1. Controller
The controller for personal data on this website is Company name, address and contact email.
2. Hosting
This website and the OrderTap application run on servers of Hetzner Online GmbH in Germany. When you visit, the server processes technically necessary data such as IP address, time, requested address and browser identifier to deliver the page and protect it from attacks (Art. 6(1)(f) GDPR). Server log retention period
3. Cookies and local storage
This website sets no cookies for advertising or analytics and includes no tracking services. Only technically necessary information is stored: your chosen language and – after you sign in – the session cookie that keeps you signed in (§ 25(2) TDDDG).
Audience measurement without cookies: to know how many people read this website and where they come from, our own server counts page views – with no cookie, no script and nothing stored on your device. It counts the page, the domain of the referring website and any utm_source tag. So that a visit counts once a day, a hash is made from your IP address, browser identifier and a random value that changes daily; it is kept for at most 48 hours and never stored with the counts. Only daily totals without personal data are stored, for at most 400 days (Art. 6(1)(f) GDPR, legitimate interest in improving our offer). Check: wording and legal basis
Fonts are loaded from our own server; no data is passed to third parties for that.
4. Beta access requests
When you request beta access through the form, we process the details you give (business name, contact person, email, optionally phone, city and message) to handle your request and set up a workspace (Art. 6(1)(b) GDPR). Retention period for declined requests
5. Sending email
Emails to confirm your address, reset your password and invitations are sent through Brevo (Sendinblue SAS, France). Your email address and the message content are passed to Brevo. Reference to data processing agreement
6. Your account and use of the application
For an account we process your name, email address and sign-in data (password as a hash, or a passkey), as well as the data you record in OrderTap for your restaurant. You, as the restaurant, are the controller for your guests' and staff's data; we process it on your behalf. Reference to customer data processing agreement
To improve OrderTap, the application counts how often its features are used and how fast screens load on real devices – as daily totals per feature and kind of device across all restaurants together, with no names, no device or restaurant identifier, no time of day and nothing anybody typed. Counts are kept for at most 400 days, load times for at most 90 days. Check: mention in the data processing agreement
7. Error monitoring
So that errors are found and fixed quickly, the server and the application report technical errors to Sentry (Functional Software, Inc.). We send the error message, technical trace data, the affected screen as a template (without its address or identifiers) and the kind of device. Email addresses, phone numbers, identifiers and access codes are removed first; no user data is sent (Art. 6(1)(f) GDPR). Check: Sentry data region, data processing agreement, retention
8. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR), and the right to lodge a complaint with a data protection authority. Competent supervisory authority
9. Last updated
Date