Privacy notice

Controller

[Company's legal name], Business ID [1234567-8], Vaasanpuistikko 17, 65100 Vaasa. Privacy questions: [email], +358 44 247 6160.

What we process

When you order: your name, phone number, email, the dishes and notes, and for delivery your address, the map pin, door code and note for the driver.

Stripe handles the payment; we learn whether it succeeded, never your card details.

If you press "Use my location", your browser asks first, and the position is sent to our server only to look up the address. It is not kept unless it becomes the order's delivery address.

Why, and on what basis

To make, deliver and tell you about your order (contract, GDPR Art. 6(1)(b)); for bookkeeping (legal obligation); and to sign you in to "My orders" if you ask for a sign-in link.

We don't use your data for marketing and we don't sell it.

Who else handles it

Service providers that process data for us: Stripe (payments), Resend (email), 46elks (text messages), [hosting provider] (server), and OpenStreetMap/Nominatim or Digitransit for address search. Maps are loaded from OpenStreetMap. Some providers may process data outside the EU, under EU-approved safeguards. [check for each provider]

A shared delivery driver

Deliveries are driven by a driver who also delivers for Hot Wings Vaasa (Rauhankatu 16, Vaasa). The driver sees the name, phone number, address, door code and note for the driver of the orders they deliver. Both restaurants' orders are kept in the same ordering system, but each restaurant sees only its own. [check: whether both restaurants are the same company]

How long we keep it

Orders are kept as long as Finnish bookkeeping law requires (6 years from the end of the financial year) [check with the accountant]. Sign-in links expire after 20 minutes. The driver's position is no longer shown after 10 minutes.

Cookies and browser storage

Your basket is kept only in your own browser. Signing in to "My orders" uses a necessary cookie. We use no tracking or advertising cookies.

Your rights

You can ask to see, correct or delete your data (except what the law requires us to keep), restrict or object to its use, and get a copy to take elsewhere. Use the contact details above. You can complain to the Finnish Data Protection Ombudsman (tietosuoja.fi).