Privacy Policy
Controller
Beyer & Jdaa IPM Consulting GbR, Bahnhofstr. 76, 25715 Eddelak, Germany. Email: info@ipm-consulting.org.
Collection and storage of personal data
We process personal data depending on how you use the service: (1) waitlist/contact form — name, restaurant name, email address, and optionally country and message; (2) account data on sign-up — business name, email address, and a password stored as a bcrypt hash; (3) menu content you upload — photos, PDFs, or text of your menu, which may contain personal data; for that content the owner is the controller and we process it as a processor (Art. 28 GDPR); (4) payment data in connection with a paid subscription (via Stripe, see below); (5) technically necessary server log data when you visit the site.
Purpose of processing
We process this data to handle your request and to contact you about the product, to provide and administer your account and the contract, to render the content you upload as a website and as print-ready PDFs, and to ensure secure operation (Art. 6(1)(b) and (f) GDPR).
Hosting
Our website is hosted by Hetzner Online GmbH in Germany. A data-processing agreement (Art. 28 GDPR) is in place with the provider.
AI-assisted menu extraction (Pro/AI plan only)
On the AI/Pro plan you can upload a photo or PDF of your menu so its content is extracted automatically. To do this we send the upload to an AI provider (Anthropic by default; via OpenRouter where configured). This happens only at your instruction and only if you use this feature. The upload may be transferred to a third country (e.g. the USA); in that case we rely on appropriate safeguards under Art. 44 et seq. GDPR. The processing is based on a data-processing agreement (Art. 28 GDPR).
Payment processing
For paid subscriptions we use the payment provider Stripe. Your payment/card data is processed directly by Stripe; we ourselves store only the references and subscription status needed to administer the contract (Art. 6(1)(b) and (c) GDPR).
Processors and recipients
We do not sell your data. Beyond the processors named here, we disclose data only where required to perform a contract or where we are legally obliged to do so. Processors used: Hetzner Online GmbH (hosting, Germany); an AI provider (Anthropic; via OpenRouter where configured) used only on the AI/Pro plan to extract an uploaded menu (possible third-country transfer, see above); Stripe for payment processing. Data-processing agreements under Art. 28 GDPR are in place with, or will be concluded before production use with, these providers.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability, and objection (Art. 15–21 GDPR). Contact the email address above to exercise them.
Retention
We store personal data only as long as necessary for the stated purposes and delete it afterwards.
Cookies
We set only one technically necessary cookie to remember your language choice (gastroe_locale). There is no tracking or analytics.
Anonymous reach measurement
We count anonymously how often a restaurant's public page is viewed — aggregated per day and per business. No IP addresses, cookies, or profiles are stored; this is not personal data and does not track individuals.