Pitta Grillhouse

Privacy and legal notice

What Pitta Grillhouse does with your details when you use this website.

Who is responsible

  • Amrullah Amiri (Pitta Grillhouse) decides what happens to your data and is responsible for it (the data controller).
  • IWINS (enterprise number BE 1040.644.308, Sint-Andries, Bruges) builds and runs this website and the system behind it. IWINS only processes your orders and details on Pitta Grillhouse's instructions. IWINS itself is responsible for sign-in, security and technical logs.
  • Questions about your data: +32 466 43 21 59 or hello@iwins.app.

What we use your data for, and why

  • Your order: your name, phone number, email address, delivery address, order, chosen time and notes. Needed to prepare and deliver your order (contract).
  • Messages about your order: confirmations and updates by email. Needed to carry out your order (contract).
  • Allergies and diets: a note can contain health information. We only use it to prepare your food safely, and only because you choose to give it (your explicit consent).
  • Signing in with Google: if you choose to, we receive your name, email address and Google ID, so you can see your orders and reuse your details (contract).
  • Your feedback: on our feedback page you give a score and, if you like, a comment. If you want us to contact you, you also give your email address and, if you like, your name. We only use this to improve our service and to answer you. Our legitimate interest in improving our service, and your consent for the contact.
  • Security: your IP address, browser and the time of each request, to keep the website working and prevent abuse. Our legitimate interest in a secure service.
  • Accounting: if you paid, we keep what the law requires (legal obligation).

Do you have to give your data?

  • The required fields in the form are needed for your order: without them we can't take your order. Everything else is optional.

Who receives your data

  • IWINS and the companies it uses to run this website:
  • Supabase: database, sign-in, on servers in the EU (Paris).
  • Railway: server and technical logs, on servers in the EU (Netherlands).
  • Netlify: hosting of this website.
  • Resend: emails.
  • Google: signing in, if you choose to.
  • Google Maps: the map on this website, which means Google can see your IP address.
  • Google Maps: completing your delivery address and calculating the distance.
  • n8n and Telegram: outage alerts (technical error reports, with email addresses, phone numbers and user IDs made unrecognisable).
  • Pitta Grillhouse's accountant: accounting records.
  • Authorities: only when the law requires it.
  • We do not sell your data.

Transfers outside the EU

  • Some of these companies are based outside the EU or can reach data from there, for example in the USA or Singapore.
  • We then use the EU-U.S. Data Privacy Framework when the company is certified under it, and otherwise the European Commission's Standard Contractual Clauses (Decision (EU) 2021/914).
  • You can ask for a copy through +32 466 43 21 59 or hello@iwins.app.

How long we keep your data

  • Your orders and details: we do not delete them automatically. We keep them as long as Pitta Grillhouse uses this system, unless you ask us to delete them sooner and the law does not require us to keep them. If Pitta Grillhouse stops using it, they are deleted within 120 days, except while an investigation or dispute is ongoing.
  • Your account: until you ask us to delete it.
  • Technical logs: at most 30 days.
  • Accounting records: as long as the law requires.

Your rights

  • You can ask to see, correct, delete or take your data with you, ask us to limit its use, and object to its use. If we use something because you agreed, you can withdraw that at any time.
  • Contact +32 466 43 21 59 or hello@iwins.app. It is free and you get an answer within one month.

Complaints

  • You can lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit), Drukpersstraat 35, 1000 Brussels, +32 2 274 48 00, contact@apd-gba.be, https://www.gegevensbeschermingsautoriteit.be/burger/acties/klacht-indienen.