Privacy notice

Who is responsible

menyu is provided by Arhitektura RN d.o.o., Bolnička cesta 51/9, 10000 Zagreb, Croatia, OIB 98057286129. Contact us at [Contact email]. We are the controller for our relationship with venue owners, account administration and our own billing.

For guests’ orders, the venue is the controller and menyu processes personal data on its behalf. The venue decides why it needs the order data and how it uses it. Our data processing agreement describes that relationship. Ask the venue for its own privacy notice.

Whose data we use

Venue owners and staff: name, email, venue details, menu content, staff accounts and permissions, and billing details. Self-serve sign-up is not available yet. When it opens, it asks for your venue details and an account, and checks your card through our payment provider with a temporary hold that is then released; nothing is charged for that check.

Guests at the table: table number, basket and orders, an optional tip, payment status and questions sent to Wally. Guests do not need an account. Please do not include personal or health details in Wally questions; ask venue staff about allergies.

Technical and security logs: [Technical data collected, purposes and retention to confirm]. Payment processing details and the data returned to menyu: [Payment data flow to confirm].

Why we use data and the legal bases

Contract: to take steps you request before joining, provide the agreed venue service, manage the account and administer payment for the service. For staff contact details where the staff member is not a party to the contract, we rely on our legitimate interest in administering the venue’s account.

Legitimate interest: to respond to support requests, protect the service against misuse and maintain its security. We assess those interests against your rights. Legal obligation: to meet applicable accounting, tax and other duties. The relevant records and retention rules are [Legal obligations to confirm].

Consent: only where we specifically ask for it, for a stated purpose. You can withdraw it at any time. Signing up is not blanket consent to marketing.

For guest orders, we act on the venue’s instructions. The venue is responsible for identifying and explaining the legal basis for its processing, including fulfilling guest orders.

Who receives data

Providers receive the data needed for their role: [Hosting provider] for hosting; [Payment provider] for payments when enabled; [Certified till partner] for the till connection when enabled; [AI provider for Wally] for answering menu questions; and [Email provider] for service emails. Their locations, roles and contracts are [Provider details to confirm].

Remaris is the first till integration being connected. Card payments begin only after the venue’s till is connected through a certified partner. Today, staff enter accepted orders into the till by hand.

We may disclose data where a legal duty requires it. Where a provider acts as a separate controller, its own privacy notice applies to that processing: [Provider privacy notices to confirm].

Transfers outside the European Union

Hosting locations, remote access and any transfers outside the European Union or European Economic Area: [Countries and international transfers to confirm]. Before any such transfer, the applicable safeguard must be confirmed, for example an adequacy decision or standard contractual clauses: [Transfer safeguards to confirm]. You can ask [Contact email] for details and a copy of applicable safeguards.

How long we keep data

These are proposed defaults, not confirmed retention periods: enquiries sent to us, 12 months after the last contact [to confirm]; venue account and staff data, for the service term plus 30 days [to confirm]; guest baskets, orders and payment status, 90 days under the venue’s instructions [to confirm]; Wally questions, 30 days [to confirm]; security logs, 30 days [to confirm]; backup expiry, 90 days [to confirm].

Billing records: [Statutory retention period to confirm]. Longer retention for a legal obligation or a specific dispute must be limited to the necessary data and period. The venue may need to retain its own fiscal records separately.

Cookies and browser storage

The site uses no tracking cookies. It stores your language choice, a menu draft and the demo basket in your browser’s local storage. You can remove these using your browser’s site-data settings. Clearing them also removes the saved choices and demo progress on that browser.

Storage needed by future live payment or account features: [Additional browser storage to confirm]. We will explain any changes and ask for consent where required before using optional tracking.

Your rights

Under the General Data Protection Regulation (GDPR), and subject to its conditions, you have rights of access, rectification, erasure, restriction of processing, data portability and objection. Where processing relies on consent, you have the right to withdrawal of consent at any time, without affecting processing that was lawful before withdrawal.

Write to [Contact email] to exercise your rights. For a guest order, contact the venue first; we help the venue respond. We may request information needed to verify your identity. See the European Data Protection Board’s explanation of your rights.

Complaints

You have the right to complain to the Croatian data protection authority, AZOP (Agencija za zaštitu osobnih podataka), or another competent supervisory authority. See azop.hr for information and how to submit a complaint.

Contact us

For privacy questions, contact [Contact email] or write to Arhitektura RN d.o.o., Bolnička cesta 51/9, 10000 Zagreb, Croatia. Further company details are in the legal notice.