1. Data Controller

Personal data obtained through the fooddirekt.com website ("Site") is processed, as data controller, by FOOD DIREKT OÜ ("FoodDirekt" or the "Company"), whose details are set out below. As an Estonian company, FoodDirekt is directly subject to the EU General Data Protection Regulation (GDPR), and applies GDPR-level standards to all visitors of the Site regardless of where they are located.

FOOD DIREKT OÜ
Registry Code: 16843195
Address: Harju maakond, Tallinn, Põhja-Tallinna linnaosa, Paavli tn 5a/1, 10412, Estonia
Email: info@fooddirekt.com

FoodDirekt is a company incorporated in Estonia that provides an ordering and business management platform for restaurants currently operating in Turkey, Sweden and Albania. This notice concerns the processing of personal data of people who visit the Site, request a demo, or fill in a contact form; the processing of data belonging to the end customers of restaurants that use FoodDirekt's services is governed by a separate service agreement and data processing terms between the relevant restaurant and FoodDirekt.

2. Important Note About Restaurant Customers' Data

Personal data that restaurants using FoodDirekt's services (via the QR menu, online ordering, WhatsApp bot, etc.) collect from their own customers (e.g. name, phone number, or address entered when placing an order) is outside the scope of this Data Protection Notice. For this data, under GDPR, the restaurant itself is the data controller; FoodDirekt acts solely as a data processor, operating the technical infrastructure on the restaurant's instructions. If you are a customer who has placed an order through a restaurant, you should contact that restaurant directly to exercise your rights.

3. Categories of Personal Data We Process

  • Identity and Contact Information: Full name, restaurant/business name, phone number, email address — when you fill in the "We'll Call You" or contact forms on the Site.
  • Transaction Security Information: Technical data transmitted by your browser when submitting a form (e.g. date/time information), used only in a limited way to prevent misuse.

The Site does not collect special category personal data such as payment card details or national identification numbers. The Site does not currently use analytics cookies or tracking technologies of any kind — see our Cookie Policy for details of the limited functional browser storage we do use.

4. Purposes of Processing

  • To evaluate your demo request or contact request and get in touch with you
  • To provide information about FoodDirekt's services in response to your request
  • To keep a record of communications between you and the Company and follow up on your request
  • To comply with legal obligations and respond to legal claims
  • To analyze Site usage on a statistical basis and improve the Site

5. Legal Basis

Your personal data is processed on the basis of Article 6(1) of the GDPR, specifically: (b) processing necessary for the performance of a contract to which you are party, or to take steps at your request prior to entering into a contract; (c) processing necessary for compliance with a legal obligation to which the Company is subject; and (f) processing necessary for the purposes of the legitimate interests pursued by the Company, provided these do not override your fundamental rights and freedoms. Where these grounds are not sufficient, your explicit consent will be requested separately.

6. International Data Transfers

As FoodDirekt is headquartered in Estonia, personal data you submit through the Site may be processed by the Company's team in Estonia (within the EU/EEA) for the purpose of evaluating and responding to your request. Where any transfer of personal data outside the EU/EEA is required, we apply appropriate safeguards in line with GDPR requirements. Other than as described in this notice, your data is not shared with third parties for commercial purposes or sold.

7. Retention Period

Your personal data is retained for as long as necessary for the purpose it was collected for, subject to any statutory limitation periods under applicable law; once the purpose no longer applies, it is deleted, destroyed, or anonymized.

8. Your Rights as a Data Subject

Under Articles 15–22 of the GDPR, you have the right to: request access to your personal data and information about how it is processed; request rectification of inaccurate or incomplete data; request erasure of your data ("right to be forgotten"); request restriction of processing; receive your data in a structured, commonly used format and request its transfer (data portability); object to processing based on our legitimate interests; and not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. You also have the right to lodge a complaint with a supervisory authority — as our Company is established in Estonia, you may contact the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), or alternatively the data protection authority in your own country of residence.

9. How to Exercise Your Rights

You can submit requests relating to the rights above, together with information to verify your identity, in writing to info@fooddirekt.com. Your request will be handled as promptly as possible and, in any event, within the timeframes required by applicable law.