Privacy policy

Version 1.0. Draft, legal review required.

Who is responsible for your data

When you order food through a restaurant's page on TakeAwayer, the restaurant is the controller of your order details. Marx Media AB, company registration number 556942-0796, processes the data as a processor and is the controller of data about the restaurants' own accounts.

What data we process and why

  • When you order: name, telephone number, email address, any message, and the contents of the order. Legal basis: performance of a contract (handling and confirming your order).
  • Restaurant accounts: contact details and billing details. Legal basis: contract and legal obligation (accounting).
  • Technical data: the logs necessary for operation and security. Legal basis: legitimate interest.
  • Visit statistics: how many visits there are, which pages are shown, where the visitor came from and which country the visit is made from. Measured by Umami, without cookies and without storing anything in your browser, and the figures are aggregated - they do not identify you. Legal basis: legitimate interest.

How long the data is kept

Order details are anonymised automatically 90 days after the order. Name, telephone number, email address and message are deleted; the amount of the order is kept anonymously for the restaurant's accounts. Accounting records are kept for 7 years under the Swedish Accounting Act.

Who has access to the data

The restaurant you order from, and our suppliers of hosting and email within the EU/EEA or under a valid transfer mechanism. The suppliers are named in Annex B to our data processing agreement. We never sell personal data and do not use it to market to guests.

The restaurant's own subscription and billing details are also handled by Stripe, our payment provider. Guests' order details are never passed to Stripe.

Your rights

You have the right of access, rectification, erasure, restriction and data portability, and the right to object to processing. Contact help@takeawayer.com. You may also lodge a complaint with the Swedish Authority for Privacy Protection (IMY).