Privacy Policy of DineAr
This Privacy Policy explains how DineAr Ltd., UIC 207808770, with registered office and address of management: 78 Makedonia Str., Burgas, 8000, processes personal data in connection with the use of the website, services, and platform DineAr.
To contact us:
Phone: +359 887 301 616
Email: dinearservice@gmail.com
1. Who We Are
DineAr is a service for creating and managing digital menus for restaurants, cafes, and other commercial premises. The menus can be accessed via QR code, NFC, or a direct link and, with enabled functionality, can also include the option to send orders.
The controller of personal data is:
DineAr Ltd.
UIC: 207808770
Address: 78 Makedonia Str., Burgas, 8000
Email: dinearservice@gmail.com
2. What Personal Data We Process
Depending on how you use our website or services, we may process the following categories of personal data:
2.1. Data of customers and potential customers
When you contact us, request a quote, demonstration, or use our services, we may process:
first and last name;
company or premises name;
phone number;
email address;
address of the premises;
information about communication with us;
information necessary for the preparation of an offer, contract, or invoice.
2.2. Data of digital menu users
When an end-user opens a digital menu via QR code, NFC, or a link, technical data may be processed, such as:
IP address;
device type;
browser;
approximate location based on technical data;
date and time of access;
pages or products viewed;
data on usage of the website or menu.
If the restaurant uses ordering functionality, data entered by the user when sending an order may also be processed, such as:
name;
phone number;
table number;
order notes;
order content.
This data is processed for the purpose of executing the service and providing the order to the respective restaurant.
2.3. Payment and billing data
Where applicable, we may process:
company details;
UIC/BULSTAT;
VAT number;
billing address;
information about selected subscription plan;
payment history.
We do not store full bank card data, unless explicitly stated otherwise by the payment services provider used.
3. For What Purposes We Process Personal Data
We process personal data for the following purposes:
provision, maintenance, and development of the DineAr service;
creation and management of digital menus;
providing access to the admin panel;
processing and transmitting orders, when this functionality is active;
communication with customers and potential customers;
preparation of offers, contracts, invoices, and accounting documents;
technical support and troubleshooting;
improving functionality, design, and user experience;
protection against abuse, unauthorized access, and security incidents;
compliance with legal obligations;
marketing communication when we have a valid legal ground.
4. Legal Basis for Processing
We process personal data on the following legal bases:
performance of a contract — when we provide our services to customers;
pre-contractual relations — when we respond to inquiries and prepare offers;
legal obligation — for example for accounting, tax, and invoicing purposes;
legitimate interest — to protect the service, improve the platform, communicate with business clients, and prevent abuse;
consent — for example, for certain marketing messages or non-essential cookies.
5. To Whom We May Disclose Personal Data
We may disclose personal data to:
hosting and cloud service providers;
email and communication service providers;
accountants and consultants;
payment service providers, when applicable;
technical subcontractors assisting with platform maintenance;
state authorities, when required by law;
the restaurant or premises to which an order has been sent via the digital menu.
When we use subcontractors, we require them to process personal data lawfully, securely, and only according to our instructions.
6. How Long We Store Data
We store personal data only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required by law.
Indicative periods:
data under contracts and invoices — according to the applicable accounting and tax deadlines;
data from inquiries — up to 24 months after the last communication, unless there is another necessity;
technical logs — for a reasonable period necessary for security and maintenance;
marketing data — until consent is withdrawn or an objection is raised.
7. How We Protect Personal Data
We implement technical and organizational measures to protect personal data, including:
restricted access to admin systems;
protection of accounts and passwords;
use of secure connections, where applicable;
access control to data;
regular technical maintenance;
measures to prevent unauthorized access, loss, or abuse.
However, no online system can guarantee absolute security.
8. Your Rights
Under applicable legislation, you have the right:
of access to your personal data;
to rectification of inaccurate or incomplete data;
to erasure of data, when legal grounds are met;
to restriction of processing;
to object to processing based on legitimate interest;
to data portability, where applicable;
to withdraw your consent at any time;
to lodge a complaint with the competent supervisory authority.
To exercise your rights, you can contact us at:
9. Complaints
If you believe that the processing of your personal data violates the applicable legislation, you have the right to lodge a complaint with:
Commission for Personal Data Protection
2 Prof. Tsvetan Lazarov Blvd., Sofia
Website: cpdp.bg
10. Changes to the Policy
We may periodically update this Privacy Policy. The current version will be published on our website.
