopware). Stores your consent to Google Analytics. Lifetime: 30 days.
  • _ga – Google. Distinguishes visitors for Google Analytics. Lifetime: 2 years.
  • _ga_DZ1BZJNFMR – Google. Keeps the session state for our Google Analytics property. Lifetime: 2 years.

Marketing

  • is_sib_cuid – Brevo. Recognises your visit so that we can send basket reminders and measure the effect of our emails. Lifetime: up to 1 year

Embedded videos

  • youtube-video – Tidal Wave (Shopware). Stores your consent to loading YouTube videos. Lifetime: 30 days. When a video is loaded, YouTube (Google) can set its own cookies – see Google's privacy policy.
  • vimeo-video – Tidal Wave (Shopware). Stores your consent to loading Vimeo videos. Lifetime: 30 days. When a video is loaded, Vimeo can set its own cookies – see Vimeo's cookie policy.

9. Security

We use appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access, including encrypted connections (HTTPS) and restricted access.

10. Complaints

If you are not satisfied with how we process your data, please contact us first. You can also complain to a data protection authority, in particular in the country where you live or work:

11. Changes

We update this policy when our processing changes. The date at the top shows the latest version.

This website uses cookies to ensure the best experience possible. More information...