Privacy

This privacy policy explains what personal data we collect, process and store when you use simpli.menu and dashboard.simpli.menu.

Jannik Thieme

c/o IP-Management #11157

Ludwig-Erhard-Straße 18

20459 Hamburg, Germany

Email: info@simpli.menu

When registering and using simpli.menu, we collect:

– Email address and password (encrypted) for authentication

– Display name / account holder name

– Restaurant name, address and description

– Profile and restaurant images you upload

– Menu content (dishes, categories, prices, allergens)

– Payment data (processed directly via Stripe — we do not store credit card details)

Legal basis: Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(f) GDPR (legitimate interests). Data is not shared with third parties for advertising purposes.

We store your personal data only for as long as necessary for the purposes described above:

– Account and menu data: for the duration of the contractual relationship. When you delete your account, your account and the associated restaurant and menu data are deleted immediately and permanently; recovery is not possible afterwards.

– Data relevant under commercial and tax law (e.g. invoice data): 10 years pursuant to § 147 AO, § 257 HGB (German Fiscal Code / Commercial Code).

– Server logs: 30 days (see Section 8).

If you withdraw your consent to Google Analytics: data collection stops immediately; already collected, anonymized data is processed according to Google's deletion schedules.

We use Firebase by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for:

– Firebase Authentication: user account management

– Cloud Firestore: storage of restaurant and menu data

– Firebase Storage: storage of images and media files

– Firebase Cloud Functions: server-side processing

Data may be transferred to the USA under the EU-US Data Privacy Framework. More: https://firebase.google.com/support/privacy

Payments are processed by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin, Ireland. We do not store full credit card details.

Legal basis: Art. 6(1)(b) GDPR. More: https://stripe.com/privacy

For AI translation and allergen detection, we use Google Vertex AI by Google Ireland Limited. Only menu content is transmitted — no personal guest data.

Legal basis: Art. 6(1)(f) GDPR.

We use Google Analytics (GA4) by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland to analyze the use of simpli.menu. We collect:

– Anonymized usage and interaction data (e.g. pages visited, time on page, clicks)

– Device and browser information

– Approximate location (city/region level)

– IP address (truncated/anonymized before storage)

Legal basis: your consent under Art. 6(1)(a) GDPR, given or declined via our cookie banner. Without consent, no analytics cookies are set and no data is transmitted to Google Analytics.

main_page.privacy.section7_cookies

Data may be transferred to the USA. Google is certified under the EU-US Data Privacy Framework. We have entered into Google's Data Processing Terms for Analytics with Google.

You can withdraw or change your consent at any time via "Cookie Settings" in the footer. Alternatively, Google offers a browser add-on to opt out of Google Analytics: https://tools.google.com/dlpage/gaoptout. More on Google's data processing: https://policies.google.com/privacy

We use Google Ads conversion tracking and remarketing by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland to measure the performance of our advertising campaigns and to show you relevant ads on other websites. We collect:

– Whether you reached simpli.menu via a Google ad, and which ad/campaign

– Conversion events (e.g. sign-up) linked to that ad click

– Device and browser information

– IP address (truncated/anonymized before storage)

Legal basis: your consent under Art. 6(1)(a) GDPR, given or declined via our cookie banner. Without consent, no advertising cookies are set and no data is transmitted to Google Ads.

With consent, Google Ads sets cookies such as "_gcl_au" (retention: up to 90 days) to link an ad click to a later conversion.

Data may be transferred to the USA. Google is certified under the EU-US Data Privacy Framework. We have entered into Google's Data Processing Terms for Ads with Google.

You can withdraw or change your consent at any time via "Cookie Settings" in the footer. More on Google's data processing: https://policies.google.com/privacy

We use the Meta Pixel by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland to measure the performance of our Facebook/Instagram ad campaigns and to show you relevant ads. We collect:

– Pages visited and interactions on simpli.menu

– Conversion events (e.g. sign-up) linked to a Facebook/Instagram ad

– Device and browser information

– IP address

Legal basis: your consent under Art. 6(1)(a) GDPR, given or declined via our cookie banner. Without consent, the Meta Pixel is not loaded and no data is transmitted to Meta.

With consent, Meta sets cookies such as "_fbp" (retention: 90 days) to recognize your browser across visits.

Data may be transferred to the USA. Meta is certified under the EU-US Data Privacy Framework. We have entered into Meta's Data Processing Terms with Meta.

You can withdraw or change your consent at any time via "Cookie Settings" in the footer. More on Meta's data processing: https://www.facebook.com/privacy/policy/

We use the TikTok Pixel by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin 2, Ireland to measure the performance of our TikTok ad campaigns and to show you relevant ads. We collect:

– Pages visited and interactions on simpli.menu

– Conversion events (e.g. sign-up) linked to a TikTok ad

– Device and browser information

– IP address

Legal basis: your consent under Art. 6(1)(a) GDPR, given or declined via our cookie banner. Without consent, the TikTok Pixel is not loaded and no data is transmitted to TikTok.

With consent, TikTok sets cookies such as "_ttp" (retention: 13 months) to recognize your browser across visits.

Data may be transferred outside the EU/EEA, including to the USA. We have entered into TikTok's Data Processing Terms with TikTok.

You can withdraw or change your consent at any time via "Cookie Settings" in the footer. More on TikTok's data processing: https://www.tiktok.com/legal/privacy-policy

The simpli.menu website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Application data processed through the platform (see Section 4) is stored with Google Firebase (Google Cloud Platform), with servers located within the EU/EEA. Vercel is certified under the EU-US Data Privacy Framework. Technical access logs (server logs) are deleted after a maximum of 30 days.

You have the right to access, correct, delete, restrict, port and object to processing of your data (Arts. 15–21 GDPR).

Contact for privacy requests: info@simpli.menu

You may also lodge a complaint with the data protection authority responsible for our business location in Stuttgart, the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI): https://www.baden-wuerttemberg.datenschutz.de

We may update this policy. The current version is always available at simpli.menu/en/privacy.

For privacy enquiries, contact: info@simpli.menu

This section additionally applies to the menu pages hosted on simpli.menu — for example, after scanning a QR code at a restaurant table. This privacy policy applies to these pages in full; the following points are particularly relevant to you as a guest:

– Hosting/server logs: As described in Section 8, Vercel briefly processes your IP address when you load the menu page in order to provide and secure the service.

– Image requests: Photos of dishes are served via Firebase Storage operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; your IP address is technically transmitted to Google in the process.

– Language setting: Your selected language is stored, as technically necessary, in a cookie or LocalStorage so the menu is shown in the same language on your next visit. No consent is required for this.

– No tracking: Google Analytics, Google Ads conversion tracking, Meta Pixel, and TikTok Pixel are technically disabled on the menu pages. No analytics or advertising tracking takes place there, and no cookie banner is shown (see Sections 7, 7a–7c).

Legal basis for the technically necessary processing described above: Art. 6(1)(f) GDPR (legitimate interest in the secure and functional operation of the menu page); the language setting is stored under § 25(2) no. 2 TTDSG.