Privacy Policy.

In the following, we provide information about the collection of personal data when using:

• our website dineri.app
• our profiles in social media

Personal data is any data that can be related to a specific natural person, such as their name or IP address.

The controller within the meaning of Art. 4 para. 7 EU General Data Protection Regulation (GDPR) is Dineri. You may reach us at info@dineri.app.

We collect and process personal data only to the extent necessary for providing our services and improving user experience. This includes:

If you run a venue on Dineri:

• Account details - your name, email address and password
• Venue details you publish - address, opening hours, menu, photos and links
• Billing records held with our payment provider for your subscription
• Technical information such as your browser, device and IP address

If you are a guest visiting a venue page:

• Details you enter to make a booking or place an order - typically a name, email address, phone number and any note you add, such as an allergy
• Payment details, which are handled by Stripe and never reach our servers
• Aggregated page statistics, such as how many people viewed a menu or scanned a QR code

We do not ask for special category data. Please avoid entering health information in a booking note beyond what a venue needs to serve you safely.

We do not sell or trade your personal data, and we do not share it for advertising. We do rely on a small number of service providers who process data on our behalf, under contract and only on our instructions:

• Stripe - payment processing for subscriptions, deposits and online orders. Card details are handled by Stripe and never reach our servers.
• Amazon Web Services (S3) - storage of images and files uploaded to a venue page.
• Google - sign-in with Google, and address lookup when a venue enters its location.
• Our database and cache providers - hosting of account, menu, booking and order records, and short-lived counters used for visitor statistics and rate limiting.
• Our email provider - delivery of account emails and booking or order confirmations.

Where a venue connects its own Stripe account, payments for that venue are made directly to the venue and Stripe acts for them as well as for us.

For guest data collected through a venue page - a booking name, contact details or an order - the venue is the controller and Dineri acts as its processor. A Data Processing Agreement is available to every merchant on request.

Under GDPR, you have the following rights regarding your personal data:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

We take the security of your personal data seriously. We have implemented technical and organizational measures to protect your personal data from unauthorized access, loss, misuse, or alteration.

Despite these efforts, no security measures are completely foolproof. Therefore, we cannot guarantee the absolute security of your data.

We set a small number of cookies: one to keep you signed in, one to remember your language, and one to remember whether the dashboard sidebar is open. We do not use advertising, profiling or cross-site tracking cookies, and we run no third-party advertising or analytics pixels on this website.

Visitor statistics for venue pages are counted on our servers rather than in your browser. Each is a short-lived, aggregated count and is not used to build a profile of you. Full details of every cookie we set are in our Cookies Policy.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law. When your data is no longer needed, we will securely delete or anonymize it.

Your personal data may be transferred to, and processed in, a country outside of the European Economic Area (EEA). We will ensure that any such transfers are in compliance with applicable data protection laws, and appropriate safeguards will be in place to protect your data.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make changes, we will update the "Last updated" date at the top of this page.

Please review this Privacy Policy periodically to stay informed about how we are protecting your data.

If you have any questions about this Privacy Policy or wish to exercise any of your rights regarding your personal data, please contact us at:

info@dineri.app