Privacy policy
[Restaurant name, registered address, company/tax number, email and phone: the controller's details. Please fill in and have it reviewed by your legal adviser.]
What data we process and why
- Account: name, email address, password (stored only in encrypted form), chosen language, optionally a phone number. Purpose: running your account and fulfilling orders. Legal basis: performance of a contract.
- Orders: the dishes, the delivery day, the delivery address (and the floor/door/doorbell note you add), phone number, note, amount due. Purpose: preparing, delivering and settling the order. Legal basis: performance of a contract.
- Saved addresses: the delivery places in your address book. Legal basis: performance of a contract / your request.
- Weekly menu emails: sent only if you subscribed. Legal basis: consent, withdrawable at any time (unsubscribe link in every email).
- Consent record: we keep an anonymous log of your cookie choices so that we can demonstrate your decision. Legal basis: legal obligation (accountability).
How long we keep it
- Personal details of orders (address, phone, note) are removed or anonymised automatically after 12 months; the rest of the order is deleted after 18 months, once it has been turned into aggregate statistics that identify nobody.
- The consent log is kept for 24 months and technical logs for 90 days.
- Accounting documents are kept for the legally required period by our invoicing/bookkeeping system, not by this application. [To be verified.]
- If you delete your account, we delete the account, saved addresses and requests and anonymise past orders.
Who receives the data
Delivery staff see what they need for the delivery (name, address, phone, order). Our processors: [hosting provider, e.g. Microsoft Azure; email provider]. We do not sell your data.
Your rights
- Access and portability: download the data we hold about you at any time on the “My data” page.
- Erasure: request deletion of your account on the same page (if you have an open order, after it has been delivered).
- Rectification, restriction, objection, withdrawing consent: write to us at the contact details above.
- Complaint: to the Hungarian data protection authority (NAIH, naih.hu) or a court.
More about cookies: Cookie policy.