Privacy policy

This policy explains what personal data we handle when you use eMenu: when you browse a restaurant's menu, place an order, sign in to your account, or contact us as a restaurant. It is based on the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and Hungarian Act CXII of 2011 on informational self-determination. The Hungarian version prevails.

1. Who handles your data?

eMenu is operated by the following company ("we", the "Operator"):

Name: [Cégnév / Company name]
Registered office: [Székhely / Registered office]
Email: [email protected]

eMenu is a platform: each restaurant takes orders on its own page (emenu.hu/restaurant-name). So we play two roles:

For orders, the restaurant is the controller. Your order details (name, contact details, address, items) are handled by the restaurant you order from, because it fulfils the order. We store and pass on that data on the restaurant's behalf, as its processor. You'll find the restaurant's contact details on its page and in your order confirmation.
Our own processing. We are the controller for your eMenu account (sign-in, saved details and addresses), for messages restaurants send us through our contact form, and for running the service securely.

A restaurant never sees another restaurant's customers, orders or statistics.

2. What data we use, why, and for how long

Orders

Data: name, email address, phone number; for delivery, the delivery address and your note to the courier; the items ordered, chosen options, your notes, the order type, payment method and times.

Purpose: passing the order to the restaurant and fulfilling it, telling you about its progress (confirmation, acceptance, rejection, refund), handling complaints.

Legal basis: performance of a contract (GDPR Art. 6(1)(b)); the restaurant's accounting and tax obligations (GDPR Art. 6(1)(c)).

Retention: as long as the restaurant's legal obligations require, at most 8 years (Hungarian Act C of 2000 on Accounting, section 169). Phone numbers and addresses are stored encrypted.

Customer account

Data: email address, name, phone number, saved delivery addresses, the one-time sign-in link and code we email you, and the session of each signed-in device.

Purpose: password-free sign-in, faster checkout, order history and reordering.

Legal basis: performance of a contract (GDPR Art. 6(1)(b)).

Retention: until you delete your account. Sign-in links and codes are valid for 15 minutes and deleted within a day; a sign-in lasts 90 days. You can delete your account at any time from your account page: we delete the account, its addresses and sessions, and remove your name, contact details, address and notes from your past orders. Restaurants keep the items, amounts and times without your name.

Online payment

Online payments are handled by Stripe and go directly to the restaurant's Stripe account. Stripe handles your card details; we never see or store them, and receive only the payment's ID, amount and status. If you're signed in and choose to save your card when paying, Stripe keeps it for that restaurant only; we keep only a reference to your Stripe customer record there, and you can remove saved cards from your account at any time. Stripe is an independent controller for payment data; see stripe.com/privacy.

Preventing abuse

If, for example, an order to be paid on site is never collected, the restaurant can stop that phone number or email address from choosing to pay on site again. For this we keep an irreversible fingerprint of the phone number and email address, even after the account is deleted. Legal basis: the restaurant's and our legitimate interest (GDPR Art. 6(1)(f)).

Newsletters and notifications

You only get marketing emails or push notifications from a restaurant if you have explicitly agreed to them, and only from that restaurant. Legal basis: consent (GDPR Art. 6(1)(a)). You can withdraw consent at any time: every marketing email has an unsubscribe link. Messages about your orders are separate from this.

To show the restaurant how its offers do, we record whether a marketing email was opened (a small image in it loads) and whether you clicked its link or a marketing notification, and which orders you placed in the following 7 days. The restaurant sees only totals, never who opened or clicked. These records go when you delete your account.

Contact from restaurants

Data: name, restaurant name, email address, phone number, message. Purpose: replying to the enquiry and preparing a contract. Legal basis: steps prior to entering into a contract (GDPR Art. 6(1)(b)). Retention: if no contract follows, one year from our last exchange.

Technical data

Data: IP address, browser type, request times, error logs. Purpose: keeping the service secure (for example limiting sign-in and ordering attempts) and fixing errors. Legal basis: legitimate interest (GDPR Art. 6(1)(f)). Retention: at most 90 days.

3. Cookies

We only use cookies the service needs to work, which don't require consent:

Cart: remembers your cart at a restaurant (1 year).
Sign-in: keeps you signed in to your account (90 days) or to the restaurant admin.
Language: remembers the language you chose.

We use no advertising, tracking or analytics cookies.

4. Who can access your data?

The restaurant you order from and its staff, to fulfil your order. For delivery, the courier sees your name, address and phone number.
Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany): hosting; the data stays in the European Union.
Stripe Payments Europe Ltd. (Ireland): online payments, as an independent controller.
Our email delivery provider, which delivers order and sign-in emails.

We don't sell your data or share it with third parties for advertising. We disclose data to authorities only where the law requires it.

5. Your rights

You can ask us to:

tell you what data we hold about you and give you a copy (access);
correct inaccurate data (rectification);
delete your data (erasure) or restrict its use;
give it to you in a machine-readable format (portability);
stop using it on the basis of our legitimate interest (objection).

You can withdraw consent at any time; this doesn't affect processing before the withdrawal. On your account page you can download your data and delete your account yourself. For anything else, write to [email protected]; we reply within one month. If your request concerns a restaurant's orders, we pass it on to the restaurant, or you can contact it directly.

6. Complaints

If you think we have breached your data protection rights, please write to us first so we can put it right. You can complain to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH; 1055 Budapest, Falk Miksa utca 9–11; postal address: 1363 Budapest, Pf. 9; www.naih.hu), or go to court, including the regional court of your place of residence.

7. Changes

If this policy changes materially, we update the effective date at the top of the page, and email you if you have an account.