When you order or contact us

When you order, we process your name, phone number, email address, order, side selections and preferred time. For delivery, we also use the delivery address. If you leave an order note or contact us, we process the information you provide.

We use this information to receive and prepare your order, arrange collection or delivery, send order confirmations and status messages, and help with order enquiries. Payment is made on collection or delivery; you do not enter payment card details in our online shop.

You can order as a guest. If you create a customer account, we save your account and contact information so you can log in and view your order history. An account is not required to place an order.

What is our legal basis?

• Orders and customer accounts: To fulfil our contract with you or handle your request before an order, under Article 6(1)(b) of the GDPR.
• Bookkeeping: To meet legal accounting and record-keeping requirements, under Article 6(1)(c).
• Customer service, operation and security: Our legitimate interest in responding to enquiries, preventing misuse and operating the website, under Article 6(1)(f). Technical information may include IP address, browser type and error or security events.
• Optional analytics: Your consent, under Article 6(1)(a). You can decline analytics and still use the menu and order food.

Who processes the information?

Our restaurant staff use the information needed to prepare, hand over or deliver your order. We also use providers for hosting, technical operation, security and communications:

• BulkGate (TOPefekt s.r.o.): Your phone number and message content are used for text messages about your order. Read BulkGate’s privacy policy.
• Twilio SendGrid: Your email address and email content are used to send order confirmations and other messages from the ordering system. Read Twilio’s privacy information.
• Analytics with your consent: With your permission, Google Analytics, Matomo on Best2Business’s analytics server, and Automattic’s Jetpack Stats and WooCommerce Analytics process analytics data. This includes pages visited, device, referral source and cookie identifiers, plus cart and checkout actions such as products, quantities, prices, order number, order total, and payment or delivery choices.

Google Maps on the contact page and Google Fonts are loaded from Google. Google therefore receives technical information, including your IP address, when these resources load. Links to Google, Facebook or Instagram take you to an external service with its own privacy information.

Some providers, including Twilio SendGrid, Google and Automattic, may process data outside the EU/EEA, including in the United States. Their information about international transfers and safeguards is available from Twilio, Google and Automattic. Contact us if you would like more information about how your data is processed.

Cookies and your choices

Necessary cookies keep track of the cart, checkout, login and your cookie choice. Optional analytics tools only load when you select “Allow analytics”. If you choose “Necessary only”, you can still order as usual.

Your choice is remembered for up to 180 days in this browser. You can change it or withdraw consent at any time through Cookie settings at the bottom of the page. Withdrawal stops future website analytics; it does not affect the lawfulness of processing already carried out with your consent.

Change cookie settings

How long do we keep information?

Order details are kept as a record of orders, for customer service and to handle possible claims. Accounting records normally have to be kept for 5 years after the end of the relevant financial year. A specific dispute or other legal obligation may require longer retention.

Automatic deletion of completed orders or inactive customer accounts is not configured. Contact us if you want your information reviewed or deleted. We assess what can be deleted and what we must retain, for example for accounting or an ongoing case.

The website’s outgoing email log rotates automatically after 57 days. This does not delete the order itself or emails in an inbox.

Your rights

Under data protection rules, you can ask to access your information, correct errors and, in some cases, have information deleted or processing restricted. You may also have the right to object and to receive your information in a commonly used, machine-readable format.

Email info@yummysushi.dk, to exercise your rights. We may ask for information needed to ensure we disclose or change the correct person’s data.

You can complain to the Danish Data Protection Agency. You can also read more about your rights from the Danish Data Protection Agency.