Privacy Policy — Restaurant App

1. Information we collect

We collect the following categories of information:

a) Restaurant data

• Restaurant name, address, operating hours.
• Tax identification data (tax ID), if needed for configuration.

b) Menu and product data

• Categories, products, descriptions, prices, images and availability.
• Menu changes made during use.

c) Order data

• Information about received orders: number, value, status, time of placement and completion.
• This data is necessary for the App to function and may be used for reports and statistics.

d) Usage data

• Device type, operating system version, App version.
• Activity logs and technical information needed for troubleshooting.

e) Push notifications

The App uses push notifications to alert the restaurant when a new order is received. The notification token associated with the device is stored to enable notification delivery.

2. Data we do not collect

The restaurant app does not collect:

• Device location data (GPS).
• Payment data or financial information of the user.
• Personal data of end customers (these are managed by the ordering platform).

3. How we use information

We use the collected information to:

• Provide and maintain the App's features.
• Transmit orders and notifications to the restaurant.
• Generate activity reports and statistics.
• Diagnose technical issues and improve App performance.
• Communicate with the restaurant regarding updates, changes or technical support.

4. Information sharing

Information may be shared with:

• The local partner operating the multi-restaurant platform, if applicable — for network and order management.
• Infrastructure providers (cloud services, push notifications) that process data on our behalf, under contractual confidentiality obligations.
• Competent authorities, when legally required.

We do not sell or share data with third parties for marketing purposes.

5. International transfers

Data may be processed and stored on servers located outside the European Union and the European Economic Area, through cloud infrastructure providers. In such cases, we ensure that transfers comply with GDPR requirements, including through the use of standard contractual clauses or other recognized protection mechanisms.

6. Data retention

Data is retained for as long as necessary to provide the service and comply with legal obligations. Upon cessation of App use or upon a deletion request, data is deleted or anonymized within the timeframes required by applicable law.

7. Data security

We implement appropriate technical and organizational measures to protect data against unauthorized access, loss, alteration or disclosure. Communications between the App and our servers are encrypted. However, no method of electronic transmission can guarantee absolute security.

8. Your rights

Under the GDPR, you have the right to:

• Request access to processed data.
• Request rectification of inaccurate or incomplete data.
• Request deletion of data, where permitted by law.
• Request restriction of processing.
• Object to processing, in applicable cases.
• Request data portability.
• File a complaint with the National Supervisory Authority for Personal Data Processing.

To exercise these rights, you may contact us at the address below.

9. Policy changes

We may update this policy periodically. Significant changes will be communicated through the App. We recommend checking this page before continuing use.

10. Contact

For questions about data processing:

Great Food Labs S.R.L.
Str. Intrarea Nuferilor, Nr. 13, Floor 4, Apt. 29, Roșu village, Chiajna commune, Ilfov county, Romania

apps@greatfood.ro
(+40) 742 792 649