This policy explains what personal data Is processes when you visit this website and, where it offers these, when you order, book a table or send a catering enquiry, and why.
Data controller
The data controller is the restaurant: Is. The website and its ordering, booking and enquiry forms are provided by Restonaldo (Asad Siddiqi, Denmark), which processes the data on the restaurant's behalf as its data processor, under a data processing agreement. The restaurant decides how and why your data is used and answers to you for that. Restonaldo keeps the duties the GDPR gives a data processor, which no agreement can move to the restaurant.
What we collect
When you order we ask for your name, phone number and email address, and any note you add for the restaurant (which may include allergy information you choose to share). We store the order itself: the items, prices, pickup time and your language. When you book a table we ask for your name, phone number and email address, the time, the number of guests and any note. When you send a catering enquiry we ask for your name, phone number and email address, the date, the number of guests, the dishes you ask about, your message and, for delivery, the address. Notes and messages are free text and may contain allergy or other health information you choose to share; they are only stored and shown to the restaurant as part of the order, booking or enquiry. To limit fake orders and bookings and, where the restaurant uses them, to decide who a welcome discount applies to and to count its new and returning customers, we keep a keyed (HMAC) hash of your phone number and, for orders, of a random device id stored in your browser. We use a hash of your IP address and, for bookings, of your email address briefly for rate limiting. The web server also keeps an access log, which as a technical necessity records the IP address of every request along with the page requested and the time.
Purpose and legal basis
We use this data to receive, prepare and hand over your order, to hold your table, to answer your enquiry, to contact you about them, and to send you a receipt or a booking confirmation and reminder by email. The legal basis is the performance of the contract with you, or steps taken at your request before entering into one, GDPR Article 6(1)(b). The hashes and the access log are used to prevent abuse, to operate and secure the service, and for the discounts and customer counts above, under the legitimate interest in running the service and the restaurant's business, Article 6(1)(f).
Payment
You pay at the restaurant when you collect your order, so no card or payment details are collected on this website.
Who processes the data
We never sell your data or share it for marketing. Restonaldo runs the system and uses these sub-processors: Hetzner Online GmbH (hosting, Germany, EU); Apple iCloud Mail (sending receipts and booking and enquiry emails; provided by Apple Distribution International Ltd, Ireland, with transfers to the US under the EU Standard Contractual Clauses); Cloudflare, Inc. (stores and delivers the photos and other media on this website, in its EU jurisdiction, and holds no order data; a US company under the EU-US Data Privacy Framework; your browser asks Cloudflare for those files, so it sees the IP address that asked); and 650 Industries, Inc. (Expo, United States, under the EU-US Data Privacy Framework), which delivers new-order notifications to the restaurant's app, including your name, the order number and the total. Orders, bookings and enquiries are also shown in the restaurant's own dashboard or app, enquiries are emailed to it, and orders may be printed on its receipt printer.
How long we keep it
Your name, phone number, email address and notes on an order or a booking are erased 90 days after the order (for a preorder, after its pickup time) or after the booked time. A catering enquiry is deleted 90 days after it was sent or, if later, after the date it asks about, and at most a year after that first deadline. When your details are erased, the order lines and amounts and a booking's time and number of guests are kept without them. Encrypted backups are kept for 14 days and then deleted. Access logs rotate automatically and are overwritten within weeks.
Storage in your browser
We use no analytics, statistics or advertising cookies. Your browser stores only what the site needs to work: a cookie with your language choice, if you switch language, which lasts until you close your browser; your basket; and, once you place an order, the random device id described above. The basket and the device id stay in your browser's local storage until you clear them.
The staff app
The restaurant's staff app is a work tool that requires a login. It stores the login and a notification token on the device so staff are alerted to new orders, and contains no tracking, analytics or advertising.
Your rights
You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. Contact the restaurant to use these rights: Is. You can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, www.datatilsynet.dk.