This policy explains what personal data Hays’s restaurant processes when you order takeaway from us — online or through our staff app.
Data controller
Hays’s restaurant. Phone . You are always welcome to contact us about your data.
What we collect
When you place an order we ask for your name and phone number, so we can recognise you at pickup and call you if there is a question about the order. We also store the order itself, any message to the kitchen, your language preference and the times involved. For technical reasons we record your IP address and a random id stored in your browser — both solely to limit abuse and fake orders.
Purpose and legal basis
We use this data to receive, prepare and hand over your order. The legal basis is performance of our contract with you, GDPR Article 6(1)(b). IP address and device id are processed under our legitimate interest in preventing abuse, Article 6(1)(f).
Payment
Payment happens in the restaurant at pickup. We therefore never receive, collect or store any card or payment details whatsoever.
Sharing
We never sell or rent your data. Orders are processed on our own server and printed on the restaurant’s receipt printer. Your data is not passed to third parties for marketing.
Retention
Orders are kept for as long as needed to run the restaurant and to satisfy applicable bookkeeping rules, and are deleted afterwards.
The staff app
The staff app is a work tool for restaurant staff and requires a login. Login details and a notification token are stored securely on the device itself, so staff can be alerted to new orders. The app contains no tracking, analytics or advertising, and collects no information about the user beyond what is needed to sign in and receive notifications.
Cookies
We use no analytics, statistics or advertising cookies, and share no data with ad networks. We store only your language preference and the device id described above.
Your rights
You have the right to access the data we hold about you and to have it corrected or erased. You may also ask us to restrict or object to the processing. Contact us to exercise any of these rights. You can complain to the Danish Data Protection Agency, Carl Jacobsens Vej 35, 2500 Valby — datatilsynet.dk.
Contact
Call us on .