Privacy & Data Protection

We are committed to protecting your personal data and being transparent about how we use it.

Data We Collect

• Order data: meal selections, quantities, consumption date.
• Customer contact data (if provided): name, email, phone.
• Technical logs (IP & user-agent) for security and fraud prevention (short-term).

Purpose of Processing

• Fulfilment of meal orders and customer communication.
• Operations analytics (aggregate, non-identifying).
• Fraud / abuse prevention and security monitoring.

Retention & Anonymization

Personally identifiable information (PII) in orders is anonymized after 18 months via an automated job (Issue 015). Non-nullable fields receive placeholder values (e.g. anon-*).

Aggregated, non-personal statistical data may be retained beyond this period.

Your Rights

• Access: request a copy of your personal data.
• Rectification: correct inaccurate information.
• Erasure: request deletion/anonymization before scheduled retention period where legally permissible.
• Restriction & Objection: where processing is based on legitimate interest.

Early Erasure / Anonymization Requests

You can request early anonymization of your order data by contacting us with the email and approximate order date(s). We will locate and anonymize related records, preserving non-personal operational metrics.

Contact

GastWerkBern – Email: privacy{{ parse_url(config('app.url'))['host'] ?? 'example.com' }}

Changes

We may update this policy; material changes will be highlighted here.

© 2025 GastWerkBern