This policy explains what personal data Liban Cuisine processes when you order from this website, and why.
Data controller
The data controller is Liban Cuisine, phone +45 38 11 50 50, email mail@libancuisine.dk, restaurants: Liban Cuisine Brønshøj, Frederikssundsvej 148, 2700 Brønshøj; Liban Cuisine Frederiksberg, Rolighedsvej 15, 1958 Frederiksberg C; Liban Cuisine Nordvest, Frederiksborgvej 27A, 2400 København NV; Liban Cuisine Nørrebro, Rantzausgade 1, 2200 København N. The ordering system is provided by Restonaldo (Asad Siddiqi, Denmark), which processes the data on the restaurant's behalf as its data processor, under a data processing agreement.
What we collect
When you order we ask for your name, phone number and email address, and any note you add for the restaurant (which may include allergy information you choose to share). We store the order itself: the items, prices, pickup time and your language. To limit fake orders we keep a keyed (HMAC) hash of a random device id stored in your browser and of your phone number, and use a hash of your IP address briefly for rate limiting.
Purpose and legal basis
We use this data to receive, prepare and hand over your order, to contact you about it, and to send you a receipt by email. The legal basis is the performance of the contract with you, GDPR Article 6(1)(b). The hashes are used only to prevent abuse, under our legitimate interest in keeping the ordering service working, Article 6(1)(f).
Payment
You pay at the restaurant when you collect your order, so no card or payment details are collected on this website.
Who processes the data
We never sell your data or share it for marketing. Restonaldo runs the ordering system and uses these sub-processors: Hetzner Online GmbH (hosting, Germany, EU) and Apple iCloud Mail (sending receipt emails; provided by Apple Distribution International Ltd, Ireland, with transfers to the US under the EU Standard Contractual Clauses). Orders are also shown in the restaurant's own app and may be printed on its receipt printer.
How long we keep it
Your name, phone number, email address and notes are erased 90 days after your order. The order lines and amounts may be kept longer where bookkeeping rules require it, without your details. Encrypted backups are kept for 14 days and then deleted.
Storage in your browser
We use no analytics, statistics or advertising cookies. Your browser stores only what the site needs to work: your basket, your language choice and the random device id described above.
The staff app
The restaurant's staff app is a work tool that requires a login. It stores the login and a notification token on the device so staff are alerted to new orders, and contains no tracking, analytics or advertising.
Your rights
You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. Contact to use these rights: Liban Cuisine, phone +45 38 11 50 50, email mail@libancuisine.dk, restaurants: Liban Cuisine Brønshøj, Frederikssundsvej 148, 2700 Brønshøj; Liban Cuisine Frederiksberg, Rolighedsvej 15, 1958 Frederiksberg C; Liban Cuisine Nordvest, Frederiksborgvej 27A, 2400 København NV; Liban Cuisine Nørrebro, Rantzausgade 1, 2200 København N. You can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, www.datatilsynet.dk.