Uvod

zapfood ("mi", "naš" ili "nas") posvećen je zaštiti vaše privatnosti. Ova Pravila o privatnosti objašnjavaju kako prikupljamo, koristimo, otkrivamo i čuvamo vaše podatke kada koristite našu platformu za upravljanje restoranom.

Kontrolor podataka

Supersite (business ID: 2629485-2), operating the zapfood platform, is the data controller responsible for your personal data. Address: Säveltie 1 F 6, 01390 Vantaa, Finland. We determine how and why your personal data is processed.

Legal Basis for Processing

We process your personal data based on: (a) contractual necessity — to provide the services you have subscribed to; (b) legitimate interest — to improve our platform, prevent fraud, and ensure security; (c) legal obligation — to comply with tax, accounting, and other regulatory requirements; (d) consent — for marketing communications and optional analytics, which you may withdraw at any time.

Informacije koje prikupljamo

Prikupljamo podatke koje nam dajete izravno, uključujući:

• Podaci o računu (ime, adresa e-pošte, lozinka)
• Poslovni podaci (naziv restorana, adresa, kontakt podaci)
• Payment information (processed securely through our payment providers)
• Podaci o korištenju (kako komunicirate s našom platformom)
• Kolačići i podaci o praćenju (pogledajte našu Politiku kolačića)

Kako koristimo vaše podatke

Podatke koje prikupljamo koristimo za:

• Pružati, održavati i poboljšavati naše usluge
• Obrada plaćanja i upravljanje pretplatama
• Šalje vam ažuriranja, sigurnosna upozorenja i poruke podrške
• Analizirajte obrasce korištenja kako biste poboljšali našu platformu
• Poštujte zakonske obveze

Dijeljenje informacija

Vaše podatke možemo podijeliti sa:

• Payment processors (Stripe, Paytrail, Visma Pay) for secure payment handling
• Email service providers for transactional communications
• Pružatelji analitike za poboljšanje naših usluga
• Cloud hosting pružatelji usluga za pohranu podataka
• File storage providers for uploaded content (images, documents)

International Data Transfers

Some of our service providers may process data outside the EU/EEA. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, to protect your personal data in accordance with GDPR requirements.

Zadržavanje podataka

We retain your personal data for as long as your account is active or as needed to provide you services. Accounting and transaction data is retained for 6 years as required by Finnish Accounting Act (kirjanpitolaki). After account deletion, personal data is removed promptly, except where retention is required by law.

Vaša prava

Prema GDPR-u imate sljedeća prava:

• Pravo na pristup vašim osobnim podacima
• Pravo na ispravak netočnih podataka
• Pravo na zahtjev za brisanje vaših podataka
• Pravo na prenosivost podataka
• Pravo na ograničenje obrade
• Pravo na prigovor na obradu
• Right to withdraw consent at any time, where processing is based on consent
• Right to lodge a complaint with the Finnish Data Protection Ombudsman (tietosuojavaltuutetun toimisto, tietosuoja.fi)

Sigurnost

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption of data in transit and at rest, regular security assessments, and access controls.

Kolačići

Koristimo kolačiće i slične tehnologije praćenja. Svojim postavkama kolačića možete upravljati putem našeg natpisa pristanka na kolačiće.

Kontaktirajte nas

For any questions about this Privacy Policy or to exercise your rights, please contact us: Supersite (business ID: 2629485-2), Säveltie 1 F 6, 01390 Vantaa, Finland. Email: [email protected]

Promjene ove politike

We may update this Privacy Policy from time to time. We will notify you of material changes with reasonable advance notice by email and by posting the updated policy on this page with a new "Last updated" date.