This translation is for information; the German version is legally binding.
The controller within the meaning of data protection law, in particular the EU General Data Protection Regulation (GDPR), is:
MENURY
CPW Software, S.L.
Calle Rioja 13, 1.º C
41001 Sevilla, Spain
MENURY has appointed a data protection officer, who can be reached at datenschutz@menury.com
Your rights as a data subject
You can exercise the following rights at any time using the contact details of our data protection officer given above:
- access to the data we hold about you and how it is processed (Art. 15 GDPR),
- rectification of inaccurate personal data (Art. 16 GDPR),
- erasure of the data we hold about you (Art. 17 GDPR),
- restriction of processing where we are not yet allowed to erase your data because of legal obligations (Art. 18 GDPR),
- objection to the processing of your data by us (Art. 21 GDPR) and
- data portability, where you have consented to the processing or have concluded a contract with us (Art. 20 GDPR).
Where you have given us your consent, you can withdraw it at any time with effect for the future.
You can lodge a complaint with a supervisory authority at any time, for example with the competent supervisory authority of the German federal state in which you live or with the authority responsible for us as the controller.
A list of the supervisory authorities (for the non-public sector) with their addresses is available at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Use of Google Maps
Nature and purpose of the processing:
On this website we use Google Maps. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google"). This allows us to show you interactive maps directly on the website and makes it easy for you to use the map function.
Further information on how Google processes data can be found in Google's privacy notice. There, in the privacy centre, you can also change your personal privacy settings.
Detailed instructions on managing your own data in connection with Google products are available directly from Google.
The legal basis for embedding Google Maps and the associated transfer of data to Google is your consent (Art. 6(1)(a) GDPR).
Recipients:
When you visit the website, Google receives the information that you have accessed the relevant page of our website. This happens regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data is assigned directly to your account.
If you do not want the data to be assigned to your Google profile, you must log out of Google before activating the button. Google stores your data as usage profiles and uses them for advertising, market research and/
Storage period:
We do not collect any personal data through the embedding of Google Maps.
Transfer to third countries:
Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
Withdrawal of consent:
If you do not want Google to collect, process or use data about you via our website, you can deactivate JavaScript in your browser settings. In that case, however, you will not be able to use our website, or only to a limited extent.
Whether provision is required by law or contract:
You provide your personal data voluntarily, solely on the basis of your consent. If you prevent access, this may limit the functions of the website.
Embedded YouTube videos
On some of our web pages we embed YouTube videos. The operator of the relevant plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter "YouTube"). When you visit a page with the YouTube plugin, a connection to YouTube's servers is established. In the process, YouTube is told which pages you visit. If you are logged in to your YouTube account, YouTube can link your browsing behaviour to you personally. You can prevent this by logging out of your YouTube account beforehand.
When a YouTube video is started, the provider uses cookies that collect information about user behaviour.
Further information on the purpose and scope of data collection and processing by YouTube can be found in the provider's privacy policy, where you will also find further information on your rights in this respect and the settings available to protect your privacy (https://policies.google.com/privacy). Google processes your data in the USA and has submitted to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework
Legal basis:
The legal basis for embedding YouTube and the associated transfer of data to Google is your consent (Art. 6(1)(a) GDPR).
Recipients:
Accessing YouTube automatically establishes a connection to Google.
Storage period and withdrawal of consent:
If you have deactivated the storage of cookies for the Google ad programme, you will not receive such cookies when watching YouTube videos either. However, YouTube also stores non-personal usage information in other cookies. If you want to prevent this, you must block the storage of cookies in your browser.
Further information on data protection at "YouTube" can be found in the provider's privacy policy at: https://www.google.de/intl/de/policies/privacy/
Transfer to third countries:
Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
Whether provision is required by law or contract:
You provide your personal data voluntarily, solely on the basis of your consent. If you prevent access, this may limit the functions of the website.
Social plugins
Our web pages use social plugins from the providers listed below. You can recognise the plugins by the corresponding logo.
These plugins may send information, which may include personal data, to the service operator, and the operator may use it. We prevent the unintentional and unwanted collection and transfer of data to the service provider with a two-click solution. To use a social plugin, you first have to activate it by clicking the corresponding switch. Only this activation of the plugin triggers the collection of information and its transfer to the service provider. We ourselves do not collect any personal data by means of the social plugins or their use.
We have no influence on what data an activated plugin collects and how the provider uses it. At present it must be assumed that a direct connection to the provider's services is established and that at least the IP address and device-related information are collected and used. It is also possible that the service providers try to store cookies on the computer used. Please refer to the privacy notices of the respective service provider to find out which specific data is collected and how it is used. Note: if you are logged in to Facebook at the same time, Facebook can identify you as a visitor to a particular page.
We have integrated the social media buttons of the following companies on our website:
Google AdWords
Our website uses Google conversion tracking. The company operating the Google AdWords services is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you have reached our website via an advertisement placed by Google, Google AdWords sets a cookie on your computer. The conversion tracking cookie is set when a user clicks on an advertisement placed by Google.
If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognise that the user clicked on the advertisement and was forwarded to this page. Every Google AdWords customer receives a different cookie. Cookies therefore cannot be tracked across the websites of AdWords customers. The information obtained using the conversion cookie is used to compile conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their advertisement and were forwarded to a page with a conversion tracking tag. However, they do not receive any information that can be used to identify users personally.
Legal basis:
The legal basis for embedding Google AdWords and the associated transfer of data to Google is your consent (Art. 6(1)(a) GDPR).
Recipients:
Each time you visit our website, personal data, including your IP address, is transferred to Google in the USA. This personal data is stored by Google. Google may pass on the personal data collected through this technical procedure to third parties.
Our company does not receive any information from Google that could be used to identify the data subject.
Storage period:
These cookies expire after 30 days and are not used for personal identification.
Transfer to third countries:
Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
Withdrawal of consent:
If you do not want to take part in tracking, you can refuse the cookie required for it, for example with a browser setting that generally deactivates the automatic setting of cookies, or by setting your browser to block cookies from the domain "googleleadservices.com".
Please note that you must not delete the opt-out cookies for as long as you do not want measurement data to be recorded. If you have deleted all your cookies in the browser, you must set the respective opt-out cookie again.
Whether provision is required by law or contract:
You provide your personal data voluntarily, solely on the basis of your consent. If you prevent access, this may limit the functions of the website.
Use of Google Remarketing
This website uses the remarketing function of Google Inc. The company operating the Google Remarketing services is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google").
The function is used to show website visitors interest-based advertisements within the Google advertising network. A so-called "cookie" is stored in the website visitor's browser, which makes it possible to recognise the visitor when they access websites that belong to Google's advertising network. On these pages, the visitor may be shown advertisements relating to content that the visitor previously accessed on websites that use Google's remarketing function.
Legal basis:
The legal basis for embedding Google Remarketing and the associated transfer of data to Google is your consent (Art. 6(1)(a) GDPR).
Recipients:
Each time you visit our website, personal data, including your IP address, is transferred to Google in the USA. This personal data is stored by Google. Google may pass on the personal data collected through this technical procedure to third parties.
Our company does not receive any information from Google that could be used to identify the data subject.
Withdrawal of consent:
According to its own information, Google does not collect any personal data in this process. If you nevertheless do not want Google's remarketing function, you can generally deactivate it by changing the relevant settings at https://support.google.com/adwordspolicy/answer/143465. Alternatively, you can deactivate the use of cookies for interest-based advertising via the Network Advertising Initiative by following the instructions at https://www.networkadvertising.org/managing/opt_out.asp.
Whether provision is required by law or contract:
You provide your personal data voluntarily, solely on the basis of your consent. If you prevent access, this may limit the functions of the website.
Google AdSense
This website uses Google AdSense, a service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, for embedding advertisements. Google AdSense uses cookies. These are files which, when stored on your PC, allow Google to analyse data about your use of our website. Google AdSense also uses web beacons, invisible graphics that allow Google to analyse clicks on this website, traffic on it and similar information.
The information obtained through cookies and web beacons, your IP address and the delivery of advertising formats are transmitted to a Google server located in the USA and stored there. Google may pass this collected information on to third parties where this is required by law or where Google commissions third parties to process the data. However, Google will combine your IP address with the other stored data.
You can prevent these cookies from being stored on your PC by changing the relevant settings in your internet browser. However, you may then no longer be able to use the content of this website to the same extent. By using this website, you consent to Google processing the data collected about you in the manner and for the purpose described above.
AWIN affiliate programme
On the basis of your express consent pursuant to Art. 6(1)(a) GDPR, we use components of the company AWIN on our website. AWIN is a German affiliate network and acts as an interface between retailers (merchants) and sales partners (affiliates).
Affiliate marketing is an internet-based form of sales that allows commercial website operators, known as merchants or advertisers, to display advertising, which is usually remunerated through click or sale commissions, on third-party websites, that is, on the sites of sales partners, who are also called affiliates or publishers. Via the affiliate network, the merchant provides an advertising medium, such as an advertising banner or another suitable means of internet advertising, which an affiliate then embeds on its own websites or promotes through other channels, such as keyword advertising or e-mail marketing.
The company operating AWIN is AWIN AG, Eichhornstraße 3, 10785 Berlin, Germany.
AWIN sets a cookie on the data subject's information technology system. What cookies are has already been explained above. The AWIN tracking cookie does not store any personal data. It only stores the identification number of the affiliate, that is, of the partner referring the potential customer, as well as the sequence number of the website visitor and of the advertising medium clicked. The purpose of storing this data is to process commission payments between a merchant and the affiliate, which are handled through the affiliate network, that is, AWIN.
As explained above, the data subject can prevent our website from setting cookies at any time by means of a corresponding setting in the internet browser used, and thus permanently object to the setting of cookies. Such a setting in the internet browser used would also prevent AWIN from setting a cookie on the data subject's information technology system. In addition, cookies already set by AWIN can be deleted at any time via an internet browser or other software programs.
AWIN's applicable privacy policy can be found at https://www.awin.com/de/rechtliches/privacy-policy.
AI connection (linking AI assistants)
Nature and purpose of the processing:
Owners of a MENURY account with Premium can connect a third-party AI assistant (for example Claude by Anthropic or ChatGPT by OpenAI) to their menu in order to read and edit it through the assistant. You set up the connection yourself in the respective assistant; MENURY provides an interface based on the Model Context Protocol (MCP) for this. When connecting, you sign in to MENURY and confirm on an approval page which permissions the assistant receives (read only, or read and edit). MENURY transmits to the assistant only the data it retrieves or changes on your behalf: the names and MENURY IDs of your restaurants and the contents of your menus (categories, dishes, descriptions, prices, variants, allergens and properties, visibility). Guest data, reservations, orders, invoices and login credentials are not transmitted. For each connection we store the name and web address of the assistant, the signed-in account, the time of approval and of the last use, and a log of the changes made through the assistant (previous and new state, time).
Legal basis:
Art. 6(1)(b) GDPR (performance of the contract for the use of the restaurant portal at your request). The change log and the limits on access are based on our legitimate interest in the security and traceability of the service (Art. 6(1)(f) GDPR).
Recipients:
The provider of the AI assistant you have chosen. It processes the retrieved content under its own terms and its own privacy policy, which apply between you and the provider. MENURY has no influence on this.
Storage period:
The assistant's access authorisation ends after 30 days without use or as soon as you disconnect. We delete the connection data shortly after disconnection. We keep the change log for as long as your account exists.
Transfer to third countries:
Depending on the provider you choose, the retrieved content may be transferred to third countries, such as the USA. The transfer takes place at your instigation by connecting the assistant; the safeguards for the transfer follow from the provider's terms.
Withdrawal of consent:
You can disconnect at any time in the restaurant portal under Settings › Integrations or remove the access in the assistant itself. After that the assistant can no longer access your data.
Whether provision is required by law or contract:
Using the AI connection is voluntary. Without it you can use the restaurant portal without restriction.
The “MENURY” app for iOS and Android
Nature and purpose of the processing:
With the “MENURY” app from Apple’s App Store and Google Play, restaurant owners and staff use the MENURY restaurant portal on a smartphone or tablet. The app displays the restaurant portal from menury.com. We process the same data as when you use the portal in a browser, for example your account data (name, email address, phone number), the data of your restaurants and menus, uploaded photos, and orders, reservations and invoices. In addition, the following applies in the app:
- Notifications: If you allow notifications, your device registers with our push notification provider after you sign in. This involves a notification identifier of the device, an identifier derived from your account number, and technical details such as app version, device type, operating system, language and time zone. We use this to inform you about new orders and reservations. The app does not collect your location.
- Sign-in with Google or Apple: If you choose this sign-in, the app opens the sign-in window of the operating system. Google or Apple then send us your name and email address; we do not receive your Google or Apple password. If you delete your account, we revoke the link to your Apple account.
- App lock: If you wish, you can protect the app with Face ID, Touch ID or a fingerprint. The check is carried out by the operating system on your device; we do not receive any biometric data. The app stores this setting only on the device.
- Setting up the MENURY Cast S: The app uses Bluetooth for this. The app sends the name and password of your Wi-Fi network directly to the Cast S; this information is not transmitted to our servers.
- Receipt printers (Android only): If you use the print function, the app fetches new receipts from our server and sends them to your printers on the local network, even while the app runs in the background. The app stores the printer keys required for this on the device.
- Camera and photos: The app accesses the camera and photos only when you take or select a picture yourself, for example for a dish, your logo or a menu import.
- Error and usage analysis: As in the restaurant portal in a browser, we record errors and technical performance data with Sentry and the use of individual features with PostHog, in each case only for signed-in users and together with your account number. Recordings of individual sessions are masked; texts and entries cannot be read in them.
Legal basis:
Art. 6(1)(b) GDPR for the app features you use (contract for the restaurant portal). You receive notifications only if you have allowed them in the operating system (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Error and usage analysis is based on our legitimate interest in a stable and understandable service (Art. 6(1)(f) GDPR).
Recipients:
OneSignal, Inc. (USA) for delivering notifications; Functional Software, Inc. (Sentry, USA, error data stored in the EU) for error analysis; PostHog Inc. (USA, data stored in the EU) for usage analysis; Google or Apple if you sign in with these accounts. Our service providers process the data on our behalf in accordance with Art. 28 GDPR. Apple (App Store) and Google (Google Play) handle the download and updates of the app under their own responsibility.
Storage period:
The registration for notifications remains in place until you sign out of the app, turn off notifications, delete the app or delete your account. We delete error and usage data as soon as they are no longer needed for troubleshooting and improvement, at the latest when the retention period of the respective service ends. We store all other data as in the restaurant portal for as long as your account exists.
Transfer to third countries:
OneSignal, Sentry and PostHog are based in the USA. The transfer is based on EU standard contractual clauses (Art. 46(2)(c) GDPR) or on the provider’s certification under the EU-US Data Privacy Framework.
Withdrawal of consent:
You can turn off notifications in the app under Settings › App or in the settings of the operating system, and the app lock also under Settings › App. You can delete your account in the app under Settings › Account or as described at menury.com/
Whether provision is required by law or contract:
A MENURY account is required to use the app. Notifications, app lock, Bluetooth, camera and the print function are optional.
The “MENURY Screens” app and screens
Nature and purpose of the processing:
With the “Screens” feature, restaurants show their menu, specials, images and videos on TVs. For this, the TV displays the page menury.com/
On first start, the screen shows a code. When you enter it in the restaurant portal, the screen receives an access key that is stored only on the device; we store only a check value of it. The screen then asks our server for new content about every 45 seconds and reports the app version, the slide currently shown, screen size and pixel density, the browser identifier (with manufacturer, model and operating system version), memory usage, the start time, the number of images and videos that could not be loaded, the latest error messages of the player and the storage used. We also store the IP address and the time of the last connection. The MENURY Cast S additionally reports its serial number, model, software version, temperature, Wi-Fi signal strength, its address on the local network, uptime, free storage and the state of the TV; a screenshot is only taken when you request it in the restaurant portal.
We use these data to deliver the content, to show you in the restaurant portal whether and on which device a screen is running, and to fix errors. The screen does not process any guest data.
Legal basis:
Art. 6(1)(b) GDPR (contract for the restaurant portal). The evaluation of error messages and the storage of the IP address are based on our legitimate interest in secure and trouble-free operation (Art. 6(1)(f) GDPR).
Recipients:
The screen loads images and videos via Amazon CloudFront; we store screenshots of the Cast S with Amazon Web Services in Frankfurt. We evaluate error messages of the player in our server logs and with Sentry (Functional Software, Inc., data stored in the EU). These service providers process the data on our behalf in accordance with Art. 28 GDPR.
Storage period:
A code is valid for ten minutes and is deleted no later than one day after it expires. Each new connection overwrites the reported device data and the IP address. If you remove a screen in the restaurant portal, we disconnect it immediately and delete its device data and the stored IP address; when your account is deleted, we also delete your screens. We delete commands to screens after 30 days and server logs after 14 days. A new screenshot replaces the previous one.
Transfer to third countries:
Amazon Web Services and Sentry are based in the USA. The transfer is based on EU standard contractual clauses (Art. 46(2)(c) GDPR) or on the provider’s certification under the EU-US Data Privacy Framework.
Withdrawal of consent:
You can remove a screen at any time in the restaurant portal under Screens. It then no longer receives content and no longer transmits data.
Whether provision is required by law or contract:
Using screens is optional. Without the data described, a screen cannot show any content.
SSL encryption
To protect the security of your data during transmission, we use encryption methods that correspond to the current state of the art (e.g. SSL) via HTTPS.
Changes to our privacy policy
We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to reflect changes to our services in the privacy policy, for example when introducing new services. The new privacy policy will then apply to your next visit.
Questions for the data protection officer
If you have any questions about data protection, please send us an e-mail or contact the person responsible for data protection in our organisation directly:
This privacy policy was drawn up with the support of activeMind AG, Flughafen Dortmund GmbH.