https://www.papatya.dk/

Privacy Policy

This Privacy Policy explains how personal data is processed when you use our online ordering platform, website or related services (“Platform”).

We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Danish data protection law.

1. Who Processes Your Data

The Platform is operated by Easy2eat ApS.

Depending on how you use the Platform, personal data may be processed by us and/or by the restaurant where you place an order.

We are responsible for personal data processed by us for operating and maintaining the Platform. The restaurant may be responsible for personal data it processes to prepare and fulfil your order, provide customer service or meet its legal obligations.

2. Information We Collect

We may collect:

  • Name

  • Email address and telephone number

  • Delivery or billing address

  • Order and purchase information

  • Payment and transaction information

  • Account information, if you create an account

  • Information you provide to customer support

  • IP address and technical/device information

  • Cookie and usage information

  • Marketing preferences

3. How We Use Your Information

We use personal data to:

  • Process and fulfil orders

  • Arrange delivery or pickup

  • Process payments

  • Provide customer support

  • Manage customer accounts

  • Maintain and secure the Platform

  • Prevent fraud and misuse

  • Comply with legal and accounting requirements

  • Improve our services

  • Send marketing communications where permitted and, where required, with your consent

Depending on the purpose, our legal basis may be performance of a contract, compliance with a legal obligation, legitimate interests or your consent under the GDPR.

4. Sharing Your Information

We may share necessary information with:

  • The relevant restaurant

  • Payment providers

  • Delivery and courier providers

  • Hosting and IT providers

  • Customer support providers

  • Security and fraud-prevention providers

  • Analytics and marketing providers, where applicable

We only share information where necessary and in accordance with applicable data protection law.

5. Cookies

We may use cookies and similar technologies for essential functionality, security, analytics and, where applicable, marketing.

Where consent is required, we will obtain your consent before using non-essential cookies.

You can manage your cookie preferences through the cookie settings on the Platform.

6. International Transfers

Some service providers may process personal data outside Denmark or the European Economic Area.

Where this occurs, we ensure that appropriate safeguards are in place in accordance with applicable data protection law.

7. How Long We Keep Your Data

We keep personal data only for as long as necessary for the purposes for which it was collected, or for as long as required by law.

Order, payment and accounting information may need to be retained to comply with legal obligations and to handle disputes, refunds or customer enquiries.

8. Your Rights

Under the GDPR, you may have the right to:

  • Access your personal data

  • Correct inaccurate information

  • Request deletion of your data

  • Request restriction of processing

  • Object to certain processing

  • Receive your data in a portable format

  • Withdraw consent where processing is based on consent

To exercise your rights, please contact us using the contact details provided on the Platform.

9. Complaints

If you believe your personal data is being processed unlawfully, you may complain to the Danish Data Protection Agency (Datatilsynet).

10. Changes to This Policy

We may update this Privacy Policy when necessary due to changes in our services, processing activities or applicable legislation.

The latest version will always be available on the Platform.

11. Contact

For questions regarding this Privacy Policy or the processing of your personal data, please contact us through the contact details provided on the Platform.